Cue
Cue lets you send, gate, and audit person-facing notifications from agents or backend code.
Report events (e.g.
order.shipped) to trigger rules and see per-rule outcomes.Send direct one-off messages via templates and channels, still subject to policy.
Inspect messages and events: status, suppression/failure reasons, content, engagement.
Request human approval for risky actions and poll for the decision.
Dry-run events (
explain) and preview/list templates (admin keys).Enforce budgets, quiet hours, frequency caps, approval rules, and idempotency.
Agent keys are restricted to their own messages/reviewers and cannot approve.
Supports Amazon SES as an email delivery connector for sending notifications.
Provides an approval bridge for CrewAI Flows, enabling agents to request human approval before risky actions.
Provides an approval bridge for Dapr Agents, enabling human approval workflows for agent actions.
Provides an approval bridge for LangGraph, allowing agents to pause and request human approval via Cue.
Provides an approval bridge for Pydantic AI, enabling agents to request human approval before risky actions.
Provides a Resend email connector for delivering notifications via Resend.
Provides a Slack connector for delivering notifications and approval prompts to Slack.
Provides a Telegram connector for delivering notifications via Telegram.
Provides a Twilio connector for sending SMS notifications via Twilio.
Cue
Per-person attention budgets for AI agents and background automations, self-hosted.
Documentation · Getting started · Agents
A code-review agent, a log-triage agent and a billing agent can all page the same
engineer at 2 a.m. A LangGraph interrupt() or a Slack approve button pauses one agent;
none of them knows what the others already sent. Cue sits in front of all of them as
the outbound gatekeeper:
Budgets per agent, per person. Each agent sends with its own key. Its
frequency_capslimit how many messages it may send one person per period, and messages over budget are stored assuppressedwith reasonagent_budget. Category caps count what a person gets from every sender together.Quiet hours in the person's time zone. A message due inside someone's quiet hours waits until they end. Only
criticalmessages in categories people cannot unsubscribe from break through, and each agent'smax_importancecaps what it may claim, so only agents you trust can usecritical.Digests for the rest. A digest rule turns a stream of agent events into one message per window, or one per day at a local time.
Approval for risky messages. Messages that match an agent's
approvalcondition wait aspending_approval; a reviewer decides from a one-time link in their own notification. Agent keys can never approve.A reason for every outcome. Each message has a status and a
status_reason, and each event records which rules matched and why. Agents connect over HTTP, the SDKs or the MCP server.
The recording above is examples/agents-demo:
from a checkout, uv run python examples/agents-demo/demo.py runs it with SQLite and
the console connector.
Quick start
With Docker Compose (PostgreSQL, an API and a worker; messages go to the worker's log):
git clone https://github.com/murtazox04/Cue && cd Cue
docker compose up --build -d
docker compose exec api cuectl keys create admin
docker compose logs -f workerOr with Python 3.12+ and SQLite, in a virtual environment:
python -m venv .venv && . .venv/bin/activate
pip install cue-notify
export CUE_WORKER__EMBEDDED=true
export CUE_CHANNELS__PUSH__PROVIDER=console CUE_CHANNELS__SMS__PROVIDER=console
cuectl db upgrade && cuectl keys create admin && cuectl servekeys create prints an API key once; keep it as CUE_API_KEY. Then follow the
getting-started guide to create a
template and a rule and send an event that shows up in the log, and
agents to give an agent its own key
and limits.
To try it without installing anything, with uv:
CUE_WORKER__EMBEDDED=true CUE_CHANNELS__PUSH__PROVIDER=console \
CUE_CHANNELS__SMS__PROVIDER=console uvx cue-notify serve --migrateand, in a second terminal in the same directory (both use ./cue.db),
uvx cue-notify keys create admin.
Related MCP server: mcp-server-notifier
More for agents
Agents as senders. Each agent gets its own key with a per-person attention budget, an importance ceiling and, where you want it, human approval before anything goes out. Agent keys cannot read or change people's profiles, and cannot approve anything. See agents.
Ask a person first. Before a risky action (a refund, a deletion, a mass e-mail), an agent calls
POST /v1/approvalsor therequest_approvalMCP tool. Cue tells the reviewers on their own channels with a one-time link and reports the decision back, with bridges for LangGraph, Pydantic AI, CrewAI Flows and Dapr Agents. See approval requests.MCP server.
uvx cue-notify mcpgives Claude, Cursor or your own agent tools to notify people and inspect delivery, under the same policy and audit trail. See AI agents (MCP).Screening (optional, off by default, experimental). With
[screening] enabled = trueand a TypeSafe API key, a decision model (Jev) reads each agent message before it is sent: pressure, deception or leaked secrets hold it for a person, and overstated importance is lowered. Built against TypeSafe's published API; not yet proven in production. Your own backend's messages are never screened.Coding agents.
cue-hooklets OpenHands and Claude Code tell you when they finish or wait for input. See coding agents.Claude Code plugin.
/plugin marketplace add murtazox04/Cue, then/plugin install cue@cue, adds a skill for integrating Cue into an application.
Notifications from your own backend
The same policy serves your product's own notifications. Your backend reports what
happened (order.shipped, payment.failed). Cue decides whether that is worth a
notification, renders it in the person's language, picks the time and the route, and
hands a finished message to the delivery you connect: your own sending service through a
signed webhook, or a bundled connector.
Rules and policy in one place. JSON Logic rules map events to templates; every message, whether triggered by a rule, sent directly or broadcast, passes the same checks: unsubscribes, muted channels, frequency caps, cooldowns and quiet hours in the recipient's own time zone, checked again right before sending.
Fewer messages. Digests turn a burst of events into one message per window or one per day at a local time, and fatigue backs off from people who stopped engaging.
People in control. A hosted preference page (or a JSON API for your own), RFC 8058 one-click unsubscribe, and a consent ledger of every change.
Answers. Every event records which rules matched and why; every message records its status and the reason it was suppressed or failed.
curl -X POST https://cue.example.com/v1/events \
-H "Authorization: Bearer $CUE_API_KEY" -H "Content-Type: application/json" \
-d '{"name": "order.shipped", "recipient": "customer-42",
"data": {"order_id": "1001"}, "idempotency_key": "order-1001-shipped"}'Your delivery endpoint then receives a signed, fully rendered message:
{
"id": "01a1…",
"channel": "push",
"address": "<device token>",
"locale": "en",
"importance": "normal",
"expires_at": null,
"content": {"title": "Your order is on its way", "body": "Order 1001 ships today.",
"url": "https://shop.example/orders/1001"},
"metadata": {"cue_message_id": "01a1…", "cue_tracking_token": "…"},
"links": {"preferences": "https://cue.example.com/preferences/…"}
}Who it's for
For teams whose agents, background jobs or product code send push, e-mail, SMS or chat messages to people, and who want the decisions (whether, when, how often, over which route, in which language) made in one place, stored, and explainable, on their own infrastructure.
Not for you (yet) if you need:
an in-app inbox or notification feed: planned, not built;
an admin UI: today you configure Cue through the HTTP API, the CLI and
cue.toml;a connector Cue does not have yet. Today's are FCM, APNs, Twilio, SMTP, Amazon SES, Resend, Slack, Telegram, a signed webhook and console, plus any you write;
a hosted service: Cue is self-hosted only;
a visual journey builder for marketing campaigns: not planned.
See the roadmap.
Bring your own delivery
Each route (push, sms, email, ops-alerts…) is backed by a connector:
Connector | Use it when |
| You already have a sending service, or want full control. Cue POSTs signed JSON to it. |
| You want a ready-made connector for these providers. |
| Local development: messages are logged. |
your own | Write a small class and register it as a plugin; see custom connectors. |
Connectors are configuration, not code changes: swap SMS vendors without touching a rule.
Also
SDKs.
pip install cue-notify-clientandnpm install cue-client, both with webhook signature verification. See SDKs.Engagement tracking. Delivered, opened, clicked, converted; client apps report with a per-message token, no API key needed.
Broadcasts. Audience filters, resumable batches, pause/resume/cancel without double sends.
Compliance. US texting hours and state caps for marketing texts, STOP/START replies, and opt-in records with the disclosure shown. See compliance.
Runs on your database. An API process and a worker process (or the worker embedded in the API for small installs), with PostgreSQL or SQLite. No Redis or message broker: the durable job queue lives in the database. Schedule
cuectl pruneyourself for retention.Observable. Per-rule event outcomes, status reasons, Prometheus metrics, JSON logs.
How Cue compares
What it is | Difference from Cue | |
Notification infrastructure you can self-host. | Its self-hosting guide lists MongoDB, Redis and S3-compatible storage. Cue needs one database, PostgreSQL or SQLite. | |
Knock, Courier, OneSignal | Hosted notification services. | You sign up for their service; Cue runs on your infrastructure. |
Apprise, ntfy | Tools that deliver a message to many services or devices. | They send what you hand them; whether and when a person should be notified (preferences, caps, quiet hours in their time zone, digests) is left to your code. Cue makes that decision, then hands the message to a sender. |
Human approval inside an agent framework (LangGraph | A pause in one agent's run until a person answers. | It covers one agent and one decision; how many messages a person already got from your other agents tonight is not its concern. Cue applies budgets, quiet hours and digests across all of them, and its approval requests can resume LangGraph, Pydantic AI, CrewAI Flows and Dapr Agents. |
Framework notification libraries (Laravel, Rails, Django…) | Code in your application that formats and sends notifications. | Policy, preferences and history are yours to build per application; Cue keeps them in one service that every application and agent calls. |
How it works
flowchart LR
E[POST /v1/events] --> R{Rules}
R --> P[Policy<br/>unsubscribe · caps · cooldown · quiet hours]
P --> T[Template<br/>locale · route variants]
T --> Q[(Queue)]
Q --> A[AI rewording<br/>optional]
A --> C{Your delivery<br/>webhook · connectors}Concept | In one line |
Event | Something that happened to a recipient. Idempotent, stored with per-rule outcomes. |
Rule | When event X (and condition) → send template Y over routes [A, B]. |
Template | Localised content with route-specific variants. |
Category | Policy bundle: frequency caps, quiet hours, whether unsubscribing is allowed. |
Channel | A named route ( |
Message | One notification to one recipient, with a full status trail. |
Broadcast | One template to an audience, in resumable batches. |
Configuration
Environment variables (CUE_SECTION__KEY) or a cue.toml:
[database]
url = "postgresql+asyncpg://cue:secret@db/cue"
[api]
public_url = "https://cue.example.com" # needs CUE_API__SECRET_KEY
[channels.push]
provider = "webhook"
url = "https://notifications.internal.example/push" # secret from CUE_CHANNELS__PUSH__SECRET
[channels.sms]
provider = "twilio"
account_sid = "AC…"
from_number = "+15550100" # auth token from CUE_CHANNELS__SMS__AUTH_TOKENSee the configuration reference,
deployment and
examples/cue.toml.
Project status
Cue is in early development (0.x): the model and API are stable in shape but may still change before 1.0; each release's changelog says what to do when upgrading. See the roadmap for what comes next. Feedback and contributions are welcome; see CONTRIBUTING.md.
License
Available Tools
10 toolsexplainARead-only
Dry-run an event for a person: which rules would fire, what each would do and why the others would not. Use it before send_event to check that a rule will reach the person; nothing is stored or sent. Needs an admin key, so agent keys get 403 and should read get_event for a real event instead.
Returns rules, one entry per rule listening for the name, with rule, matched, status (what the message would get, e.g. queued or suppressed), reason and digest_id, read like get_event's outcome. Fails with 404 when recipient does not exist yet.
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Event details to test conditions with, as for send_event. | |
| recipient | Yes | External id of an existing recipient; unlike send_event, an unknown id is not created. | |
| event_name | Yes | Event name to test, as for send_event, e.g. `order.shipped`. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true/openWorldHint=false, and the description is consistent while adding substantial context the annotations cannot convey: no side effects ('nothing is stored or sent'), an admin-key requirement with a 403 failure mode for agent keys, and a 404 when the recipient does not exist.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well front-loaded: the dry-run purpose and the send_event relationship come first, followed by auth behavior and the return shape. The return-field enumeration is dense but earns its place since there is no output schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by naming the returned `rules` fields (rule, matched, status, reason, digest_id) and cross-referencing get_event's `outcome`. Auth, failure modes, and side-effect behavior are all covered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description still adds value by clarifying that recipient must be an existing id (unlike send_event, no creation) and that data mirrors send_event input, plus the 404 behavior tied to that parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a precise verb and scope: dry-run an event for a person, showing which rules fire and why others do not. It is immediately distinguishable from send_event (which actually sends) and get_event (which reads a stored event).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says to use it before send_event to verify a rule reaches the person, notes nothing is stored or sent, and gives a hard exclusion: agent keys get 403 and should read get_event instead. Both the when-to-use and the when-not-to-use with an alternative are spelled out.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_approvalARead-only
Fetch an approval request by id to learn whether a person approved the action you asked about with request_approval. Call it again, with a pause, while status is pending. Needs the messages:read scope.
Returns id, status (pending, approved, rejected or expired; a request past expires_at reads as expired), title, body, reviewers, importance, agent, requested_by, metadata, comment (the reviewer's note, if any), decided_by, decided_at, expires_at and created_at. Treat anything but approved as no. Fails with 404 when the id does not exist or, for an agent key, belongs to another agent.
| Name | Required | Description | Default |
|---|---|---|---|
| approval_id | Yes | Approval request UUID: the `id` returned by request_approval. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint and openWorldHint; the description adds the required messages:read scope, 404 semantics for missing or cross-agent ids, the expires_at-to-expired behavior, and the polling contract. It also enumerates every returned field in the absence of an output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with purpose and polling rule, then auth scope, then return fields. The full field enumeration is long but justified because there is no output schema; only the exhaustive list keeps it from a 5.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description supplies the return shape, status enumeration, auth requirement, polling behavior, and failure mode. Nothing material is missing for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema already explains approval_id, so the baseline is 3. The description adds value by tying the id to request_approval's return and by documenting the 404 failure mode for nonexistent or foreign-agent ids.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (fetch) and resource (approval request by id) and ties it to the sibling that creates it, request_approval. An agent can distinguish it from request_approval, get_message, and the other siblings without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs to call it after request_approval, to re-call with a pause while status is pending, and to treat anything but approved as no. That is concrete when-to-use and how-to-poll guidance, not inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_eventARead-only
Fetch a reported event by id and, for each rule listening for its name, whether the rule fired and what came of it. Use it after send_event to learn what was sent and why or why not; follow a message_id with get_message for delivery, and use explain for a dry run instead. Needs the messages:read scope.
Returns id, name, source, idempotency_key, data, status (pending until the worker runs the rules, then processed, or failed with the reason in error), occurred_at, received_at and outcome: null while pending, else one entry per rule with rule, matched, reason, status, message_id and digest_id. matched: false comes with condition_false, outside_rollout or condition_error. A composed message has status and message_id, and reason is its status_reason when suppressed (e.g. agent_budget: …, unsubscribed); digested means it joined digest_id; agent_not_allowed means the agent may not use the rule's category. An empty list means no rule listens for the name. Fails with 404 when the id does not exist or, for an agent key, was reported by another sender.
| Name | Required | Description | Default |
|---|---|---|---|
| event_id | Yes | Event UUID: the `id` returned by send_event, or a message's `event_id` from get_message. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover the read-only/open-world profile, but the description adds the required `messages:read` scope, the 404 failure conditions (nonexistent id or agent key from another sender), and the pending/processed/failed lifecycle of `status`. That is substantial behavioral context beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with purpose and usage before the return-shape detail, and every clause carries information. It is dense and long, but with no output schema the field documentation earns its space, so only minor trimming is possible.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description fully documents the returned fields and enumerates the matched/reason/status semantics, including suppressed-message cases and the empty-list meaning. Nothing an agent needs to interpret the result is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the description largely restates the schema's own guidance (send_event id or a message's event_id). It adds no format or syntax detail beyond it, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Fetch a reported event by id') plus the exact scope of the response (per-rule fired/outcome detail). This distinguishes it clearly from get_message, send_event, and explain without needing to open the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use it after send_event to learn what was sent and why or why not', routes delivery questions to get_message, and names explain for dry runs. When-to-use and alternatives are both fully specified.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_messageARead-only
Fetch one message by id to learn whether and how a person was notified: delivery status and its reason, the channel used, the rendered content and engagement. Use it after send_message, or with a message_id from get_event; use list_messages when you have no id. Needs the messages:read scope.
Returns id, status (queued, sending, pending_approval, sent, delivered, failed, suppressed or cancelled), status_reason (why it was suppressed, failed, held or cancelled, e.g. frequency_cap: 3 per 1 day, 0:00:00 or agent_budget: …; null otherwise), category, template, channels (planned, in fallback order), channel (the one used), locale, content (rendered title, body, url… under default and each channel with its own override), importance, agent, event_id, rule_id, reviewed_by, reviewed_at, screening, attempts, send_at, expires_at, sent_at, delivered_at, opened_at, clicked_at, converted_at and created_at. Fails with 404 when the id does not exist or, for an agent key, belongs to another sender.
| Name | Required | Description | Default |
|---|---|---|---|
| message_id | Yes | Message UUID: the `id` returned by send_message or list_messages, or a `message_id` in get_event's `outcome`. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover the safety profile (readOnlyHint, openWorldHint=false). The description adds substantial behavior: the required auth scope, the 404 failure condition including the cross-sender check for agent keys, and the meaning of status/status_reason values such as `frequency_cap: 3 per 1 day`. This goes well beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well front-loaded: purpose, then usage/routing, then behavioral details. The return-field enumeration is long, but since no output schema exists it is largely load-bearing rather than filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and a single trivial parameter, the description compensates fully by enumerating returned fields, status values, status_reason semantics, and failure modes. Nothing needed to call or interpret the tool is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single parameter is already documented as a UUID. The description still adds real value by explaining the three sources of the id (send_message, list_messages, get_event outcome), which is more than the schema alone conveys.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Fetch one message by id') plus the exact purpose (learning whether/how a person was notified). It is clearly distinguishable from siblings list_messages, get_event, and send_message without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use it ('after send_message, or with a message_id from get_event') and names the alternative for the no-id case ('use list_messages when you have no id'). Prerequisites (the `messages:read` scope) are also stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_messagesARead-only
List recent messages, newest first, optionally for one person or status: what someone was already sent, what was suppressed, what waits for approval. Use get_message when you have an id. Needs the messages:read scope; agent keys see only their own messages.
Returns items, each with the same fields as get_message, and next_cursor, which is not null when older messages exist beyond limit. Fails with 404 when recipient is not a known external id.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Most messages to return, 1-100 (other values are clamped). | |
| status | No | Only messages with this status; omit for any status. | |
| recipient | No | External id of the person; omit for everyone. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint and openWorldHint; the description goes well beyond them by disclosing the auth scope requirement, a visibility restriction ('agent keys see only their own messages'), pagination behavior via next_cursor, and a concrete failure mode (404 for unknown recipient). These are exactly the behavioral traits annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short paragraphs, front-loaded with purpose and sibling routing, then return shape and error behavior. Every clause carries information; nothing restates the schema verbatim.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description carries the return contract itself: it names `items`, says each item matches get_message's fields, and explains `next_cursor` semantics. Combined with the error and permission notes, an agent has everything needed to call this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaning beyond the schema by explaining what the status values signify in workflow terms and by documenting the 404 that occurs when `recipient` is not a known external id — semantics the enum list alone does not convey.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource plus ordering and scope: 'List recent messages, newest first, optionally for one person or status.' It then explicitly distinguishes itself from the sibling get_message ('Use get_message when you have an id'), so an agent can route without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It names the alternative (get_message) and the condition that selects it (having an id), and explains what the optional status filter is for by mapping statuses to user intent ('what was suppressed', 'what waits for approval'). It also states the required `messages:read` scope, which is a real usage precondition.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_templatesARead-only
List the templates send_message can use, to find a template key. Use preview_template to see one's content. Needs an admin key, so agent keys get 403.
Returns templates, up to 200, each with key, description and locales.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint and openWorldHint. The description adds real behavioral context beyond them: the admin-key authorization requirement with the concrete 403 failure mode for agent keys, plus the unordered result cap of 200 items.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, each load-bearing: purpose+consumer, the alternative tool, the auth constraint, and the result shape. Purpose is front-loaded and nothing is redundant with the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no input parameters and no output schema, the description carries the burden and does so: it documents the authorization requirement and the returned fields (key, description, locales) and the cap of 200, which is exactly what an agent needs.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is nothing for the description to disambiguate; baseline for a no-param tool is 4. It still usefully notes that the call needs an admin key rather than a parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (list the templates) and ties it to the consumer (send_message) so the agent knows these keys feed message sending. It is clearly distinguishable from sibling preview_template, which is called out separately.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says why to call it (to find a template key), names the alternative for viewing content (preview_template), and states a hard prerequisite (admin key; agent keys get 403). When-to-use and when-not are both covered.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
preview_templateARead-only
Render a template with sample data to see the exact text a person would get, without sending anything. Use it to check which data a template needs before send_message; list_templates gives the keys. Needs an admin key, so agent keys get 403.
Returns locale (the one used) and variants: the rendered title, body, url and other content under default and under each channel with its own override. Fails with 404 for an unknown template and 422 when it cannot be rendered.
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Sample template variables, read as `data`. Defaults to {}. | |
| locale | No | Locale to render, e.g. `uz`. Omitted, the server's default is tried; a locale the template lacks falls back to its default. | |
| template | Yes | Template key, e.g. `order-shipped`, from list_templates. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, it discloses the key behavioral traits: no message is sent, an admin key is required, and it fails with 404 for unknown templates and 422 when rendering fails. This is exactly the out-of-band context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core action, then routing guidance, then return and error behavior. Three sentences, each carrying distinct, non-redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description usefully documents the return shape (locale and variants with title/body/url per channel) as well as error codes and auth requirements, leaving nothing important for correct invocation missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are already documented; however the description adds meaning about `data` (sample variables whose needed keys come from list_templates) and `locale` fallback behavior, going slightly beyond the schema text.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a precise verb+resource (render a template with sample data) and clarifies the non-sending nature that separates it from send_message. It also names list_templates as the source of keys, so an agent can place it among siblings without reading schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says to use it to check which `data` a template needs before send_message, naming the alternative and the ordering condition. It also states the auth consequence (admin key required, agent keys get 403), which is decisive for tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
request_approvalA
Ask people to approve or reject an action you are about to take outside Cue (deleting data, spending money, contacting many people), before you take it. Not for informing anyone: use send_event or send_message. Needs the messages:write scope.
Cue reports a cue.approval_requested event per reviewer, which the server's rules turn into a notification with a one-time review link; only people decide, no tool can. Returns the request: id, status (pending), title, body, reviewers, importance, metadata, expires_at and created_at. Then poll get_approval with the id and act only on approved. Agent keys may name only their agent's configured reviewers (403 otherwise) and have a limit of open requests (429, 10 by default).
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | What the reviewer needs to decide (what, why, impact), up to 4,000 characters. Defaults to empty. | |
| title | Yes | What needs a decision, ideally a yes/no question such as `Refund order 9?`; 1-200 characters. | |
| metadata | No | JSON object returned unchanged with the request and its decision, e.g. `{"order": "9"}`, to tie it back to your work; at most 16 KB. Defaults to {}. | |
| reviewers | Yes | External ids of the 1-10 people who may decide; the first decision settles the request. | |
| importance | No | How urgently reviewers are notified; defaults to `high`. An agent's ceiling lowers anything above it. | high |
| expires_in_minutes | No | Minutes until an undecided request expires, which means no: 1 to 10080 (7 days), smaller values become 1. Defaults to 60. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are minimal (write, open-world, non-destructive), and the description carries the real burden: messages:write scope, a cue.approval_requested event per reviewer, a one-time review link, humans-only decision, 403 for unconfigured reviewers, and a 429 limit of ~10 open requests. This is exactly the behavioral context annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Purpose and the sibling exclusion are front-loaded, and the dense paragraph is largely information-bearing rather than filler. It is longer than strictly necessary (the full field enumeration of the return could be trimmed), so it falls just short of ideal.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by spelling out the returned fields (id, status, title, body, reviewers, importance, metadata, expires_at, created_at) and the required poll step. Auth scope, error codes, and limits are all covered, so nothing needed to invoke it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds real semantics beyond the schema: agent keys may name only their configured reviewers (403 otherwise) and the reviewer pool is 1-10 external ids with first-decision-wins. Those constraints meaningfully sharpen how reviewers should be supplied.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (ask to approve/reject) and resource (an action about to be taken outside Cue), with concrete examples (deleting data, spending money, contacting many people). It also explicitly distinguishes itself from the informing siblings by naming send_event and send_message.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit exclusion ('Not for informing anyone: use send_event or send_message') plus the follow-up workflow ('poll get_approval with the id and act only on approved'). When-to-use, when-not-to-use, and the alternative tools are all named.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_eventA
Report that something happened to a person (e.g. order.shipped) and let Cue's rules decide whether and what to notify. Prefer it to send_message whenever a rule can cover the case. Needs the events:write scope.
Rules run asynchronously, so the result only confirms receipt: id, status (pending until processed) and duplicate (true when this idempotency key was already reported; nothing new happens). Call get_event with the id to see, per rule, whether it matched and which message it produced. An unknown recipient gets an empty profile, so a message may end suppressed with no_reachable_channel. For agent keys, the messages count against the agent's per-person budget, are capped at its importance ceiling and may wait for approval. Fails with 403 for names starting with cue. and 422 for invalid input.
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Event details as a JSON object, at most 16 KB. Rule conditions read it as `event.data`, templates as `data`. Defaults to {}. | |
| name | Yes | Event name, 1-255 letters, digits and `_ . : - /`, e.g. `order.shipped`. Rules listen for it by name or pattern (`order.*`). Names starting with `cue.` are reserved. | |
| recipient | Yes | External id of the person the event is about: the id your system uses for them, not a Cue UUID. | |
| idempotency_key | No | Up to 255 characters derived from the triggering action (e.g. `order-9-shipped`), unique per sender: a repeat is recognised and notifies nobody again. Strongly recommended. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the coarse profile (not read-only, open-world, non-destructive); the description goes far beyond with asynchronous processing, the receipt-only result shape (`status: pending`, `duplicate`), idempotency semantics, the suppressed/no_reachable_channel edge case, per-person budget and importance-ceiling limits, approval waits, and explicit 403/422 failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads purpose and the send_message routing rule before behavior, and every sentence carries real information. It is dense and slightly long, but the density is justified by the async/idempotency/error complexity rather than padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a fire-and-forget event tool with no output schema, the description supplies exactly what is missing: the return fields, why they are only a receipt, how to inspect per-rule outcomes via get_event, and the failure codes. Nothing an agent needs to call it correctly is absent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all four parameters (event name grammar, recipient id semantics, data size limit, idempotency key derivation). The description reinforces the recipient/idempotency behavior but adds no syntax beyond what the schema provides; baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Report that something happened to a person') plus a concrete example event name, and explicitly positions it against the sibling send_message. An agent can distinguish it from send_message and get_event without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit routing rule: 'Prefer it to send_message whenever a rule can cover the case', and names the scope required (`events:write`). It also tells the agent how to follow up (call get_event with the returned id), which is the correct next step versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_messageA
Send one template directly to one person over the channels you list, without rules. Use it for an explicit one-off message (a code, a reply, an alert) when you know the template key; otherwise prefer send_event. Needs the messages:write scope.
The message still passes its category's policy (preferences, frequency caps, quiet hours, unsubscribes) and, for agent keys, the agent's per-person budget, importance ceiling and approval policy. Returns the message, with the same fields as get_message. status is queued, suppressed (read status_reason) or pending_approval (held for a person: do not resend). Repeating an idempotency_key returns the original message instead of sending again. Fails with 404 for an unknown template or category, 403 when an agent may not use the category and 422 for a channel the server does not have.
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Template variables as a JSON object, read as `data` in the template; at most 16 KB. Defaults to {}. | |
| category | No | Policy category key. `transactional` (default) has no caps, ignores quiet hours and cannot be unsubscribed from; `marketing` is capped and respects quiet hours. Agent keys may use only their allowed categories. | transactional |
| channels | Yes | At least one channel name in fallback order, e.g. `["push", "email"]`; each must be configured on the server. | |
| template | Yes | Key of an existing template, e.g. `order-shipped`. | |
| recipient | Yes | External id of the person: the id your system uses for them. An unknown id gets an empty profile without addresses, so the message is suppressed with `no_reachable_channel`. | |
| importance | No | `low` never interrupts, `normal` is the default, `high` is time-sensitive, `critical` is for security or safety only and breaks through quiet hours and caps only in categories people cannot unsubscribe from (elsewhere it is sent as `high`). An agent's ceiling lowers anything above it. | normal |
| idempotency_key | No | Up to 200 characters derived from the triggering action; repeating it with the same API key returns the original message instead of sending again. Strongly recommended. | |
| expires_in_minutes | No | Drop the message if it is not delivered within this many minutes; set it for codes, arrivals and anything useless later. Omit for no expiry. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover safety flags. The description adds all the behavior an agent needs: policy still applies (preferences, caps, quiet hours, unsubscribes), agent budget/importance ceiling/approval, return shape with the same fields as get_message, the three status values with guidance to read status_reason and not resend pending_approval, idempotency behavior, and specific failure codes (404/403/422).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three dense, front-loaded paragraphs: purpose/alternative routing first, then behavior, then return values and errors. Every sentence earns its place, though a touch long.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no output schema, the description covers usage, policy interactions, return status semantics, idempotency, and error codes. An agent has everything needed to call it correctly and interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description reinforces key semantics: channels are in fallback order, idempotency_key returns the original message on repeat. It stops short of adding syntax not already in the schema, so it lands one above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Send one template directly to one person'), defines scope ('without rules'), and explicitly names the sibling it is not (send_event). An agent can distinguish this from send_event without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit when-to-use ('an explicit one-off message... when you know the template key') and names the alternative plus the condition that selects it ('otherwise prefer send_event'). Nothing is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
9 tool updates
v0.1.1- Changed
explain3 fields changed- added
Input schema / properties / data / descriptionAdded value: +"Event details to test conditions with, as for send_event." - added
Input schema / properties / event_name / descriptionAdded value: +"Event name to test, as for send_event, e.g. `order.shipped`." - added
Input schema / properties / recipient / descriptionAdded value: +"External id of an existing recipient; unlike send_event, an unknown id is not created."
- Changed
get_approval1 field changed- added
Input schema / properties / approval_id / descriptionAdded value: +"Approval request UUID: the `id` returned by request_approval."
- Changed
get_event1 field changed- added
Input schema / properties / event_id / descriptionAdded value: +"Event UUID: the `id` returned by send_event, or a message's `event_id` from get_message."
- Changed
get_message1 field changed- added
Input schema / properties / message_id / descriptionAdded value: +"Message UUID: the `id` returned by send_message or list_messages, or a `message_id` in get_event's `outcome`."
- Changed
list_messages3 fields changed- added
Input schema / properties / limit / descriptionAdded value: +"Most messages to return, 1-100 (other values are clamped)." - added
Input schema / properties / recipient / descriptionAdded value: +"External id of the person; omit for everyone." - added
Input schema / properties / status / descriptionAdded value: +"Only messages with this status; omit for any status."
- Changed
preview_template3 fields changed- added
Input schema / properties / data / descriptionAdded value: +"Sample template variables, read as `data`. Defaults to {}." - added
Input schema / properties / locale / descriptionAdded value: +"Locale to render, e.g. `uz`. Omitted, the server's default is tried; a locale the template lacks falls back to its default." - added
Input schema / properties / template / descriptionAdded value: +"Template key, e.g. `order-shipped`, from list_templates."
- Changed
request_approval6 fields changed- added
Input schema / properties / body / descriptionAdded value: +"What the reviewer needs to decide (what, why, impact), up to 4,000 characters. Defaults to empty." - added
Input schema / properties / expires_in_minutes / descriptionAdded value: +"Minutes until an undecided request expires, which means no: 1 to 10080 (7 days), smaller values become 1. Defaults to 60." - added
Input schema / properties / importance / descriptionAdded value: +"How urgently reviewers are notified; defaults to `high`. An agent's ceiling lowers anything above it." - added
Input schema / properties / metadata / descriptionAdded value: +"JSON object returned unchanged with the request and its decision, e.g. `{\"order\": \"9\"}`, to tie it back to your work; at most 16 KB. Defaults to {}." - added
Input schema / properties / reviewers / descriptionAdded value: +"External ids of the 1-10 people who may decide; the first decision settles the request." - added
Input schema / properties / title / descriptionAdded value: +"What needs a decision, ideally a yes/no question such as `Refund order 9?`; 1-200 characters."
- Changed
send_event4 fields changed- added
Input schema / properties / data / descriptionAdded value: +"Event details as a JSON object, at most 16 KB. Rule conditions read it as `event.data`, templates as `data`. Defaults to {}." - added
Input schema / properties / idempotency_key / descriptionAdded value: +"Up to 255 characters derived from the triggering action (e.g. `order-9-shipped`), unique per sender: a repeat is recognised and notifies nobody again. Strongly recommended." - added
Input schema / properties / name / descriptionAdded value: +"Event name, 1-255 letters, digits and `_ . : - /`, e.g. `order.shipped`. Rules listen for it by name or pattern (`order.*`). Names starting with `cue.` are reserved." - added
Input schema / properties / recipient / descriptionAdded value: +"External id of the person the event is about: the id your system uses for them, not a Cue UUID."
- Changed
send_message8 fields changed- added
Input schema / properties / category / descriptionAdded value: +"Policy category key. `transactional` (default) has no caps, ignores quiet hours and cannot be unsubscribed from; `marketing` is capped and respects quiet hours. Agent keys may use only their allowed categories." - added
Input schema / properties / channels / descriptionAdded value: +"At least one channel name in fallback order, e.g. `[\"push\", \"email\"]`; each must be configured on the server." - added
Input schema / properties / data / descriptionAdded value: +"Template variables as a JSON object, read as `data` in the template; at most 16 KB. Defaults to {}." - added
Input schema / properties / expires_in_minutes / descriptionAdded value: +"Drop the message if it is not delivered within this many minutes; set it for codes, arrivals and anything useless later. Omit for no expiry." - added
Input schema / properties / idempotency_key / descriptionAdded value: +"Up to 200 characters derived from the triggering action; repeating it with the same API key returns the original message instead of sending again. Strongly recommended." - added
Input schema / properties / importance / descriptionAdded value: +"`low` never interrupts, `normal` is the default, `high` is time-sensitive, `critical` is for security or safety only and breaks through quiet hours and caps only in categories people cannot unsubscribe from (elsewhere it is sent as `high`). An agent's ceiling lowers anything above it." - added
Input schema / properties / recipient / descriptionAdded value: +"External id of the person: the id your system uses for them. An unknown id gets an empty profile without addresses, so the message is suppressed with `no_reachable_channel`." - added
Input schema / properties / template / descriptionAdded value: +"Key of an existing template, e.g. `order-shipped`."
10 tool updates
v0.1.0- First observed
explain - First observed
get_approval - First observed
get_event - First observed
get_message - First observed
list_messages - First observed
list_templates - First observed
preview_template - First observed
request_approval - First observed
send_event - First observed
send_message
TDQS
Scored across 10 tools
Each tool targets a distinct resource and action, and descriptions explicitly cross-reference to prevent confusion (e.g. send_event vs send_message, get_event vs get_message, explain vs preview_template). The send/get pairs operate on different entities (events vs messages), so an agent can reliably select the right tool.
Names follow a predictable snake_case verb_noun pattern (list_templates, send_message, get_approval, etc.) with consistent list/get/send/request/preview prefixes. The only deviation is 'explain', a bare verb that breaks the pattern, though it remains clear.
10 tools is well within the ideal 3-15 range for an agent-facing notification platform, and each tool covers a distinct operation (send, inspect, dry-run, approvals). No tool feels redundant or missing from a count perspective.
The surface covers core agent workflows: templates (list, preview), sending (event, message), inspection (event, message, list), approvals (request, get), and dry-run (explain). Minor gaps exist—no list_events, list_approvals, or message cancellation—but agents can work around these for most tasks.
Maintenance
Related MCP Connectors
Human approvals, notifications, inbound webhooks, wake-ups for headless agents. Free trial: /try
Reach your own phone from an AI agent: notifications, approval questions, reminders, ring, files.
Let your AI agent notify you by email, Slack, Discord, or webhook. One tool: send_notification.
Async message queue for AI agents. Self-provision queues, push/poll messages, no signup.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceHuman-in-the-loop approvals and notifications for AI agents via WhatsApp. Enables Cursor, Claude Code, and autonomous AI agents to reach users away from their computers.53 npmISC
- AlicenseAqualityDmaintenanceA lightweight notification service that sends webhooks when AI agents complete tasks. Supports multiple providers like Discord, Slack, Teams, Feishu, and Ntfy.17 npm4MIT
- AlicenseAqualityAmaintenanceEnables agents and applications to send notifications through configurable channels such as Telegram or a JSONL file, with queued delivery, status tracking, idempotency, and event-based routing.2MIT
- AlicenseAqualityBmaintenanceEnables AI agents to request human decisions and send notifications through chat platforms like Slack and WhatsApp, with ephemeral in-memory pending requests and no central backend.222 npmMIT