Security & Testing

gosummer.ai

An MCP server for Summer account and access management, exposing tools to view user identity, company access, access requests, and agent connection grants.

1 endpoint65 known toolsFirst detected October 21, 2026Last detected October 21, 2026

ENDPOINT 1

https://api.gosummer.ai/mcp

No auth detected

MCP server metadata

Name: summer
Version: 0.2.0

Capabilities

toolsresourcesprompts

Server instructions

Summer company setup and case tools. Public discovery lists tool schemas only. Every tool call requires a Summer OAuth access token; a 401 response points to the authorization metadata. Start with summer_account_me and summer_company_capabilities. Write for the intended reader: customers for public guides and staff for internal procedures. Follow ASD-STE100 about 80%. Use short sentences, active voice, one idea per sentence and consistent terms. Avoid metaphors and technical slang. Keep necessary facts and uncertainty. Customize welcome copy, home/chat buttons and lead fields through installation settings.presentation. Website buttons open HTTPS links; lead_capture buttons open the consent form. Read the issuer's /docs/messenger-leads guide. Saved submissions emit messenger.lead.submitted through the existing signed webhooks, including the company and installation IDs. Webhook setup needs automation.manage. Read leads with cases.read. Booking handoff codes expire after 15 minutes and require the selected company's server to exchange them. Never treat contact details as account identity or claim a saved lead is a confirmed booking. Read the issuer's /docs/support-email guide before configuring support email. Identify the support address, mail provider, receiving inbox and permitted sender. Test reading, sending and DNS separately. Intercom's account check does not test inbox access or replies. This catalog has help-desk setup and credential storage. It has no direct Gmail/Outlook connector or email DNS commands. Use an existing authorized help-desk API or browser workflow when available. Saved credentials and custom integration definitions do not establish a working connection. Record test results, original message references, check times and missing steps in capability checks. Follow the company's reply and approval rules. Help-center DNS configures website addresses, not email. Keep website conversations in chat unless the visitor wants email follow-up. Contact capture does not send email. Read operational_readiness or summer_capability_checks_list for the same checklist shown in Summer. Fulfill tasks through discoverable APIs, browsers, current knowledge or combined paths. Upload relevant knowledge, configure integrations and record evidence with summer_capability_checks_report; add useful business-specific expectations with summer_capability_checks_save. A saved credential or guide alone does not prove a working path. Setup-agent reports never imply human approval or independently verified execution. Report saved, verified, pending, unavailable and enabled states exactly as returned; saved is not verified. Never ask a person to paste a secret into chat. Secret values, signing keys and service account secrets move only through the local Summer CLI; tools that would need one return a handoff command. An approved setup connection includes installing and enabling Messenger in its selected companies and environments, including production, within current budgets. Complete requested setup without asking for the same permission again or escalating installation to another agent. A local CLI handoff is a trusted secret-transfer step: run it locally when available, keeping keys out of model-visible output. Ask only for genuinely missing company/environment access or authority. This does not grant business-effect approval or investigation authority. Company settings and knowledge are company-wide. Credentials, Messenger installations and cases belong to one environment. Author company guidebooks with summer_guides_get, summer_guides_save and summer_guides_articles_save. Upload media metadata with summer_assets_uploads_create, then transfer the selected local file with the returned CLI command; never send base64 or binary through tools. Use native tools for writing, real screenshots and optional image/video creation. Preview the exact article revisions before summer_guides_publish, which needs guides.publish authority. Published customer URLs and internal knowledge citations have different audiences. Investigators, executors and conversational agents reference the same published company articles; a guide never proves a customer action completed. These are never available to an agent: Approving a business effect, outgoing customer message or plan execution; Revealing a saved credential value; Approving Summer platform access requests; Ownership transfer and owner/admin role grants; Raising model or assistant spending limits; Identity-verification attestations and clinical directions.

Known tools 65

summer_account_me

Show the signed-in person, Summer access status and this connection's grant.

Inferred read-only

summer_account_companies_list

List companies the person can access and whether this connection includes each one.

Inferred read-only

summer_account_access_request_read

Read the person's Summer access request.

Inferred read-only

summer_account_access_request_submit

Submit or update a Summer access request.

Potential side effects

summer_account_connections_list

List this person's agent connections, grants, last use and expiry.

Inferred read-only

summer_account_connections_revoke

Revoke one of this person's agent connections immediately.

Inferred read-only

summer_guides_get

Read the company's editable guidebook, draft articles, assets and publication state.

Inferred read-only

summer_guides_save

Create or edit guidebook details at the expected version.

Potential side effects

summer_guides_articles_get

Read an editable guide article and its current knowledge revision.

Inferred read-only

summer_guides_articles_save

Create or edit a Markdown customer article with source references and managed asset IDs.

Potential side effects

summer_guides_preview

Read the exact current draft, article revisions and authenticated preview URL before publishing.

Inferred read-only

summer_guides_authoring

Get the reviewed company-specific guide-building instructions for your native coding agent.

Inferred read-only

summer_guides_publish

Publish the exact selected article revisions and ready media to the company's customer help center.

Potential side effects

summer_guides_unpublish

Remove the company's guide and release media from Summer's public serving path at the expected version.

Potential side effects

summer_guides_history

Read the company's guide edits, upload and publication history.

Potential side effects

summer_guides_hosting_get

Read the optional custom guide domain, DNS instructions and verified HTTPS status.

Inferred read-only

summer_guides_hosting_save

Save or remove a custom guide hostname at the expected version.

Potential side effects

summer_guides_hosting_verify

Check the saved domain's DNS ownership, attach it through Summer's hosting connection and verify HTTPS.

Inferred read-only

summer_assets_list

List the company's private guide media, metadata and upload status.

Potential side effects

summer_assets_get

Read one guide asset, checksum and resumable chunk receipts.

Inferred read-only

summer_assets_uploads_create

Start or recover a private resumable Markdown, image, video, PDF or caption upload from metadata.

Potential side effects

summer_assets_uploads_complete

Verify the original size, content signature and SHA-256 against saved private bytes, then mark a guide upload ready.

Potential side effects

summer_assets_edit

Edit guide media captions, alt text, provenance, transcript or poster at the expected version, or retire unused media.

Potential side effects

summer_company_capabilities

What this connection can do here, with a reason for everything unavailable.

Inferred read-only

summer_company_setup_status

Saved, verified, pending, unavailable and enabled state for each setup item.

Inferred read-only

summer_capability_checks_list

Read the same operational capability checklist, results, discovery paths and review history shown in Summer.

Inferred read-only

summer_capability_checks_get

Read one capability, its concrete test, evidence and latest 20 review records.

Inferred read-only

summer_capability_checks_save

Edit a capability expectation or add a business-specific custom_ capability with a reason.

Potential side effects

summer_capability_checks_report

Record the setup agent's capability assessment with original evidence and the path Summer can discover and use.

Inferred read-only

summer_capability_checks_test

Request a read-only Summer capability test on an authorized sample case.

Inferred read-only

summer_company_settings_read

Read company-wide settings.

Inferred read-only

summer_company_settings_update

Update company-wide settings with the expected version.

Potential side effects

summer_integrations_list

List provider integrations, their required fields and saved metadata.

Inferred read-only

summer_integrations_save

Define a custom integration's credential names and labels.

Inferred read-only

summer_credentials_list

List saved credential names, sources and versions.

Inferred read-only

summer_credentials_set

Save one selected credential value or Doppler reference.

Inferred read-only

summer_knowledge_list

List current company knowledge documents.

Inferred read-only

summer_knowledge_create

Upload a new company knowledge document with original revision history.

Potential side effects

summer_knowledge_get

Read one company knowledge document and its current revision.

Inferred read-only

summer_knowledge_history

Read the edit history of a company knowledge document.

Potential side effects

summer_knowledge_edit

Edit an existing company knowledge document with the expected revision and a reason.

Potential side effects

summer_messenger_installations_list

List Messenger installations in this environment.

Inferred read-only

summer_messenger_installations_create

Create an installation with a client-chosen ID.

Potential side effects

summer_messenger_installations_update

Update installation settings with the expected version.

Potential side effects

summer_messenger_installations_rotate_key

Issue a new signing key.

Inferred read-only

summer_messenger_assistant_read

Read assistant settings per installation and whether the managed runtime is enabled.

Inferred read-only

summer_messenger_leads_list

Read consented website leads for this company and environment.

Inferred read-only

summer_messenger_assistant_update

Update assistant instructions and escalation permission with the expected revision.

Potential side effects

summer_messenger_voice_read

Read voice chat settings per installation, the available voices, published help article count and the voice assistant's update status.

Potential side effects

summer_messenger_voice_update

Update voice chat settings with the expected revision.

Potential side effects

summer_company_team_read

List company members and pending invitations.

Inferred read-only

summer_messenger_conversations_assistant

Pause the assistant in one conversation so a person can take over, or ask it to resume.

Inferred read-only

summer_verification_run

Run supported harmless checks.

Inferred read-only

summer_cases_list

List company-owned cases or conversations, newest first, with coverage and a cursor.

Inferred read-only

summer_cases_get

Read one case or conversation with its original messages and related records.

Inferred read-only

summer_cases_attachment

Get a short-lived download for an attachment that belongs to this case.

Inferred read-only

summer_investigations_list

Read investigation runs, saved plans, approval state and execution receipts for a case.

Inferred read-only

summer_investigations_request

Ask Summer to investigate the case, or revise a saved plan with feedback.

Inferred read-only

summer_actions_prepare

Prepare the exact work in the current saved plan for human approval in Summer.

Inferred read-only

summer_events_list

Read configuration and activity events after a cursor.

Inferred read-only

summer_service_accounts_list

List the company's service accounts.

Inferred read-only

summer_service_accounts_save

Create, update, rotate or disable a service account.

Potential side effects

summer_webhooks_list

List webhook endpoints and delivery state.

Inferred read-only

summer_webhooks_save

Create, update, rotate or disable a signed webhook endpoint.

Potential side effects

summer_webhooks_replay

Queue past events after a cursor for delivery again to one endpoint.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.summer]
url = "https://api.gosummer.ai/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "summer": {
      "type": "http",
      "url": "https://api.gosummer.ai/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: summer
Remote MCP URL: https://api.gosummer.ai/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "summer": {
      "url": "https://api.gosummer.ai/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "summer": {
      "type": "http",
      "url": "https://api.gosummer.ai/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "summer",
  "transport": "streamable-http",
  "url": "https://api.gosummer.ai/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.