Kourier
by kourier.sh · remote · no sign-in to list tools · v1.0.0 · published by sh.kourier
Discover flat-rate DeepSeek plans, model limits, API-key instructions, and coding-client setup.
8 tools: 2 do something that can't be undone, 1 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone2Claude Code: ask: see these tools
- Changes things1Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http info https://kourier.sh/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Can't be undone 2Claude Code: ask
complete_onboardingDeliver a dedicated revocable inference key exactly once after human approval and active entitlement.No findings
Why it is in this group
- The description's first verb is "deliver": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Deliver a dedicated revocable inference key exactly once after human approval and active entitlement. Never retry after issuance or ambiguous delivery; check status instead. Keep the key private and configure the client only with user approval.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
submit_feedbackSend feedback or report a Kourier error, attributed to your account.No findings
Why it is in this group
- The name "submit_feedback" says "submit": a word for a change.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Send feedback or report a Kourier error, attributed to your account. Requires your Kourier API key in the MCP connection's Authorization: Bearer header, never in tool arguments. Submit only what the user wants to share; exclude API keys, tokens, passwords, personal data, and private code or logs. Include a request_id when available to help investigation.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Changes things 1Claude Code: ask
create_checkout_linkCreate a verified sign-in, recurring Starter/Pro plan and explicit agent access approval link.No findings
Why it is in this group
- The name "create_checkout_link" says "create": a word for a change.
Description, as the server wrote it Create a verified sign-in, recurring Starter/Pro plan and explicit agent access approval link. Show only onboarding_url and user_code to the human; keep the token private. This does not itself charge or issue a key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 5Claude Code: allow
get_api_key_instructionsHow a person or an agent obtains a Kourier API key: dashboard sign-up, agent sign-in (auth.md), or OAuth with PKCE.No findings
Why it is in this group
- The name "get_api_key_instructions" says "get": a word for reading.
Description, as the server wrote it How a person or an agent obtains a Kourier API key: dashboard sign-up, agent sign-in (auth.md), or OAuth with PKCE.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_modelsThe model Kourier serves, its API model string, and context limits.No findings
Why it is in this group
- The name "get_models" says "get": a word for reading.
Description, as the server wrote it The model Kourier serves, its API model string, and context limits.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_onboarding_statusCheck approval and signed-webhook-backed entitlement, without identity or secrets.No findings
Why it is in this group
- The name "get_onboarding_status" says "get": a word for reading.
Description, as the server wrote it Check approval and signed-webhook-backed entitlement, without identity or secrets. Poll every 5 seconds; complete only when ready. Stop on issued, denied or expired.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_pricingKourier's plans, monthly prices, concurrency limits, and what has no usage cap.No findings
Why it is in this group
- The name "get_pricing" says "get": a word for reading.
Description, as the server wrote it Kourier's plans, monthly prices, concurrency limits, and what has no usage cap.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_setup_instructionsConfiguration for using Kourier from Oh My Pi, Claude Code, Codex CLI, or any OpenAI-compatible client.No findings
Why it is in this group
- The name "get_setup_instructions" says "get": a word for reading.
Description, as the server wrote it Configuration for using Kourier from Oh My Pi, Claude Code, Codex CLI, or any OpenAI-compatible client.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http info https://kourier.sh/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__info__get_onboarding_status",
"mcp__info__get_pricing",
"mcp__info__get_setup_instructions",
"mcp__info__get_api_key_instructions",
"mcp__info__get_models"
],
"ask": [
"mcp__info__create_checkout_link",
"mcp__info__complete_onboarding",
"mcp__info__submit_feedback"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as info. Review it before you use it.