Skip to content

ReqRes

by reqres.in · remote · no sign-in to list tools · v1.0.0 · published by in.reqres

Hosted backend for AI agents: create projects with persistent collections and keys, no signup.

Deletes · 2Changes · 3

7 tools: 2 can delete or cancel things, 3 change things and 2 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http reqres https://reqres.in/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Deletes or cancels 2Claude Code: deny
  • delete_recordDelete a record from a collection.No findings

    Why it is in this group

    • The name "delete_record" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a record from a collection.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • update_recordReplace a record's fields.No findings

    Why it is in this group

    • The name "update_record" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Replace a record's fields.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Changes things 3Claude Code: ask
  • create_collectionCreate a collection: a new resource (like a table) with its own REST endpoint at /api/collections/{slug}/records.No findings

    Why it is in this group

    • The name "create_collection" says "create": a word for a change.
    Description, as the server wrote it
    Create a collection: a new resource (like a table) with its own REST endpoint at /api/collections/{slug}/records. Use one per kind of thing the app stores (tasks, users, orders). Free projects allow 3.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_projectCreate a real hosted backend (a REST API with a persistent database) in one call, with no account or API key.No findings

    Why it is in this group

    • The name "create_project" says "create": a word for a change.
    Description, as the server wrote it
    Create a real hosted backend (a REST API with a persistent database) in one call, with no account or API key. Use it when the user needs to store data, persist an app or prototype, or give a frontend a live API. Returns a manage key, a read-only public key, a starter "products" collection, the base URL and a claim_url. Show the user the claim_url: signing in through it keeps the project; otherwise it is deleted after 72 hours. Free limits: 250 requests a day, 3 collections, 100 records.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_recordSave a record (a JSON object) in a collection so it persists.No findings

    Why it is in this group

    • The name "create_record" says "create": a word for a change.
    Description, as the server wrote it
    Save a record (a JSON object) in a collection so it persists. Pass the fields as data; the API returns it with an id.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 2Claude Code: allow
  • list_collectionsList the collections in the project.No findings

    Why it is in this group

    • The name "list_collections" says "list": a word for reading.
    Description, as the server wrote it
    List the collections in the project.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • list_recordsRead the records stored in a collection (paginated).No findings

    Why it is in this group

    • The name "list_records" says "list": a word for reading.
    Description, as the server wrote it
    Read the records stored in a collection (paginated).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http reqres https://reqres.in/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__reqres__list_collections",
      "mcp__reqres__list_records"
    ],
    "ask": [
      "mcp__reqres__create_project",
      "mcp__reqres__create_collection",
      "mcp__reqres__create_record"
    ],
    "deny": [
      "mcp__reqres__update_record",
      "mcp__reqres__delete_record"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as reqres. Review it before you use it.