ReqRes
by reqres.in · remote · no sign-in to list tools · v1.0.0 · published by in.reqres
Hosted backend for AI agents: create projects with persistent collections and keys, no signup.
7 tools: 2 can delete or cancel things, 3 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http reqres https://reqres.in/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Deletes or cancels 2Claude Code: deny
delete_recordDelete a record from a collection.No findings
Why it is in this group
- The name "delete_record" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Delete a record from a collection.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
update_recordReplace a record's fields.No findings
Why it is in this group
- The name "update_record" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Replace a record's fields.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
Changes things 3Claude Code: ask
create_collectionCreate a collection: a new resource (like a table) with its own REST endpoint at /api/collections/{slug}/records.No findings
Why it is in this group
- The name "create_collection" says "create": a word for a change.
Description, as the server wrote it Create a collection: a new resource (like a table) with its own REST endpoint at /api/collections/{slug}/records. Use one per kind of thing the app stores (tasks, users, orders). Free projects allow 3.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_projectCreate a real hosted backend (a REST API with a persistent database) in one call, with no account or API key.No findings
Why it is in this group
- The name "create_project" says "create": a word for a change.
Description, as the server wrote it Create a real hosted backend (a REST API with a persistent database) in one call, with no account or API key. Use it when the user needs to store data, persist an app or prototype, or give a frontend a live API. Returns a manage key, a read-only public key, a starter "products" collection, the base URL and a claim_url. Show the user the claim_url: signing in through it keeps the project; otherwise it is deleted after 72 hours. Free limits: 250 requests a day, 3 collections, 100 records.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_recordSave a record (a JSON object) in a collection so it persists.No findings
Why it is in this group
- The name "create_record" says "create": a word for a change.
Description, as the server wrote it Save a record (a JSON object) in a collection so it persists. Pass the fields as data; the API returns it with an id.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Only reads 2Claude Code: allow
list_collectionsList the collections in the project.No findings
Why it is in this group
- The name "list_collections" says "list": a word for reading.
Description, as the server wrote it List the collections in the project.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_recordsRead the records stored in a collection (paginated).No findings
Why it is in this group
- The name "list_records" says "list": a word for reading.
Description, as the server wrote it Read the records stored in a collection (paginated).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http reqres https://reqres.in/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__reqres__list_collections",
"mcp__reqres__list_records"
],
"ask": [
"mcp__reqres__create_project",
"mcp__reqres__create_collection",
"mcp__reqres__create_record"
],
"deny": [
"mcp__reqres__update_record",
"mcp__reqres__delete_record"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as reqres. Review it before you use it.