Skip to content

Product Admin by Nova (CIVAI)

by nova.civai.co · remote · no sign-in to list tools · v1.0.0 · published by co.civai.nova

I manage your Nova products, create/update/delete, payment & logistics config, icons, webhook secre…

Deletes · 2Final · 1Changes · 17
CompareRegistry entry

30 tools: 2 can delete or cancel things, 1 do something that can't be undone, 17 change things and 10 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http product-admin https://nova.civai.co/mcp/agents/product-admin

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

30 tools

Deletes or cancels 2Claude Code: deny
  • delete_productPermanently delete a product.No findings

    Why it is in this group

    • The name "delete_product" says "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    Description, as the server wrote it
    Permanently delete a product.
  • remove_product_iconRemove the product's icon/logo.No findings

    Why it is in this group

    • The name "remove_product_icon" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    Remove the product's icon/logo.
Can't be undone 1Claude Code: ask
  • resend_deposit_fulfillmentResend/retry fulfillment for an approved deposit.No findings

    Why it is in this group

    • The name "resend_deposit_fulfillment" says "resend": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Resend/retry fulfillment for an approved deposit.
Changes things 17Claude Code: ask
  • approve_depositApprove a pending/expired deposit and run fulfillment.No findings

    Why it is in this group

    • The name "approve_deposit" says "approve": a word for a change.
    Description, as the server wrote it
    Approve a pending/expired deposit and run fulfillment.
  • assign_bank_creditAssign an unmatched bank credit to a pending deposit.No findings

    Why it is in this group

    • The name "assign_bank_credit" says "assign": a word for a change.
    Description, as the server wrote it
    Assign an unmatched bank credit to a pending deposit.
  • connect_audience_resolverConnect an Audience Resolver publisher token to this product, so it can push content to an AR project's calendar.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Connect an Audience Resolver publisher token to this product, so it can push content to an AR project's calendar. The token must be minted by hand from the Audience Resolver dashboard first — there's no way to generate one here.
  • create_productCreate a new product.No findings

    Why it is in this group

    • The name "create_product" says "create": a word for a change.
    Description, as the server wrote it
    Create a new product.
  • dismiss_bank_creditDismiss a bank credit as not a sale.No findings

    Why it is in this group

    • The name "dismiss_bank_credit" says "dismiss": a word for a change.
    Description, as the server wrote it
    Dismiss a bank credit as not a sale.
  • reject_depositReject a deposit.No findings

    Why it is in this group

    • The name "reject_deposit" says "reject": a word for a change.
    Description, as the server wrote it
    Reject a deposit.
  • rotate_inboxRotate the bank-alert forwarding inbox address.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rotate the bank-alert forwarding inbox address.
  • rotate_webhook_secretRotate the product's fulfillment webhook signing secret.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rotate the product's fulfillment webhook signing secret.
  • save_alert_sourcesSave the allowlist of bank-alert source email addresses.No findings

    Why it is in this group

    • The name "save_alert_sources" says "save": a word for a change.
    Description, as the server wrote it
    Save the allowlist of bank-alert source email addresses.
  • save_merchant_bankSave the merchant bank account used to receive bank-transfer payments.No findings

    Why it is in this group

    • The name "save_merchant_bank" says "save": a word for a change.
    Description, as the server wrote it
    Save the merchant bank account used to receive bank-transfer payments.
  • set_deposit_refund_statusSet the refund_status on an approved deposit.No findings

    Why it is in this group

    • The name "set_deposit_refund_status" says "set": a word for a change.
    Description, as the server wrote it
    Set the refund_status on an approved deposit.
  • set_logistics_configSet the product's logistics_config.No findings

    Why it is in this group

    • The name "set_logistics_config" says "set": a word for a change.
    Description, as the server wrote it
    Set the product's logistics_config.
  • set_mobile_push_configSet the product's mobile_push config.No findings

    Why it is in this group

    • The name "set_mobile_push_config" says "set": a word for a change.
    Description, as the server wrote it
    Set the product's mobile_push config.
  • set_payment_configSet/merge the product's payment_config (enable payments, catalog_mode, skus, discount, custom_fields, webhook URLs, return URLs, sandbox).No findings

    Why it is in this group

    • The name "set_payment_config" says "set": a word for a change.
    Description, as the server wrote it
    Set/merge the product's payment_config (enable payments, catalog_mode, skus, discount, custom_fields, webhook URLs, return URLs, sandbox).
  • test_parse_bank_alertTest-parse a bank alert email (debug the alert parser).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Test-parse a bank alert email (debug the alert parser).
  • update_productUpdate product fields (partial patch — only send fields to change).No findings

    Why it is in this group

    • The name "update_product" says "update": a word for a change.
    Description, as the server wrote it
    Update product fields (partial patch — only send fields to change).
  • upload_product_iconUpload a product icon/logo (base64-encoded JPEG/PNG/WebP, max 2MB).No findings

    Why it is in this group

    • The name "upload_product_icon" says "upload": a word for a change.
    Description, as the server wrote it
    Upload a product icon/logo (base64-encoded JPEG/PNG/WebP, max 2MB).
Only reads 10Claude Code: allow
  • get_onboarding_statusBank-transfer onboarding status (merchant bank, alert inbox, auto-approve).No findings

    Why it is in this group

    • The name "get_onboarding_status" says "get": a word for reading.
    Description, as the server wrote it
    Bank-transfer onboarding status (merchant bank, alert inbox, auto-approve).
  • get_productReturn full product detail including payment/logistics/mobile-push config.No findings

    Why it is in this group

    • The name "get_product" says "get": a word for reading.
    Description, as the server wrote it
    Return full product detail including payment/logistics/mobile-push config.
  • get_webhook_secretReturn the product's fulfillment webhook signing secret.No findings

    Why it is in this group

    • The name "get_webhook_secret" says "get": a word for reading.
    Description, as the server wrote it
    Return the product's fulfillment webhook signing secret.
  • list_audience_resolver_calendarsList the content calendars within an Audience Resolver project.No findings

    Why it is in this group

    • The name "list_audience_resolver_calendars" says "list": a word for reading.
    Description, as the server wrote it
    List the content calendars within an Audience Resolver project.
  • list_audience_resolver_projectsList the Audience Resolver projects reachable by this product's connected publisher token.No findings

    Why it is in this group

    • The name "list_audience_resolver_projects" says "list": a word for reading.
    Description, as the server wrote it
    List the Audience Resolver projects reachable by this product's connected publisher token.
  • list_bank_alert_guidesList supported banks and their alert-forwarding setup guides.No findings

    Why it is in this group

    • The name "list_bank_alert_guides" says "list": a word for reading.
    Description, as the server wrote it
    List supported banks and their alert-forwarding setup guides.
  • list_bank_creditsList unmatched/review bank credits for reconciliation.No findings

    Why it is in this group

    • The name "list_bank_credits" says "list": a word for reading.
    Description, as the server wrote it
    List unmatched/review bank credits for reconciliation.
  • list_depositsList payment deposits for a product.No findings

    Why it is in this group

    • The name "list_deposits" says "list": a word for reading.
    Description, as the server wrote it
    List payment deposits for a product.
  • list_productsList all products for the signed-in owner.No findings

    Why it is in this group

    • The name "list_products" says "list": a word for reading.
    Description, as the server wrote it
    List all products for the signed-in owner.
  • list_twitter_accountsList connected X/Twitter accounts available to use as an x_post publish destination.No findings

    Why it is in this group

    • The name "list_twitter_accounts" says "list": a word for reading.
    Description, as the server wrote it
    List connected X/Twitter accounts available to use as an x_post publish destination.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http product-admin https://nova.civai.co/mcp/agents/product-admin

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__product-admin__list_products",
      "mcp__product-admin__get_product",
      "mcp__product-admin__list_twitter_accounts",
      "mcp__product-admin__list_audience_resolver_projects",
      "mcp__product-admin__list_audience_resolver_calendars",
      "mcp__product-admin__get_webhook_secret",
      "mcp__product-admin__get_onboarding_status",
      "mcp__product-admin__list_bank_alert_guides",
      "mcp__product-admin__list_deposits",
      "mcp__product-admin__list_bank_credits"
    ],
    "ask": [
      "mcp__product-admin__connect_audience_resolver",
      "mcp__product-admin__create_product",
      "mcp__product-admin__update_product",
      "mcp__product-admin__set_payment_config",
      "mcp__product-admin__set_logistics_config",
      "mcp__product-admin__set_mobile_push_config",
      "mcp__product-admin__upload_product_icon",
      "mcp__product-admin__rotate_webhook_secret",
      "mcp__product-admin__save_merchant_bank",
      "mcp__product-admin__save_alert_sources",
      "mcp__product-admin__rotate_inbox",
      "mcp__product-admin__test_parse_bank_alert",
      "mcp__product-admin__approve_deposit",
      "mcp__product-admin__reject_deposit",
      "mcp__product-admin__set_deposit_refund_status",
      "mcp__product-admin__resend_deposit_fulfillment",
      "mcp__product-admin__assign_bank_credit",
      "mcp__product-admin__dismiss_bank_credit"
    ],
    "deny": [
      "mcp__product-admin__delete_product",
      "mcp__product-admin__remove_product_icon"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as product-admin. Review it before you use it.