REST API, MCP server and CLI coverage

Every AbuseZero action, with its REST API endpoint, MCP server tool and CLI command.

The AbuseZero REST API, the AbuseZero MCP server and the AbuseZero CLI are three ways to reach the same AbuseZero actions, so an action takes the same input and returns the same result wherever you call it. The AbuseZero Node.js SDK covers every REST API endpoint, with a typed method or call().

Actions

Each REST API endpoint links to its reference section, each MCP tool to the MCP tools list and each command to the CLI command reference. Every action needs the same scope on every surface.

Action	REST endpoint	MCP tool	Command
List workspaces	`GET /v1/workspaces`	`abusezero_list_workspaces`	`workspaces list`
Evaluate a claim	`POST /v1/evaluations`	`abusezero_create_evaluation`	`evaluations create`
Preview an evaluation	`POST /v1/evaluation-previews`	`abusezero_preview_evaluation`	`evaluations preview`
List evaluations	`GET /v1/evaluations`	`abusezero_list_evaluations`	`evaluations list`
Read an evaluation	`GET /v1/evaluations/{id}`	`abusezero_get_evaluation`	`evaluations get`
Read an evaluation's association graph	`GET /v1/evaluations/{id}/graph`	`abusezero_get_evaluation_graph`	`evaluations graph`
Read an evaluation's retained evidence	`GET /v1/evaluations/{id}/evidence`	`abusezero_get_evaluation_evidence`	`evaluations evidence`
Report an outcome	`POST /v1/evaluations/{id}/outcome`	`abusezero_report_outcome`	`outcomes report`
List outcomes	`GET /v1/outcomes`	`abusezero_list_outcomes`	`outcomes list`
Read an outcome	`GET /v1/outcomes/{id}`	`abusezero_get_outcome`	`outcomes get`
Run a simulation	`POST /v1/simulations`	`abusezero_simulate_sequence`	`simulations run`
Replay evaluations	`POST /v1/replays`	`abusezero_replay_evaluations`	`simulations replay`
List benefits	`GET /v1/benefits`	`abusezero_list_benefits`	`benefits list`
Create a benefit	`POST /v1/benefits`	`abusezero_create_benefit`	`benefits create`
Read a benefit	`GET /v1/benefits/{id}`	`abusezero_get_benefit`	`benefits get`
Update a benefit	`PATCH /v1/benefits/{id}`	`abusezero_update_benefit`	`benefits update`
Delete a benefit	`DELETE /v1/benefits/{id}`	`abusezero_delete_benefit`	`benefits delete`
List policies	`GET /v1/policies`	`abusezero_list_policies`	`policies list`
Create a policy	`POST /v1/policies`	`abusezero_create_policy`	`policies create`
Read a policy	`GET /v1/policies/{id}`	`abusezero_get_policy`	`policies get`
Update a policy	`PATCH /v1/policies/{id}`	`abusezero_update_policy`	`policies update`
Duplicate a policy	`POST /v1/policies/{id}/duplicate`	`abusezero_duplicate_policy`	`policies duplicate`
Delete a policy	`DELETE /v1/policies/{id}`	`abusezero_delete_policy`	`policies delete`
List a policy's versions	`GET /v1/policies/{id}/versions`	`abusezero_list_policy_versions`	`policies versions`
Read a policy version	`GET /v1/policies/{id}/versions/{version}`	`abusezero_get_policy_version`	`policies version`
List rule conditions	`GET /v1/policy-signals`	`abusezero_list_policy_signals`	`policies signals`
List allow and block list entries	`GET /v1/access-lists`	`abusezero_list_access_lists`	`access-lists list`
Add allow or block list entries	`POST /v1/access-lists`	`abusezero_add_access_list_entry`	`access-lists add`
Read a list entry	`GET /v1/access-lists/{id}`	`abusezero_get_access_list_entry`	`access-lists get`
Remove a list entry	`DELETE /v1/access-lists/{id}`	`abusezero_delete_access_list_entry`	`access-lists delete`
List custom identifiers	`GET /v1/custom-identifiers`	`abusezero_list_custom_identifiers`	`custom-identifiers list`
Register a custom identifier	`POST /v1/custom-identifiers`	`abusezero_register_custom_identifier`	`custom-identifiers register`
Read a custom identifier	`GET /v1/custom-identifiers/{id}`	`abusezero_get_custom_identifier`	`custom-identifiers get`
Delete a custom identifier	`DELETE /v1/custom-identifiers/{id}`	`abusezero_delete_custom_identifier`	`custom-identifiers delete`
List imports	`GET /v1/imports`	`abusezero_list_imports`	`imports list`
Import granted outcomes	`POST /v1/imports`	`abusezero_create_outcome_import`	`imports create`
Start a CSV import	`POST /v1/imports/csv`	`abusezero_create_csv_import`	`imports create-csv`
Read an import	`GET /v1/imports/{id}`	`abusezero_get_import`	`imports get`
Read an import's errors	`GET /v1/imports/{id}/errors`	`abusezero_get_import_errors`	`imports errors`
Validate an import	`POST /v1/imports/{id}/validate`	`abusezero_validate_import`	`imports validate`
Confirm an import	`POST /v1/imports/{id}/confirm`	`abusezero_confirm_import`	`imports confirm`
Cancel an import	`POST /v1/imports/{id}/cancel`	`abusezero_cancel_import`	`imports cancel`
List exports	`GET /v1/exports`	`abusezero_list_exports`	`exports list`
Request an export	`POST /v1/exports`	`abusezero_request_export`	`exports create`
Read an export	`GET /v1/exports/{id}`	`abusezero_get_export`	`exports get`
Download an export	`GET /v1/exports/{id}/download`	`abusezero_get_export_download`	`exports download`
Preview a data deletion	`POST /v1/data-deletions/preview`	`abusezero_preview_data_deletion`	`data-deletions preview`
Request a data deletion	`POST /v1/data-deletions`	`abusezero_request_data_deletion`	`data-deletions create`
List data deletions	`GET /v1/data-deletions`	`abusezero_list_data_deletions`	`data-deletions list`
Read a data deletion	`GET /v1/data-deletions/{id}`	`abusezero_get_data_deletion`	`data-deletions get`
Read analytics	`GET /v1/analytics`	`abusezero_get_analytics`	`analytics get`
List request logs	`GET /v1/request-logs`	`abusezero_list_request_logs`	`request-logs list`
Read a request log	`GET /v1/request-logs/{id}`	`abusezero_get_request_log`	`request-logs get`
List audit events	`GET /v1/audit-logs`	`abusezero_list_audit_logs`	`audit-logs list`
Read an audit event	`GET /v1/audit-logs/{id}`	`abusezero_get_audit_log`	`audit-logs get`
Read browser setup	`GET /v1/browser-collection`	`abusezero_get_browser_collection`	`browser-collection get`
Update your site list	`PATCH /v1/browser-collection`	`abusezero_update_browser_collection`	`browser-collection update`
List recognized agents	`GET /v1/agents`	`abusezero_list_agents`	`agents list`

Connection actions

These manage the connection itself, so each one exists only where it applies.

Action	AbuseZero MCP server	AbuseZero CLI
Sign in	Your app's sign-in flow, see MCP server authentication	`abusezero login`
Sign out	Your app's disconnect option	`abusezero logout`
Choose a workspace	`abusezero_select_workspace`	`abusezero workspaces use`
Show the connection	`abusezero_get_connection_context`	`abusezero whoami`
Run a local MCP server	None	`abusezero mcp`

The MCP prompts review_policy, investigate_denial and simulate_policy_change are instructions for an AI app, so the CLI doesn't offer them.

Exclusions

Some capabilities are deliberately available on one surface only.

Capability	Where it's available	Why
Browser observation	The AbuseZero browser SDK and standalone browser script, see Browser protection	Browser evidence must come from a real visitor's browser. A remote agent, a server or the CLI can't produce it.
Account security: password, two-step verification and linked sign-ins	Dashboard	These protect your own sign-in, so they always need you, signed in, in the dashboard.
API keys and machine clients	Dashboard, under Developers. See Keys and access	A credential can never create or widen another credential.
Billing, credits and plans	Dashboard, under Workspace settings → Billing & Subscriptions	Only the workspace owner manages billing.
Members, roles and ownership	Dashboard. See Workspaces	Changes to who can reach a workspace always need a signed-in person.
Workspace deletion	Dashboard	Deleting a workspace is permanent, so it always needs a signed-in person in the dashboard.

REST API, MCP server and CLI coverage

ActionsCopy Anchor Link

Connection actionsCopy Anchor Link

ExclusionsCopy Anchor Link

On this page

Actions

Connection actions

Exclusions