mcp

Tuteliq MCP Server

MCP server for Tuteliq - AI-powered child safety tools for Claude

API Docs • Dashboard • Trust • Changelog • Discord

What is this?

Tuteliq MCP Server brings AI-powered child safety tools directly into Claude, Cursor, and other MCP-compatible AI assistants. Ask Claude to check messages for bullying, detect grooming patterns, or generate safety action plans.

Reads context, not just keywords. Every detector understands coded slang, emoji, leetspeak, algospeak, and deliberate filter evasion, and weighs the conversation around a message — so it tells gaming trash-talk apart from targeted harassment instead of drowning your team in false positives. This coded-language resilience is platform-wide (it applies to grooming, fraud, radicalisation, and the rest, not just bullying) and is built from our own research into how bad actors evade moderation. In an internal benchmark of coded-language and filter-evasion cases, Tuteliq detected roughly 1.7x more of them than leading general-purpose moderation APIs (319-case evasion set; vendors unnamed).

Fast mode. Pass verdict_only: true on detect_grooming or detect_bullying to get just the verdict (risk level, flags, recommended action) without the per-message breakdown — lower latency for real-time screening. The verdict itself is unchanged.

Interactive results. In hosts that support MCP Apps, results render as interactive cards rather than walls of JSON — see Interactive widgets below.

Interactive widgets

Twelve widgets return a rendered card instead of raw text in hosts that support MCP Apps (Claude desktop and web, and other MCP-compatible clients). Everywhere else the same data arrives as structuredContent, so nothing depends on the UI.

Every card carries the same frame: a chrome bar naming the tool that produced the result, the result itself, and a footer with the data-handling note and a Trust Center link. In a transcript holding a dozen results, the chrome bar is what tells you which is which.

Severity is rankable by colour. The ramp runs monotonically from safe to critical, so two chips can be compared without reading their labels:

Design notes. The widgets are deliberately calm. They report on grooming, self-harm, and abuse, and a card that animates or pulses at the reader turns material that is already distressing into an alarm they cannot dismiss. Severity is carried by a rule and a glyph, not by motion. The crisis-support card leads with reassurance rather than the severity colour, and its helpline numbers are the largest targets on the card because transcribing digits under stress is where people fail.

Widgets are read-only renderers by design. Selecting incidents in the list widget assembles the ID list for a batch_review_incidents call you fire yourself — the mutating call still goes through your host's approval step, so the human-in-the-loop stays in the loop.

Working on the widgets

npm run preview:ui   # builds every widget against fixture data
open dist-preview/__preview.html

Widget source lives in ui/src. Design tokens are centralised in ui/src/theme.ts; prefer them over colour literals so the palette stays in one place.

Available Tools (81 MCP)

Safety Detection

Fraud & Harm Detection

Voice, Image, Video & Document Analysis

Synthetic Content Detection

Identity & Age Verification

Incidents & Moderation

Read the incident store, triage a queue, and record moderator decisions. The review tools emit signed receipts for EU AI Act Art 14 human-oversight evidence.

The decision is the moderator's, and the card makes them take it. The action buttons call review_incident through the host, because a moderator clicking "Escalate" is the human decision. They do not fire on one click: review_incident persists an override and emits a signed Art 12 audit receipt and requires a reason_code, so the button opens a reason picker and a second click commits. Nothing is ever defaulted into that receipt on the moderator's behalf.

The reasoning, confidence and analysis trace on the card are supplied by the calling assistant and are labelled as such — an argument for a human to weigh, not a Tuteliq measurement.

Pass operator_name to brand the header with the customer or team name. Omit it and the card is unbranded — it is never defaulted to a placeholder.

Webhook Management

Pricing

Usage & Billing

Policy Configuration

Policy Automation Rules

Detection Settings

Threat Intelligence (Business+ tier)

GDPR Account

Breach Management

Common Parameters

Context Fields

All detection tools accept an optional context object. These fields influence severity scoring and classification:

sender_trust Behavior

When sender_trust is set to "verified" or "trusted":

• AUTH_IMPERSONATION is fully suppressed — a verified sender cannot be impersonating an authority
• URGENCY_FABRICATION is suppressed for routine time-sensitive information (schedules, deadlines, appointments)
• Content is only flagged if it contains genuinely malicious elements (credential theft, phishing links, financial demands)
• This prevents false positives on legitimate institutional messages (school notifications, hospital reminders, government advisories)

support_threshold

Controls when crisis support resources (helplines, text lines, web resources) are included in the response:

Note: Critical severity always includes support resources regardless of the threshold setting.

analyse_multi Endpoint Values

The analyse_multi tool accepts up to 10 endpoints per call. Valid endpoint values:

Installation

Tuteliq is a hosted MCP server at https://api.tuteliq.ai/mcp. Most clients should connect with OAuth and install nothing.

Connect with OAuth (recommended)

Point the client at the URL with no credentials and sign in through the browser. Tuteliq implements OAuth 2.1 with dynamic client registration and PKCE, so the client registers itself. Nothing is pasted into a config file, and access is revoked from the dashboard rather than by editing your machine.

Claude Desktop: Settings > Connectors, Add custom connector, name it Tuteliq, URL https://api.tuteliq.ai/mcp, then Connect and approve in the browser.

Claude Code, Cursor, Windsurf and other clients supporting remote servers:

{
  "mcpServers": {
    "tuteliq": {
      "type": "http",
      "url": "https://api.tuteliq.ai/mcp"
    }
  }
}

In Claude Code, run /mcp to start the sign-in if it does not open on its own.

Static token (headless and automation)

OAuth needs a browser, so a CI pipeline, cron job or container cannot complete it. Send a token in the Authorization header instead, generated in the dashboard under Settings > Plugins. This is a long-lived credential: keep it out of version control, and prefer OAuth wherever a browser exists.

{
  "mcpServers": {
    "tuteliq": {
      "type": "http",
      "url": "https://api.tuteliq.ai/mcp",
      "headers": {
        "Authorization": "Bearer your-secure-token"
      }
    }
  }
}

stdio (clients without remote server support)

For clients that only speak stdio. This runs a local process that calls the same hosted API, so the tools are identical; only the transport and authentication differ.

{
  "mcpServers": {
    "tuteliq": {
      "command": "npx",
      "args": ["-y", "@tuteliq/mcp"],
      "env": {
        "TUTELIQ_API_KEY": "your-api-key"
      }
    }
  }
}

Usage Examples

Once configured, you can ask Claude:

Bullying Detection

"Check if this message is bullying: 'Nobody likes you, just go away'"

Response:

## ⚠️ Bullying Detected

**Severity:** 🟠 Medium
**Confidence:** 92%
**Risk Score:** 75%

**Types:** exclusion, verbal_abuse

### Rationale
The message contains direct exclusionary language...

### Recommended Action
`flag_for_moderator`

Grooming Detection

"Analyze this conversation for grooming patterns..."

Quick Safety Check

"Is this message safe? 'I don't want to be here anymore'"

Emotion Analysis

"Analyze the emotions in: 'I'm so stressed about school and nobody understands'"

Action Plan

"Give me an action plan for a 12-year-old being cyberbullied"

Incident Report

"Generate an incident report from these messages..."

Voice Analysis

"Analyze this audio file for safety: /path/to/recording.mp3"

Image Analysis

"Check this screenshot for harmful content: /path/to/screenshot.png"

Webhook Management

"List my webhooks" "Create a webhook for critical incidents at htt