MCP.Market

Desk by Ouroboros Apps MCP server

online · 100% uptime
by LAHutchins91·io.github.LAHutchins91/desk·v1.0.3
No reviews yet

Customer support answers, refund rules, and escalation limits for AI assistants

B81/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B81/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Desk by Ouroboros Apps yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Desk by Ouroboros Apps tools (13, 3 write)

write = sends, deletes, buys or posts
  • create_support_deskwrite actionFree

    Create a support desk when the user asks for a new policy home. Does not approve answers, refunds, features, or timelines.

  • evaluate_commitmentFree

    Decide whether a proposed refund, feature, or timeline is in the approved set. REFUSED means do not say it, do not invent a substitute, and draft for human review instead of promising the customer. APPROVED means sayOnly is the only permitted wording. Pass channel to also enforce the escalation limit.

  • evaluate_escalationFree

    Decide whether this channel may escalate or may promise a refund, feature, or timeline. REFUSED means do not escalate, do not invent a tier, and draft for human review instead of promising the customer. Permission to promise still requires evaluate_commitment for the exact wording.

  • get_desk_contextFree

    Retrieve selected approved answers for a customer question, plus the desk's approved refund rules, commitments, and escalation limits. This is evidence, not permission. A missing or RETIRED answer is not an invitation to invent one. Call evaluate_commitment before promising a refund, feature, or timeline. If tools fail or return gaps or REFUSED, draft for human review instead of promising the customer.

  • list_approved_commitmentsFree

    Read approved feature and timeline statements. Listing them does not approve a different promise. Call evaluate_commitment with the exact wording before saying one.

  • list_escalation_limitsFree

    Read escalation limits. A channel with no APPROVED limit cannot promise a refund, feature, or timeline and cannot be given an invented escalation path.

  • list_refund_ruleswrite actionFree

    Read refund rules on a desk. Only APPROVED rules can authorize wording, and only through evaluate_commitment. Do not treat this list as permission to invent a refund.

  • list_support_desksFree

    List this team's support desks. Use the returned id. Do not guess a desk.

  • save_approved_answerFree

    Store or revise an answer the user has explicitly approved. Identical retries keep the same revision. A changed answer requires expectedRevision from a previous read.

  • save_approved_commitmentFree

    Store a feature or timeline statement the user has explicitly approved. The statement is the only wording that can later pass evaluate_commitment. Do not save a date or a feature the user did not approve.

  • save_escalation_limitFree

    Store the escalation limit the user has explicitly approved for one channel. maxTier must be on tierLadder. Promise flags default closed unless the user sets them true. A limit does not itself approve refund, feature, or timeline wording.

  • save_refund_rulewrite actionFree

    Store a refund rule the user has explicitly approved. matchTerms must name a specific situation. The word refund alone is not a rule. remedy is the only wording that may later be approved. decision ALLOW grants that wording. decision DENY refuses a refund and records the denial script.

  • search_approved_answersFree

    Look up approved answers by topic, question, or answer text. An empty result means there is no approved answer. Draft for human review; do not invent one or promise the customer. Page with offset.

Public scan report

scanner v0.1.10 · 2026-10-09 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 708ms20/20
  • Tool poisoning13 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 81/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Desk by Ouroboros Apps compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
81/100
higher than 62% of 48,255 servers
Tools
13
the typical server has 7
Tools that change things
23%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
232 ms
faster than 58% of 30,031 servers

What its tools let an agent do: 5 read · 5 create · 1 change · 2 run or deploy

Install Desk by Ouroboros Apps in Claude Code, Cursor or VS Code

claude mcp add --transport http desk https://desk-mcp-continuity2.vercel.app/mcp
Add to Cursor

What the publisher says

From the Desk by Ouroboros Apps repository's README, as published. We do not edit it. Read it on GitHub

Desk

Desk keeps a support team's approved answers, refund rules, and escalation limits, then lets an assistant read that policy before it replies.

An assistant can store and look up what the team has approved. It must call Desk before drafting a customer reply. It must refuse a refund, a feature, or a timeline that is not in the approved set, including RETIRED or missing policy, and when a customer asks to ignore the rules. In those cases it drafts for human review instead of promising the customer. It does not invent a softer promise.

It works with ChatGPT, Claude, Gemini, Grok, and Cursor, plus any other MCP client that can do Streamable HTTP and OAuth. It is not a ChatGPT-only plugin.

Sign in with your Desk account when the assistant opens OAuth. Do not paste an API key or password into a header. Support tools need Pro or an active trial. The trial is 14 days, then Pro. Checkout shows the plan terms. This page does not print a price.

Hosted server

  • MCP server URL: https://desk-mcp-continuity2.vercel.app/mcp (Streamable HTTP, OAuth sign-in)
  • Docs: https://ouroborosapps.com/docs/desk
  • Status: early access. Paste the URL into Claude, Cursor, Grok, or ChatGPT developer mode.
  • Registry name: io.github.LAHutchins91/desk

What the assistant can do

After you approve the connection, the server exposes these tools:

  • listsupportdesks
  • createsupportdesk
  • saveapprovedanswer
  • searchapprovedanswers
  • saverefundrule
  • listrefundrules
  • saveescalationlimit
  • listescalationlimits
  • saveapprovedcommitment
  • listapprovedcommitments
  • evaluate_commitment
  • evaluate_escalation

evaluatecommitment returns APPROVED only for wording already stored. Otherwise it returns REFUSED and the assistant must not promise that refund, feature, or timeline. evaluateescalation refuses a channel or tier that is outside the saved limit. The assistant only calls these tools when you and the host allow it.

Connect

Run the server and use its /mcp path. With the default local base, that is http://localhost:3000/mcp. A deployed host uses the same path on APPBASEURL.

Cursor, in ~/.cursor/mcp.json or a project .cursor/mcp.json:

{
  "mcpServers": {
    "desk": {
      "url": "http://localhost:3000/mcp"
    }
  }
}

Claude Code:

claude mcp add --transport http desk http://localhost:3000/mcp

Do not pass an Authorization header. Other clients add the same URL, choose OAuth, and leave client id and secret empty. Desk supports dynamic client registration. Full steps for ChatGPT, Claude, Gemini, Grok, and Cursor are on the server's /connect page.

When stdin is a terminal, Desk serves Streamable HTTP. When stdin is not a terminal, it also speaks MCP on stdio. That is the same choice continuity-mcp makes, so a launcher such as Glama can attach stdin.

Registry metadata for this server is in server.json (io.github.LAHutchins91/desk).

Run

npm ci
npm test
npm run build
npm start

Hosted accounts use Supabase for sign-in and policy storage, and Stripe for the 14-day trial and Pro. Copy .env.example to .env and set the variables there. supabase/schema.sql creates the tables. Stripe price ids belong in the environment. Desk never displays the amount.

Local stdio, with no account configured, stores one operator's policy under DESKDATADIR (or the system temp directory). HTTP tool calls still require OAuth and an active trial or Pro.

docker build -t desk-mcp .
docker run --rm -p 3000:3000 desk-mcp

A container without a terminal on stdin speaks MCP on stdio and still listens on port 3000.

More from Ouroboros: https://ouroborosapps.com

Nothing above is checked by us. What we check is on the safety report.

Desk by Ouroboros Apps: common questions

Is Desk by Ouroboros Apps MCP server safe?
Mostly: it is graded B (81/100). Read the Desk by Ouroboros Apps safety report
How do I install Desk by Ouroboros Apps?
It runs remotely at desk-mcp-continuity2.vercel.app. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Desk by Ouroboros Apps need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Desk by Ouroboros Apps maintained?
The last commit was 27 days ago (2026-10-08). The latest release is v1.0.3.
Is Desk by Ouroboros Apps up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Desk by Ouroboros Apps compare with other MCP servers?
safety score 81/100 (higher than 62% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 23% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from LAHutchins91 →