NoResponse MCP Server: Setup for Claude, Cursor and Other Apps

• Checks a signup, login or purchase for fraud risk

  Sends the email, phone, username, name or IP address to NoResponse and asks for a risk assessment of an account creation, login or purchase. A new request ID is added if you give none.

  Try: “Assess a signup from jane@example.com at IP 203.0.113.7.”

  Write · create_assessment

• Reads the latest result of one assessment

  Fetches the newest version of a single assessment by its ID, including its risk and recommendation.

  Try: “Show me the latest result for assessment as_123.”

  Read · get_assessment

• Waits for a pending assessment to finish

  Checks a pending assessment again and again until it settles or a timeout passes (25 seconds by default, 55 at most).

  Try: “Wait for assessment as_123 to finish and tell me the decision.”

  Read · wait_for_assessment

• Lists an account's recent assessments

  Pages through the assessments of one account that have not expired, newest first.

  Try: “List the recent assessments for account acct_42.”

  Read · query_assessments

• Shows an account's current risk and decision

  Returns the account's risk score and its decision for each flow (allow, step_up, review, block or held), plus the assessment behind it. Needs a key with the history scope.

  Try: “What is the current risk decision for account acct_42?”

  Read · get_account

• Lists an account's assessments by account ID

  Same listing as the query tool, with the account ID in the request path. Needs the history scope.

  Try: “Page through the assessments for acct_42.”

  Read · list_account_assessments

• Finds accounts that share an email, phone or username

  Lists other accounts in the same environment that submitted an email, phone or username this account also submitted, with the shared values. Needs the history scope, or investigate with evidence.

  Try: “Which other accounts share details with acct_42?”

  Read · list_linked_accounts

• Lists accounts whose risk has changed

  Returns accounts whose risk changed, oldest change first. Pass the cursor back to poll for more, or ask for only accounts that still need action. Needs the history scope.

  Try: “Which accounts changed risk since my last check and still need action?”

  Read · list_changed_accounts

• Records what you did to an account

  Stores the action you took in your identity provider for one flow at one risk version, as applied or failed. Repeating the call returns the stored record. Needs the history scope.

  Try: “Record that we blocked acct_42 at login for risk version 3.”

  Write · record_enforcement

• Reports what you later learned about an account

  Tells NoResponse the real result for an assessed account, such as confirmed abuse or legitimate.

  Try: “Mark assessment as_123 as confirmed abuse.”

  Write · record_outcome

• Deletes one assessment and its evidence

  Removes a single assessment with its evidence and outcomes, then scores the account again. Needs the delete scope and is marked destructive.

  Try: “Delete assessment as_123.”

  Delete · delete_assessment

• Erases an account and its whole history

  Erases every assessment of the account with its evidence and outcomes, for an erasure request, and sends an account.deleted webhook if anything was removed. Needs the history scope and is marked destructive.

  Try: “Erase acct_42 and all its history.”

  Delete · delete_account

• Registers a webhook that receives events

  Adds a webhook endpoint for NoResponse events. The answer holds its signing secret, shown once. Needs the webhooks scope.

  Try: “Register https://example.com/hooks/noresponse as a webhook.”

  Write · create_webhook_endpoint

• Lists your webhook endpoints

  Shows registered webhook endpoints and their signing key IDs.

  Try: “List my webhook endpoints.”

  Read · list_webhook_endpoints

• Sends a test event to a webhook

  Posts a verification event or a test assessment update to one webhook endpoint.

  Try: “Send a test event to webhook wh_1.”

  Write · send_webhook_test_event

• Issues a new webhook signing key

  Creates a new signing key for an endpoint. The old key keeps verifying for 7 more days.

  Try: “Rotate the signing key for webhook wh_1.”

  Write · rotate_webhook_signing_key

• Deletes a webhook endpoint

  Removes one webhook endpoint so it stops receiving events.

  Try: “Delete webhook wh_1.”

  Delete · delete_webhook_endpoint

• Shows delivery attempts for a webhook

  Pages through an endpoint's delivery attempts, newest first, with event, status, response code, failure and latency.

  Try: “Show failed deliveries for webhook wh_1.”

  Read · list_webhook_deliveries

• Sends a logged webhook event again

  Sends one logged event to the endpoint again, signed fresh. It is not retried.

  Try: “Replay event evt_9 to webhook wh_1.”

  Write · replay_webhook_delivery

• Sets up a WorkOS or Auth0 integration

  Registers a hosted WorkOS or Auth0 integration and returns its endpoint URL. For Auth0 the answer holds the Action's shared secret, shown once. Needs the integrations scope.

  Try: “Create an Auth0 integration for the production environment.”

  Write · create_integration

• Lists your integrations

  Shows the account's integrations, oldest first, without secrets.

  Try: “List my integrations.”

  Read · list_integrations

• Deletes an integration

  Removes an integration; its endpoint answers 404 from then on.

  Try: “Delete integration int_5.”

  Delete · delete_integration

• Replaces an integration's secret

  Issues a new secret for an integration. The old one is accepted for 24 more hours.

  Try: “Rotate the secret for integration int_5.”

  Write · rotate_integration_secret

• Lists API keys of the environment

  Shows the keys of the key's environment, newest first, without secrets. Needs the management scope.

  Try: “List the API keys in this environment.”

  Read · list_keys

• Revokes an API key at once

  Cancels a key of the environment immediately. A key cannot revoke itself. Needs the management scope and is marked destructive.

  Try: “Revoke key key_77.”

  Delete · revoke_key

• Reads environment settings

  Returns retention, flow thresholds, admission and refused sources for the environment. Needs the management scope.

  Try: “Show the current thresholds for this environment.”

  Read · get_settings

• Changes environment settings

  Changes only the settings you name, in one transaction, such as flow thresholds. Needs the management scope.

  Try: “Raise the review threshold for signups.”

  Write · update_settings

• Lists allow and block list entries

  Shows the environment's allow and block list, oldest first. Needs the management scope.

  Try: “Show everything on the block list.”

  Read · list_list_entries

• Adds an email or domain to the allow or block list

  Adds an email address or email domain to the block or allow list. Accounts it matches are decided again. Needs the management scope.

  Try: “Block the domain mailinator.com.”

  Write · create_list_entry

• Removes a list entry

  Deletes an entry; accounts it matched go back to their scored decision. Needs the management scope.

  Try: “Remove list entry le_3.”

  Delete · delete_list_entry

Watch out for

• It can erase accounts and delete assessments

  delete_account erases every assessment of an account and delete_assessment removes one, both marked destructive. Give the server a key without the delete scope, or mount read-only tools. github.com

• It can revoke keys and remove team members

  revoke_key and the member and invite tools are marked destructive and change who can use your NoResponse workspace. Use a key without the management scope. github.com

• It can change who gets blocked

  Settings and list tools change thresholds and the allow and block lists, and the matching accounts are decided again. Check the assistant's plan before you approve a change. github.com

• Network mode listens on every interface

  Starting it with the SSE transport or the serve command binds 0.0.0.0, not just localhost. Keep the default stdio mode, or put a firewall in front. github.com

• Identifiers go to NoResponse

  Assessing a signup sends the email, phone, username, name or IP to the NoResponse API. Tell your users in your privacy notice. github.com

Security advisories