@noresponse/mcp 0.13.24 → 0.13.26

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 0.13.26
+
+* `SDK.groups.listScreenings()`:  `response.items[].platforms[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.settings.update()`: 
+  *  `request.body.refused_sources[].enum(chesscom)` **Added**
+  *  `response.refused_sources[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.settings.listHistory()`:  `response.items[].settings.refused_sources[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.settings.restore()`:  `response.refused_sources[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.evaluations.publish()`:  `response.refused_sources[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.groups.listPeople()`:  `response.items[].handles[].platform.enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.groups.getPerson()`:  `response` **Changed** (Breaking ⚠️)
+* `SDK.groups.reviewPerson()`:  `response.handles[].platform.enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.settings.get()`:  `response.refused_sources[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.groups.startScreening()`: 
+  *  `request.body.platforms[].enum(chesscom)` **Added**
+  *  `response.platforms[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.groups.getScreening()`:  `response.platforms[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.groups.cancelScreening()`:  `response.platforms[].enum(chesscom)` **Added** (Breaking ⚠️)
+* `SDK.groups.addPeople()`: 
+  *  `request.body.people[].handles[].platform.enum(chesscom)` **Added**
+
+## 0.13.25
+
+No changes detected.
+
 ## 0.13.24
 
 * `SDK.settings.get()`:  `response.refused_sources[].enum(life360_phone)` **Added** (Breaking ⚠️)

package/README.md

@@ -2,14 +2,21 @@
 
 # NoResponse MCP server
 
-An [MCP](https://modelcontextprotocol.io) server for the NoResponse API, so an agent can assess an account creation, login or purchase, wait for a pending assessment, page through an account's history and record what you later learned. It is generated from the same OpenAPI document as the NoResponse SDKs.
+An [MCP](https://modelcontextprotocol.io) server for the NoResponse API, so an agent can investigate people: create a group, add people, screen them, read every account and leaked row that the lookups found, and search again on a value. It also assesses an account creation, login or purchase and records what you later learned. It is generated from the same OpenAPI document as the NoResponse SDKs.
 
-The server uses the API key you give it and stores nothing. API key rotation and key creation are not tools: rotate and create keys from your own backend. The integration tools need a key with the `integrations` scope, the key, settings and list tools a key with the `management` scope, and the event tools a key with the `events` scope; give the server a key without them to keep them unusable.
+The server uses the API key you give it and stores nothing. API key rotation and key creation are not tools: rotate and create keys from your own backend. The integration tools need a key with the `integrations` scope, the key, settings and list tools a key with the `management` scope, and the group, people, search and screening tools a key with the `groups` scope; give the server a key without them to keep them unusable.
 
 ## Tools
 
 | Tool | What it does | API call |
 |---|---|---|
+| `create_group` | Create a group: one list of people to investigate or screen together. Needs the `groups` scope. | `POST /v1/workspaces/{workspace_id}/groups/{environment}` |
+| `add_people` | Add or update up to 500 people, each with a name and the identifiers you have. Needs the `groups` scope. | `POST .../groups/{environment}/{group_id}/people` |
+| `start_screening` | Run the lookups and the analysis for the group's people. Needs the `groups` scope. | `POST .../groups/{environment}/{group_id}/screenings` |
+| `get_screening` | Read a screening's status and progress. Needs the `groups` scope. | `GET .../screenings/{screening_id}` |
+| `get_person` | Read a person's report: every account and leaked row as a record with its source, and the findings. Needs the `groups` scope. | `GET .../people/{person_id}` |
+| `start_search` | Search again on a value of one of the person's records. Needs the `groups` scope. | `POST .../people/{person_id}/searches` |
+| `review_person` | Record your team's decision on a person: `cleared`, `watch` or `escalated`. Needs the `groups` scope. | `POST .../people/{person_id}/review` |
 | `create_assessment` | Assess identifiers (email, phone, username, name, IP) for an `account_creation`, `login` or `purchase` flow. Sends a fresh Idempotency-Key when you give none. | `POST /v1/assessments` |
 | `get_assessment` | Read the latest version of one assessment. | `GET /v1/assessments/{assessment_id}` |
 | `wait_for_assessment` | Poll a pending assessment, at the interval Retry-After asks for, until it settles or `timeout_seconds` (default 25, at most 55) pass. | `GET /v1/assessments/{assessment_id}` |
@@ -41,7 +48,7 @@ The server uses the API key you give it and stores nothing. API key rotation and
 | `create_list_entry` | Add an email or email domain to the block or allow list; the accounts it matches are decided again. Needs the `management` scope. | `POST /v1/workspaces/{workspace_id}/lists/{environment}` |
 | `delete_list_entry` | Delete an entry; the accounts it matched go back to their scored decision. Needs the `management` scope. | `DELETE /v1/workspaces/{workspace_id}/lists/{environment}/{list_entry_id}` |
 
-The table shows the most used tools. [Connect an agent](https://docs.noresponse.org/guides/agents) lists every tool with its required scope, including the review, evaluation and event tools.
+The table shows the most used tools. [Connect an agent](https://docs.noresponse.org/guides/agents) lists every tool with its required scope, including the other group, review and evaluation tools.
 
 Act on `account.risk.decision` (`allow`, `step_up`, `review`, `block`, or `held` while a held flow waits for its investigation), the account's current decision for the assessment's flow. `detail` holds the assessment's own risk, recommendation and `assessment_version`. While the account's first assessment is pending, `account` is absent, so apply your own fallback for that, 429, 503 or a timeout.
 

package/bin/mcp-server.js

@@ -48136,9 +48136,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.13.24",
+    sdkVersion: "0.13.26",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.13.24 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.13.26 internal 1 @noresponse/mcp"
   };
 });
 
@@ -59758,11 +59758,12 @@ var init_sourceid = __esm(() => {
     "wordpress",
     "okru",
     "flickr",
+    "chesscom",
     "whatsapp",
     "opplysningen",
     "ratsit",
     "reverseaustralia"
-  ]).describe("A NoResponse source: github (GitHub accounts), phone (the phone lookup), breach (breach exposure), rdap (the email domain's registration), mx (the email domain's mail servers), ipintel (IP intelligence) or an email account source that searches one platform for an account by email address (adobe, nvidia, wix, life360, zapier, x_email, snapchat_email, amazon, spotify_email, google, duolingo_email). x_email, snapchat_email, amazon and spotify_email only say whether the email has an account on X, Snapchat, Amazon or Spotify. google runs only for Gmail addresses. scratch, dailymotion, substack, duolingo, dockerhub, wikipedia, internetarchive, telegram, spotify, patreon, wordpress, okru and flickr each search that platform for an account by username; telegram also searches by phone number, through a logged-in Telegram lookup account. whatsapp searches WhatsApp for an account by phone number, and life360_phone searches Life360 for one. opplysningen (1881, Norway), ratsit (Sweden) and reverseaustralia (Australia) each look up a phone number of their own country on that site. youtube searches YouTube for a channel by username.");
+  ]).describe("A NoResponse source: github (GitHub accounts), phone (the phone lookup), breach (breach exposure), rdap (the email domain's registration), mx (the email domain's mail servers), ipintel (IP intelligence) or an email account source that searches one platform for an account by email address (adobe, nvidia, wix, life360, zapier, x_email, snapchat_email, amazon, spotify_email, google, duolingo_email). x_email, snapchat_email, amazon and spotify_email only say whether the email has an account on X, Snapchat, Amazon or Spotify. google runs only for Gmail addresses. scratch, dailymotion, substack, duolingo, dockerhub, wikipedia, internetarchive, telegram, spotify, patreon, wordpress, okru, flickr and chesscom each search that platform for an account by username; telegram also searches by phone number, through a logged-in Telegram lookup account. whatsapp searches WhatsApp for an account by phone number, and life360_phone searches Life360 for one. opplysningen (1881, Norway), ratsit (Sweden) and reverseaustralia (Australia) each look up a phone number of their own country on that site. youtube searches YouTube for a channel by username.");
 });
 
 // src/models/settings.ts
@@ -61090,8 +61091,9 @@ var init_handleplatform = __esm(() => {
     "wordpress",
     "okru",
     "flickr",
+    "chesscom",
     "synthetic"
-  ]).describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network.");
+  ]).describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts; chesscom also reads the profile's stats, clubs and last two months of games, for its activity and contacts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network.");
 });
 
 // src/models/handle.ts
@@ -61101,7 +61103,7 @@ var init_handle = __esm(() => {
   init_handleplatform();
   Handle$zodSchema = object({
     handle: string2().describe("The account's handle, without a leading @."),
-    platform: HandlePlatform$zodSchema.describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network.")
+    platform: HandlePlatform$zodSchema.describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts; chesscom also reads the profile's stats, clubs and last two months of games, for its activity and contacts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network.")
   }).describe("An account the person is known to hold.");
 });
 
@@ -62253,7 +62255,7 @@ var init_screeningplatformcoverage = __esm(() => {
   ScreeningPlatformCoverage$zodSchema = object({
     accounts_found: int(),
     items_read: int(),
-    platform: HandlePlatform$zodSchema.describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network."),
+    platform: HandlePlatform$zodSchema.describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts; chesscom also reads the profile's stats, clubs and last two months of games, for its activity and contacts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network."),
     status: ScreeningPlatformCoverageStatus$zodSchema.describe("covered read at least one profile; none_found looked and found no account; inaccessible found accounts that are private or locked; failed could not finish looking; unavailable has no resolver or collector enabled.")
   }).describe("What a screening read on one platform.");
 });
@@ -62487,6 +62489,7 @@ var init_recordrole = __esm(() => {
     "bot",
     "caller_category",
     "chargebacks",
+    "contact",
     "cover_picture",
     "declines",
     "deleted",
@@ -62863,7 +62866,7 @@ var init_screeningprofile = __esm(() => {
     match: ScreeningMatch$zodSchema.describe("How a profile was matched to the person: the state its evidence earns, and the evidence."),
     period_from: string2().optional().describe("The oldest item read."),
     period_to: string2().optional().describe("The newest item read."),
-    platform: HandlePlatform$zodSchema.describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network."),
+    platform: HandlePlatform$zodSchema.describe("A platform a screening can cover. github and scratch through flickr are each one read of the public profile a handle names, with no posts; chesscom also reads the profile's stats, clubs and last two months of games, for its activity and contacts. synthetic is the deterministic connector's own platform, for exercising the product end to end with no network."),
     posts_stopped: PostsStopped$zodSchema.optional().describe("Why fewer posts were read than the screening's depth asks for while the account holds more. platform_limit: the platform shows the screening no more of them. page_limit: the pages a screening reads ran out first. rate_limited or unavailable: a later page was held back or failed; the posts before it are kept and the person is partial. Absent when the account was read to its end or to the depth."),
     record: RecordT$zodSchema.optional().describe("One answer from one source: where it came from, what found it and every field it holds. A person's lookup records also say how likely each is the person."),
     url: string2()
@@ -74384,7 +74387,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.13.24"
+    version: "0.13.26"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -83817,7 +83820,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.13.24"
+    currentVersion: "0.13.26"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -83825,5 +83828,5 @@ export {
   app
 };
 
-//# debugId=1C03D930D6E5233264756E2164756E21
+//# debugId=4803B6084E80D68E64756E2164756E21
 //# sourceMappingURL=mcp-server.js.map