MCP.Market

Promise MCP server

online · 100% uptime
by usepromise.ai·ai.usepromise/promise·v0.1.0

Evidence-backed follow-through memory for what you owe, await, and need to remember.

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Promise yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Promise tools (11, 1 write)

write = sends, deletes, buys or posts
  • capture_noteFree

    Let a user tell Promise something to remember. Safety: Echo what Promise understood and require review when the platform requests it.

  • connect_promiseFree

    Return a Promise signup URL for users who want agent access to follow-up memory. Safety: Never collects provider credentials in the agent. Send the user to Promise.

  • create_follow_upwrite actionFree

    Create a future follow-up from explicit user intent. Safety: Only create follow-ups from explicit user instructions.

  • draft_follow_upFree

    Draft a follow-up message without sending it. Safety: Do not send email in v1. Return a draft and Promise confirmation link.

  • get_commitmentFree

    Retrieve a structured Promise commitment or waiting-on item. Safety: Prefer structured status, due dates, people, and source links over raw mail.

  • get_commitment_evidenceFree

    Show why Promise believes a follow-up or memory exists. Safety: Return source summaries and citations permitted by the platform API.

  • get_person_contextFree

    Summarize what matters before the user speaks with someone. Safety: Avoid exposing hidden/private fields unless the platform scopes allow them.

  • get_todayFree

    Return what currently deserves the user's attention. Safety: Return concise items and links back to Promise for sensitive action.

  • list_commitmentsFree

    List what the user owes and what the user is waiting on. Safety: Do not infer more certainty than Promise returns.

  • mark_resolvedFree

    Tell Promise that a commitment or waiting-on item is complete. Safety: Confirm destructive or irreversible status changes in the agent UI.

  • search_memoryFree

    Search Promise's derived memory with user authorization. Safety: Search derived Promise memory, not raw provider mailboxes.

Public scan report

scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 861ms20/20
  • Tool poisoning11 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; website matches verified namespace9/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Promise compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers
Tools
11
the typical server has 7
Tools that change things
9%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
701 ms
faster than 20% of 30,031 servers

What its tools let an agent do: 9 read · 1 create · 1 change

Install Promise in Claude Code, Cursor or VS Code

claude mcp add --transport http promise https://mcp.usepromise.ai/mcp
Add to Cursor

What the publisher says

From the Promise repository's README, as published. We do not edit it. Read it on GitHub

Promise MCP

Agent-facing MCP server/tools for Promise. The hosted HTTP endpoint is POST /mcp; GET /healthz is available for runtime checks.

This repository is intentionally separate from the Promise platform. It should compose the platform API into agent-friendly tools, not implement canonical backend business logic.

Boundary

domain rules in the platform.

  • Call the Promise platform API for data access and mutations.
  • Do not access Postgres, Redis, queues, provider tokens, or migrations directly.
  • Keep authorization, provenance, retention, provider behavior, and canonical

capability names by hand.

  • Consume explicit platform contracts instead of duplicating procedure or

Initial MCP tool surface:

  • connect_promise
  • get_today
  • list_commitments
  • get_commitment
  • getcommitmentevidence
  • getpersoncontext
  • search_memory
  • capture_note
  • createfollowup
  • mark_resolved
  • draftfollowup

connect_promise and unauthenticated tool results are intentionally part of the product. MCP should help users discover and connect Promise when an agent needs follow-up memory that Promise can provide.

Unauthenticated tool results include a scoped authorizationUrl that sends the user to https://app.usepromise.ai/start?source=mcp..., preserves agent attribution, and uses a relative /mcp/authorize callback inside Promise before any return to an agent URL.

Development

npm install
npm run build
npm run smoke
npm run tools
npm run start

Example MCP call:

curl -sS http://localhost:3000/mcp \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'

Protected tools return a structured promiseauthrequired result when no Bearer token is present. After the user authorizes /mcp/authorize, Promise returns a short-lived one-time code to the agent callback. The agent exchanges that code at /api/mcp/token for a scoped opaque pmcp... bearer token. Bearer tool calls are proxied to the Promise platform API, which enforces the grant's scopes. markresolved and draftfollowup intentionally deep-link to Promise for user review rather than sending or mutating mail directly.

See docs/ACQUISITION.md for signup flow guidance, docs/SECURITY.md for the MCP safety boundary, and docs/DEPLOYMENT.md for container/runtime details.

Nothing above is checked by us. What we check is on the safety report.

Promise: common questions

Is Promise MCP server safe?
Mostly: it is graded B (83/100). Read the Promise safety report
How do I install Promise?
It runs remotely at mcp.usepromise.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Promise need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Promise maintained?
The last commit was 29 days ago (2026-10-06). The latest release is v0.1.0.
Is Promise up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Promise compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,255 servers); tools 11 (the typical server has 7); tools that change things 9% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.