Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Riddle

REMOTE · WWW.RIDDLE.COM · SCANNED SEP 21

Build, publish and analyze quizzes, polls, forms and personality tests. Riddle account required.

Available components

+2 this week 84 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security97
Transport & Reachability100
Schema Quality & AI Usability83
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 19579 tokens (~159/item across 123 items; 38 tools + 85 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management29
  • Stability check failed: schema churn in the 30 days we've observed: 43 tool removals, 2 breaking changes, 0 auth/transport breaks, 19 additions. See how to fix → Fail
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (5% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 39 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Install

How do I install the Riddle MCP server?

Riddle is a hosted endpoint at https://www.riddle.com/creator/api/v3/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · www.riddle.com

# add to Claude Code
claude mcp add --transport http com-riddle-creator 'https://www.riddle.com/creator/api/v3/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "com-riddle-creator": {
      "url": "https://www.riddle.com/creator/api/v3/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "com-riddle-creator": {
      "type": "http",
      "url": "https://www.riddle.com/creator/api/v3/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.com-riddle-creator]
url = "https://www.riddle.com/creator/api/v3/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-riddle-creator": {
      "type": "remote",
      "url": "https://www.riddle.com/creator/api/v3/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-riddle-creator --url 'https://www.riddle.com/creator/api/v3/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  com-riddle-creator:
    url: "https://www.riddle.com/creator/api/v3/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "com-riddle-creator": {
      "Transport": "http",
      "Url": "https://www.riddle.com/creator/api/v3/mcp"
    }
  }
}
# add to Vellum
assistant mcp add com-riddle-creator -t streamable-http -u 'https://www.riddle.com/creator/api/v3/mcp'
// mcp.json
{
  "mcpServers": {
    "com-riddle-creator": {
      "type": "http",
      "url": "https://www.riddle.com/creator/api/v3/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 18 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 22 to 25.

  • 16 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 15 to 19.

  • 14 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 9 to 12.

  • 12 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 2 to 5.

  • 3 Sept 26 −5
    • A breaking change shipped without a version bump: still 1.0 security
    • Tool “questionBank_addItem” was removed security
    • Tool “questionBank_addTag” was removed security
    • Tool “questionBank_blockTypeColumns” was removed security
    • Tool “questionBank_create” was removed security
    • Tool “questionBank_delete” was removed security
    • Tool “questionBank_deleteItem” was removed security
    • Tool “questionBank_discardChanges” was removed security
    • Tool “questionBank_duplicate” was removed security
    • Tool “questionBank_get” was removed security
    • Tool “questionBank_getItems” was removed security
    • Tool “questionBank_list” was removed security
    • Tool “questionBank_publish” was removed security
    • Tool “questionBank_removeTag” was removed security
    • Tool “questionBank_rename” was removed security
    • Tool “questionBank_riddleBlockItems” was removed security
    • Tool “questionBank_tagList” was removed security
    • Tool “questionBank_templateList” was removed security
    • Tool “questionBank_updateItem” was removed security
    • Tool “questionBank_updateNotes” was removed security
    • Tool “riddleTemplate_create” was removed security
    • Tool “riddleTemplate_get” was removed security
    • Tool “riddleTemplate_list” was removed security
    • Tool “riddleTemplate_publicList” was removed security
    • Tool “riddleTemplate_use” was removed security
    • Tool “riddle_account_list” was removed security
    • Tool “riddle_builder_form” was removed security
    • Tool “riddle_builder_leaderboard” was removed security
    • Tool “riddle_builder_minigame” was removed security
    • Tool “riddle_builder_personality” was removed security
    • Tool “riddle_builder_placeholder” was removed security
    • Tool “riddle_builder_poll” was removed security
    • Tool “riddle_builder_predictor” was removed security
    • Tool “riddle_builder_quiz” was removed security
    • Tool “riddle_builder_story” was removed security
    • Tool “riddle_move_check” was removed security
    • Tool “riddle_tag_add” was removed security
    • Tool “riddle_tag_remove” was removed security
    • Tool “riddle_unpublish” was removed security
    • Tool “stats_overview_fetch” was removed security
    • Tool “stats_project_breakdown” was removed security
    • Tool “stats_riddle_breakdown” was removed security
    • Tool “stats_user_breakdown” was removed security
    • New tool “media_delete”, which the server declares destructive security
    • New tool “question_bank_delete”, which the server declares destructive security
    • New tool “question_bank_discard_changes”, which the server declares destructive security
    • Tool “palette_customize” rewrote its description, which is the text the model reads security
    • Tool “palette_get” rewrote its description, which is the text the model reads security
    • Tool “project_get” rewrote its description, which is the text the model reads security
    • Tool “project_get_settings” rewrote its description, which is the text the model reads security
    • Tool “project_list” rewrote its description, which is the text the model reads security
    • Tool “reference_get” rewrote its description, which is the text the model reads security
    • Tool “riddle_builder_update” rewrote its description, which is the text the model reads security
    • Tool “riddle_builder_validate” rewrote its description, which is the text the model reads security
    • Tool “riddle_delete” rewrote its description, which is the text the model reads security
    • Tool “riddle_get” rewrote its description, which is the text the model reads security
    • Tool “riddle_list” rewrote its description, which is the text the model reads security
    • Tool “riddle_move” rewrote its description, which is the text the model reads security
    • Tool “riddle_publish” rewrote its description, which is the text the model reads security
    • Tool “riddle_tag_delete” rewrote its description, which is the text the model reads security
    • Tool “riddle_tag_list” rewrote its description, which is the text the model reads security
    • Tool “stats_fetch” rewrote its description, which is the text the model reads security
    • Tool “whoami” rewrote its description, which is the text the model reads security
    • Tool “riddle_publish” is now declared destructive security
    • “stats_fetch” added a required parameter “view”, so existing callers break functional
    • “riddle_move” changed the type of “projectId”: null|integer → null|integer|string functional
    • “stats_fetch” changed the type of “entityId”: string → null|string functional
    • Schema quality: 208 → 159 functional
    • Destructive annotations: All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation. functional
    • New resource “block-defaults-Crosswords” functional
    • New resource “block-defaults-Minesweeper” functional
    • New resource “block-defaults-SpotTheDifference” functional
    • New resource “block-defaults-TapAndFind” functional
    • New resource “prompts-analyze_CampaignPerformance” functional
    • New resource “prompts-build_GatedContentStory” functional
    • New resource “prompts-build_LeadForm” functional
    • New resource “prompts-build_LeadGenQuiz” functional
    • New resource “prompts-build_PredictorWithLeaderboard” functional
    • New resource “prompts-build_ProductRecommender” functional
    • New resource “prompts-build_QuizContestWithLeaderboard” functional
    • New resource “prompts-localize_Riddle” functional
    • New resource “prompts-optimize_Riddle” functional
    • New resource “prompts-organize_Library” functional
    • New resource “prompts-restyle_ToBrand” functional
    • New resource “prompts-setup_DataLayerTracking” functional
    • New resource “question-bank-block-type-columns” functional
    • New tool “media_upload_link” functional
    • New tool “question_bank_create” functional
    • New tool “question_bank_get” functional
    • New tool “question_bank_get_items” functional
    • New tool “question_bank_item” functional
    • New tool “question_bank_list” functional
    • New tool “question_bank_manage” functional
    • New tool “question_bank_tag” functional
    • New tool “riddle_builder_create” functional
    • New tool “riddle_tag” functional
    • New tool “riddle_template_create” functional
    • New tool “riddle_template_get” functional
    • New tool “riddle_template_list” functional
    • New tool “riddle_template_public_list” functional
    • New tool “riddle_template_use” functional
    • “riddle_builder_validate” added an optional parameter “project” cosmetic
    • “riddle_delete” added an optional parameter “dryRun” cosmetic
    • “riddle_get” added an optional parameter “omittedDefaults” cosmetic
    • “riddle_list” added an optional parameter “scope” cosmetic
    • “riddle_move” added an optional parameter “dryRun” cosmetic
    • “riddle_publish” added an optional parameter “publish” cosmetic
    • “stats_fetch” added an optional parameter “page” cosmetic
    • “stats_fetch” added an optional parameter “projectIds” cosmetic
    • “stats_fetch” added an optional parameter “sortBy” cosmetic
    • “reference_get” reworded the description of “blockTypes” cosmetic
    • “reference_get” reworded the description of “fieldTypes” cosmetic
    • “reference_get” reworded the description of “includeAvailableTopics” cosmetic
    • “reference_get” reworded the description of “riddleType” cosmetic
    • “reference_get” reworded the description of “topics” cosmetic
    • “riddle_builder_update” reworded the description of “UUID” cosmetic
    • “riddle_builder_update” reworded the description of “build” cosmetic
    • “riddle_builder_update” reworded the description of “omit” cosmetic
    • “riddle_builder_update” reworded the description of “publish” cosmetic
    • “riddle_builder_validate” reworded the description of “builds” cosmetic
    • “riddle_get” reworded the description of “UUIDs” cosmetic
    • “riddle_get” reworded the description of “includeRiddleData” cosmetic
    • “riddle_get” reworded the description of “omit” cosmetic
    • “riddle_list” reworded the description of “notType” cosmetic
    • “riddle_list” reworded the description of “origin” cosmetic
    • “riddle_list” reworded the description of “page” cosmetic
    • “riddle_list” reworded the description of “projectId” cosmetic
    • “riddle_move” reworded the description of “UUID” cosmetic
    • “riddle_move” reworded the description of “UUIDs” cosmetic
    • “riddle_move” reworded the description of “projectId” cosmetic
    • “riddle_publish” reworded the description of “UUID” cosmetic
    • “riddle_publish” reworded the description of “UUIDs” cosmetic
    • “riddle_tag_delete” reworded the description of “projectId” cosmetic
    • “riddle_tag_delete” reworded the description of “tagId” cosmetic
    • “riddle_tag_list” reworded the description of “projectId” cosmetic
    • “stats_fetch” reworded the description of “dateFrom” cosmetic
    • “stats_fetch” reworded the description of “dateTo” cosmetic
    • “stats_fetch” reworded the description of “entityId” cosmetic
    • “stats_fetch” reworded the description of “namespace” cosmetic
    • “riddle_builder_validate” dropped the optional parameter “omit” cosmetic
    • “stats_fetch” made “entityId” optional cosmetic
  • 1 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 35 to 38.

  • 30 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 28 to 32.

  • 27 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 18 to 22.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 21 Sept 2026 · Probed https://www.riddle.com/creator/api/v3/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.riddle.com CN=Sectigo Public Server Authentication CA DV R36,O=Sectigo Limited,C=GB 11 Nov 2025 11 Dec 2026 RSA 4096 SHA256-RSA e48090d3fb9749000077ef9710646d87
SANs: *.riddle.com, riddle.com
CN=Sectigo Public Server Authentication CA DV R36,O=Sectigo Limited,C=GB (CA) CN=Sectigo Public Server Authentication Root R46,O=Sectigo Limited,C=GB 22 Mar 2021 21 Mar 2036 RSA 3072 SHA384-RSA 397a66cc2756362e0daa87ca6eabe3b1
CN=Sectigo Public Server Authentication Root R46,O=Sectigo Limited,C=GB (CA) CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US 22 Mar 2021 18 Jan 2038 RSA 4096 SHA384-RSA d27fbbc1de359e5216ad6149586099c4
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US (CA) CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US 1 Feb 2010 18 Jan 2038 RSA 4096 SHA384-RSA 1fd6d30fca3ca51a81bbc640e35032d

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of www.riddle.com. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
riddle.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer resource_metadata="https://www.riddle.com/creator/.well-known/oauth-protected-resource"

Bearer resource_metadata="https://www.riddle.com/creator/.well-known/oauth-protected-resource"
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin

Protected resource metadata

Document https://www.riddle.com/creator/.well-known/oauth-protected-resource
Retrieved Yes
Resource https://www.riddle.com/creator/api/v3/mcp
Authorisation server https://www.riddle.com

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://www.riddle.com/creator/api/v3/mcp Verified 200
http (plaintext) http://www.riddle.com/creator/api/v3/mcp HTTPS enforced 301 https://www.riddle.com/creator/api/v3/mcp
MCP tools · 38 exposed · ~15,933 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
media_delete ~248

Deletes a file from the media library permanently, to clean up after yourself: an upload that turned out wrong, or a file the user no longer wants stored (it frees the storage it counted against). The file must be unused - one any Riddle still shows is refused with a message naming those Riddles, since deleting it would leave a broken image behind in a live Riddle; remove it there first (riddle_builder_update, then riddle_publish so the change is live) and delete afterwards. Unused is a property of the file across the whole ACCOUNT, not of one Riddle: several Riddles can use it and any one of them keeps it alive, and a file the Creator lists as in use cannot be forced out from here either. Not reversible, no undo, and the id is not reused, so anything still pointing at the file stops resolving - ask the user before calling this. Returns {deleted: true, mediaId, name, type, size}.

NameTypeReqDescription
mediaIdintegeryesThe media library id of the file to delete - the "mediaId" the upload response returned, or the id shown for the file in the Creator's media library.

No output schema declared.

No examples provided.

media_upload_link ~484

Creates a single-use link for uploading ONE media file into the media library. Call it when the user has a LOCAL file for a Riddle: this server cannot receive bytes, so the upload is yours. A link expires after 5 minutes, dies on first use (successful or not), and only 20 are handed out per account per 5 minutes - so create one immediately before each upload, a batch one file at a time rather than the links up front, and never store or share one. Check the file BEFORE minting a link, since a link a rejected file burns is gone: an image, a video or an audio file, at most 10 MB (some environments cap lower - "maxBytes" and "allowedTypes" in the answer are the authoritative pair). Returns {uploadUrl, expiresAt (UTC), singleUse, maxBytes, allowedTypes, usage, requiresNetworkAccessTo}. POST the file to "uploadUrl" as multipart/form-data under the field name "file" - "usage" is that command ready to run, e.g. curl -F 'file=@/path/to/image.png' '<uploadUrl>' (the link carries its own signature, so no API key or header). That POST leaves your environment and needs outbound HTTPS to the host in "requiresNetworkAccessTo" (allowlist the wildcard it gives; in Claude only an admin can change that organization setting). If it is blocked or does not resolve, tell the user which host to allow - do not retry or look for another way in. The POST answers with {mediaId, type, width, height, size, folderId}: "mediaId" is the ONLY handle - use it as "media": {"type": "Image", "mediaId": <mediaId>} in a block (riddle://reference/riddle-builder/block-types). Never guess a url for it: a CDN url passed as a plain "url" media is re-downloaded as a second, unrelated copy - the account pays twice and this file records no usage, which makes an image in a live Riddle look safe to delete. The file lands in the account's "AI Uploads" folder tagged "AI Upload" (fixed, so the user can review what an agent uploaded in one place), counts against their storage, and media_delete removes it again.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

palette_customize ~558

Changes the palette (colors, fonts, button styles, background) of ONE Riddle, as a path => value map, e.g. {"bgColor": "#ffffff", "font.name": "Roboto"} - the paths are palette_get's or riddle://reference/palette/fields. Never affects another Riddle: a palette inherited from the account/project default preset is not changed for the others, the values are stored as an override on this one. A built-in palette ("default:*") is stored nowhere and is therefore duplicated into a Riddle-owned copy automatically; newPaletteName always works on a copy. Two things to know. The new design only reaches the embedded (live) Riddle after another riddle_publish. And only Riddles created by the riddle_builder_* tools or the Riddle AI can be restyled - one the user built by hand in the Creator is rejected, so check context.origin.apiManageable on riddle_get (or "origin" on riddle_list) rather than finding out from the error. A palette write does NOT move modifiedAt/modifiedBy (the Creator does not stamp them for a design change either), so polling those will not notice it: the detector is riddle_get's context.modified.hasChanges, true from the preset side. context.preset.drifted usually moves too but is not reliable alone - it means "diverged from the PARENT preset", so on a Riddle whose context.preset.parentId is null it stays false however much you change; read it only alongside parentId.

NameTypeReqDescription
newPaletteNamenull|stringCreate a new palette with this name (copied from paletteUUID / the selected palette) and apply the values to the copy, leaving the original untouched.
paletteUUIDnull|stringThe palette to change. Omit to change the currently selected palette. Pass a built-in id ("default:timeless") to start from that palette.
riddleUUIDstringyesThe UUID of the Riddle you want to restyle. Only Riddles created via the Riddle Builder tools or generated by the Riddle AI can be restyled.
selectnull|booleanSelect the palette afterwards so the Riddle actually renders with it. Newly created palettes are always selected.
valuesobjectyesMap of palette path => new value, e.g. {"bgColor": "#ffffff", "buttonColor": "rgba(0,0,0,0.8)", "font.name": "Roboto", "riddleBorderRadius": 12, "isImageInBgDisplayed": true}. Every path must be one…

No output schema declared.

No examples provided.

palette_get ~404

Reads the palettes - colors, fonts, button styles, background settings - of a Riddle: every palette it can use (the ones inherited from the account/project default preset included) with all of their values, which one is selected, which values this Riddle overrides, and the built-in palettes to start from. What each value does is riddle://reference/palette/fields. Mind the size: ~30 values per palette and an account preset can contribute palettes that have nothing to do with this Riddle, so the full response runs into thousands of tokens. Cut it with "omit" - omit: ["paletteValues"] lists the palettes by uuid and name only, which is how you find WHICH one you want (paletteUUID then returns that one in full), and "builtInPalettes"/"customizedValues"/"hints" drop those keys. To read just the design in effect, pass the selectedPaletteUuid from such a listing as paletteUUID.

NameTypeReqDescription
includeBuiltInPalettesnull|booleanInclude the full values of all built-in palettes. Defaults to false, in which case only their ids and names are listed.
omitarrayLeaves parts of the response out - the way to keep this call small. "paletteValues" lists every palette as {uuid, name} instead of with its ~30 values (then read the one you want with paletteUUID); "…
paletteUUIDnull|stringReturn only this palette instead of all of them. Accepts a palette UUID or a built-in palette id like "default:timeless".
riddleUUIDstringyesThe UUID of the Riddle whose palettes you want

No output schema declared.

No examples provided.

ping ~28

A simple tool that returns "Pong". Can be used to test connectivity and authentication to the MCP.

Input schema present but exposes no named parameters.

NameTypeReqDescription
messagestringyesThe response message.

No examples provided.

project_get ~86

Returns one project by id - id, name, image and the authenticated user's permission matrix for it. The id comes from project_list or from the "team" of riddle_get. The project's default Riddle settings are NOT included; they are a large nested tree with its own tool, project_get_settings.

NameTypeReqDescription
projectIdintegeryesThe ID of the project to look up

No output schema declared.

No examples provided.

project_get_settings ~220

Returns the default Riddle settings every new Riddle of the project starts from - PUBLISHED and ENABLED only: "publishSettings" (privacy/DOI/OTP, email automation, tracking, data layer, ...) and "embedSettings" (iframe sizing, auto-scroll, ...), each holding only the areas whose "isDefaultEnabled"/"isEnabled" was on in the last published version. Never-published drafts and disabled areas are deliberately left out - this is what applies to Riddles right now, not a way to inspect unpublished or disabled defaults. Internal "_ids" bookkeeping (counters for repeatable items) is stripped, meaning nothing outside the Creator. Both fields are always objects keyed by settings area - a project with nothing enabled gets {}, never an empty list. Read it to know what a project forces onto its Riddles before creating or editing one there; project_get is the cheap call for name, image and permissions.

NameTypeReqDescription
projectIdintegeryesThe ID of the project whose default Riddle settings to return

No output schema declared.

No examples provided.

project_list ~214

Lists the projects this token has access to as {items, page, pageSize, total, hasMore} - the paging every listing of this server answers with (riddle://reference/concepts/response-envelope), here 25 per page, 100 max, so an account with many projects can be paged through; a project API token only ever returns its own project. Each entry is a trimmed summary (id, name, image): project_get adds your permissions on one, project_get_settings its default Riddle settings. An invalid page/pageSize (zero, negative, or over 100) is rejected rather than silently clamped.

NameTypeReqDescription
pagenull|integerPage number to fetch (1-indexed). Defaults to 1. Zero, negative or non-numeric is rejected, not clamped.
pageSizenull|integerHow many projects to return per page (max 100). Defaults to 25. Same validation as page; over 100 is rejected, not clamped.

No output schema declared.

No examples provided.

question_bank_create ~258

Creates a new, empty question bank for the given Riddle type ("Quiz" or "Poll"). Add items with question_bank_item(action: "add"), then reference the returned "id" as "questionBankId" on a QuestionBank block of a riddle_builder_create call of the matching "type" - a bank created for "Quiz" can only be referenced from a Quiz, never a Poll, and vice versa. A bank lives in one project and can only be referenced from Riddles of that same project, so pass the projectId of the project the Riddle belongs to; omitting it creates the bank in the project the API key is scoped to.

NameTypeReqDescription
projectIdnull|integerThe project (team) ID to create the bank in, as returned by project_list. Omit for the project the API key is scoped to (your personal space on a user API key).
riddleTypestringyesThe Riddle type this bank's items are shaped for - "Quiz" or "Poll". Fixed for the lifetime of the bank; every item added later must match it.
titlenull|stringThe bank's title. Defaults to "New question bank" when omitted.

No output schema declared.

No examples provided.

question_bank_delete ~355

Deletes a question bank or ONE of its items - "target" says which, and nothing else deletes either. target "bank" removes the bank and every item it holds (its tags cleaned up exactly as question_bank_tag(action: "remove") does), and is rejected with QUESTION_BANK_INTERDEPENDENCY while a Riddle of the bank's own project still references it - counting the DRAFT and, on a published Riddle, the live version too, so a block removed from a draft does not release the bank until that Riddle is republished; read "deletingABank" in riddle://reference/question-bank/overview before deleting one. target "item" takes questionBankItemId and touches nothing else: on a never-published item the delete is immediate and permanent, on a published one it only leaves the DRAFT - a live Riddle keeps drawing that item until question_bank_manage(action: "publish") purges it, and question_bank_discard_changes brings it back until then. Both are permanent for the caller: there is no trash and no restore. Rejected for a public template id - a template is copied with question_bank_manage(action: "duplicate"), never deleted.

NameTypeReqDescription
questionBankIdintegeryesThe ID of the question bank to delete, or of the bank the item belongs to.
questionBankItemIdnull|integerThe ID of the item to delete, as returned by question_bank_get_items or question_bank_item(action: "add"). Required for target "item", rejected for "bank".
targetstringyesWhat to delete: "bank" (the bank itself and every item in it) or "item" (one question of it).

No output schema declared.

No examples provided.

question_bank_discard_changes ~188

Throws away every unpublished change to a question bank's items at once, resetting each of them to its last published content. Irreversible - there is no undo and no copy of the discarded draft. A pending item delete comes back; an item ADDED since the last publish has no published state and is left alone, so this is not "restore the bank as it was published". Only items are affected: the title and the notes are metadata outside the draft/publish split and never change here. Read the two sides before calling - question_bank_get_items reads the draft, the same call with published: true reads exactly the state this resets to - and prefer question_bank_manage(action: "publish") whenever the draft is what should survive. Rejected for a public template id.

NameTypeReqDescription
questionBankIdintegeryesThe ID of the question bank to discard the unpublished changes of.

No output schema declared.

No examples provided.

question_bank_get ~206

Retrieves one question bank by id: title, riddleType, tags, notes, its categories/blockTypes and whether it has unpublished changes. The items themselves are question_bank_get_items, not included here. Works on a built-in template id from question_bank_list(scope: "templates") to see what it holds before duplicating - a template reads back without owner and tags/notes, belonging to nobody. "categories" and "blockTypeCategoryMap" are different slices and can disagree: "categories" comes from every DRAFT item, while "blockTypeCategoryMap" (categories per blockType) counts only PUBLISHED ones - a category used only by unpublished items is in "categories" but missing for its blockType there until question_bank_manage(action: "publish").

NameTypeReqDescription
questionBankIdintegeryesThe ID of the question bank to retrieve, as returned by question_bank_create/question_bank_list - or of a built-in template from question_bank_list(scope: "templates").

No output schema declared.

No examples provided.

question_bank_get_items ~391

Lists the items of a question bank - its DRAFT content by default, or its published items with published: true. Filter by search term, blockType, category or difficultyRange - the same filters a QuestionBank block draws with. A template id from question_bank_list(scope: "templates") reads too - that is how to preview its questions before duplicating it. Paginated {items, page, pageSize, total, hasMore}. The item shape, the "columns" format, the pagination it runs with and what the response leaves out: riddle://reference/concepts/question-bank-items.

NameTypeReqDescription
blockTypenull|stringFilter to one block type (e.g. "SingleChoice").
categorynull|stringFilter to one category.
difficultyRangearray|nullFilter to a difficulty range, as [min, max] (e.g. [1, 5]).
pagenull|integerPage number, starting at 1 (default: 1).
pageSizenull|integerItems per page (default: 250, max: 500).
publishednull|booleanRead the bank's PUBLISHED items instead of its draft (default false) - a different set of items, and the pool a live Riddle's QuestionBank block actually draws from. Counting what one block criterion…
questionBankIdintegeryesThe bank to list items of - your own, or a template id from question_bank_list(scope: "templates").
searchnull|stringFilter items by their column values (e.g. a question title or a choice).

No output schema declared.

No examples provided.

question_bank_item ~597

Adds or replaces ONE question/item of a question bank, by "action" - deleting one is question_bank_delete. There is no universal item shape: read riddle://reference/question-bank/block-type-columns before the first "add" into a bank you have not populated - it lists the valid blockType values per Riddle type and the "columns" each expects (the blockTypeColumns listing is that document, not a tool). "update" replaces the item's content entirely, so blockType, category, difficulty and columns must all be sent even when unchanged, and blockType is immutable: a different value is rejected rather than retyping the item (delete it and add a new one instead). Both change the bank's DRAFT - question_bank_manage(action: "publish") is what makes a change something a QuestionBank block draws, and question_bank_discard_changes throws every unpublished change away again. "hasChanges" in the response says whether the bank now has unpublished changes. Rejected for a public template id.

NameTypeReqDescription
actionstringyesWhat to do: "add" a new item (takes blockType, category, difficulty, columns) or "update" an existing one (the same, plus questionBankItemId).
blockTypenull|stringThe block type this question is shaped for, e.g. "SingleChoice". riddle://reference/question-bank/block-type-columns lists the ones valid for this bank's riddleType. Immutable: on "update" send the i…
categorynull|stringThe item's category - free text, used to filter what a QuestionBank block draws (see the "questionBankCriteria" of the QuestionBank block type).
columnsobjectThe question content, as {columnName: [values]} - never a list, and a column holding a single value still takes a list. Which names are valid depends on the bank's riddleType AND the blockType, so ta…
difficultynull|integerThe item's difficulty, 1-10 - also used to filter what a QuestionBank block draws.
questionBankIdintegeryesThe ID of the question bank the item belongs to.
questionBankItemIdnull|integerThe ID of the item to update, as returned by question_bank_item(action: "add")/question_bank_get_items. Required for "update", rejected for "add".

No output schema declared.

No examples provided.

question_bank_list ~556

Lists question banks. Scope "own" (the default) lists the banks of a project - the same ones the Creator shows; pass a projectId to look into another project, omit it for the project the API key is scoped to (your personal ones on a user API key). Paginated {items, page, pageSize, total, hasMore}. Scope "templates" lists the built-in starter banks instead - pre-filled banks anyone can copy with question_bank_manage(action: "duplicate") to get real content immediately instead of starting empty. It takes riddleType and nothing else (a handful of them, nothing to page or search) and answers with id, title, PUBLISHED "itemCount", DRAFT "draftItemCount", which blockTypes those items are (null when that cannot be told yet) and a few example categories out of "categoryCount". A template that was never published reports "itemCount": 0 however many questions it holds - judge its real size by "draftItemCount", the number a duplicate would give you, and read the chosen id with question_bank_get and question_bank_get_items before duplicating. Every write here rejects a template id: a template is only ever changed through a copy of it.

NameTypeReqDescription
pagenull|integerPage number (default: 1). Scope "own" only.
pageSizenull|integerItems per page (default: 12, max: 50). Scope "own" only.
projectIdnull|integerThe project (team) ID whose banks you want, as returned by project_list. Omit for the banks of the project the API key is scoped to (your personal ones on a user API key). Scope "own" only.
riddleTypenull|stringFilter by Riddle type ("Quiz" or "Poll"). Omit to list banks of every type. Applies to both scopes.
scopestringWhat to list: "own" (default) for the question banks of a project, "templates" for the built-in starter banks anyone can duplicate.
searchnull|stringSearch term to filter banks by title. Scope "own" only.
sortBynull|stringSort field: "createdAt" or "modifiedAt". Defaults to "createdAt". Scope "own" only.
sortOrdernull|stringSort direction: "ASC" or "DESC". Defaults to "DESC". Scope "own" only.
tagsarray|nullFilter by tag IDs (array of integers), as returned by riddle_tag_list. Omit to ignore tags. Scope "own" only.

No output schema declared.

No examples provided.

question_bank_manage ~408

Everything that acts on a question bank as a whole, by "action" - the items themselves are question_bank_item, and the two calls that only destroy are question_bank_delete and question_bank_discard_changes. A public template id is accepted for "duplicate" only and rejected by every other action. "rename" sets the title and "updateNotes" replaces the plain-text maintainer notes (never shown to participants): both are metadata rather than DRAFT content, so they take effect immediately AND permanently, are unaffected by publishing or discarding and never count as an unpublished change. "publish" makes every item's draft content its published content - what a QuestionBank block actually draws at view time - and is when a pending item delete is finally purged; a bank with unpublished changes still works in a block, it just draws its last published state. "duplicate" copies the bank and all of its items into a new independent bank (editing one never affects the other) in projectId or the key's project, and is the way to change a public template.

NameTypeReqDescription
actionstringyesWhat to do with the bank: "rename" (takes title), "updateNotes" (takes notes), "duplicate" (takes title and optionally projectId) or "publish" (no further parameters).
notesnull|stringPlain-text notes for this bank, e.g. sourcing/curation instructions - replaces any existing notes. Required for "updateNotes", rejected for every other action.
projectIdnull|integerThe project (team) ID the copy should land in, as returned by project_list. Only for "duplicate", where omitting it uses the project the API key is scoped to.
questionBankIdintegeryesThe ID of the question bank to act on.
titlenull|stringThe new title for "rename", or the title of the copy for "duplicate". Required for both, rejected for every other action.

No output schema declared.

No examples provided.

question_bank_tag ~345

Adds a tag to a question bank or removes one from it, by tagName or tagId from riddle_tag_list - exactly one of the two, as riddle_tag does. Question bank tags and Riddle tags are ONE set per project, not two: the same tag applies to banks and Riddles and has the same id in both, which is why the ids come from riddle_tag. "add" reuses the project's tag of that name or creates it, and re-tagging changes nothing. "remove" never creates anything - a tag the bank does not carry is an error - and a tag nothing uses any more is deleted from the project, where "nothing" includes Riddles: a tag a Riddle still uses survives its last bank. Deleting a tagged bank cleans up the same way. This only ever adds or removes the tag on THIS bank; riddle_tag_delete removes the label from the project itself. Rejected for a public template id.

NameTypeReqDescription
actionstringyes"add" the tag to the bank, or "remove" it from the bank.
questionBankIdintegeryesThe ID of the question bank to tag or untag.
tagIdnull|integerThe ID of an existing tag, as returned by riddle_tag_list. Pass either this or tagName.
tagNamenull|stringThe name of the tag. On "add" the project's tag of that name is reused, or created if there is none yet; on "remove" nothing is ever created and a name the bank does not carry is an error. Pass eithe…

No output schema declared.

No examples provided.

reference_get ~1,368

Read this server's own documentation: the block types, form field types, result blocks, palette values and response shapes the other tools expect. Every "riddle://reference/..." URI named in a tool description, a response or an error message is a topic of this tool - pass it here to read that document. These are the authoritative parameter reference for the riddle_builder_* and palette_* tools: read the relevant one BEFORE the first call instead of guessing property names, and re-read it when a call fails with a VALIDATION_ERROR. Up to 3 topics per call, and only the ones you need - most are long. Which topics exist, and what each one holds, is the "topics" parameter's own enum and description - not repeated here. "riddleType", "blockTypes" and "fieldTypes" narrow a document to your own material, and are ignored - whole document returned, stated in the response - on one that has no such split. block-types is never returned unscoped: {"riddleType": ["Quiz"]} is still all thirteen of a Quiz's block types (~20 KB), so name the ones you are about to build in "blockTypes" (a Quiz filtered to ["SingleChoice"]: ~5.5 KB, and it says everything about that block the wide read does). Decide the blocks first, then read only those. "fieldTypes" does the same for form-field-types and form-field-defaults, so reading both of them with {"fieldTypes": ["Dropdown"]} is the complete reference for one field type and nothing else. The per-entity families need no filter at all - riddle://reference/block-defaults/SingleChoice IS the filtered read.

NameTypeReqDescription
blockTypesarrayThe block type name(s) you are actually going to build (e.g. "SingleChoice", "WheelSpinner"), narrowing block-types on top of whatever "riddleType" kept - the normal way to read that document, not an…
fieldTypesarrayNarrow form-field-types and form-field-defaults to these form field type name(s) (e.g. "Dropdown", "Privacy"); the property sets a kept type refers to (propertySets/commonProperties) and the "fields"…
includeAvailableTopicsbooleanWhether to carry the full "availableTopics" catalogue. Omit it - the first reference_get of a session gets it, later ones get a pointer instead of repeating ~2.5 KB you already have. true gets it aga…
riddleTypearrayNarrow riddle-types/block-types to these Riddle type(s) - on block-types that drops every other type's question blocks while keeping the shared conventions (commonBlockProperties, the general Content…
topicsarrayyesThe documents to read, as their "riddle://reference/..." URIs (a document's short resource name, e.g. "block-types", works too). What each one holds: - riddle://reference/index: every document this s…
NameTypeReqDescription
availableTopicsobjectyesEvery topic this tool can return, uri => {sizeBytes, summary} - sent in full on the FIRST reference_get of a session, then replaced by a short {omitted, namesAndSizesIn, resend} pointer ("includeAvai…
referencesarrayyesOne entry per requested topic, in the order requested.

No examples provided.

riddle_builder_create ~857

Builds a new Riddle of any of the nine types from a build configuration: "type" says which kind (see that argument for what each one is and what it needs at a minimum), "build" carries the content. Everything a type accepts is described on the "build" fields themselves, marked with the types it belongs to; the exhaustive per-type shapes are in riddle://reference/riddle-builder/riddle-types, the block types in riddle://reference/riddle-builder/block-types, and the human help pages at https://www.riddle.com/help/api/build-riddles/riddle-types-and-other-blocks/<type>. To change an existing Riddle instead, use riddle_builder_update (a merge, not a rebuild); to check a configuration without creating anything, riddle_builder_validate. Returns the compact build-configuration envelope of riddle_get (riddle://reference/response-format), with 'queued': true added when queue is set. The new Riddle's view URL comes back in it - "context.viewUrl" once published, "context.viewUrlUnavailable.url" (already final, not live yet) before that.

NameTypeReqDescription
buildobjectyesThe build configuration of the Riddle type named in "type".This is the raw build configuration in the engine's own key names - the exact same shape riddle_get returns under "build", riddle_builder_up…
omitarraySections of the returned envelope to leave out; omit the parameter for the whole envelope. "uuid"/"type"/"modifiedAt" are always returned, and whatever you leave out is echoed back under "omittedFiel…
projectnull|integerThe project ID; pass NULL for personal project; omit to use the currently selected project.
publishnull|booleanWhether to publish the Riddle right after creation; default false (draft). Distinct from the "publish" field INSIDE the build config, which is the stored publish configuration.
queuenull|booleanWhether to queue the creation asynchronously.
templateIdnull|integerOnly when this build config came from a template you adapted (riddle_template_get): that template's id. Always pass it when you have one - the new Riddle then starts out on the template's whole DESIG…
typestringyesWhich kind of Riddle to build - this decides which "build" fields and which block types exist. Quiz: questions with right and wrong answers, scored, one result page per score range (title + blocks).…

No output schema declared.

No examples provided.

riddle_builder_update ~504

Edits an existing Riddle of any type with the same build configuration riddle_builder_create takes - but as a merge, not a rebuild: only the fields you send are touched, an omitted one is left exactly as it is. Blocks are addressed by their "id", added with "$create": true, removed with "$delete": true and reordered with "$blocksOrder"; the same grammar edits a block's "items"/"fields" and a Personality Test's "personalities", while a Placeholder's "conditions" is replaced as a whole (see each field). Read the Riddle with riddle_get first: what it returns under "build" is exactly the shape this takes, block IDs included. Only Riddles created by the riddle_builder_* tools or by the Riddle AI can be edited here - one built manually in the Creator can hold content this build config cannot express, and is rejected; check context.origin.apiManageable on riddle_get ("origin" on riddle_list) beforehand. Returns the compact build-configuration envelope of riddle_get (riddle://reference/response-format).

NameTypeReqDescription
UUIDstringyesThe UUID of the Riddle to edit, as returned by riddle_list or riddle_get (e.g. "6FA740EW") - the Riddle itself, never a block id or a project id.
buildobjectyesThe changes to apply, as a partial build configuration in the engine's own key names - the same shape riddle_get returns under "build" and riddle_builder_create takes. Only the fields you send are to…
omitarraySections of the returned envelope to leave out; omit the parameter for the whole envelope. "uuid"/"type"/"modifiedAt" are always returned, and whatever you leave out is echoed back under "omittedFiel…
publishnull|booleanWhether to publish the Riddle after the edit; default false, which leaves the changes in the draft. It rides along with an edit, it is not one: publish: true with an empty "build" is rejected. To pub…

No output schema declared.

No examples provided.

riddle_builder_validate ~646

Dry-runs one or many Riddle Builder creates and/or edits without creating or changing anything: per entry of "builds", the same validation the real call would apply, run against a scratch/deep-copied Riddle that is discarded before this returns - never persisted, never published, no event dispatched. A media URL in the build IS still checked for reachability with a live HEAD request (no content fetched or stored), so an unreachable one is rejected here too (INVALID_MEDIA) instead of at flush/publish time. An entry is {type, build} for a would-be creation or {UUID, build} for an edit; the answer is the {validate, valid, summary, items} envelope of riddle://reference/concepts/bulk, one item per entry in the order sent - a single config is items[0]. Use it to see why a config would be rejected before spending a real create/edit on it, and to pre-flight a set of similar Riddles in one call. PASS "project" whenever a build references anything project-scoped (a Form behind FormSelect, a tag, a project ad slot), set to the project you will actually create in: creating entries are dry-run inside it, and without it they run in the personal project, where such a reference is invisible and comes back as "You are not authorized to access ..." for a build a real create would accept. Catches nothing that only happens once a Riddle is really flushed or published - a database constraint violation, queue-worker behaviour. Per-type build shapes: riddle://reference/riddle-builder/riddle-types.

NameTypeReqDescription
buildsarrayThe build configs to dry-run, 1 to 20 entries, creates and edits mixable: {type, build} for a would-be creation or {UUID, build} for an edit, exactly one of "type"/"UUID" per entry. "type" is one of…
projectnull|integerThe project to dry-run the CREATING entries in - riddle_builder_create's own parameter, and it must be the project you intend to create in: the scratch Riddle is built inside it, and anything project…

No output schema declared.

No examples provided.

riddle_delete ~479

Deletes one or many Riddles. Only Riddles created through the riddle_builder_* tools or generated by the Riddle AI can be deleted - the ones a user built by hand in the Creator cannot, so check "origin.apiManageable" (riddle_get's context.origin, or riddle_list's "origin") beforehand rather than learning it from the error. Pass UUID for one, or UUIDs (max 100) to clean up several at once - e.g. everything riddle_list returned with origin: "api". A bulk delete is not atomic and never gives up early: a Riddle that cannot be deleted is that entry's "error" and every other Riddle is still deleted (riddle://reference/concepts/bulk). A Riddle another item of the same batch still references (a Leaderboard's connected Quiz/Predictor/Minigame, a FormSelect's Form) is retried once after the rest of the batch, so the order of the list does not matter; only a failure that survives the retry is reported. DRY RUN: pass dryRun: true and NOTHING is deleted - the call runs the same validation a real delete runs and answers {dryRun, deletable, summary, items, addUUIDs} per Riddle. Do this first whenever the set was not created by you; then act on \"addUUIDs\" to delete the referencing Riddles along with their targets. Every field, the batch effect and which blockers no addition to the call can lift: riddle://reference/concepts/bulk.

NameTypeReqDescription
UUIDnull|stringThe UUID of the single Riddle you want to delete. Pass either this or UUIDs. Only Riddles created via the Riddle Builder tools or generated by the Riddle AI can be deleted.
UUIDsarray|nullSeveral Riddles to delete at once, as Riddle UUID strings, e.g. ["6FA740EW", "OllsevHa"] (max 100). Pass either this or UUID. Same restriction as UUID: each one must have been created via the Riddle…
dryRunbooleantrue reports whether each Riddle could be deleted and deletes nothing. Works for one UUID and for UUIDs.

No output schema declared.

No examples provided.

riddle_get ~742

Reads one Riddle - or several, with UUIDs - as the compact build-configuration envelope {uuid, type, modifiedAt, build, nextBlockId, warnings, published, context}. "build" is the DRAFT and is exactly what the riddle_builder_* tools accept back; "published" is the live version visitors see (null = never published, {"status": "identical"} = the live version matches the draft, {"status": "differs", "build": ...} = unpublished edits, and "isLive" on either says whether it is on the web right now). Content the build config cannot express never fails the call - it is reported in "warnings" instead. A property still at its block type's default is left out rather than returned: riddle://reference/block-defaults/<block type> and riddle://reference/riddle-defaults/<Riddle type> state what it is, and it must NOT be resent as a property, since many build properties enable a feature by being present at all. "context" holds what sits around the config: title, image, tags, notes, viewUrl, features, origin (whether riddle_delete/riddle_builder_update/palette_customize work on this Riddle), publish/unpublish/modify state, project and preset identity. Make the response smaller with "omit"; bigger with omittedDefaults or includeRiddleData, both off by default and both large. Field by field: riddle://reference/concepts/response-envelope, plus /warnings, /publish and /bulk.

NameTypeReqDescription
UUIDnull|stringThe UUID of the single Riddle you want to read. Pass either this or UUIDs.
UUIDsarray|nullSeveral Riddles to read at once, as Riddle UUID strings, e.g. ["6FA740EW", "OllsevHa"] (max 20 - lower than the other bulk tools, since every entry is a full envelope rather than compact state). Eith…
includeRiddleDatabooleanAdditionally returns the full stored Riddle payload (content, settings, preset merge/diff, ...) under "riddle" - tens of KB, only for inspecting raw stored data. Not allowed together with UUIDs.
omitarrayLeaves whole sections out: "build", "warnings", "nextBlockId", "published", "context" (identity fields always stay). The one omission that materially shrinks a response is "published" on a Riddle wit…
omittedDefaultsbooleanWhether every block should additionally carry its "omittedDefaults" map: the properties it left at that block type's default, with the value each is at. Off by default - measured, those maps are 85-9…

No output schema declared.

No examples provided.

riddle_get_embed_code ~71

Gets the HTML embed code for a Riddle by its UUID. The code is returned regardless of publish state, but the URL it embeds will not serve the Riddle until it is published.

NameTypeReqDescription
UUIDstringyesThe UUID of the Riddle you want to retrieve the HTML embed code for

No output schema declared.

No examples provided.

riddle_list ~575

Returns a paginated list of Riddles. With the default scope "project" they come from a single project - use projectId to name it, or omit it for the personal project. With scope "account" they come from the entire account instead: the personal project and every team project the user has access to, in one list - the account-wide listing is this scope, not a tool of its own; projectId and notType do not apply there and are rejected rather than ignored. Every other filter works the same in both scopes. Answers with {items, page, pageSize, total, hasMore}, where "total" is how many Riddles match the filters in total and "hasMore" whether another page follows.

NameTypeReqDescription
notTypearray|nullExclude specific Riddle types (array of strings, same valid values as type). Omit to exclude nothing. Scope "project" only - the account list has no exclusion filter.
originnull|stringFilter by how the Riddle was created: "api" (Riddle Builder API or Riddle AI, so riddle_delete/riddle_builder_update/palette_customize work on it) or "manual" (built by hand in the Creator, where tho…
pagenull|integerPage number, 1-indexed, 12 Riddles per page (default: 1). Zero or negative is rejected with a VALIDATION_ERROR rather than clamped.
projectIdnull|integerFilter by project ID; omit or null for the authenticated user's personal project. Scope "project" only.
scopestringWhat to list: "project" (default) for the Riddles of a single project, "account" for every Riddle of the account at once.
searchnull|stringSearch term to filter Riddles by title
sortBynull|stringSort field: "created", "published", or "modified"
sortOrdernull|stringSort direction: "ASC" or "DESC"
statusnull|stringFilter by status: "published", "modified", or "draft". Omit to include all statuses.
tagsarray|nullFilter by tag IDs (array of integers). Omit to ignore tags.
typearray|nullFilter by Riddle type (array of strings). Valid values: "Quiz", "Poll", "Form", "Personality", "Predictor", "Minigame", "Leaderboard", "Placeholder", "Story". Omit to include all types.

No output schema declared.

No examples provided.

riddle_move ~642

Moves one or many Riddles into another project or into the personal project - and, given no destination, reports whether it could instead of moving anything. Pass UUID for one Riddle or UUIDs (max 100) for several. CHECK MODE (the move check - a mode of this tool, not a tool of its own): leave projectId out (or pass dryRun: true alongside one) and NOTHING is changed - the call runs the very same validation a real move runs and answers {canMoveAll, movable, blocked, addUUIDs, canMoveToPersonal, projects}. Do this first whenever the Riddles were not all created by you, or to explain to a user why a move is impossible. MOVE MODE: pass projectId (a project/team ID from project_list, or the string "personal") and the Riddles move, answering {bulk, operation, summary, results} with the new project per Riddle. Unlike the other bulk tools this one is atomic - it validates the whole set first and moves nothing if any Riddle is rejected - because Riddles that reference each other (a Quiz and the Leaderboard it reports to, a Form embedded in another Riddle) can only move together. So pass exactly the set you intend to move: the same Riddle can be blocked on its own and movable inside a larger call. When something is blocked, act on the top-level "addUUIDs" (or a blocked entry's "resolveByAddingUUIDs"), add those to UUIDs and check again until canMoveAll is true - connections chain, and blocking travels along them, so never read an empty "missingUUIDs" as "this one is fine" or a blocked Riddle as having a problem of its own. A move drops project-specific ad blocks tied to the old project and updates the published version along with the draft, but it does not adopt the new project's design. Every field of the check answer, why "projects" can be shorter than project_list and when a blocker cannot be resolved at all: riddle://reference/concepts/move-restrictions.

NameTypeReqDescription
UUIDnull|stringThe UUID of the single Riddle you want to move or check. Pass either this or UUIDs.
UUIDsarray|nullSeveral Riddles to move or check at once, as Riddle UUID strings, e.g. ["6FA740EW", "OllsevHa"] (max 100). Pass either this or UUID. For a move, this must be the complete set of Riddles that have to…
dryRunbooleantrue runs the movability check against the given projectId and changes nothing. Pointless without projectId, which already only checks.
projectIdnull|integer|stringWhere to move the Riddles: the project (team) ID to move them into, as returned by project_list, or the string "personal" for your personal project. There is no default destination - omit this and no…

No output schema declared.

No examples provided.

riddle_publish ~570

Publishes one or many Riddles, or takes them off the web again with publish: false - unpublishing is this tool, there is no separate unpublish tool. A published Riddle is live at https://www.riddle.com/view/[RIDDLEID]. With UUID the response is the riddle_get envelope with the new state under "context.published" ("omit" shrinks it the same way); with UUIDs (max 100) it is the bulk envelope, one compact entry per Riddle instead of a build configuration - not atomic and never giving up early, so a Riddle that cannot be (un)published is reported as that entry's "error" while the rest still go through (riddle://reference/concepts/bulk). PUBLISHING: a refusal is error "RIDDLE_PUBLISH_VALIDATE" carrying "validationErrors", one {message, code} per reason ("MIN_ONE_BLOCK", "MIN_ONE_RESULT", "REDIRECT_RESULT_WITHOUT_URL", "LOGIC_DEAD_ENDS", ...) - fix them all and publish again. Non-blocking findings arrive as "validationWarnings" on a FAILED and on a SUCCESSFUL publish alike (the Riddle is live either way): report them, do not retry. Only a publish produces either list - riddle_builder_validate dry-runs a build configuration, not a publish. UNPUBLISHING: a LIVE Leaderboard with active Riddle connections is refused ("RIDDLE_UNPUBLISH", same list naming what is in the way) - riddle_delete it instead, which is always allowed and cleans up the connected Riddles. Unpublishing a Riddle that is not live is a no-op that says so in a "message" - read it before reporting a Riddle as taken offline, because "context.published.at" is null whether it was never published or already offline. Codes and the draft-vs-live model: riddle://reference/concepts/publish.

NameTypeReqDescription
UUIDnull|stringThe UUID of the single Riddle you want to publish or unpublish. Pass either this or UUIDs.
UUIDsarray|nullSeveral Riddles to publish or unpublish at once, as Riddle UUID strings, e.g. ["6FA740EW", "OllsevHa"] (max 100). Pass either this or UUID.
omitarraySame "omit" parameter as riddle_get's, applied to the single-UUID response envelope (see riddle_get for the full description). Has no effect on the bulk (UUIDs) response, which never carries a build…
publishbooleantrue (the default) publishes the Riddles, false takes them off the web again.

No output schema declared.

No examples provided.

riddle_rename ~72

Renames a Riddle with the specified UUID. Returns only the confirmation of the change (uuid, title, modified state), not the entire Riddle.

NameTypeReqDescription
UUIDstringyesThe UUID of the Riddle you want to rename
titlestringyesThe new title for the Riddle

No output schema declared.

No examples provided.

riddle_tag ~507

Puts a tag on Riddles or takes it off again, by "action" - ONE assignment per Riddle, never the tag itself (riddle_tag_list reads the labels of a project, riddle_tag_delete removes one). "add" gives one Riddle (UUID) or many (UUIDs, max 100) the tag named by tagName - created in each Riddle's OWN project if it has none of that name, so one call can span projects - or by tagId, which exists in one project and therefore works only for that project's Riddles; re-tagging changes nothing and needs no publish. "remove" takes the tag off again and creates nothing: a tag the Riddle or its project does not have is an error for that Riddle. Untagging the last carrier deletes the tag itself, unless a question bank still uses it - so a tag rarely has to be deleted by hand. There is no projectId here: a tag lives in the project of the Riddle it is put on, which is where the scope comes from. Both actions return the tag plus all tags of the Riddle, and with UUIDs the {bulk, operation, summary, results} envelope with one entry per Riddle, a failure (no edit permission, a tagId from another project) reported as that entry's "error" without stopping the others.

NameTypeReqDescription
UUIDnull|stringThe UUID of the single Riddle to tag or untag. Pass either this or UUIDs.
UUIDsarray|nullSeveral Riddles to tag or untag at once, as Riddle UUID strings, e.g. ["6FA740EW", "OllsevHa"] (max 100). Pass either this or UUID.
actionstringyesWhat to do with the tag on those Riddles: "add" it or "remove" it. Each takes UUID or UUIDs and tagName or tagId.
tagIdnull|integerThe ID of an existing tag, as returned by riddle_tag_list. Pass either this or tagName.
tagNamenull|stringThe name of the tag. On "add" the Riddle\'s project gets the tag of that name, created if it has none yet; on "remove" nothing is ever created and a name the project does not have is an error. Pass e…

No output schema declared.

No examples provided.

riddle_tag_delete ~252

Deletes the TAG ITSELF from a project - the label, for good - and no Riddle, no question bank and no assignment. Rarely needed: untagging the last carrier already removes a tag (riddle_tag action "remove"), so this is for a leftover from before that cleanup existed. It detaches nothing on the way, so a tag any Riddle or question bank still carries is rejected with a message naming how many of each - check with riddle_tag_list first, where a tag is free only when count AND bankCount are 0, and untag the carriers before calling this. Permanent, and ids are not reused, so a stored riddle_list filter on the old id stops matching a tag of the same name created later.

NameTypeReqDescription
projectIdnull|integerThe project (team) ID the tag belongs to, as returned by project_list. Omit for the project the API key is scoped to, or your personal tags on a user API key.
tagIdintegeryesThe ID of the tag to delete, as returned by riddle_tag_list. The only way to name it: a tag is deleted by id, not by name.

No output schema declared.

No examples provided.

riddle_tag_list ~251

Lists the tags of a project as {items: [{id, name, count, bankCount}]}, unpaginated - the labels the Creator shows and riddle_list's "tags" filter selects by, and where the ids that filter takes come from. Riddle tags and question bank tags are ONE set per project (question_bank_tag is the bank side of the same tags, with the same ids), and a tag belongs to a project: "Campaign 2026" in one project is a different tag from the one of that name in another. "count" counts RIDDLES and "bankCount" question banks, so "count": 0 alone never means unused - a tag is free of carriers only when both are 0, which is what riddle_tag_delete requires. Read this before riddle_tag(action: "add"), which creates a tag it does not find, to tag with the name a project already has rather than a second one beside it.

NameTypeReqDescription
projectIdnull|integerThe project (team) ID, as returned by project_list. Omit for the project the API key is scoped to, or your personal tags on a user API key.

No output schema declared.

No examples provided.

riddle_template_create ~231

Stores an existing Riddle as a template of its project (or of the user, for a personal Riddle), so new Riddles can be created from it with riddle_template_use. The template is a copy taken at this moment - the Riddle keeps living its own life and later changes to it do not reach the template. It copies what the Riddle currently has stored, published or not. Returns the created template: {id, title, type, category, isPublic, isQuickCreate, blocksCount, image, icon, createdAt, riddle}. Requires the template-create permission in the Riddle's project.

NameTypeReqDescription
UUIDstringyesThe UUID of the Riddle to store as a template, e.g. "6FA740EW".
isQuickCreatebooleanWhether the template also shows up in the Creator's "quick create" list, i.e. among the starting points offered when creating a new Riddle. Defaults to false.
titlenull|stringTitle for the template. Omit to keep the Riddle's own title.

No output schema declared.

No examples provided.

riddle_template_get ~503

Reads one template, by default INCLUDING its build configuration - the same "build" shape riddle_get returns and riddle_builder_create accepts. This is how a template is ADAPTED rather than copied: edit the returned "build" (wording, questions, blocks) and build it with riddle_builder_create under the template's "type", passing this id as "templateId" so the new Riddle is still recorded as coming from it - and so it starts out on the template's whole preset, layout included, with your build config on top. The design comes along in "preset", which carries the preset settings and the palette; "preset.paletteValues" is included whenever that palette is not an unmodified built-in one, so a custom (or customized) palette rebuilds directly. On an unmodified built-in palette there is no "paletteValues" at all rather than a partial one: "preset.palette" names it in full (e.g. "Forest") and its colors/fonts come from riddle://reference/palette/built-in-palettes, matched by "name". Not changing anything? riddle_template_use is one call and copies the template whole. Returns {id, title, type, category, isPublic, isQuickCreate, blocksCount, image, icon, createdAt, riddle, build, nextBlockId, warnings}; a template whose content has no build-configuration equivalent comes back with an empty "build" and a warning saying so - use riddle_template_use for those.

NameTypeReqDescription
idintegeryesThe ID of the template, as returned by riddle_template_list or riddle_template_public_list.
includeBuildConfigbooleanWhether to read the template as a build configuration. Defaults to true, which is the point of this tool; false returns only the template's metadata, a far smaller response.
omittedDefaultsnull|booleanWhether every block additionally carries its "omittedDefaults" map - the properties it left out for still being at that block type's default, with the value each is at. Off by default: those maps mea…

No output schema declared.

No examples provided.

riddle_template_list ~264

Lists the templates of a project (or your personal ones) - the ones made from your own Riddles with riddle_template_create, NOT Riddle's public ones, which riddle_template_public_list returns. Quick-create templates (isQuickCreate: true) are included alongside the regular ones; there is no separate listing for them. "type" filters by Riddle type. Returns {items: [{id, title, type, blocksCount, image, icon, createdAt, riddle, isPublic, isQuickCreate}], total} - not paginated, so "total" is simply how many there are - without the build configuration - read that with riddle_template_get, or hand the id straight to riddle_template_use.

NameTypeReqDescription
projectIdnull|integerThe project (team) ID whose templates you want, as returned by project_list. Omit to use the project the API key is scoped to (your personal templates for a user API key).
typenull|stringOnly return templates of this Riddle type: "Quiz", "Poll", "Form", "Personality", "Predictor", "Minigame", "Leaderboard", "Story" or "Placeholder". Omit to get all of them.

No output schema declared.

No examples provided.

riddle_template_public_list ~269

Lists Riddle's public templates - the ready-made ones every account has, as opposed to riddle_template_list's own ones. They are grouped by category (the tag the Creator sorts them by), so calling this without arguments is also how you learn which categories exist; "category" and "type" narrow it. Returns {categories: {<category>: [{id, title, type, blocksCount, image, icon, createdAt, riddle, isPublic}]}, total} - the one listing here that is grouped rather than a flat "items" - and without the build configuration, which is riddle_template_get (or hand the id straight to riddle_template_use).

NameTypeReqDescription
categorynull|stringOnly return templates of this category (the tag public templates are grouped under), a snake_case slug such as "audience_research" or "feedback_surveys" - not a display name. Omit to get every catego…
typenull|stringOnly return templates of this Riddle type: "Quiz", "Poll", "Form", "Personality", "Predictor", "Minigame", "Leaderboard", "Story" or "Placeholder". Omit to get all of them.

No output schema declared.

No examples provided.

riddle_template_use ~338

Creates a new Riddle from a template as an unchanged copy of it - content, settings and design preset - recorded as a copy of the template's Riddle (riddle_get reports it as context.duplicated). Use this whenever the template is what you want; to adapt it first, read it with riddle_template_get and build the edited configuration with riddle_builder_create instead. The new Riddle is a DRAFT - riddle_publish makes it live. Returns it in the standard build-configuration envelope, and takes riddle_get's "omit" to leave sections of it out. Requires the template-use permission plus Riddle-create in the target project.

NameTypeReqDescription
idintegeryesThe ID of the template to create a Riddle from, as returned by riddle_template_list or riddle_template_public_list.
omitarraySame "omit" parameter as riddle_get's, applied to the returned envelope (see riddle_get for the full description): sections of it to leave out, "published" being the one that still moves a copy of a…
projectIdnull|integerThe project (team) ID to create the Riddle in, as returned by project_list. Omit to use the project the API key is scoped to (your personal project for a user API key).
titlenull|stringTitle for the new Riddle. Omit to keep the template's own title.

No output schema declared.

No examples provided.

stats_fetch ~1,031

Views/starts/submissions of one entity - "namespace" plus "entityId" says which (a project, a user, or a Riddle by UUID), "view" how deeply. "totals": one aggregate for the period. The response IS the entity's stats document: metrics sit in "core_metrics" under "global_stats" (a Riddle) or under "stats" (a user/project aggregate, or an old Riddle) - read only "stats" and a Riddle with real traffic looks unmeasured. A Riddle also carries one "block_<blockId>_stats" per block, keyed by riddle_get's ids. "timeseries": those numbers per consecutive interval - {intervalDays, intervalCount, intervals}, each {from, to, days, stats} inclusive of both ends. Up to 31 days give one interval per day; a longer range is grouped into at most 31 equal intervals whose "stats" is the interval TOTAL, not a daily number - divide by "days", and never read the shorter final interval as a drop. "breakdown" is per namespace: "riddle" gives one Riddle down to its blocks, choices and fields, every "id" being the stored block id riddle_get's "build" exposes, so a weak question can be fixed directly; "project" gives that tree for every Riddle in it - prefer a short range, or one Riddle, on a big project; "user" gives NOT a deep breakdown but the account-wide summary: one row per Riddle plus the totals over every Riddle in scope, ranked by sortBy, 25 per page ("hasMore" says whether another follows), narrowed with projectIds rather than paged on a big account, requires a USER API key, takes no entityId. Two kinds of "no data": an empty response ({}, always an object, never a list) means nothing was recorded - report "no stats recorded", never 0 - while a missing key inside a POPULATED "core_metrics" is a genuine zero (no "finish" beside a "view" means no submissions). A "breakdown" signals nothing by shape: a Riddle nobody opened still answers with its full tree at 0, so confirm it was published then (riddle_get's "published": null means it never was) before reading zeros as a finding.

NameTypeReqDescription
dateFromnull|stringStart date (inclusive), format: YYYY-MM-DD, e.g. "2026-01-01". Required for "timeseries". On "totals" and a Riddle/project "breakdown", omit both dates for alltime and pass only one for an open-ended…
dateTonull|stringEnd date (inclusive), format: YYYY-MM-DD, e.g. "2026-01-31". Same rules as dateFrom; where a default applies it is today.
entityIdnull|stringID of the entity: a project ID (integer as string) for "project", a user ID (integer as string) for "user", a Riddle UUID for "riddle". Get them from project_list, whoami ("user", not the string "use…
namespacestringyesEntity type to fetch stats for.
pagenull|integerPage number of the account-wide summary, 1-indexed (default: 1). Zero or negative is rejected with a VALIDATION_ERROR, not clamped to page 1 - the same contract as riddle_list/project_list. That view…
projectIdsarray|nullNarrow the account-wide summary to these project IDs (array of integers, from project_list). Omit to cover the whole account, including the personal project. Passing a project the user cannot view st…
sortBystringMetric the account-wide summary's Riddles are ranked by before the page is cut: "views" (default), "starts", "submissions" or "timeActive". Sorting always spans the whole account (or the projects giv…
viewstringyesHow deeply to measure: "totals" (one aggregate for the period), "timeseries" (that aggregate per consecutive interval, requires dateFrom and dateTo) or "breakdown" (the per-block detail, or the per-R…

No output schema declared.

No examples provided.

whoami ~215

Reports the current API key: the authenticated user ("userEmail"/"userName", the latter null if never set), the project/team on a project-scoped key, and the account's plan in "subscription" ({plan, period, active, created, termEnd, isFreeTrial, daysLeft} - on a free trial "termEnd" is when the trial ends and "daysLeft" what is left of it, null on a paid plan). The plan is informational: every tool here works on every plan, free trial included, and no call is refused for it. Mind which id is which: the response's own "id" is the API KEY row, the user id (what the stats tools want as "entityId" for namespace "user") is "user", and "team" is the project id on a project key. A Riddle's own "plan" in riddle_get is a different thing - the plan level the features used in THAT Riddle need, not the account's.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Common questions

What is the Riddle MCP server?

Riddle is an MCP server listed in the public MCP registry as com.riddle/creator. Build, publish and analyze quizzes, polls, forms and personality tests. Riddle account required. This page covers its hosted endpoint (https://www.riddle.com/creator/api/v3/mcp).

Is the Riddle MCP server safe to use?

Riddle scores 84 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Riddle MCP server expose?

Riddle exposes 38 tools: media_upload_link, media_delete, riddle_template_create, riddle_template_list, riddle_template_public_list, and 33 more. Their descriptions and schemas cost roughly 15,933 tokens of context every time the server is loaded.

Does the Riddle MCP server require authentication?

Yes. Riddle asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the Riddle MCP server still maintained?

Riddle is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.