# io.github.dappros/ethora-mcp-server (remote · mcp.chat.ethora.com) Ethora chat platform MCP: apps, users, rooms, AI agents, chat widgets. Hosted or stdio. - Trust score: 67/100 (medium) - Registry status: active - Liveness: live - Owner verified: no - Last scored: 2026-09-20 ## Components - remote · `mcp.chat.ethora.com`: 67/100 (this document), [markdown](https://verifymcp.io/servers/dappros-ethora-mcp-server/mcp.md), [page](https://verifymcp.io/servers/dappros-ethora-mcp-server/mcp) - remote · `mcp.chat.ethora.com`: 38/100, [markdown](https://verifymcp.io/servers/dappros-ethora-mcp-server/mcp-oauth.md), [page](https://verifymcp.io/servers/dappros-ethora-mcp-server/mcp-oauth) - npm · `@ethora/mcp-server`: 83/100, [markdown](https://verifymcp.io/servers/dappros-ethora-mcp-server/ethora-mcp-server.md), [page](https://verifymcp.io/servers/dappros-ethora-mcp-server/ethora-mcp-server) ## Channel facts - Endpoint: `https://mcp.chat.ethora.com/mcp` - Transports: `streamable-http` - Auth: `none` - Version: `26.9.3` ## Trust breakdown How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog) Scored 2026-09-20. - **Endpoint Security**: 63/100 - The endpoint's TLS certificate is valid, in date, and uses a strong key. - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (ethora-files-delete-v2). - HTTPS is enforced; there's no plaintext access path. - The HSTS (Strict-Transport-Security) header is present. - DNSSEC check failed: this domain isn't protected by DNSSEC. - **Transport & Reachability**: 100/100 - Verified streamable-http transport via a live MCP handshake. - **Schema Quality & AI Usability**: 77/100 - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name). - AI-judged instruction clarity (excellent). - Context-footprint check failed: tool/resource definitions use about 21324 tokens (~224/item across 95 items; 91 tools + 4 resources), over budget; trim descriptions and params. - Usage-examples check failed: none of the tools include examples. - **Stability & Change Management**: 15/100 - Stability check failed: schema churn in the 5 days we've observed: 1 tool removals, 1 breaking changes, 0 auth/transport breaks, 2 additions. - **Tool Coverage**: 97/100 - 100% of tools have a non-trivial description (not blank, and not just the tool's name). - 90% of tool parameters carry a description. - **Tool Safety**: 100/100 - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured. - All 13 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation. - An AI judge read all 93 captured unit(s) of tool text and found none that tries to manipulate the model reading it. - **Capabilities**: 60/100 - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. ## Install ### How do I install the io.github.dappros/ethora-mcp-server server? io.github.dappros/ethora-mcp-server is a hosted endpoint at https://mcp.chat.ethora.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation. ### Claude ```bash claude mcp add --transport http dappros-ethora-mcp-server 'https://mcp.chat.ethora.com/mcp' ``` ### Cursor ```json { "mcpServers": { "dappros-ethora-mcp-server": { "url": "https://mcp.chat.ethora.com/mcp" } } } ``` ### VS Code ```json { "servers": { "dappros-ethora-mcp-server": { "type": "http", "url": "https://mcp.chat.ethora.com/mcp" } } } ``` ### Codex ```toml [mcp_servers.dappros-ethora-mcp-server] url = "https://mcp.chat.ethora.com/mcp" ``` ### opencode ```json { "$schema": "https://opencode.ai/config.json", "mcp": { "dappros-ethora-mcp-server": { "type": "remote", "url": "https://mcp.chat.ethora.com/mcp", "enabled": true } } } ``` ### OpenClaw ```bash openclaw mcp add dappros-ethora-mcp-server --url 'https://mcp.chat.ethora.com/mcp' --transport streamable-http ``` ### Hermes ```yaml mcp_servers: dappros-ethora-mcp-server: url: "https://mcp.chat.ethora.com/mcp" ``` ### Netclaw ```json { "McpServers": { "dappros-ethora-mcp-server": { "Transport": "http", "Url": "https://mcp.chat.ethora.com/mcp" } } } ``` ### Vellum ```bash assistant mcp add dappros-ethora-mcp-server -t streamable-http -u 'https://mcp.chat.ethora.com/mcp' ``` ### Other ```json { "mcpServers": { "dappros-ethora-mcp-server": { "type": "http", "url": "https://mcp.chat.ethora.com/mcp" } } } ``` The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs. ## Changelog Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims. ### 2026-09-19 (score 67, +1) No change was recorded against any check on this day. Stability & Change Management went from 8 to 12. ### 2026-09-17 (score 66, 0) - [security regression] Stability: 0.03 → fail - [security regression] A breaking change shipped without a version bump: still 26.9.1 - [security regression] Tool “ethora-wallet-get-balance” was removed - [security] The server rewrote its instructions, which are the text every model session reads - [security] Tool “ethora-bot-disable-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-clone-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-create-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-delete-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-export-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-get-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-import-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-update-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-api-key-revoke” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-create” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-create-chat” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-delete” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-delete-chat” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-export-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-get-default-rooms-with-app-id” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-import-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-list” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-tokens-revoke-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-tokens-rotate-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-app-update” rewrote its description, which is the text the model reads - [security] Tool “ethora-b2b-bot-enable” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-enable-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-get-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-instance-diag” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-instance-leave-chat” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-instance-status” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-instance-test-message” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-instances-list” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-update-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-bot-widget-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-chats-broadcast-job-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-chats-broadcast-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-chats-history-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-chats-message-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-files-delete-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-files-get-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-generate-chat-component-app-tsx” rewrote its description, which is the text the model reads - [security] Tool “ethora-messages-context-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-messages-search-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-run-recipe” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-docs-delete” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-docs-delete-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-docs-list-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-docs-tags-update-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-docs-upload” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-docs-upload-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-crawl-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-crawl-v2-wait” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-delete-url-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-delete-url-v2-batch” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-list-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-reindex-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-reindex-v2-wait” rewrote its description, which is the text the model reads - [security] Tool “ethora-sources-site-tags-update-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-unread-counts-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-users-batch-job-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-wait-broadcast-job-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-wait-users-batch-job-v2” rewrote its description, which is the text the model reads - [security] Tool “ethora-widget-embed-snippet” rewrote its description, which is the text the model reads - [security] Tool “ethora-agent-invite-to-chat” rewrote its description, which is the text the model reads - [security] Tool “ethora-agent-set-visibility” rewrote its description, which is the text the model reads - [security] Tool “ethora-agent-soul-append” rewrote its description, which is the text the model reads - [security] Tool “ethora-agent-soul-set” rewrote its description, which is the text the model reads - [security] Tool “ethora-agents-activate-v2” rewrote its description, which is the text the model reads - [functional regression] Schema quality: 192 → 224 - [functional regression] Schema quality: 192 → 222 - [functional regression] “ethora-agents-import-v2” made “bundle” required, so existing callers break - [functional] Server version: 26.9.1 → 26.9.3 - [functional] New tool “ethora-feedback-submit” - [functional] New tool “ethora-app-credentials” - [cosmetic] “ethora-agents-activate-v2” added an optional parameter “agentIdOrAddress” - [cosmetic] “ethora-agents-clone-v2” added an optional parameter “agentIdOrAddress” - [cosmetic] “ethora-agents-create-v2” added an optional parameter “flowsYaml” - [cosmetic] “ethora-agents-delete-v2” added an optional parameter “agentId” - [cosmetic] “ethora-agents-export-v2” added an optional parameter “agentId” - [cosmetic] “ethora-agents-get-v2” added an optional parameter “agentIdOrAddress” - [cosmetic] “ethora-agents-update-v2” added an optional parameter “agentIdOrAddress” - [cosmetic] “ethora-agents-update-v2” added an optional parameter “flowsYaml” - [cosmetic] “ethora-app-update” added an optional parameter “appTagline” - [cosmetic] “ethora-bot-instance-diag” added an optional parameter “agentId” - [cosmetic] “ethora-bot-instance-leave-chat” added an optional parameter “agentId” - [cosmetic] “ethora-bot-instance-test-message” added an optional parameter “agentId” - [cosmetic] “ethora-bot-instances-list” added an optional parameter “agentIdOrAddress” - [cosmetic] “ethora-agent-invite-to-chat” added an optional parameter “agentId” - [cosmetic] “ethora-agent-set-visibility” added an optional parameter “agentId” - [cosmetic] “ethora-agent-soul-append” added an optional parameter “agentId” - [cosmetic] “ethora-agent-soul-set” added an optional parameter “agentId” - [cosmetic] “ethora-agents-import-v2” reworded the description of “bundle” - [cosmetic] “ethora-app-update” reworded the description of “appDescription” - [cosmetic] “ethora-sources-site-crawl-v2-wait” reworded the description of “timeoutMs” - [cosmetic] “ethora-sources-site-reindex-v2-wait” reworded the description of “timeoutMs” - [cosmetic] “ethora-agents-activate-v2” made “agentId” optional - [cosmetic] “ethora-agents-clone-v2” made “agentId” optional - [cosmetic] “ethora-agents-delete-v2” made “agentIdOrAddress” optional - [cosmetic] “ethora-agents-export-v2” made “agentIdOrAddress” optional - [cosmetic] “ethora-agents-get-v2” made “agentId” optional - [cosmetic] “ethora-agents-update-v2” made “agentId” optional - [cosmetic] “ethora-bot-instance-diag” made “agentIdOrAddress” optional - [cosmetic] “ethora-bot-instance-leave-chat” made “agentIdOrAddress” optional - [cosmetic] “ethora-bot-instance-test-message” made “agentIdOrAddress” optional - [cosmetic] “ethora-agent-invite-to-chat” made “agentIdOrAddress” optional - [cosmetic] “ethora-agent-set-visibility” made “agentIdOrAddress” optional - [cosmetic] “ethora-agent-soul-append” made “agentIdOrAddress” optional - [cosmetic] “ethora-agent-soul-set” made “agentIdOrAddress” optional ### 2026-09-16 (score 66, 0) - [functional improvement] Stability: unverified → 0.03 ### 2026-09-15 (score 66) First indexed and scored. ## MCP tools (91) ### `ethora-configure` (~306 tokens) Configure Connection Set the Ethora API URL and credentials for this MCP session. Stores values in memory only; each call merges with omitted fields kept. Alternative to env vars (ETHORA_API_URL / ETHORA_APP_JWT / ETHORA_APP_TOKEN / ETHORA_B2B_TOKEN). On a hosted server `apiUrl` is fixed and cannot be changed; credentials are per session. Auth: none required — this establishes auth material. Errors: only if a value is structurally invalid. Follow with an `ethora-auth-use-*` tool to pick the active mode. Input parameters: - `apiUrl` (string): Full Ethora API URL including the version path, e.g. `https://api.chat.ethora.com/v1` or `http://localhost:8080/v1`. If you only have the host, set ETHORA_BASE_URL env instead and the server appends… - `appJwt` (string): Ethora App JWT, used only to bootstrap login/register in user-auth mode. Usually starts with `JWT `. Secret — never commit it. - `appToken` (string): Per-app appToken for app-scoped flows (broadcast, sources, bot). Setting this makes app-token auth available via `ethora-auth-use-app`. Secret. - `b2bToken` (string): B2B server token for tenant-actor `x-custom-token` auth (a JWT with `type=server`). Required for B2B provisioning flows. Secret. ### `ethora-status` (~97 tokens) Session Status Report the current Ethora MCP session state: configured API URL, active auth mode, which credentials are present (booleans like `hasAppJwt` — values never echoed), the selected appId/agentId, and `hosted`/`sessionId` on the hosted (Streamable HTTP) server. Auth: none required. Errors: effectively none. Related: `ethora-doctor` for an active connectivity check. ### `ethora-help` (~113 tokens) Help and Next Steps Task-oriented orientation for this MCP server: explains the three Ethora auth modes (user / app-token / B2B) and recommends next tool calls + recipes based on current session state. Auth: none required — inspects state, no API calls. Errors: effectively none. Related: pass a recommended recipe id to `ethora-run-recipe`. Input parameters: - `goal` (string): Goal hint to tailor the recommendations and recipe list. Omit or use `auto` to get recommendations inferred from the current session state. ### `ethora-run-recipe` (~303 tokens) Run Recipe Execute a built-in recipe — an ordered sequence of this server's own tool calls — by id. Recipes capture common flows (B2B bootstrap, broadcast, sources ingest). Use `dryRun: true` to preview resolved steps. Omit `recipeId` to list runnable recipes for a `goal`. Requires: the inputs the chosen recipe lists; call without `recipeId` first to see the recipes and their required inputs. Auth: depends on the recipe's steps — configure those first (see `ethora-help`). Errors: stops at the first failing step and returns the partial log; a missing required `vars` entry fails fast before any step runs. Input parameters: - `dryRun` (boolean): If true, resolve and return the step list with `vars` substituted but execute nothing. Use this to preview a recipe before running it for real. - `goal` (string): Goal scope used to look up recipes when `recipeId` is omitted. Defaults to `auto`. - `recipeId` (string): Id of the recipe to run. Omit to instead list the runnable recipes for the selected `goal` (get ids from `ethora-help`). - `vars` (object): Key/value substitutions injected into recipe steps (e.g. appId, appToken, b2bToken, appJwt, email, password, apiUrl). A recipe declares which vars it requires; missing required vars fail the run befo… ### `ethora-doctor` (~124 tokens) Connection Doctor Diagnose the session: validate the config is internally consistent for the active auth mode and ping the Ethora API (`GET /v1/ping`). Returns `{ state, checks, ping, suggestions }`. Auth: none required; report is tailored to whatever credentials are set. Errors: rarely throws — instead returns `suggestions` and a `ping.ok: false` block when the API is unreachable. Input parameters: - `timeoutMs` (integer): HTTP timeout in milliseconds for the ping request. Defaults to 3000. Raise it on slow links, lower it to fail fast. ### `ethora-auth-use-app` (~93 tokens) Use App Token Auth Switch this session's active auth mode to app-token, so subsequent app-scoped calls authenticate with the configured `appToken`. Auth: requires an `appToken` to already be configured (via `ethora-configure`, ETHORA_APP_TOKEN env, or `ethora-app-select`). Errors: returns an error if no `appToken` is configured. Related: use after `ethora-app-select`. ### `ethora-auth-use-user` (~94 tokens) Use User Auth Switch this session's active auth mode to user-session, so subsequent calls authenticate as a logged-in Ethora user. Auth: the switch needs nothing, but user-auth tools only work once `ethora-user-login` stores a user token (login also needs a configured `appJwt`). Errors: none on the switch; downstream tools return 401 until login succeeds. Related: follow with `ethora-user-login`. ### `ethora-auth-use-b2b` (~135 tokens) Use B2B Auth Switch this session's active auth mode to B2B, so subsequent calls authenticate as a tenant actor via the `x-custom-token` header. Auth: requires a `b2bToken` (JWT with `type=server`) to already be configured (via `ethora-configure` or ETHORA_B2B_TOKEN env). Errors: returns an error if no `b2bToken` is configured. Related: server-side automation — pairs with `ethora-b2b-app-create`, `ethora-users-batch-create-v2`, `ethora-app-tokens-*-v2`. ### `ethora-app-select` (~239 tokens) Select App Set the current app context for this session so app-scoped tools can omit their `appId` argument. Stores `currentAppId` and, if given, `appToken` (which defaults the auth mode to app-token unless `authMode` overrides). Auth: none required to set the context. Errors: effectively none — a non-existent `appId` is not validated here; the first app-scoped API call surfaces the 404. Related: pairs with `ethora-auth-use-app`. Input parameters: - `appId` (string, required): 24-char hex Ethora appId to set as the current context. Get it from `ethora-app-list`, `ethora-app-create`, or a B2B create/provision response. - `appToken` (string): Per-app appToken to store alongside the appId. If provided, the active auth mode switches to app-token (unless `authMode` says otherwise). Secret. - `authMode` (string): Auth mode to keep after selecting the app. Omit to let the mode default to app-token when an `appToken` is given, or stay unchanged otherwise. ### `ethora-chats-broadcast-v2` (~298 tokens) Broadcast Message Enqueue an asynchronous broadcast job posting a message to one or more chat rooms of an app — returns a `jobId`; messages are not sent synchronously. Targeting is exclusive: `allRooms`, `chatIds`, or `chatNames`, not a mix. Requires: a selected app with at least one room (`ethora-app-create-chat`). Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 400 no target or conflicting targets; 404 unknown `appId` or room. Related: track with `ethora-wait-broadcast-job-v2`. Input parameters: - `allRooms` (boolean): If true, broadcast to every room in the app. Mutually exclusive with `chatIds` and `chatNames`. - `appId` (string): 24-char hex appId to broadcast in. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode (the token determines the app). - `chatIds` (array): Explicit list of chat ids to target. Mutually exclusive with `allRooms` and `chatNames`. - `chatNames` (array): Explicit list of chat JIDs or localparts to target. Mutually exclusive with `allRooms` and `chatIds`. - `text` (string, required): Plain-text message body to broadcast to the targeted rooms. ### `ethora-chats-broadcast-job-v2` (~198 tokens) Get Broadcast Job Fetch the current status and per-room results of a broadcast job by `jobId` (one-shot, no polling). Returns the job object with its `state` (pending/running/completed/failed). Requires: a selected app with at least one room (`ethora-app-create-chat`). Auth: app-token mode OR B2B mode with an explicit `appId` — must match the auth used to enqueue the job. Errors: 401/403 wrong auth; 404 unknown `jobId`. Related: `ethora-wait-broadcast-job-v2` for a blocking wait. Input parameters: - `appId` (string): 24-char hex appId the job belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `jobId` (string, required): Job id returned by `ethora-chats-broadcast-v2`. ### `ethora-wait-broadcast-job-v2` (~262 tokens) Wait for Broadcast Job Block until a broadcast job reaches a terminal state (`completed` or `failed`) or until `timeoutMs` — read-only polling wrapper around `ethora-chats-broadcast-job-v2`. Returns `{ done, state, job }`, or `{ done: false, reason: "timeout" }` on timeout. Requires: a `jobId` returned by `ethora-chats-broadcast-job-v2`. Auth: app-token mode OR B2B mode with an explicit `appId` — must match the auth used to enqueue the job. Errors: 401/403 wrong auth; 404 unknown `jobId`. Input parameters: - `appId` (string): 24-char hex appId the job belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `intervalMs` (integer): Delay between status checks, in milliseconds. Default 1000. Lower = more responsive but more API calls. - `jobId` (string, required): Job id returned by `ethora-chats-broadcast-v2`. - `timeoutMs` (integer): Maximum time to wait, in milliseconds. Default 60000. Caps at 300000 (5 min). ### `ethora-files-upload-v2` (~134 tokens) Upload File Upload 1–5 files to the authenticated user's Ethora file storage (`POST /v2/files`). Each upload is a new record (no overwrite-by-name); files passed as base64, 50MB max each. Auth: user-auth mode with an active user session (`ethora-user-login` first). Errors: 401 not logged in; 413 size limit exceeded; 422 unsupported mime type. Related: manage with `ethora-files-get-v2` / `ethora-files-delete-v2`. Input parameters: - `files` (array, required): 1 to 5 files to upload in this call. ### `ethora-files-get-v2` (~122 tokens) Get File List the authenticated user's files, or fetch one file's metadata by id (`GET /v2/files`). Returns an array when `id` is omitted, a single record when given. Requires: a file id from `ethora-files-upload-v2`. Auth: user-auth mode with an active user session. Errors: 401 not logged in; 404 unknown `id` or not owned by the user. Input parameters: - `id` (string): File id to fetch a single record. Omit to list all files owned by the logged-in user. ### `ethora-files-delete-v2` (~127 tokens) Delete File Permanently delete one of the authenticated user's files by id (`DELETE /v2/files/:id`). Removes the record and its stored content; not reversible. Requires: a file id from `ethora-files-upload-v2`. Auth: user-auth mode with an active user session. Errors: 401 not logged in; 403 not owned by the user; 404 unknown `id`. Related: get ids from `ethora-files-get-v2`. Input parameters: - `id` (string, required): Id of the file to delete. Get it from `ethora-files-get-v2`. ### `ethora-sources-docs-upload` (~188 tokens) Upload Knowledge Document (Legacy) Upload documents (1–5; PDF, text, etc.) into an app's RAG sources (legacy user-auth route). Async — content becomes queryable once indexing finishes; files passed as base64, 50MB max each. Requires: a selected app (`ethora-app-select`) or an explicit `appId`. Auth: user-auth mode, active session; the user must own the app. Errors: 401 not logged in; 403 not owner; 413 too large; 422 unsupported document type. Related: app-token/B2B flows use `ethora-sources-docs-upload-v2`. Input parameters: - `appId` (string): 24-char hex appId to ingest into. Optional — defaults to the app set via `ethora-app-select`. - `files` (array, required): 1 to 5 documents to ingest in this call. ### `ethora-sources-docs-delete` (~199 tokens) Delete Knowledge Document (Legacy) Remove a previously ingested document from an app's RAG sources by `docId` (legacy user-auth route). Deletes the document record and its embeddings; not reversible. Requires: a document id from `ethora-sources-docs-list-v2`. Auth: user-auth mode, active session; the user must own the app. Errors: 401 not logged in; 403 not owner; 404 unknown `docId`. Related: get `docId` from `ethora-sources-docs-list-v2`; app-token/B2B uses `ethora-sources-docs-delete-v2`. Input parameters: - `appId` (string): 24-char hex appId the document belongs to. Optional — defaults to the app set via `ethora-app-select`. - `docId` (string, required): Id of the ingested document to delete. Get it from `ethora-sources-docs-list-v2`. ### `ethora-sources-site-crawl-v2` (~239 tokens) Crawl Website Source Crawl a website URL and ingest its content into an app's RAG sources (app-token / B2B variant of `ethora-sources-site-crawl`). Async — returns once the job is accepted; `followLink: true` follows in-domain links and can ingest many pages. Requires: a selected app (`ethora-app-select`) or an explicit `appId`. Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 400 malformed `url`; 404 unknown `appId`. Related: `ethora-sources-site-crawl-v2-wait` (block until done). Input parameters: - `appId` (string): 24-char hex appId to ingest into. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `followLink` (boolean): If true, also crawl in-domain links reachable from `url`. Can ingest many pages — use with care. - `url` (string, required): Absolute URL to crawl, e.g. `https://example.com/docs`. ### `ethora-sources-site-reindex-v2` (~246 tokens) Reindex Website Source Re-crawl and re-embed a previously crawled URL by its `urlId`, refreshing its RAG content (app-token / B2B variant of `ethora-sources-site-reindex`). Async — the existing source record is updated in place once indexing finishes. Requires: an indexed site URL from `ethora-sources-site-list-v2` (crawled with `ethora-sources-site-crawl-v2`). Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId` or `urlId`. Related: get `urlId` from `ethora-sources-site-list-v2`; `ethora-sources-site-reindex-v2-wait` blocks until done. Input parameters: - `appId` (string): 24-char hex appId the URL belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `urlId` (string, required): Id of a previously crawled URL record. Get it from `ethora-sources-site-list-v2`. ### `ethora-sources-site-crawl-v2-wait` (~323 tokens) Crawl Website Source and Wait Crawl a website URL and wait for the crawl to finish: enqueues the job, then polls it until it reports `completed` or `failed`. Returns `{ done, status, jobId, polls, durationMs, result }`; `done: false` with a `note` means the budget ran out while the job was still running (it usually finishes server-side anyway). Requires: a selected app (`ethora-app-select`) or an explicit `appId`. Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 400 malformed `url`; 504/timeout if it takes longer than `timeoutMs` (the job may still complete server-side — check with `ethora-sources-site-list-v2`). Input parameters: - `appId` (string): 24-char hex appId to ingest into. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `followLink` (boolean): If true, also crawl in-domain links reachable from `url`. Can ingest many pages — use with care. - `timeoutMs` (integer): How long to poll for the crawl to finish, in milliseconds. Default 45000, chosen to stay under the ~60s request timeout most MCP clients enforce. Caps at 600000 (10 min) for clients that allow longer… - `url` (string, required): Absolute URL to crawl, e.g. `https://example.com/docs`. ### `ethora-sources-site-reindex-v2-wait` (~331 tokens) Reindex Website Source and Wait Re-crawl and re-embed a previously crawled URL and wait for it to finish: enqueues the job, then polls it until it reports `completed` or `failed`. Returns `{ done, status, jobId, polls, durationMs, result }`; `done: false` with a `note` means the budget ran out while the job was still running. Requires: an indexed site URL from `ethora-sources-site-list-v2` (crawled with `ethora-sources-site-crawl-v2`). Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId` or `urlId`; 504/timeout if it takes longer than `timeoutMs` (the job may still complete server-side). Related: get `urlId` from `ethora-sources-site-list-v2`. Input parameters: - `appId` (string): 24-char hex appId the URL belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `timeoutMs` (integer): How long to poll for the reindex to finish, in milliseconds. Default 45000, chosen to stay under the ~60s request timeout most MCP clients enforce. Caps at 600000 (10 min) for clients that allow long… - `urlId` (string, required): Id of a previously crawled URL record. Get it from `ethora-sources-site-list-v2`. ### `ethora-sources-site-list-v2` (~176 tokens) List Website Sources List an app's crawled website sources, including each source's id, URL, and current RAG tags. Their ids feed `ethora-sources-site-tags-update-v2`, `ethora-sources-site-delete-url-v2-batch`, and `ethora-sources-site-reindex-v2`. Requires: a selected app (`ethora-app-select`) or an explicit `appId`. Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId`; empty list if nothing has been crawled. Input parameters: - `appId` (string): 24-char hex appId to list sources for. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. ### `ethora-sources-site-tags-update-v2` (~275 tokens) Update Website Source Tags Set the RAG retrieval tags on a crawled website source — replaces the source's tag set with the provided `tags` array (not additive; pass `[]` to clear all). Tags let the bot's `ragTags` narrow retrieval. Requires: an indexed site URL from `ethora-sources-site-list-v2` (crawled with `ethora-sources-site-crawl-v2`). Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId` or `sourceId`. Related: get `sourceId` from `ethora-sources-site-list-v2`; doc equivalent is `ethora-sources-docs-tags-update-v2`. Input parameters: - `appId` (string): 24-char hex appId the source belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `sourceId` (string, required): Id of the crawled site source to tag. Get it from `ethora-sources-site-list-v2`. - `tags` (array, required): The complete desired tag set for this source (replaces any existing tags). Up to 50 tags; pass `[]` to clear all. ### `ethora-sources-site-delete-url-v2` (~251 tokens) Delete Website Source URL Remove a single crawled URL from an app's RAG sources, matched by its exact url string (app-token / B2B variant of `ethora-sources-site-delete-url`). Deletes the source record and its embeddings; not reversible. Matches on the exact stored URL string. Requires: an indexed site URL from `ethora-sources-site-list-v2` (crawled with `ethora-sources-site-crawl-v2`). Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 `url` not a crawled source. Related: get the stored value from `ethora-sources-site-list-v2`; bulk-by-id is `ethora-sources-site-delete-url-v2-batch`. Input parameters: - `appId` (string): 24-char hex appId the URL belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `url` (string, required): Exact crawled URL string to remove (must match what was stored — get it from `ethora-sources-site-list-v2`). ### `ethora-sources-docs-upload-v2` (~218 tokens) Upload Knowledge Document Upload documents (1–5; PDF, text, etc.) into an app's RAG sources (app-token / B2B variant of `ethora-sources-docs-upload`). Async — content becomes queryable once indexing finishes; files passed as base64, 50MB max each. Requires: a selected app (`ethora-app-select`) or an explicit `appId`. Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId`; 413 too large; 422 unsupported document type. Related: `ethora-sources-docs-list-v2`, `ethora-sources-docs-delete-v2`. Input parameters: - `appId` (string): 24-char hex appId to ingest into. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `files` (array, required): 1 to 5 documents to ingest in this call. ### `ethora-sources-docs-list-v2` (~180 tokens) List Knowledge Documents List an app's ingested documents, including each document's id, name, and current RAG tags. Their ids feed `ethora-sources-docs-tags-update-v2` and `ethora-sources-docs-delete-v2`. Requires: a selected app (`ethora-app-select`) or an explicit `appId`. Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId`; empty list if nothing has been uploaded. Related: website-sources equivalent is `ethora-sources-site-list-v2`. Input parameters: - `appId` (string): 24-char hex appId to list documents for. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. ### `ethora-sources-docs-tags-update-v2` (~259 tokens) Update Knowledge Document Tags Set the RAG retrieval tags on an ingested document — replaces the document's tag set with the provided `tags` array (not additive; pass `[]` to clear all). Tags let the bot's `ragTags` narrow retrieval. Requires: a document id from `ethora-sources-docs-list-v2`. Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId` or `docId`. Related: get `docId` from `ethora-sources-docs-list-v2`; website-source equivalent is `ethora-sources-site-tags-update-v2`. Input parameters: - `appId` (string): 24-char hex appId the document belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `docId` (string, required): Id of the ingested document to tag. Get it from `ethora-sources-docs-list-v2`. - `tags` (array, required): The complete desired tag set for this document (replaces any existing tags). Up to 50 tags; pass `[]` to clear all. ### `ethora-sources-docs-delete-v2` (~206 tokens) Delete Knowledge Document Remove a previously ingested document from an app's RAG sources by `docId` (app-token / B2B variant of `ethora-sources-docs-delete`). Deletes the document record and its embeddings; not reversible. Requires: a document id from `ethora-sources-docs-list-v2`. Auth: app-token mode OR B2B mode with an explicit `appId`. Errors: 401/403 wrong auth; 404 unknown `appId` or `docId`. Related: get `docId` from `ethora-sources-docs-list-v2`. Input parameters: - `appId` (string): 24-char hex appId the document belongs to. Required in B2B mode unless already set via `ethora-app-select`; ignored in app-token mode. - `docId` (string, required): Id of the ingested document to delete. Get it from `ethora-sources-docs-list-v2`. ### `ethora-users-batch-create-v2` (~215 tokens) Batch Create Users Provision many Ethora users (1–100) in one asynchronous batch job — the bulk equivalent of `ethora-user-register`. Enqueues a background job (HTTP 202); the job reports per-user conflicts rather than failing the whole batch. Returns `{ jobId, statusUrl }`. Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`). Errors: 401/403 not in B2B mode; 422 `usersList` validation. Related: track with `ethora-wait-users-batch-job-v2`. Input parameters: - `bypassEmailConfirmation` (boolean): If true, created users skip email verification and are immediately usable. If false/omitted, each user receives a verification link. - `timeoutMs` (integer): HTTP timeout for the job-creation request (not the job itself), in milliseconds. Default 30000. - `usersList` (array, required): The users to create, 1–100 per batch. ### `ethora-users-batch-job-v2` (~198 tokens) Get Users Batch Job Fetch the current status and per-user results of a users batch job by `jobId` (one-shot, no polling). Returns the job object with its `state` (pending/running/completed/failed) and per-user outcomes. Requires: a `jobId` returned by `ethora-users-batch-create-v2`. Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`) — must match the auth used to create the job. Errors: 401/403 not in B2B mode; 404 unknown `jobId`. Related: `ethora-wait-users-batch-job-v2` for a blocking wait. Input parameters: - `jobId` (string, required): Job id returned by `ethora-users-batch-create-v2`. - `timeoutMs` (integer): HTTP timeout for this status request, in milliseconds. Default 10000. ### `ethora-wait-users-batch-job-v2` (~223 tokens) Wait for Users Batch Job Block until a users batch job reaches a terminal state (`completed` or `failed`) or `timeoutMs` — read-only polling wrapper around `ethora-users-batch-job-v2`. Returns `{ done, state, job }`, or `{ done: false, reason: "timeout" }` on timeout. Requires: a `jobId` returned by `ethora-users-batch-create-v2`. Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`) — must match the auth used to create the job. Errors: 401/403 not in B2B mode; 404 unknown `jobId`. Input parameters: - `intervalMs` (integer): Delay between status checks, in milliseconds. Default 1000. - `jobId` (string, required): Job id returned by `ethora-users-batch-create-v2`. - `timeoutMs` (integer): Maximum time to wait, in milliseconds. Default 60000. Caps at 300000 (5 min). ### `ethora-app-tokens-list-v2` (~164 tokens) List App Tokens List the app tokens issued for an app — metadata only (`tokenId`, label, created/rotated timestamps, status); the secret token values are never returned (only shown once at create/rotate time). Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`). Errors: 401/403 not in B2B mode; 400 no `appId` and none selected; 404 unknown `appId`. Input parameters: - `appId` (string): 24-char hex appId to list tokens for. Optional — defaults to the app set via `ethora-app-select`. - `timeoutMs` (integer): HTTP timeout for this request, in milliseconds. Default 10000. ### `ethora-app-tokens-create-v2` (~232 tokens) Create App Token Mint a new app token for an app. The secret token value is returned exactly once and cannot be retrieved again — capture it immediately. Returns the new token including its one-time secret value and `tokenId`. Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`). Errors: 401/403 not in B2B mode; 400 no `appId` and none selected; 404 unknown `appId`. Related: manage with `ethora-app-tokens-list-v2` / `-rotate-v2` / `-revoke-v2`. Input parameters: - `appId` (string): 24-char hex appId to mint the token for. Optional — defaults to the app set via `ethora-app-select`. - `label` (string): Human-readable label to identify this token later (e.g. `staging`, `ci`). Shown in `ethora-app-tokens-list-v2`. - `timeoutMs` (integer): HTTP timeout for this request, in milliseconds. Default 10000. ### `ethora-app-tokens-rotate-v2` (~262 tokens) Rotate App Token Rotate an app token: revoke an existing token and issue a replacement in one step. The old `tokenId` is revoked immediately — anything using it stops working at once. The new secret value is returned exactly once — capture it immediately. Requires: a token id from `ethora-app-tokens-list-v2`. Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`). Errors: 401/403 not in B2B mode; 400 no `appId` and none selected; 404 unknown `appId` or `tokenId`. Related: `ethora-app-tokens-revoke-v2` to revoke without a replacement. Input parameters: - `appId` (string): 24-char hex appId the token belongs to. Optional — defaults to the app set via `ethora-app-select`. - `label` (string): Label for the replacement token. Omit to inherit the old token's label. - `timeoutMs` (integer): HTTP timeout for this request, in milliseconds. Default 10000. - `tokenId` (string, required): Id of the token to revoke and replace. Get it from `ethora-app-tokens-list-v2`. ### `ethora-app-tokens-revoke-v2` (~238 tokens) Revoke App Token Permanently revoke an app token by `tokenId` — it stops working immediately; any client, SDK, or MCP session still using it gets auth failures. No replacement is issued. Requires: a token id from `ethora-app-tokens-list-v2`. Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`). Errors: 401/403 not in B2B mode; 400 no `appId` and none selected; 404 unknown `appId`. Related: get `tokenId` from `ethora-app-tokens-list-v2`; `ethora-app-tokens-rotate-v2` for revoke-and-replace. Input parameters: - `appId` (string): 24-char hex appId the token belongs to. Optional — defaults to the app set via `ethora-app-select`. - `timeoutMs` (integer): HTTP timeout for this request, in milliseconds. Default 10000. - `tokenId` (string, required): Id of the token to revoke. Get it from `ethora-app-tokens-list-v2`. ### `ethora-b2b-app-provision` (~401 tokens) Provision App (B2B) One-call B2B orchestrator: create an app, mint one or more app tokens, provision default chat rooms, then configure and enable its AI bot. Later-step failures don't undo earlier steps. Returns a per-step log including `appId` and the created tokens (returned once — capture them). Auth: B2B mode (`ethora-auth-use-b2b` + a configured `b2bToken`). Errors: aborts with the partial step log if app creation fails; previous auth mode restored best-effort. Related: `ethora-b2b-app-bootstrap-ai` does sources+bot but not tokens/rooms. Input parameters: - `botGreetingMessage` (string): Greeting message the bot posts when a conversation starts. - `botPrompt` (string): System prompt for the new app's bot. - `botTrigger` (string): Bot trigger: `any_message` (every message) or `/bot` (only /bot-prefixed messages). - `displayName` (string, required): Display name for the new app. - `enableBot` (boolean): If true, enable the new app's bot using the first minted app token. - `llmModel` (string): LLM model id for the bot, e.g. `gpt-4o-mini`. Must be available for the chosen provider. - `llmProvider` (string): LLM provider for the bot, e.g. `openai` or `openai-compatible`. Must be enabled in your Ethora backend. - `rooms` (array): Default chat rooms to create in the new app. Up to 20. - `savedAgentId` (string): Optional id of an existing saved agent to bind as the new app's active bot, instead of setting prompt fields by hand. - `tokenLabels` (array): Labels for the app tokens to mint, one token per label. Default: ['default']. 1–5 tokens. ### `ethora-user-login` (~280 tokens) Log In Authenticate as an existing Ethora user with email + password. Stores the user session token in this MCP session and unlocks user-auth tools (`ethora-app-list`, `ethora-files-*`, `ethora-wallet-*`). Auth: user-auth mode (`ethora-auth-use-user` first) and a configured `appJwt`. Errors: 401/403 bad credentials; 404 email not registered; 429 per-IP rate limit — retry with backoff. Input parameters: - `apiKeyName` (string): Label for the API key when `createApiKey` is true (e.g. `claude-code-laptop`). - `apiKeyTtlDays` (integer): Lifetime of the API key in days when `createApiKey` is true. Server default applies when omitted. - `createApiKey` (boolean): When true, also mint a long-lived API key for this user and return it once, so headless clients / agents can reconnect with `Authorization: Bearer ` instead of logging in again. Default false. - `email` (string, required): User's registered email address (RFC 5322). Must match an account created via `ethora-user-register`. - `password` (string, required): Plain-text password the user set during registration. Sent over TLS to the Ethora API; never echoed back or logged. ### `ethora-user-register` (~333 tokens) Register Account Create a new Ethora user account by email + first/last name, then log in and bind the session. A password is generated when omitted and returned once. By default also mints a long-lived API key so an agent can reconnect later with `Authorization: Bearer ` (no human step needed). Auth: user-auth mode and a configured `appJwt` (on a hosted server this is preset). Errors: 401 no `appJwt`; 422 email already registered or password shorter than 6 chars; 429 rate limited. Related: bulk provisioning uses `ethora-users-batch-create-v2`. Input parameters: - `apiKeyName` (string): Label for the API key (default `mcp-signup`). - `apiKeyTtlDays` (integer): API key lifetime in days. Server default applies when omitted. - `createApiKey` (boolean): Mint a long-lived API key right after signup and return it once. Default true. Set false if you only need this session. - `email` (string, required): Email address for the new user. Must be RFC-5322 valid and not already registered within this app. No confirmation click is required to log in; the address is used for password reset. - `firstName` (string, required): First name shown in the user's profile and message attributions across chat rooms and the app UI. - `lastName` (string, required): Last name shown in the user's profile. - `password` (string): Password for the account (min 6 chars). Omit to have a strong random password generated and returned once in the result. ### `ethora-api-key-create` (~143 tokens) Create API Key Mint a long-lived, revocable API key for the currently logged-in user. The key is a user token: send it as `Authorization: Bearer ` to the hosted MCP endpoint (or set it in the stdio client) to skip `ethora-user-login`. Shown once. Auth: user auth (logged in). Errors: 401 not logged in; 404 on backends without API key support. Input parameters: - `name` (string): Label to recognise the key later (e.g. `ci-runner`, `claude-desktop`). - `ttlDays` (integer): Lifetime in days. Server default applies when omitted. ### `ethora-api-key-list` (~39 tokens) List API Keys List the current user's API keys (id, name, createdAt, expiresAt). Token values are never returned. Auth: user auth. ### `ethora-api-key-revoke` (~92 tokens) Revoke API Key Revoke one of the current user's API keys by id. Clients using that key stop working immediately. Requires: a key id from `ethora-api-key-list` or `ethora-api-key-create`. Auth: user auth. Errors: 404 unknown id. Input parameters: - `id` (string, required): API key id as returned by `ethora-api-key-create` / `ethora-api-key-list`. ### `ethora-app-credentials` (~233 tokens) Reveal App Token Reveal the appToken of an app the caller owns, for a chat-component snippet or a widget config. Every other tool redacts appToken, appSecret and tenantSecret from its results because tool output enters the model's context and client logs; this tool returns exactly { appId, appToken, note } and nothing else. The App Secret is never returned over MCP: it is shown only in the web dashboard (app settings, API tab), and backend integrations should use revocable server tokens from that tab instead of the secret. Requires: an app you own (`ethora-app-create` or `ethora-app-list`) and `confirm: true`. Auth: user auth (app owner). Errors: 401 not logged in; 403 not the owner; 404 unknown `appId`; validation error unless `confirm` is `true`. Input parameters: - `appId` (string): 24-char hex app id. Defaults to the app selected with `ethora-app-select`. - `confirm` (boolean, required): Must be `true`: acknowledges that the token is a credential and will appear in this conversation. ### `ethora-feedback-submit` (~403 tokens) Send Feedback Send feedback about Ethora to the Ethora team: something that does not work, behaves differently from what the tool description promised, is missing, or is badly documented. It reaches the team directly, so prefer it over guessing or silently giving up when a tool fails. Recent failures in this session (tool, error code, request id) are attached automatically when `includeRecentErrors` is true, which is what makes a report from here more useful than a web form: the team can join it to the server-side log. Works whether or not you are signed in, so a problem that blocks sign-up can still be reported. Do not put credentials, API keys or end-user personal data in `message`; credential-shaped values in the attached context are redacted before sending. Requires: nothing. Auth: none. Works anonymously; when the session is authenticated the report is attributed to that account. Errors: 422 if `message` is shorter than 5 characters or looks like spam; 429 if too many reports were sent from this address. Input parameters: - `category` (string): What kind of report this is: `bug` (something is broken), `unexpected` (it works but not as described), `feature` (a request), `docs` (a description or guide is wrong or missing), `other`. Defaults t… - `email` (string): Reply address. Only useful when the session is not signed in; an authenticated report already carries the account, so leave this out unless the user offers an address. - `includeRecentErrors` (boolean): Attach this session's last few tool failures (tool name, error code, request id) so the team can trace them. Default true; set false if the report is unrelated to a failure. - `message` (string, required): What happened, in the user's own words where possible: what was attempted, what was expected, what occurred instead. No credentials or end-user personal data. ### `ethora-widget-embed-snippet` (~495 tokens) Widget Embed Snippet Generate the