Skip to main content
Glama

Cue

Per-person attention budgets for AI agents and background automations, self-hosted.

CI Python License: MIT Cue MCP server on Glama

Documentation · Getting started · Agents

A code-review agent, a log-triage agent and a billing agent can all page the same engineer at 2 a.m. A LangGraph interrupt() or a Slack approve button pauses one agent; none of them knows what the others already sent. Cue sits in front of all of them as the outbound gatekeeper:

  • Budgets per agent, per person. Each agent sends with its own key. Its frequency_caps limit how many messages it may send one person per period, and messages over budget are stored as suppressed with reason agent_budget. Category caps count what a person gets from every sender together.

  • Quiet hours in the person's time zone. A message due inside someone's quiet hours waits until they end. Only critical messages in categories people cannot unsubscribe from break through, and each agent's max_importance caps what it may claim, so only agents you trust can use critical.

  • Digests for the rest. A digest rule turns a stream of agent events into one message per window, or one per day at a local time.

  • Approval for risky messages. Messages that match an agent's approval condition wait as pending_approval; a reviewer decides from a one-time link in their own notification. Agent keys can never approve.

  • A reason for every outcome. Each message has a status and a status_reason, and each event records which rules matched and why. Agents connect over HTTP, the SDKs or the MCP server.

The recording above is examples/agents-demo: from a checkout, uv run python examples/agents-demo/demo.py runs it with SQLite and the console connector.

Quick start

With Docker Compose (PostgreSQL, an API and a worker; messages go to the worker's log):

git clone https://github.com/murtazox04/Cue && cd Cue
docker compose up --build -d
docker compose exec api cuectl keys create admin
docker compose logs -f worker

Or with Python 3.12+ and SQLite, in a virtual environment:

python -m venv .venv && . .venv/bin/activate
pip install cue-notify
export CUE_WORKER__EMBEDDED=true
export CUE_CHANNELS__PUSH__PROVIDER=console CUE_CHANNELS__SMS__PROVIDER=console
cuectl db upgrade && cuectl keys create admin && cuectl serve

keys create prints an API key once; keep it as CUE_API_KEY. Then follow the getting-started guide to create a template and a rule and send an event that shows up in the log, and agents to give an agent its own key and limits.

To try it without installing anything, with uv:

CUE_WORKER__EMBEDDED=true CUE_CHANNELS__PUSH__PROVIDER=console \
  CUE_CHANNELS__SMS__PROVIDER=console uvx cue-notify serve --migrate

and, in a second terminal in the same directory (both use ./cue.db), uvx cue-notify keys create admin.

Related MCP server: mcp-server-notifier

More for agents

  • Agents as senders. Each agent gets its own key with a per-person attention budget, an importance ceiling and, where you want it, human approval before anything goes out. Agent keys cannot read or change people's profiles, and cannot approve anything. See agents.

  • Ask a person first. Before a risky action (a refund, a deletion, a mass e-mail), an agent calls POST /v1/approvals or the request_approval MCP tool. Cue tells the reviewers on their own channels with a one-time link and reports the decision back, with bridges for LangGraph, Pydantic AI, CrewAI Flows and Dapr Agents. See approval requests.

  • MCP server. uvx cue-notify mcp gives Claude, Cursor or your own agent tools to notify people and inspect delivery, under the same policy and audit trail. See AI agents (MCP).

  • Screening (optional, off by default, experimental). With [screening] enabled = true and a TypeSafe API key, a decision model (Jev) reads each agent message before it is sent: pressure, deception or leaked secrets hold it for a person, and overstated importance is lowered. Built against TypeSafe's published API; not yet proven in production. Your own backend's messages are never screened.

  • Coding agents. cue-hook lets OpenHands and Claude Code tell you when they finish or wait for input. See coding agents.

  • Claude Code plugin. /plugin marketplace add murtazox04/Cue, then /plugin install cue@cue, adds a skill for integrating Cue into an application.

Notifications from your own backend

The same policy serves your product's own notifications. Your backend reports what happened (order.shipped, payment.failed). Cue decides whether that is worth a notification, renders it in the person's language, picks the time and the route, and hands a finished message to the delivery you connect: your own sending service through a signed webhook, or a bundled connector.

  • Rules and policy in one place. JSON Logic rules map events to templates; every message, whether triggered by a rule, sent directly or broadcast, passes the same checks: unsubscribes, muted channels, frequency caps, cooldowns and quiet hours in the recipient's own time zone, checked again right before sending.

  • Fewer messages. Digests turn a burst of events into one message per window or one per day at a local time, and fatigue backs off from people who stopped engaging.

  • People in control. A hosted preference page (or a JSON API for your own), RFC 8058 one-click unsubscribe, and a consent ledger of every change.

  • Answers. Every event records which rules matched and why; every message records its status and the reason it was suppressed or failed.

curl -X POST https://cue.example.com/v1/events \
  -H "Authorization: Bearer $CUE_API_KEY" -H "Content-Type: application/json" \
  -d '{"name": "order.shipped", "recipient": "customer-42",
       "data": {"order_id": "1001"}, "idempotency_key": "order-1001-shipped"}'

Your delivery endpoint then receives a signed, fully rendered message:

{
  "id": "01a1…",
  "channel": "push",
  "address": "<device token>",
  "locale": "en",
  "importance": "normal",
  "expires_at": null,
  "content": {"title": "Your order is on its way", "body": "Order 1001 ships today.",
              "url": "https://shop.example/orders/1001"},
  "metadata": {"cue_message_id": "01a1…", "cue_tracking_token": "…"},
  "links": {"preferences": "https://cue.example.com/preferences/…"}
}

Who it's for

For teams whose agents, background jobs or product code send push, e-mail, SMS or chat messages to people, and who want the decisions (whether, when, how often, over which route, in which language) made in one place, stored, and explainable, on their own infrastructure.

Not for you (yet) if you need:

  • an in-app inbox or notification feed: planned, not built;

  • an admin UI: today you configure Cue through the HTTP API, the CLI and cue.toml;

  • a connector Cue does not have yet. Today's are FCM, APNs, Twilio, SMTP, Amazon SES, Resend, Slack, Telegram, a signed webhook and console, plus any you write;

  • a hosted service: Cue is self-hosted only;

  • a visual journey builder for marketing campaigns: not planned.

See the roadmap.

Bring your own delivery

Each route (push, sms, email, ops-alerts…) is backed by a connector:

Connector

Use it when

webhook

You already have a sending service, or want full control. Cue POSTs signed JSON to it.

fcm, twilio, smtp, telegram

You want a ready-made connector for these providers.

console

Local development: messages are logged.

your own

Write a small class and register it as a plugin; see custom connectors.

Connectors are configuration, not code changes: swap SMS vendors without touching a rule.

Also

  • SDKs. pip install cue-notify-client and npm install cue-client, both with webhook signature verification. See SDKs.

  • Engagement tracking. Delivered, opened, clicked, converted; client apps report with a per-message token, no API key needed.

  • Broadcasts. Audience filters, resumable batches, pause/resume/cancel without double sends.

  • Compliance. US texting hours and state caps for marketing texts, STOP/START replies, and opt-in records with the disclosure shown. See compliance.

  • Runs on your database. An API process and a worker process (or the worker embedded in the API for small installs), with PostgreSQL or SQLite. No Redis or message broker: the durable job queue lives in the database. Schedule cuectl prune yourself for retention.

  • Observable. Per-rule event outcomes, status reasons, Prometheus metrics, JSON logs.

  • Docs for tools. llms.txt and AGENTS.md.

How Cue compares

What it is

Difference from Cue

Novu

Notification infrastructure you can self-host.

Its self-hosting guide lists MongoDB, Redis and S3-compatible storage. Cue needs one database, PostgreSQL or SQLite.

Knock, Courier, OneSignal

Hosted notification services.

You sign up for their service; Cue runs on your infrastructure.

Apprise, ntfy

Tools that deliver a message to many services or devices.

They send what you hand them; whether and when a person should be notified (preferences, caps, quiet hours in their time zone, digests) is left to your code. Cue makes that decision, then hands the message to a sender.

Human approval inside an agent framework (LangGraph interrupt(), a Slack approve button)

A pause in one agent's run until a person answers.

It covers one agent and one decision; how many messages a person already got from your other agents tonight is not its concern. Cue applies budgets, quiet hours and digests across all of them, and its approval requests can resume LangGraph, Pydantic AI, CrewAI Flows and Dapr Agents.

Framework notification libraries (Laravel, Rails, Django…)

Code in your application that formats and sends notifications.

Policy, preferences and history are yours to build per application; Cue keeps them in one service that every application and agent calls.

How it works

flowchart LR
    E[POST /v1/events] --> R{Rules}
    R --> P[Policy<br/>unsubscribe · caps · cooldown · quiet hours]
    P --> T[Template<br/>locale · route variants]
    T --> Q[(Queue)]
    Q --> A[AI rewording<br/>optional]
    A --> C{Your delivery<br/>webhook · connectors}

Concept

In one line

Event

Something that happened to a recipient. Idempotent, stored with per-rule outcomes.

Rule

When event X (and condition) → send template Y over routes [A, B].

Template

Localised content with route-specific variants.

Category

Policy bundle: frequency caps, quiet hours, whether unsubscribing is allowed.

Channel

A named route (push, sms…) backed by a connector.

Message

One notification to one recipient, with a full status trail.

Broadcast

One template to an audience, in resumable batches.

Configuration

Environment variables (CUE_SECTION__KEY) or a cue.toml:

[database]
url = "postgresql+asyncpg://cue:secret@db/cue"

[api]
public_url = "https://cue.example.com"   # needs CUE_API__SECRET_KEY

[channels.push]
provider = "webhook"
url = "https://notifications.internal.example/push"   # secret from CUE_CHANNELS__PUSH__SECRET

[channels.sms]
provider = "twilio"
account_sid = "AC…"
from_number = "+15550100"   # auth token from CUE_CHANNELS__SMS__AUTH_TOKEN

See the configuration reference, deployment and examples/cue.toml.

Project status

Cue is in early development (0.x): the model and API are stable in shape but may still change before 1.0; each release's changelog says what to do when upgrading. See the roadmap for what comes next. Feedback and contributions are welcome; see CONTRIBUTING.md.

License

MIT

Available Tools

10 tools
explainA
Read-only

Dry-run an event for a person: which rules would fire, what each would do and why the others would not. Use it before send_event to check that a rule will reach the person; nothing is stored or sent. Needs an admin key, so agent keys get 403 and should read get_event for a real event instead.

Returns rules, one entry per rule listening for the name, with rule, matched, status (what the message would get, e.g. queued or suppressed), reason and digest_id, read like get_event's outcome. Fails with 404 when recipient does not exist yet.

ParametersJSON Schema
NameRequiredDescriptionDefault
dataNoEvent details to test conditions with, as for send_event.
recipientYesExternal id of an existing recipient; unlike send_event, an unknown id is not created.
event_nameYesEvent name to test, as for send_event, e.g. `order.shipped`.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true/openWorldHint=false, and the description is consistent while adding substantial context the annotations cannot convey: no side effects ('nothing is stored or sent'), an admin-key requirement with a 403 failure mode for agent keys, and a 404 when the recipient does not exist.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well front-loaded: the dry-run purpose and the send_event relationship come first, followed by auth behavior and the return shape. The return-field enumeration is dense but earns its place since there is no output schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by naming the returned `rules` fields (rule, matched, status, reason, digest_id) and cross-referencing get_event's `outcome`. Auth, failure modes, and side-effect behavior are all covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description still adds value by clarifying that recipient must be an existing id (unlike send_event, no creation) and that data mirrors send_event input, plus the 404 behavior tied to that parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a precise verb and scope: dry-run an event for a person, showing which rules fire and why others do not. It is immediately distinguishable from send_event (which actually sends) and get_event (which reads a stored event).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says to use it before send_event to verify a rule reaches the person, notes nothing is stored or sent, and gives a hard exclusion: agent keys get 403 and should read get_event instead. Both the when-to-use and the when-not-to-use with an alternative are spelled out.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_approvalA
Read-only

Fetch an approval request by id to learn whether a person approved the action you asked about with request_approval. Call it again, with a pause, while status is pending. Needs the messages:read scope.

Returns id, status (pending, approved, rejected or expired; a request past expires_at reads as expired), title, body, reviewers, importance, agent, requested_by, metadata, comment (the reviewer's note, if any), decided_by, decided_at, expires_at and created_at. Treat anything but approved as no. Fails with 404 when the id does not exist or, for an agent key, belongs to another agent.

ParametersJSON Schema
NameRequiredDescriptionDefault
approval_idYesApproval request UUID: the `id` returned by request_approval.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint and openWorldHint; the description adds the required messages:read scope, 404 semantics for missing or cross-agent ids, the expires_at-to-expired behavior, and the polling contract. It also enumerates every returned field in the absence of an output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and polling rule, then auth scope, then return fields. The full field enumeration is long but justified because there is no output schema; only the exhaustive list keeps it from a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description supplies the return shape, status enumeration, auth requirement, polling behavior, and failure mode. Nothing material is missing for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema already explains approval_id, so the baseline is 3. The description adds value by tying the id to request_approval's return and by documenting the 404 failure mode for nonexistent or foreign-agent ids.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (fetch) and resource (approval request by id) and ties it to the sibling that creates it, request_approval. An agent can distinguish it from request_approval, get_message, and the other siblings without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to call it after request_approval, to re-call with a pause while status is pending, and to treat anything but approved as no. That is concrete when-to-use and how-to-poll guidance, not inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_eventA
Read-only

Fetch a reported event by id and, for each rule listening for its name, whether the rule fired and what came of it. Use it after send_event to learn what was sent and why or why not; follow a message_id with get_message for delivery, and use explain for a dry run instead. Needs the messages:read scope.

Returns id, name, source, idempotency_key, data, status (pending until the worker runs the rules, then processed, or failed with the reason in error), occurred_at, received_at and outcome: null while pending, else one entry per rule with rule, matched, reason, status, message_id and digest_id. matched: false comes with condition_false, outside_rollout or condition_error. A composed message has status and message_id, and reason is its status_reason when suppressed (e.g. agent_budget: …, unsubscribed); digested means it joined digest_id; agent_not_allowed means the agent may not use the rule's category. An empty list means no rule listens for the name. Fails with 404 when the id does not exist or, for an agent key, was reported by another sender.

ParametersJSON Schema
NameRequiredDescriptionDefault
event_idYesEvent UUID: the `id` returned by send_event, or a message's `event_id` from get_message.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only cover the read-only/open-world profile, but the description adds the required `messages:read` scope, the 404 failure conditions (nonexistent id or agent key from another sender), and the pending/processed/failed lifecycle of `status`. That is substantial behavioral context beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and usage before the return-shape detail, and every clause carries information. It is dense and long, but with no output schema the field documentation earns its space, so only minor trimming is possible.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description fully documents the returned fields and enumerates the matched/reason/status semantics, including suppressed-message cases and the empty-list meaning. Nothing an agent needs to interpret the result is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the description largely restates the schema's own guidance (send_event id or a message's event_id). It adds no format or syntax detail beyond it, so the baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Fetch a reported event by id') plus the exact scope of the response (per-rule fired/outcome detail). This distinguishes it clearly from get_message, send_event, and explain without needing to open the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use it after send_event to learn what was sent and why or why not', routes delivery questions to get_message, and names explain for dry runs. When-to-use and alternatives are both fully specified.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_messageA
Read-only

Fetch one message by id to learn whether and how a person was notified: delivery status and its reason, the channel used, the rendered content and engagement. Use it after send_message, or with a message_id from get_event; use list_messages when you have no id. Needs the messages:read scope.

Returns id, status (queued, sending, pending_approval, sent, delivered, failed, suppressed or cancelled), status_reason (why it was suppressed, failed, held or cancelled, e.g. frequency_cap: 3 per 1 day, 0:00:00 or agent_budget: …; null otherwise), category, template, channels (planned, in fallback order), channel (the one used), locale, content (rendered title, body, url… under default and each channel with its own override), importance, agent, event_id, rule_id, reviewed_by, reviewed_at, screening, attempts, send_at, expires_at, sent_at, delivered_at, opened_at, clicked_at, converted_at and created_at. Fails with 404 when the id does not exist or, for an agent key, belongs to another sender.

ParametersJSON Schema
NameRequiredDescriptionDefault
message_idYesMessage UUID: the `id` returned by send_message or list_messages, or a `message_id` in get_event's `outcome`.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only cover the safety profile (readOnlyHint, openWorldHint=false). The description adds substantial behavior: the required auth scope, the 404 failure condition including the cross-sender check for agent keys, and the meaning of status/status_reason values such as `frequency_cap: 3 per 1 day`. This goes well beyond the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well front-loaded: purpose, then usage/routing, then behavioral details. The return-field enumeration is long, but since no output schema exists it is largely load-bearing rather than filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and a single trivial parameter, the description compensates fully by enumerating returned fields, status values, status_reason semantics, and failure modes. Nothing needed to call or interpret the tool is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single parameter is already documented as a UUID. The description still adds real value by explaining the three sources of the id (send_message, list_messages, get_event outcome), which is more than the schema alone conveys.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Fetch one message by id') plus the exact purpose (learning whether/how a person was notified). It is clearly distinguishable from siblings list_messages, get_event, and send_message without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('after send_message, or with a message_id from get_event') and names the alternative for the no-id case ('use list_messages when you have no id'). Prerequisites (the `messages:read` scope) are also stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_messagesA
Read-only

List recent messages, newest first, optionally for one person or status: what someone was already sent, what was suppressed, what waits for approval. Use get_message when you have an id. Needs the messages:read scope; agent keys see only their own messages.

Returns items, each with the same fields as get_message, and next_cursor, which is not null when older messages exist beyond limit. Fails with 404 when recipient is not a known external id.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMost messages to return, 1-100 (other values are clamped).
statusNoOnly messages with this status; omit for any status.
recipientNoExternal id of the person; omit for everyone.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint and openWorldHint; the description goes well beyond them by disclosing the auth scope requirement, a visibility restriction ('agent keys see only their own messages'), pagination behavior via next_cursor, and a concrete failure mode (404 for unknown recipient). These are exactly the behavioral traits annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short paragraphs, front-loaded with purpose and sibling routing, then return shape and error behavior. Every clause carries information; nothing restates the schema verbatim.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description carries the return contract itself: it names `items`, says each item matches get_message's fields, and explains `next_cursor` semantics. Combined with the error and permission notes, an agent has everything needed to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds meaning beyond the schema by explaining what the status values signify in workflow terms and by documenting the 404 that occurs when `recipient` is not a known external id — semantics the enum list alone does not convey.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource plus ordering and scope: 'List recent messages, newest first, optionally for one person or status.' It then explicitly distinguishes itself from the sibling get_message ('Use get_message when you have an id'), so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It names the alternative (get_message) and the condition that selects it (having an id), and explains what the optional status filter is for by mapping statuses to user intent ('what was suppressed', 'what waits for approval'). It also states the required `messages:read` scope, which is a real usage precondition.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_templatesA
Read-only

List the templates send_message can use, to find a template key. Use preview_template to see one's content. Needs an admin key, so agent keys get 403.

Returns templates, up to 200, each with key, description and locales.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint and openWorldHint. The description adds real behavioral context beyond them: the admin-key authorization requirement with the concrete 403 failure mode for agent keys, plus the unordered result cap of 200 items.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, each load-bearing: purpose+consumer, the alternative tool, the auth constraint, and the result shape. Purpose is front-loaded and nothing is redundant with the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no input parameters and no output schema, the description carries the burden and does so: it documents the authorization requirement and the returned fields (key, description, locales) and the cap of 200, which is exactly what an agent needs.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is nothing for the description to disambiguate; baseline for a no-param tool is 4. It still usefully notes that the call needs an admin key rather than a parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (list the templates) and ties it to the consumer (send_message) so the agent knows these keys feed message sending. It is clearly distinguishable from sibling preview_template, which is called out separately.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says why to call it (to find a template key), names the alternative for viewing content (preview_template), and states a hard prerequisite (admin key; agent keys get 403). When-to-use and when-not are both covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

preview_templateA
Read-only

Render a template with sample data to see the exact text a person would get, without sending anything. Use it to check which data a template needs before send_message; list_templates gives the keys. Needs an admin key, so agent keys get 403.

Returns locale (the one used) and variants: the rendered title, body, url and other content under default and under each channel with its own override. Fails with 404 for an unknown template and 422 when it cannot be rendered.

ParametersJSON Schema
NameRequiredDescriptionDefault
dataNoSample template variables, read as `data`. Defaults to {}.
localeNoLocale to render, e.g. `uz`. Omitted, the server's default is tried; a locale the template lacks falls back to its default.
templateYesTemplate key, e.g. `order-shipped`, from list_templates.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, it discloses the key behavioral traits: no message is sent, an admin key is required, and it fails with 404 for unknown templates and 422 when rendering fails. This is exactly the out-of-band context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then routing guidance, then return and error behavior. Three sentences, each carrying distinct, non-redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully documents the return shape (locale and variants with title/body/url per channel) as well as error codes and auth requirements, leaving nothing important for correct invocation missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameters are already documented; however the description adds meaning about `data` (sample variables whose needed keys come from list_templates) and `locale` fallback behavior, going slightly beyond the schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a precise verb+resource (render a template with sample data) and clarifies the non-sending nature that separates it from send_message. It also names list_templates as the source of keys, so an agent can place it among siblings without reading schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says to use it to check which `data` a template needs before send_message, naming the alternative and the ordering condition. It also states the auth consequence (admin key required, agent keys get 403), which is decisive for tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

request_approvalA

Ask people to approve or reject an action you are about to take outside Cue (deleting data, spending money, contacting many people), before you take it. Not for informing anyone: use send_event or send_message. Needs the messages:write scope.

Cue reports a cue.approval_requested event per reviewer, which the server's rules turn into a notification with a one-time review link; only people decide, no tool can. Returns the request: id, status (pending), title, body, reviewers, importance, metadata, expires_at and created_at. Then poll get_approval with the id and act only on approved. Agent keys may name only their agent's configured reviewers (403 otherwise) and have a limit of open requests (429, 10 by default).

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoWhat the reviewer needs to decide (what, why, impact), up to 4,000 characters. Defaults to empty.
titleYesWhat needs a decision, ideally a yes/no question such as `Refund order 9?`; 1-200 characters.
metadataNoJSON object returned unchanged with the request and its decision, e.g. `{"order": "9"}`, to tie it back to your work; at most 16 KB. Defaults to {}.
reviewersYesExternal ids of the 1-10 people who may decide; the first decision settles the request.
importanceNoHow urgently reviewers are notified; defaults to `high`. An agent's ceiling lowers anything above it.high
expires_in_minutesNoMinutes until an undecided request expires, which means no: 1 to 10080 (7 days), smaller values become 1. Defaults to 60.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are minimal (write, open-world, non-destructive), and the description carries the real burden: messages:write scope, a cue.approval_requested event per reviewer, a one-time review link, humans-only decision, 403 for unconfigured reviewers, and a 429 limit of ~10 open requests. This is exactly the behavioral context annotations cannot convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling exclusion are front-loaded, and the dense paragraph is largely information-bearing rather than filler. It is longer than strictly necessary (the full field enumeration of the return could be trimmed), so it falls just short of ideal.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by spelling out the returned fields (id, status, title, body, reviewers, importance, metadata, expires_at, created_at) and the required poll step. Auth scope, error codes, and limits are all covered, so nothing needed to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds real semantics beyond the schema: agent keys may name only their configured reviewers (403 otherwise) and the reviewer pool is 1-10 external ids with first-decision-wins. Those constraints meaningfully sharpen how reviewers should be supplied.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (ask to approve/reject) and resource (an action about to be taken outside Cue), with concrete examples (deleting data, spending money, contacting many people). It also explicitly distinguishes itself from the informing siblings by naming send_event and send_message.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit exclusion ('Not for informing anyone: use send_event or send_message') plus the follow-up workflow ('poll get_approval with the id and act only on approved'). When-to-use, when-not-to-use, and the alternative tools are all named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

send_eventA

Report that something happened to a person (e.g. order.shipped) and let Cue's rules decide whether and what to notify. Prefer it to send_message whenever a rule can cover the case. Needs the events:write scope.

Rules run asynchronously, so the result only confirms receipt: id, status (pending until processed) and duplicate (true when this idempotency key was already reported; nothing new happens). Call get_event with the id to see, per rule, whether it matched and which message it produced. An unknown recipient gets an empty profile, so a message may end suppressed with no_reachable_channel. For agent keys, the messages count against the agent's per-person budget, are capped at its importance ceiling and may wait for approval. Fails with 403 for names starting with cue. and 422 for invalid input.

ParametersJSON Schema
NameRequiredDescriptionDefault
dataNoEvent details as a JSON object, at most 16 KB. Rule conditions read it as `event.data`, templates as `data`. Defaults to {}.
nameYesEvent name, 1-255 letters, digits and `_ . : - /`, e.g. `order.shipped`. Rules listen for it by name or pattern (`order.*`). Names starting with `cue.` are reserved.
recipientYesExternal id of the person the event is about: the id your system uses for them, not a Cue UUID.
idempotency_keyNoUp to 255 characters derived from the triggering action (e.g. `order-9-shipped`), unique per sender: a repeat is recognised and notifies nobody again. Strongly recommended.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare the coarse profile (not read-only, open-world, non-destructive); the description goes far beyond with asynchronous processing, the receipt-only result shape (`status: pending`, `duplicate`), idempotency semantics, the suppressed/no_reachable_channel edge case, per-person budget and importance-ceiling limits, approval waits, and explicit 403/422 failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose and the send_message routing rule before behavior, and every sentence carries real information. It is dense and slightly long, but the density is justified by the async/idempotency/error complexity rather than padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a fire-and-forget event tool with no output schema, the description supplies exactly what is missing: the return fields, why they are only a receipt, how to inspect per-rule outcomes via get_event, and the failure codes. Nothing an agent needs to call it correctly is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all four parameters (event name grammar, recipient id semantics, data size limit, idempotency key derivation). The description reinforces the recipient/idempotency behavior but adds no syntax beyond what the schema provides; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Report that something happened to a person') plus a concrete example event name, and explicitly positions it against the sibling send_message. An agent can distinguish it from send_message and get_event without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit routing rule: 'Prefer it to send_message whenever a rule can cover the case', and names the scope required (`events:write`). It also tells the agent how to follow up (call get_event with the returned id), which is the correct next step versus alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

send_messageA

Send one template directly to one person over the channels you list, without rules. Use it for an explicit one-off message (a code, a reply, an alert) when you know the template key; otherwise prefer send_event. Needs the messages:write scope.

The message still passes its category's policy (preferences, frequency caps, quiet hours, unsubscribes) and, for agent keys, the agent's per-person budget, importance ceiling and approval policy. Returns the message, with the same fields as get_message. status is queued, suppressed (read status_reason) or pending_approval (held for a person: do not resend). Repeating an idempotency_key returns the original message instead of sending again. Fails with 404 for an unknown template or category, 403 when an agent may not use the category and 422 for a channel the server does not have.

ParametersJSON Schema
NameRequiredDescriptionDefault
dataNoTemplate variables as a JSON object, read as `data` in the template; at most 16 KB. Defaults to {}.
categoryNoPolicy category key. `transactional` (default) has no caps, ignores quiet hours and cannot be unsubscribed from; `marketing` is capped and respects quiet hours. Agent keys may use only their allowed categories.transactional
channelsYesAt least one channel name in fallback order, e.g. `["push", "email"]`; each must be configured on the server.
templateYesKey of an existing template, e.g. `order-shipped`.
recipientYesExternal id of the person: the id your system uses for them. An unknown id gets an empty profile without addresses, so the message is suppressed with `no_reachable_channel`.
importanceNo`low` never interrupts, `normal` is the default, `high` is time-sensitive, `critical` is for security or safety only and breaks through quiet hours and caps only in categories people cannot unsubscribe from (elsewhere it is sent as `high`). An agent's ceiling lowers anything above it.normal
idempotency_keyNoUp to 200 characters derived from the triggering action; repeating it with the same API key returns the original message instead of sending again. Strongly recommended.
expires_in_minutesNoDrop the message if it is not delivered within this many minutes; set it for codes, arrivals and anything useless later. Omit for no expiry.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only cover safety flags. The description adds all the behavior an agent needs: policy still applies (preferences, caps, quiet hours, unsubscribes), agent budget/importance ceiling/approval, return shape with the same fields as get_message, the three status values with guidance to read status_reason and not resend pending_approval, idempotency behavior, and specific failure codes (404/403/422).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense, front-loaded paragraphs: purpose/alternative routing first, then behavior, then return values and errors. Every sentence earns its place, though a touch long.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with no output schema, the description covers usage, policy interactions, return status semantics, idempotency, and error codes. An agent has everything needed to call it correctly and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description reinforces key semantics: channels are in fallback order, idempotency_key returns the original message on repeat. It stops short of adding syntax not already in the schema, so it lands one above baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Send one template directly to one person'), defines scope ('without rules'), and explicitly names the sibling it is not (send_event). An agent can distinguish this from send_event without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('an explicit one-off message... when you know the template key') and names the alternative plus the condition that selects it ('otherwise prefer send_event'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 9 tool updatesv0.1.1
    • Changedexplain3 fields changed
      • addedInput schema / properties / data / description
        Added value: +"Event details to test conditions with, as for send_event."
      • addedInput schema / properties / event_name / description
        Added value: +"Event name to test, as for send_event, e.g. `order.shipped`."
      • addedInput schema / properties / recipient / description
        Added value: +"External id of an existing recipient; unlike send_event, an unknown id is not created."
    • Changedget_approval1 field changed
      • addedInput schema / properties / approval_id / description
        Added value: +"Approval request UUID: the `id` returned by request_approval."
    • Changedget_event1 field changed
      • addedInput schema / properties / event_id / description
        Added value: +"Event UUID: the `id` returned by send_event, or a message's `event_id` from get_message."
    • Changedget_message1 field changed
      • addedInput schema / properties / message_id / description
        Added value: +"Message UUID: the `id` returned by send_message or list_messages, or a `message_id` in get_event's `outcome`."
    • Changedlist_messages3 fields changed
      • addedInput schema / properties / limit / description
        Added value: +"Most messages to return, 1-100 (other values are clamped)."
      • addedInput schema / properties / recipient / description
        Added value: +"External id of the person; omit for everyone."
      • addedInput schema / properties / status / description
        Added value: +"Only messages with this status; omit for any status."
    • Changedpreview_template3 fields changed
      • addedInput schema / properties / data / description
        Added value: +"Sample template variables, read as `data`. Defaults to {}."
      • addedInput schema / properties / locale / description
        Added value: +"Locale to render, e.g. `uz`. Omitted, the server's default is tried; a locale the template lacks falls back to its default."
      • addedInput schema / properties / template / description
        Added value: +"Template key, e.g. `order-shipped`, from list_templates."
    • Changedrequest_approval6 fields changed
      • addedInput schema / properties / body / description
        Added value: +"What the reviewer needs to decide (what, why, impact), up to 4,000 characters. Defaults to empty."
      • addedInput schema / properties / expires_in_minutes / description
        Added value: +"Minutes until an undecided request expires, which means no: 1 to 10080 (7 days), smaller values become 1. Defaults to 60."
      • addedInput schema / properties / importance / description
        Added value: +"How urgently reviewers are notified; defaults to `high`. An agent's ceiling lowers anything above it."
      • addedInput schema / properties / metadata / description
        Added value: +"JSON object returned unchanged with the request and its decision, e.g. `{\"order\": \"9\"}`, to tie it back to your work; at most 16 KB. Defaults to {}."
      • addedInput schema / properties / reviewers / description
        Added value: +"External ids of the 1-10 people who may decide; the first decision settles the request."
      • addedInput schema / properties / title / description
        Added value: +"What needs a decision, ideally a yes/no question such as `Refund order 9?`; 1-200 characters."
    • Changedsend_event4 fields changed
      • addedInput schema / properties / data / description
        Added value: +"Event details as a JSON object, at most 16 KB. Rule conditions read it as `event.data`, templates as `data`. Defaults to {}."
      • addedInput schema / properties / idempotency_key / description
        Added value: +"Up to 255 characters derived from the triggering action (e.g. `order-9-shipped`), unique per sender: a repeat is recognised and notifies nobody again. Strongly recommended."
      • addedInput schema / properties / name / description
        Added value: +"Event name, 1-255 letters, digits and `_ . : - /`, e.g. `order.shipped`. Rules listen for it by name or pattern (`order.*`). Names starting with `cue.` are reserved."
      • addedInput schema / properties / recipient / description
        Added value: +"External id of the person the event is about: the id your system uses for them, not a Cue UUID."
    • Changedsend_message8 fields changed
      • addedInput schema / properties / category / description
        Added value: +"Policy category key. `transactional` (default) has no caps, ignores quiet hours and cannot be unsubscribed from; `marketing` is capped and respects quiet hours. Agent keys may use only their allowed categories."
      • addedInput schema / properties / channels / description
        Added value: +"At least one channel name in fallback order, e.g. `[\"push\", \"email\"]`; each must be configured on the server."
      • addedInput schema / properties / data / description
        Added value: +"Template variables as a JSON object, read as `data` in the template; at most 16 KB. Defaults to {}."
      • addedInput schema / properties / expires_in_minutes / description
        Added value: +"Drop the message if it is not delivered within this many minutes; set it for codes, arrivals and anything useless later. Omit for no expiry."
      • addedInput schema / properties / idempotency_key / description
        Added value: +"Up to 200 characters derived from the triggering action; repeating it with the same API key returns the original message instead of sending again. Strongly recommended."
      • addedInput schema / properties / importance / description
        Added value: +"`low` never interrupts, `normal` is the default, `high` is time-sensitive, `critical` is for security or safety only and breaks through quiet hours and caps only in categories people cannot unsubscribe from (elsewhere it is sent as `high`). An agent's ceiling lowers anything above it."
      • addedInput schema / properties / recipient / description
        Added value: +"External id of the person: the id your system uses for them. An unknown id gets an empty profile without addresses, so the message is suppressed with `no_reachable_channel`."
      • addedInput schema / properties / template / description
        Added value: +"Key of an existing template, e.g. `order-shipped`."
  2. 10 tool updatesv0.1.0
    • First observedexplain
    • First observedget_approval
    • First observedget_event
    • First observedget_message
    • First observedlist_messages
    • First observedlist_templates
    • First observedpreview_template
    • First observedrequest_approval
    • First observedsend_event
    • First observedsend_message

TDQS

A4.6/5.0

Scored across 10 tools

Disambiguation5/5

Each tool targets a distinct resource and action, and descriptions explicitly cross-reference to prevent confusion (e.g. send_event vs send_message, get_event vs get_message, explain vs preview_template). The send/get pairs operate on different entities (events vs messages), so an agent can reliably select the right tool.

Naming Consistency4/5

Names follow a predictable snake_case verb_noun pattern (list_templates, send_message, get_approval, etc.) with consistent list/get/send/request/preview prefixes. The only deviation is 'explain', a bare verb that breaks the pattern, though it remains clear.

Tool Count5/5

10 tools is well within the ideal 3-15 range for an agent-facing notification platform, and each tool covers a distinct operation (send, inspect, dry-run, approvals). No tool feels redundant or missing from a count perspective.

Completeness4/5

The surface covers core agent workflows: templates (list, preview), sending (event, message), inspection (event, message, list), approvals (request, get), and dry-run (explain). Minor gaps exist—no list_events, list_approvals, or message cancellation—but agents can work around these for most tasks.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Human-in-the-loop approvals and notifications for AI agents via WhatsApp. Enables Cursor, Claude Code, and autonomous AI agents to reach users away from their computers.
    53 npm
    ISC
  • A
    license
    A
    quality
    D
    maintenance
    A lightweight notification service that sends webhooks when AI agents complete tasks. Supports multiple providers like Discord, Slack, Teams, Feishu, and Ntfy.
    1
    7 npm
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables agents and applications to send notifications through configurable channels such as Telegram or a JSONL file, with queued delivery, status tracking, idempotency, and event-based routing.
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to request human decisions and send notifications through chat platforms like Slack and WhatsApp, with ephemeral in-memory pending requests and no central backend.
    2
    22 npm
    MIT