Skip to main content

Overview

Scorecard’s MCP (Model Context Protocol) server lets you manage projects, create testsets, configure metrics, run evaluations, and analyze results through natural language in any MCP-compatible client.

How it works

The server uses Code Mode: instead of one tool per API endpoint, it exposes two tools and lets your assistant write code against the Scorecard TypeScript SDK. A typical execute call looks like this:
Because filtering and aggregation happen inside the sandbox, only the final result comes back to the conversation. A question that spans many projects, runs, or large records completes in a single call instead of paging multi-megabyte responses through your assistant’s context.
Each execute call is independent: variables do not persist between calls. Individual API requests time out after 30 seconds and a whole execute call after about 5 minutes. The sandbox can only reach the Scorecard API, with no filesystem or other network access.

Setting Up the MCP Server

Claude Code

Add the Scorecard remote MCP server with a single command:
Complete the OAuth authentication flow in your browser when prompted. Verify the connection:
You should see scorecard: https://mcp.scorecard.io/mcp (HTTP) - ✓ Connected.

Claude Desktop

Go to Claude Desktop settings and click the “Connectors” tab. Click “Add custom connector” and paste the URL: https://mcp.scorecard.io/mcp. Click “Add”, then “Connect” to login to Scorecard.

Other clients

Any client that supports remote MCP servers over Streamable HTTP can use https://mcp.scorecard.io/mcp. If your client cannot complete an OAuth flow, pass a Scorecard API key as a bearer token instead:

Local configuration

You can also run the same server locally via npx:
For clients with a configuration JSON:
The local server runs execute code in a Deno sandbox on your machine, so Deno must be installed and on your PATH. Documentation search works offline from an index bundled with the package.
To restrict what the assistant can do, limit the execute tool with flags. For example, a read-only server:
You can also allow or block specific SDK methods with --code-allowed-methods and --code-blocked-methods, which take regular expressions matched against method names such as records.delete.

Examples

Create a project and testset

Create metrics

Analyze results

Compare across projects

Review human feedback

Generate testcases from a codebase

In Claude Code, you can combine file access with the MCP server:

Iterate on metrics

Technical Details

  • Built on the Model Context Protocol standard using the Streamable HTTP transport
  • Compatible with any MCP client (Claude Code, Claude Desktop, Cursor, and more)
  • Secured with OAuth authentication, or a Scorecard API key passed as a bearer token
  • The hosted server runs the scorecard-ai-mcp package (3.4.0), whose source lives in the scorecard-node repository
  • Anything the SDK can do is available: see the API reference for the full surface

Migrating from the per-endpoint tools

Earlier versions of the server exposed one tool per API operation, such as list_projects or create_testsets. Those tools no longer exist. Prompts written in natural language keep working unchanged, because the assistant now reaches the same operations through execute. If you referenced tool names directly, the table below shows where each one went.
Record tags, record assignees, and session attachments were never exposed as tools but are available through client.records.tags, client.records.assignees, and client.attachments.