Riskcovery

Connect Remote server

claude mcp add --transport http mcp https://www.riskcovery.com/api/mcp

{
  "mcpServers": {
    "mcp": {
      "url": "https://www.riskcovery.com/api/mcp"
    }
  }
}

{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://www.riskcovery.com/api/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://www.riskcovery.com/api/mcp

Tools 33 found in our last check

• sites

  Lists the live sites of every team the caller belongs to, each with its team, scope hosts, verification state, and review agreement state. `team` limits the list to one team, by slug. A site's `host` is what the review and runs tools take.

• review

  Requests today's run of a site and returns it. A site gets one run per UTC day: the first request that day creates it as `queued` with `created: true`, and every later request that day returns the same run in its current status with `created: false`. Requires the owner or admin…

• runs

  Lists a site's 30 newest runs, newest UTC day first, each with its status, mode, and tier. An earlier run that crawled the site also lists its coverage, risk counts, scores, and versions; a run whose report an AI agent wrote has none of those. `before` pages to runs older than t…

• listIssues

  Lists the issues found in one UTC month on the sites of every team the caller is a member of: the findings of each run report of that month, by day, then site, then their order in the report, each with its day, host, site ID, run ID, finding ID, section, title, and label. `month…

• listLatestIssues

  Lists the issues of the newest run report of each site of every team the caller is a member of, each with its day, host, site ID, run ID, finding ID, section, title, and label. A site whose newest report has no finding adds no issue. `team` names one team by slug and answers 403…

• report

  Returns a run's report. For a run whose report an AI agent wrote, it returns that document with every section. For an earlier run that crawled the site, it returns the status, coverage, risk counts and scores by lens, pages, and risks with their evidence and fixes. `format: "md"…

• addSite

  Adds a site at a host, such as example.com, and returns the three proofs that can verify it: a DNS TXT record, a meta tag on the home page, and a file under `/.well-known/`. A team holds one site, so a team that already has a live site gets 409 `team_has_site`. A site belongs to…

• readSiteVerification

  Reads the site's verification: the method that last verified it, when, and the three proofs, any one of which verifies it. Any member of the site's team may read it.

• confirmSiteVerification

  Checks for one method's proof now: `dns_txt` resolves the TXT record directly, and `meta_tag` and `well_known_file` read the page through Firecrawl. A proof that is found verifies the site by that method, and a missing one gets 409 `proof_not_found` and changes nothing. Riskcove…

• deleteSite

  Deletes the site, which frees its host for any team and stops all further runs. Requires the owner or admin role.

• readAgreement

  Reads the site's review agreement: the newest accepted one, still in force or since revoked, with its signer, stated role, time, scope, and version hash, and the current terms with their version hash, which an acceptance must name. Any member of the site's team may read it.

• acceptAgreement

  Accepts the review agreement for a verified site as the caller, and records the caller's address, the role they state, the time, and the version hash, which must be the current one. Acceptance starts the daily schedule: today's run is created and requested at once, and each late…

• revokeAgreement

  Revokes the site's accepted review agreement, with an optional reason. A queued or running run of the site is cancelled at once and its machine is deleted, and the site gets no more runs until an agreement is accepted again. Requires the owner or admin role.

• listShareLinks

  Lists the run's share links, newest first, each marked live, expired, or revoked, with who created it and when it expires. A link's token is shown only when the link is created. Any member of the run's team may read it.

• createShareLink

  Creates a link that shows the run's full report to anyone who has it, with no account needed, until the link is revoked or expires after 1, 7 (the default), or 30 days. The link is returned only in this response. Requires the owner or admin role.

• revokeShareLink

  Revokes one of the run's share links, so it stops showing the report at once. Revoking a link that is already revoked or expired leaves it revoked. Requires the owner or admin role.

• listTeams

  Lists the teams the caller is a member of, oldest first, each with its slug, its name, and the role of the caller in it: owner, admin, or member.

• createTeam

  Creates a team named by `name`, which is trimmed and holds 1 to 80 characters, with the caller as its owner, and answers 201 with its slug, which the other team operations take. `eligibility`, either `nonprofit` or `small_business`, asks for the free plan for the team while the…

• teamDeletionLink

  Answers `url`, the delete page of the team, where its owner, signed in, deletes the team with its site, runs, reports, share links, and invitations, which ends its subscription and removes its members. Only the owner gets the link, so another member gets 403.

• listMemberInvitations

  Lists the pending member invitations of the team, newest first, each with the invited address, its role, and when it was sent and expires, with the seats the team holds and has taken. Needs the owner or admin role.

• memberInvitationsLink

  Answers `url`, the member invitations page of the team, where a signed-in owner or admin invites an address as an `admin` or `member`, which mails it a link to accept that expires after 14 days, and revokes a pending invitation. `email` and `role` fill in the invite form. Needs…

• readInvitation

  Reads the invitation that the id from its mail link names: the team, the invited address, its role, whether that address has an account, and whether the invitation is pending, accepted, expired, or revoked, with `url`, its page, where the invited address, signed in, accepts it.

• readTeamBilling

  Reads the billing of the team: its subscription with its plan and dates, its free plan eligibility, the seats it holds and has taken, whether its site is verified, and its runs this month by mode. Any member reads it.

• billingLink

  Answers `url`, the billing page of the team, where a signed-in owner or admin picks a plan through Stripe Checkout or opens the Stripe billing portal for the payment method, invoices, and subscription. Any member gets the link.

• listPlans

  Lists the plans a team subscribes to, each with its name and its price in US cents, or answers `plans` as null while the prices cannot be read.

• listApiKeys

  Lists the API keys of the caller, newest first, each with its name, the first characters of the key, and when it was created. A key itself is shown only when it is created. An OAuth access token gets 403.

• createApiKey

  Creates an API key that acts as the caller on this API, the CLI, and the MCP server, named by `name`, which is trimmed and holds 1 to 32 characters. The key is returned only in this response. An OAuth access token gets 403, so an agent cannot create a key that outlives its grant.

• revokeApiKey

  Revokes an API key of the caller, so a request carrying it gets 401 from then on. A key the caller does not hold answers 404. An OAuth access token gets 403.

• readRunEmail

  Reads whether the caller gets run mail, `on`, `off`, or `default`, which sends it for each team where the caller is an owner or admin, and the address it goes to.

• setRunEmail

  Sets whether the caller gets run mail to `on`, `off`, or `default`, which sends it for each team where the caller is an owner or admin, and answers the setting.

• reportProblem

  Sends a problem report of `message`, which holds 1 to 4,000 characters, to the people who run this service, with `from`, the path of the page it is about, when given. A caller who sends too many reports gets 429.

• listCves

  Lists the published records of the CVE List, newest first, 50 to a page, each with its CVE ID, when it was published, its CVSS score and severity when it has one, and its title or the start of its description, with the total, the number of pages, and the page shown. `query` hold…

• readCve

  Reads the record of the CVE List that `cveId` names, in any letter case: its state, title, and description, when it was reserved, published, and updated, its CVSS score and severity when it has one, its metrics, weaknesses, affected products and versions, and references. An ID t…

Details

More data and analytics servers See all

• Ground Truth Worldwide

  Live, cited facts for anywhere on Earth: weather, rivers, floods, quakes, disasters, air quality.

• Every Number

  Turn an Excel or CSV export into a dashboard, or check the numbers in a text against it. No account.

• HypePaper

  State of the art, trending papers, benchmarks, citations and topic experts from HypePaper.

• Valuein — SEC EDGAR Fundamentals & Smart-Money Data

  Point-in-time, survivorship-free SEC EDGAR fundamentals + smart-money signals for AI agents.

• McClipFace

  Free coupon codes, deals and sale prices for stores and products while your AI shops.

• Criora climate risk

  Climate and disaster risk for any place or trip: forecasts, warnings, floods, quakes, countries, map