create_profile

Instructions

Implementation Reference

• src/tools/profiles.ts:44-90 (registration)

  Registration of the 'create_profile' tool on the MCP server via server.registerTool()

    // --- create_profile ---
    server.registerTool(
      "create_profile",
      {
        description: `Create or update a custom scoring profile. Profiles are sparse overrides: only specify the weights you want to change. Everything else keeps its default value.
  
  If a profile with this name already exists, it is updated with the new weights (full replacement, not merge).
  
  Weights are points, not percentages. Each weight is the number of points that signal adds to the score when it fires. They don't need to total 100. A profile with weights totalling 90 is conservative (max possible score is 90). A profile with weights totalling 130 is aggressive (multiple signals quickly push to the cap of 100). The threshold the agent sets for action matters more than the weight totals.
  
  Use show_defaults to see all 25 signals with their default weights and descriptions before creating a profile. Use check_url or check_urls with the "profile" parameter to score results with this profile.
  
  Maximum 20 profiles per account. Profile name "default" is reserved.
  
  Common profiles:
  - Cold email: weight parked (30), chain_incomplete (25), ssl_invalid (15) higher. Lower brand_impersonation (10).
  - Security bot: keep brand_impersonation high (40), increase domain_age_7 (30), redirects_5 (25).
  - Lead gen: weight parked (35), http_only (20), chain_incomplete (20) for dead business detection.
  - SEO audit: weight redirects_5 (30), chain_incomplete (30), parked (25) for link quality.
  
  See the Unphurl API documentation for all 19 use case weight examples.`,
        inputSchema: {
          name: z
            .string()
            .regex(/^[a-z0-9][a-z0-9-]{0,48}[a-z0-9]$|^[a-z0-9]$/)
            .describe(
              "Profile name (lowercase alphanumeric and hyphens only, 1-50 chars, e.g. 'cold-email', 'security-bot')"
            ),
          weights: z
            .record(z.string(), z.number().int().min(0).max(1000))
            .describe(
              "Custom weights for scoring signals. Only include signals you want to override. Available signals: brand_impersonation (default 40), domain_age_3 (35), domain_age_7 (25), domain_age_30 (15), domain_age_90 (5), ssl_invalid (10), http_only (5), redirects_3 (10), redirects_5 (25), chain_incomplete (15), parked (10), compound (10), brand_impersonation_floor (80), url_long (3), path_deep (3), subdomain_deep (3), subdomain_excessive (5), domain_entropy_high (5), url_contains_ip (10), encoded_hostname (5), tld_redirect_change (5), js_fragment_redirect (25), expiring_soon (10), domain_status_bad (15), no_mx_record (5)."
            ),
        },
      },
      async ({ name, weights }) => {
        if (!api.hasApiKey) return authError();
  
        try {
          const result = await api.createProfile(name, weights);
          return successResult(result);
        } catch (err) {
          if (err instanceof ApiRequestError) return apiErrorToResult(err);
          return errorResult(err instanceof Error ? err.message : "Unknown error");
        }
      }
    );

• src/tools/profiles.ts:79-89 (handler)

  Handler function that executes the create_profile tool logic — calls api.createProfile(name, weights)

  async ({ name, weights }) => {
    if (!api.hasApiKey) return authError();
  
    try {
      const result = await api.createProfile(name, weights);
      return successResult(result);
    } catch (err) {
      if (err instanceof ApiRequestError) return apiErrorToResult(err);
      return errorResult(err instanceof Error ? err.message : "Unknown error");
    }
  }

• src/tools/profiles.ts:65-77 (schema)

  Input schema for create_profile: 'name' (regex-validated string) and 'weights' (record of string to int 0-1000)

  inputSchema: {
    name: z
      .string()
      .regex(/^[a-z0-9][a-z0-9-]{0,48}[a-z0-9]$|^[a-z0-9]$/)
      .describe(
        "Profile name (lowercase alphanumeric and hyphens only, 1-50 chars, e.g. 'cold-email', 'security-bot')"
      ),
    weights: z
      .record(z.string(), z.number().int().min(0).max(1000))
      .describe(
        "Custom weights for scoring signals. Only include signals you want to override. Available signals: brand_impersonation (default 40), domain_age_3 (35), domain_age_7 (25), domain_age_30 (15), domain_age_90 (5), ssl_invalid (10), http_only (5), redirects_3 (10), redirects_5 (25), chain_incomplete (15), parked (10), compound (10), brand_impersonation_floor (80), url_long (3), path_deep (3), subdomain_deep (3), subdomain_excessive (5), domain_entropy_high (5), url_contains_ip (10), encoded_hostname (5), tld_redirect_change (5), js_fragment_redirect (25), expiring_soon (10), domain_status_bad (15), no_mx_record (5)."
      ),
  },

• src/api.ts:156-161 (helper)

  API client method that sends POST /v1/profiles with name and weights to create/update a profile

  async createProfile(
    name: string,
    weights: Record<string, number>
  ): Promise<Profile> {
    return this.doRequest<Profile>("POST", "/v1/profiles", { name, weights });
  }

• src/index.ts:37-37 (registration)

  Top-level registration call that wires registerProfileTools (which includes create_profile) into the MCP server

  registerProfileTools(server, api); // list_profiles, create_profile, delete_profile, show_defaults