@noresponse/mcp 0.6.8 → 0.6.10

package/bin/mcp-server.js

@@ -48117,9 +48117,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.6.8",
+    sdkVersion: "0.6.10",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.6.8 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.6.10 internal 1 @noresponse/mcp"
   };
 });
 
@@ -50350,6 +50350,7 @@ var init_reasoncode = __esm(() => {
     "prior_abuse_link",
     "test_scenario",
     "shared_api_key",
+    "list_match",
     "young_email_domain",
     "email_domain_no_mx",
     "email_domain_nonexistent",
@@ -50390,7 +50391,8 @@ var init_accountriskreason = __esm(() => {
     code: ReasonCode$zodSchema.describe("A stable reason code. New codes may appear; ignore any you do not know."),
     direction: Direction$zodSchema,
     identifier: ReasonIdentifier$zodSchema.optional().describe("The submitted identifier or client context field a reason concerns; absent when it concerns the whole assessment. Client context is a claimed hint, not a device fingerprint."),
-    impact: Impact$zodSchema
+    impact: Impact$zodSchema,
+    list_entry_id: string2().optional().describe("The list entry a list_match reason applied. No other reason carries it.")
   }).describe("One reason that fired. direction is whether it raises or lowers the score, or is neutral (informational, it moves nothing). impact is a coarse band of how much it moves the score: none for a neutral reason, otherwise low, medium or high.");
 });
 
@@ -50736,7 +50738,8 @@ var init_riskreason = __esm(() => {
     code: ReasonCode$zodSchema.describe("A stable reason code. New codes may appear; ignore any you do not know."),
     direction: Direction$zodSchema,
     identifier: ReasonIdentifier$zodSchema.optional().describe("The submitted identifier or client context field a reason concerns; absent when it concerns the whole assessment. Client context is a claimed hint, not a device fingerprint."),
-    impact: Impact$zodSchema
+    impact: Impact$zodSchema,
+    list_entry_id: string2().optional().describe("The list entry a list_match reason applied. No other reason carries it.")
   }).describe("One reason that fired. direction is whether it raises or lowers the score, or is neutral (informational, it moves nothing). impact is a coarse band of how much it moves the score: none for a neutral reason, otherwise low, medium or high.");
 });
 
@@ -51381,7 +51384,9 @@ var init_conflicterrorcode = __esm(() => {
     "too_many_integrations",
     "risk_version_ahead",
     "key_limit_reached",
-    "self_revocation"
+    "self_revocation",
+    "list_entry_exists",
+    "list_limit_reached"
   ]).describe("Machine codes an HTTP 409 answer can carry.");
 });
 
@@ -54796,6 +54801,564 @@ Revokes a key of the signing key's environment at once: its next request answers
   };
 });
 
+// src/models/listentryaction.ts
+var ListEntryAction$zodSchema;
+var init_listentryaction = __esm(() => {
+  init_zod();
+  ListEntryAction$zodSchema = _enum([
+    "block",
+    "allow"
+  ]).describe("block decides block for the accounts the entry matches; allow decides allow. Block wins when both match.");
+});
+
+// src/models/listentrykind.ts
+var ListEntryKind$zodSchema;
+var init_listentrykind = __esm(() => {
+  init_zod();
+  ListEntryKind$zodSchema = _enum([
+    "email",
+    "email_domain"
+  ]).describe("email matches one address, whatever the case of its local part. email_domain matches every address of the registrable domain and of its subdomains.");
+});
+
+// src/models/listentry.ts
+var ListEntry$zodSchema;
+var init_listentry = __esm(() => {
+  init_zod();
+  init_keyenvironment();
+  init_listentryaction();
+  init_listentrykind();
+  ListEntry$zodSchema = object({
+    action: ListEntryAction$zodSchema.describe("block decides block for the accounts the entry matches; allow decides allow. Block wins when both match."),
+    created_at: string2(),
+    created_by: string2().describe("The external user id of the member who added the entry through the console, or the prefix (nrk_<environment>_<key id>) of the management key that added it."),
+    environment: KeyEnvironment$zodSchema.describe("The environment the key belongs to. A live key assesses with live sources; a test key answers from the deterministic simulator."),
+    id: string2().describe("The entry's id: lst_ and a ULID."),
+    kind: ListEntryKind$zodSchema.describe("email matches one address, whatever the case of its local part. email_domain matches every address of the registrable domain and of its subdomains."),
+    note: string2().optional().describe("Why the entry exists, for the people who manage the list. It is shown with the entry and decides nothing."),
+    value: string2().describe("The value the entry matches, in canonical form: an email lower-cased whole, or a domain lower-cased and taken to its registrable domain (mail.example.co.uk is stored as example.co.uk)."),
+    workspace_id: string2().describe("The workspace id, which is also its live environment's workspace id; the test environment's is the same id with :test appended. A workspace created through the API is tnt_ and a 26-character ULID.")
+  }).describe("One entry of an environment's list: an exact email or an email domain that decides an account whatever its score. An account matches when one of its admitted assessments sent the email, or an email of the domain. A block entry decides block for every flow and an allow entry decides allow; when both match, block wins. The account's risk carries the list_match reason with the entry's id, and its score stays the one the assessment's facts give. A held flow still waits for its investigation.");
+});
+
+// src/models/listentryrequest.ts
+var ListEntryRequest$zodSchema;
+var init_listentryrequest = __esm(() => {
+  init_zod();
+  init_listentryaction();
+  init_listentrykind();
+  ListEntryRequest$zodSchema = object({
+    action: ListEntryAction$zodSchema.describe("block decides block for the accounts the entry matches; allow decides allow. Block wins when both match."),
+    kind: ListEntryKind$zodSchema.describe("email matches one address, whatever the case of its local part. email_domain matches every address of the registrable domain and of its subdomains."),
+    note: string2().optional().describe("Why the entry exists, for the people who manage the list. It is shown with the entry and decides nothing."),
+    value: string2().describe("An email address for kind email, written as in an assessment request; an LDH domain (A-label for an internationalised one) such as example.com for kind email_domain, which must sit below a public suffix (co.uk alone is refused with 400). NoResponse stores it in canonical form and answers that form.")
+  }).describe("POST /v1/workspaces/{workspace_id}/lists/{environment} body. Adds one entry to the environment's list and, in the same change, re-decides every account it matches: each sends account.risk_changed when a decision changes. Needs the admin or owner role, or a management key of the environment.");
+});
+
+// src/models/createlistentryop.ts
+var CreateListEntryRequest$zodSchema, CreateListEntryResponseResult$zodSchema, CreateListEntryResponse$zodSchema;
+var init_createlistentryop = __esm(() => {
+  init_zod();
+  init_authenticationerror();
+  init_badrequesterror();
+  init_conflicterror();
+  init_keyenvironment();
+  init_listentry();
+  init_listentryrequest();
+  init_notfounderror();
+  init_permissiondeniederror();
+  init_ratelimiterror();
+  CreateListEntryRequest$zodSchema = object({
+    body: ListEntryRequest$zodSchema,
+    environment: KeyEnvironment$zodSchema.describe("The environment: live or test. Each has its own settings. Any other value answers 400. An API key reads and changes only its own environment's; the other answers 404."),
+    workspace_id: string2().describe("Your workspace id, as each key lists it in workspace_id. Another workspace, a malformed id and a test environment's id answer 404.")
+  });
+  CreateListEntryResponseResult$zodSchema = union([
+    ListEntry$zodSchema,
+    BadRequestError$zodSchema,
+    AuthenticationError$zodSchema,
+    PermissionDeniedError$zodSchema,
+    NotFoundError$zodSchema,
+    ConflictError$zodSchema,
+    RateLimitError$zodSchema
+  ]);
+  CreateListEntryResponse$zodSchema = object({
+    Headers: record(string2(), array(string2())).default({}),
+    Result: union([
+      ListEntry$zodSchema,
+      BadRequestError$zodSchema,
+      AuthenticationError$zodSchema,
+      PermissionDeniedError$zodSchema,
+      NotFoundError$zodSchema,
+      ConflictError$zodSchema,
+      RateLimitError$zodSchema
+    ])
+  });
+});
+
+// src/funcs/listsCreate.ts
+function listsCreate(client$, request, options) {
+  return new APIPromise($do17(client$, request, options));
+}
+async function $do17(client$, request, options) {
+  const parsed$ = safeParse2(request, (value$) => CreateListEntryRequest$zodSchema.parse(value$), "Input validation failed");
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = encodeJSON("body", payload$.body, { explode: true });
+  const pathParams$ = {
+    environment: encodeSimple("environment", payload$.environment, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    workspace_id: encodeSimple("workspace_id", payload$.workspace_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/workspaces/{workspace_id}/lists/{environment}")(pathParams$);
+  const headers$ = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
+  }));
+  const securityInput = await extractSecurity(client$._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client$._options,
+    baseURL: options?.serverURL ?? client$._baseURL ?? "",
+    operationID: "createListEntry",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client$._options.security,
+    retryConfig: options?.retries || client$._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 8000,
+        exponent: 2,
+        maxElapsedTime: 30000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || [
+      "408",
+      "429",
+      "5XX"
+    ]
+  };
+  const requestRes = client$._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path: path$,
+    headers: headers$,
+    body: body$,
+    userAgent: client$._options.userAgent,
+    timeoutMs: options?.timeoutMs || client$._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req$ = requestRes.value;
+  const doResult = await client$._do(req$, {
+    context,
+    errorCodes: [],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req$ }];
+  }
+  return [doResult, {
+    status: "complete",
+    request: req$,
+    response: doResult.value
+  }];
+}
+var init_listsCreate = __esm(() => {
+  init_encodings();
+  init_primitives();
+  init_schemas3();
+  init_security();
+  init_url();
+  init_createlistentryop();
+  init_async();
+});
+
+// src/mcp-server/tools/listsCreate.ts
+var args17, tool$listsCreate;
+var init_listsCreate2 = __esm(() => {
+  init_listsCreate();
+  init_createlistentryop();
+  init_tools();
+  args17 = {
+    request: CreateListEntryRequest$zodSchema
+  };
+  tool$listsCreate = {
+    name: "create_list_entry",
+    description: `Add an entry to an environment's list.
+
+Adds an exact email (kind email) or an email domain (kind email_domain) to the signing key's environment's list with the action block or allow, and answers the entry with its value in canonical form. An account matches when one of its assessments sent the email, or an email of the domain: a block entry decides block for every flow and an allow entry allow, block winning when both match, and the account's risk carries list_match with the entry's id while its score is unchanged. Every matching account is re-decided at once and sends account.risk_changed when its decision changes. A value already on the list answers 409 list_entry_exists; a full list, or an entry matching more than 5,000 accounts, 409 list_limit_reached. Requires the management scope; the other environment answers 404 not_found.`,
+    annotations: {
+      title: "Add an email or domain to the allow or block list",
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false,
+      readOnlyHint: false
+    },
+    args: args17,
+    tool: async (client, args, ctx) => {
+      const [result] = await listsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      return formatResult(result.value);
+    }
+  };
+});
+
+// src/models/deletelistentryop.ts
+var DeleteListEntryRequest$zodSchema, DeleteListEntryResponseResult$zodSchema, DeleteListEntryResponse$zodSchema;
+var init_deletelistentryop = __esm(() => {
+  init_zod();
+  init_authenticationerror();
+  init_badrequesterror();
+  init_conflicterror();
+  init_keyenvironment();
+  init_notfounderror();
+  init_permissiondeniederror();
+  init_ratelimiterror();
+  DeleteListEntryRequest$zodSchema = object({
+    environment: KeyEnvironment$zodSchema.describe("The environment: live or test. Each has its own settings. Any other value answers 400. An API key reads and changes only its own environment's; the other answers 404."),
+    list_entry_id: string2().describe("The entry's id. An entry of another environment or workspace answers 404."),
+    workspace_id: string2().describe("Your workspace id, as each key lists it in workspace_id. Another workspace, a malformed id and a test environment's id answer 404.")
+  });
+  DeleteListEntryResponseResult$zodSchema = union([
+    BadRequestError$zodSchema,
+    AuthenticationError$zodSchema,
+    PermissionDeniedError$zodSchema,
+    NotFoundError$zodSchema,
+    ConflictError$zodSchema,
+    RateLimitError$zodSchema
+  ]);
+  DeleteListEntryResponse$zodSchema = object({
+    Headers: record(string2(), array(string2())).default({}),
+    Result: union([
+      BadRequestError$zodSchema,
+      AuthenticationError$zodSchema,
+      PermissionDeniedError$zodSchema,
+      NotFoundError$zodSchema,
+      ConflictError$zodSchema,
+      RateLimitError$zodSchema
+    ]).optional()
+  });
+});
+
+// src/funcs/listsDelete.ts
+function listsDelete(client$, request, options) {
+  return new APIPromise($do18(client$, request, options));
+}
+async function $do18(client$, request, options) {
+  const parsed$ = safeParse2(request, (value$) => DeleteListEntryRequest$zodSchema.parse(value$), "Input validation failed");
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = null;
+  const pathParams$ = {
+    environment: encodeSimple("environment", payload$.environment, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    list_entry_id: encodeSimple("list_entry_id", payload$.list_entry_id, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    workspace_id: encodeSimple("workspace_id", payload$.workspace_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/workspaces/{workspace_id}/lists/{environment}/{list_entry_id}")(pathParams$);
+  const headers$ = new Headers(compactMap({
+    Accept: "application/problem+json"
+  }));
+  const securityInput = await extractSecurity(client$._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client$._options,
+    baseURL: options?.serverURL ?? client$._baseURL ?? "",
+    operationID: "deleteListEntry",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client$._options.security,
+    retryConfig: options?.retries || client$._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 8000,
+        exponent: 2,
+        maxElapsedTime: 30000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || [
+      "408",
+      "429",
+      "5XX"
+    ]
+  };
+  const requestRes = client$._createRequest(context, {
+    security: requestSecurity,
+    method: "DELETE",
+    baseURL: options?.serverURL,
+    path: path$,
+    headers: headers$,
+    body: body$,
+    userAgent: client$._options.userAgent,
+    timeoutMs: options?.timeoutMs || client$._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req$ = requestRes.value;
+  const doResult = await client$._do(req$, {
+    context,
+    errorCodes: [],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req$ }];
+  }
+  return [doResult, {
+    status: "complete",
+    request: req$,
+    response: doResult.value
+  }];
+}
+var init_listsDelete = __esm(() => {
+  init_encodings();
+  init_primitives();
+  init_schemas3();
+  init_security();
+  init_url();
+  init_deletelistentryop();
+  init_async();
+});
+
+// src/mcp-server/tools/listsDelete.ts
+var args18, tool$listsDelete;
+var init_listsDelete2 = __esm(() => {
+  init_listsDelete();
+  init_deletelistentryop();
+  init_tools();
+  args18 = {
+    request: DeleteListEntryRequest$zodSchema
+  };
+  tool$listsDelete = {
+    name: "delete_list_entry",
+    description: `Remove an entry from an environment's list.
+
+Removes an entry from the signing key's environment's list and re-decides every account it matched, each sending account.risk_changed when its decision changes. An unknown or already removed entry answers 404 not_found. Requires the management scope.`,
+    annotations: {
+      title: "Delete an entry from the allow or block list",
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: false,
+      readOnlyHint: false
+    },
+    args: args18,
+    tool: async (client, args, ctx) => {
+      const [result] = await listsDelete(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      return formatResult(result.value);
+    }
+  };
+});
+
+// src/models/listentrylist.ts
+var ListEntryList$zodSchema;
+var init_listentrylist = __esm(() => {
+  init_zod();
+  init_listentry();
+  ListEntryList$zodSchema = object({
+    items: array(ListEntry$zodSchema)
+  }).describe("GET /v1/workspaces/{workspace_id}/lists/{environment}: every entry of the environment's list, newest first. An environment holds at most 10,000 entries.");
+});
+
+// src/models/listlistentriesop.ts
+var ListListEntriesRequest$zodSchema, ListListEntriesResponseResult$zodSchema, ListListEntriesResponse$zodSchema;
+var init_listlistentriesop = __esm(() => {
+  init_zod();
+  init_authenticationerror();
+  init_badrequesterror();
+  init_conflicterror();
+  init_keyenvironment();
+  init_listentrylist();
+  init_notfounderror();
+  init_permissiondeniederror();
+  init_ratelimiterror();
+  ListListEntriesRequest$zodSchema = object({
+    environment: KeyEnvironment$zodSchema.describe("The environment: live or test. Each has its own settings. Any other value answers 400. An API key reads and changes only its own environment's; the other answers 404."),
+    workspace_id: string2().describe("Your workspace id, as each key lists it in workspace_id. Another workspace, a malformed id and a test environment's id answer 404.")
+  });
+  ListListEntriesResponseResult$zodSchema = union([
+    BadRequestError$zodSchema,
+    AuthenticationError$zodSchema,
+    PermissionDeniedError$zodSchema,
+    NotFoundError$zodSchema,
+    ConflictError$zodSchema,
+    RateLimitError$zodSchema,
+    ListEntryList$zodSchema
+  ]);
+  ListListEntriesResponse$zodSchema = object({
+    Headers: record(string2(), array(string2())).default({}),
+    Result: union([
+      BadRequestError$zodSchema,
+      AuthenticationError$zodSchema,
+      PermissionDeniedError$zodSchema,
+      NotFoundError$zodSchema,
+      ConflictError$zodSchema,
+      RateLimitError$zodSchema,
+      ListEntryList$zodSchema
+    ])
+  });
+});
+
+// src/funcs/listsList.ts
+function listsList(client$, request, options) {
+  return new APIPromise($do19(client$, request, options));
+}
+async function $do19(client$, request, options) {
+  const parsed$ = safeParse2(request, (value$) => ListListEntriesRequest$zodSchema.parse(value$), "Input validation failed");
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = null;
+  const pathParams$ = {
+    environment: encodeSimple("environment", payload$.environment, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    workspace_id: encodeSimple("workspace_id", payload$.workspace_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/workspaces/{workspace_id}/lists/{environment}")(pathParams$);
+  const headers$ = new Headers(compactMap({
+    Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
+  }));
+  const securityInput = await extractSecurity(client$._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client$._options,
+    baseURL: options?.serverURL ?? client$._baseURL ?? "",
+    operationID: "listListEntries",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client$._options.security,
+    retryConfig: options?.retries || client$._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 8000,
+        exponent: 2,
+        maxElapsedTime: 30000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || [
+      "408",
+      "429",
+      "5XX"
+    ]
+  };
+  const requestRes = client$._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path$,
+    headers: headers$,
+    body: body$,
+    userAgent: client$._options.userAgent,
+    timeoutMs: options?.timeoutMs || client$._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req$ = requestRes.value;
+  const doResult = await client$._do(req$, {
+    context,
+    errorCodes: [],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req$ }];
+  }
+  return [doResult, {
+    status: "complete",
+    request: req$,
+    response: doResult.value
+  }];
+}
+var init_listsList = __esm(() => {
+  init_encodings();
+  init_primitives();
+  init_schemas3();
+  init_security();
+  init_url();
+  init_listlistentriesop();
+  init_async();
+});
+
+// src/mcp-server/tools/listsList.ts
+var args19, tool$listsList;
+var init_listsList2 = __esm(() => {
+  init_listsList();
+  init_listlistentriesop();
+  init_tools();
+  args19 = {
+    request: ListListEntriesRequest$zodSchema
+  };
+  tool$listsList = {
+    name: "list_list_entries",
+    description: `List an environment's list entries.
+
+Lists every entry of the signing key's environment's list, newest first: each an email or an email domain that decides the accounts it matches, block or allow, whatever their score. Requires the management scope; the other environment answers 404 not_found. Read-only and safe to retry.`,
+    annotations: {
+      title: "List this environment's allow and block list",
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false,
+      readOnlyHint: true
+    },
+    args: args19,
+    tool: async (client, args, ctx) => {
+      const [result] = await listsList(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      return formatResult(result.value);
+    }
+  };
+});
+
 // src/models/admission.ts
 var Admission$zodSchema;
 var init_admission = __esm(() => {
@@ -54932,9 +55495,9 @@ var init_getsettingsop = __esm(() => {
 
 // src/funcs/settingsGet.ts
 function settingsGet(client$, request, options) {
-  return new APIPromise($do17(client$, request, options));
+  return new APIPromise($do20(client$, request, options));
 }
-async function $do17(client$, request, options) {
+async function $do20(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetSettingsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55020,12 +55583,12 @@ var init_settingsGet = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsGet.ts
-var args17, tool$settingsGet;
+var args20, tool$settingsGet;
 var init_settingsGet2 = __esm(() => {
   init_settingsGet();
   init_getsettingsop();
   init_tools();
-  args17 = {
+  args20 = {
     request: GetSettingsRequest$zodSchema
   };
   tool$settingsGet = {
@@ -55040,7 +55603,7 @@ Reads the settings of the signing key's environment: retention in days; per flow
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args17,
+    args: args20,
     tool: async (client, args, ctx) => {
       const [result] = await settingsGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55143,9 +55706,9 @@ var init_updatesettingsop = __esm(() => {
 
 // src/funcs/settingsUpdate.ts
 function settingsUpdate(client$, request, options) {
-  return new APIPromise($do18(client$, request, options));
+  return new APIPromise($do21(client$, request, options));
 }
-async function $do18(client$, request, options) {
+async function $do21(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateSettingsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55232,12 +55795,12 @@ var init_settingsUpdate = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsUpdate.ts
-var args18, tool$settingsUpdate;
+var args21, tool$settingsUpdate;
 var init_settingsUpdate2 = __esm(() => {
   init_settingsUpdate();
   init_updatesettingsop();
   init_tools();
-  args18 = {
+  args21 = {
     request: UpdateSettingsRequest$zodSchema
   };
   tool$settingsUpdate = {
@@ -55252,7 +55815,7 @@ Changes only what the body names, in one transaction: retention_days, refused_so
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args18,
+    args: args21,
     tool: async (client, args, ctx) => {
       const [result] = await settingsUpdate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55279,9 +55842,9 @@ var init_webhookendpointrequest = __esm(() => {
 
 // src/funcs/webhookEndpointsCreate.ts
 function webhookEndpointsCreate(client$, request, options) {
-  return new APIPromise($do19(client$, request, options));
+  return new APIPromise($do22(client$, request, options));
 }
-async function $do19(client$, request, options) {
+async function $do22(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => WebhookEndpointRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55345,12 +55908,12 @@ var init_webhookEndpointsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsCreate.ts
-var args19, tool$webhookEndpointsCreate;
+var args22, tool$webhookEndpointsCreate;
 var init_webhookEndpointsCreate2 = __esm(() => {
   init_webhookEndpointsCreate();
   init_webhookendpointrequest();
   init_tools();
-  args19 = {
+  args22 = {
     request: WebhookEndpointRequest$zodSchema
   };
   tool$webhookEndpointsCreate = {
@@ -55365,7 +55928,7 @@ Registers a webhook endpoint and returns it with its first signing secret, shown
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args19,
+    args: args22,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55415,9 +55978,9 @@ var init_deletewebhookendpointop = __esm(() => {
 
 // src/funcs/webhookEndpointsDelete.ts
 function webhookEndpointsDelete(client$, request, options) {
-  return new APIPromise($do20(client$, request, options));
+  return new APIPromise($do23(client$, request, options));
 }
-async function $do20(client$, request, options) {
+async function $do23(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteWebhookEndpointRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55499,12 +56062,12 @@ var init_webhookEndpointsDelete = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsDelete.ts
-var args20, tool$webhookEndpointsDelete;
+var args23, tool$webhookEndpointsDelete;
 var init_webhookEndpointsDelete2 = __esm(() => {
   init_webhookEndpointsDelete();
   init_deletewebhookendpointop();
   init_tools();
-  args20 = {
+  args23 = {
     request: DeleteWebhookEndpointRequest$zodSchema
   };
   tool$webhookEndpointsDelete = {
@@ -55519,7 +56082,7 @@ Deletes the endpoint and its signing keys. Deliveries still queued for it are dr
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args20,
+    args: args23,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsDelete(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55535,9 +56098,9 @@ Deletes the endpoint and its signing keys. Deliveries still queued for it are dr
 
 // src/funcs/webhookEndpointsList.ts
 function webhookEndpointsList(client$, options) {
-  return new APIPromise($do21(client$, options));
+  return new APIPromise($do24(client$, options));
 }
-async function $do21(client$, options) {
+async function $do24(client$, options) {
   const path$ = pathToFunc("/v1/webhooks")();
   const headers$ = new Headers(compactMap({
     Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
@@ -55729,9 +56292,9 @@ var init_listwebhookdeliveriesop = __esm(() => {
 
 // src/funcs/webhookEndpointsListDeliveries.ts
 function webhookEndpointsListDeliveries(client$, request, options) {
-  return new APIPromise($do22(client$, request, options));
+  return new APIPromise($do25(client$, request, options));
 }
-async function $do22(client$, request, options) {
+async function $do25(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListWebhookDeliveriesRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55818,12 +56381,12 @@ var init_webhookEndpointsListDeliveries = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsListDeliveries.ts
-var args21, tool$webhookEndpointsListDeliveries;
+var args24, tool$webhookEndpointsListDeliveries;
 var init_webhookEndpointsListDeliveries2 = __esm(() => {
   init_webhookEndpointsListDeliveries();
   init_listwebhookdeliveriesop();
   init_tools();
-  args21 = {
+  args24 = {
     request: ListWebhookDeliveriesRequest$zodSchema
   };
   tool$webhookEndpointsListDeliveries = {
@@ -55838,7 +56401,7 @@ Every POST the endpoint received, newest first: the event id and type, which att
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args21,
+    args: args24,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsListDeliveries(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -55912,9 +56475,9 @@ var init_replaywebhookdeliveryop = __esm(() => {
 
 // src/funcs/webhookEndpointsReplayDelivery.ts
 function webhookEndpointsReplayDelivery(client$, request, options) {
-  return new APIPromise($do23(client$, request, options));
+  return new APIPromise($do26(client$, request, options));
 }
-async function $do23(client$, request, options) {
+async function $do26(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ReplayWebhookDeliveryRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -55988,12 +56551,12 @@ var init_webhookEndpointsReplayDelivery = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsReplayDelivery.ts
-var args22, tool$webhookEndpointsReplayDelivery;
+var args25, tool$webhookEndpointsReplayDelivery;
 var init_webhookEndpointsReplayDelivery2 = __esm(() => {
   init_webhookEndpointsReplayDelivery();
   init_replaywebhookdeliveryop();
   init_tools();
-  args22 = {
+  args25 = {
     request: ReplayWebhookDeliveryRequest$zodSchema
   };
   tool$webhookEndpointsReplayDelivery = {
@@ -56008,7 +56571,7 @@ Queues the event for the endpoint again: the same event id and body it received,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args22,
+    args: args25,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsReplayDelivery(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56094,9 +56657,9 @@ var init_rotatewebhooksigningkeyop = __esm(() => {
 
 // src/funcs/webhookEndpointsRotateSigningKey.ts
 function webhookEndpointsRotateSigningKey(client$, request, options) {
-  return new APIPromise($do24(client$, request, options));
+  return new APIPromise($do27(client$, request, options));
 }
-async function $do24(client$, request, options) {
+async function $do27(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RotateWebhookSigningKeyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -56166,12 +56729,12 @@ var init_webhookEndpointsRotateSigningKey = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsRotateSigningKey.ts
-var args23, tool$webhookEndpointsRotateSigningKey;
+var args26, tool$webhookEndpointsRotateSigningKey;
 var init_webhookEndpointsRotateSigningKey2 = __esm(() => {
   init_webhookEndpointsRotateSigningKey();
   init_rotatewebhooksigningkeyop();
   init_tools();
-  args23 = {
+  args26 = {
     request: RotateWebhookSigningKeyRequest$zodSchema
   };
   tool$webhookEndpointsRotateSigningKey = {
@@ -56186,7 +56749,7 @@ Issues a new signing key for the endpoint and returns its secret once. Every del
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args23,
+    args: args26,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsRotateSigningKey(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56287,9 +56850,9 @@ var init_sendwebhooktesteventop = __esm(() => {
 
 // src/funcs/webhookEndpointsSendTestEvent.ts
 function webhookEndpointsSendTestEvent(client$, request, options) {
-  return new APIPromise($do25(client$, request, options));
+  return new APIPromise($do28(client$, request, options));
 }
-async function $do25(client$, request, options) {
+async function $do28(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => SendWebhookTestEventRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -56359,12 +56922,12 @@ var init_webhookEndpointsSendTestEvent = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsSendTestEvent.ts
-var args24, tool$webhookEndpointsSendTestEvent;
+var args27, tool$webhookEndpointsSendTestEvent;
 var init_webhookEndpointsSendTestEvent2 = __esm(() => {
   init_webhookEndpointsSendTestEvent();
   init_sendwebhooktesteventop();
   init_tools();
-  args24 = {
+  args27 = {
     request: SendWebhookTestEventRequest$zodSchema
   };
   tool$webhookEndpointsSendTestEvent = {
@@ -56379,7 +56942,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args24,
+    args: args27,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsSendTestEvent(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -56397,7 +56960,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.6.8"
+    version: "0.6.10"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -56441,6 +57004,9 @@ function createMCPServer(deps) {
   tool(tool$webhookEndpointsReplayDelivery);
   tool(tool$settingsGet);
   tool(tool$settingsUpdate);
+  tool(tool$listsList);
+  tool(tool$listsCreate);
+  tool(tool$listsDelete);
   if (deps.dynamic) {
     registerDynamicTools(deps.logger, server, getClient, toolMap, scopes);
   }
@@ -56470,6 +57036,9 @@ var init_server = __esm(() => {
   init_integrationsRotate2();
   init_keysList2();
   init_keysRevoke2();
+  init_listsCreate2();
+  init_listsDelete2();
+  init_listsList2();
   init_settingsGet2();
   init_settingsUpdate2();
   init_webhookEndpointsCreate2();
@@ -56634,6 +57203,24 @@ Reads the settings of the signing key's environment: retention in days; per flow
       description: `Change an environment's settings.
 
 Changes only what the body names, in one transaction: retention_days, refused_sources, and per flow step_up, review, block (null turns blocking off), default_depth, admission, hold_seconds, on_expiry, or inherits_account_creation to return login or purchase to account_creation's thresholds. After the change each flow keeps 0 < step_up < review <= 100 and block off or review <= block <= 100; a change that breaks it answers 400 naming the flow. A policy change is one new policy_version with the signing key's prefix as updated_by, and every change is recorded in the workspace's audit log with the key as its actor. Requires the management scope; the other environment answers 404 not_found. A change reaches assessments within a minute.`
+    },
+    {
+      name: "list_list_entries",
+      description: `List an environment's list entries.
+
+Lists every entry of the signing key's environment's list, newest first: each an email or an email domain that decides the accounts it matches, block or allow, whatever their score. Requires the management scope; the other environment answers 404 not_found. Read-only and safe to retry.`
+    },
+    {
+      name: "create_list_entry",
+      description: `Add an entry to an environment's list.
+
+Adds an exact email (kind email) or an email domain (kind email_domain) to the signing key's environment's list with the action block or allow, and answers the entry with its value in canonical form. An account matches when one of its assessments sent the email, or an email of the domain: a block entry decides block for every flow and an allow entry allow, block winning when both match, and the account's risk carries list_match with the entry's id while its score is unchanged. Every matching account is re-decided at once and sends account.risk_changed when its decision changes. A value already on the list answers 409 list_entry_exists; a full list, or an entry matching more than 5,000 accounts, 409 list_limit_reached. Requires the management scope; the other environment answers 404 not_found.`
+    },
+    {
+      name: "delete_list_entry",
+      description: `Remove an entry from an environment's list.
+
+Removes an entry from the signing key's environment's list and re-decides every account it matched, each sending account.risk_changed when its decision changes. An unknown or already removed entry answers 404 not_found. Requires the management scope.`
     },
     {
       name: "wait_for_assessment",
@@ -65134,7 +65721,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.6.8"
+    currentVersion: "0.6.10"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -65142,5 +65729,5 @@ export {
   app
 };
 
-//# debugId=43A3F8E2018D8A6B64756E2164756E21
+//# debugId=E5F1D65B84B2B7DC64756E2164756E21
 //# sourceMappingURL=mcp-server.js.map