list_notifications
Read the Notifications Center of the person the token acts for — every alert sent to them, newest first, with its class, where it points and whether it was read.
Answer "what has happened on my account that I have not looked at?". The Notifications Center is the sidebar entry with its unread count: every alert Zuse Bifrost sent the person (an approval waiting on them, an assignment, a mention, a sprint or release event, a failing deployment, an incident, a security notice, an AI budget warning). Each row is the same object GET /v1/me/notifications returns; meta.unread says how many are unread in all.
Narrow with unread (true or false), class (one of approvals, assignments, mentions, planning, sprints, code, testing, releases, deployments, incidents, support, security, digest, onboarding, budget) and query, words a title or body must contain.
Requires ability
The token behind the MCP session must hold it, or the call is refused with TOKEN_MISSING_ABILITY.
Runs the same action as
The REST endpoint and this tool share one action, so validation, permissions and events are identical.
Annotations
It reads and never changes anything.
Arguments
unreadbooleanoptional`true` for entries not yet read, `false` for entries already read; omit for every entry.
classstringoptionalOne class of alert, or omit for every class.
approvalsassignmentsmentionsplanningsprintscodetestingreleasesdeploymentsincidentssupportsecuritydigestonboardingbudgetquerystringoptionalWords a title or body must contain; omit for every entry.
limitintegeroptionalEntries per page (1..100, default 25).
1max100pageintegeroptional1-indexed page number.
1What it returns
{ "data": [ { "id": "0b1f6e2a-7c3d-4e5f-8a9b-0c1d2e3f4a5b", "class": "security", "class_label": "Security", "title": "New API token minted", "body": "A token named Cursor was minted for your account.", "route": "settings.tokens", "params": {}, "url": "https://app.example.test/settings/tokens", "read": false, "read_at": null, "created_at": "2026-10-26T10:05:30+00:00" } ], "meta": { "page": 1, "limit": 25, "total": 1, "has_more": false, "unread": 1 }}How it fails
AUTHENTICATION_REQUIREDno authenticated user on the request.
TOKEN_MISSING_ABILITYtoken lacks account:read.
VALIDATION_FAILEDclass is not one of the fifteen classes; the error context lists them.
How is this guide?
Last updated on