Riddle MCP server
Featured official server
48 tools · Last check that passed 4 Nov 2026, 12:15 UTC
Riddle's own remote MCP server gives an agent the quizzes, polls, forms, templates, media and statistics of the Riddle projects its sign-in or MCP key reaches. Once a day, Stackduke connects to it the way any MCP client would, with no account and no sign-in, and lists its tools. It never runs them.
All 48 tools
| Tool | Counted as |
|---|---|
media_delete | Deletes |
question_bank_delete | Deletes |
question_bank_discard_changes | Deletes |
question_bank_item_add | Deletes |
question_bank_item_delete | Deletes |
question_bank_publish | Deletes |
question_bank_tag_remove | Deletes |
riddle_delete | Deletes |
riddle_tag_add | Deletes |
riddle_tag_delete | Deletes |
riddle_tag_remove | Deletes |
riddle_template_update | Deletes |
question_bank_update_notes | Sends |
riddle_publish | Sends |
media_upload_link | Changes things |
palette_customize | Changes things |
question_bank_create | Changes things |
question_bank_duplicate | Changes things |
question_bank_item_update | Changes things |
question_bank_rename | Changes things |
question_bank_tag_add | Changes things |
riddle_builder_create | Changes things |
riddle_builder_update | Changes things |
riddle_move | Changes things |
riddle_rename | Changes things |
riddle_template_create | Changes things |
riddle_template_use | Changes things |
integration_list | Said to only read |
palette_get | Said to only read |
ping | Said to only read |
project_get | Said to only read |
project_get_settings | Said to only read |
project_list | Said to only read |
question_bank_get | Said to only read |
question_bank_get_items | Said to only read |
question_bank_list | Said to only read |
reference_get | Said to only read |
riddle_builder_validate | Said to only read |
riddle_get | Said to only read |
riddle_get_embed_code | Said to only read |
riddle_list | Said to only read |
riddle_preview | Said to only read |
riddle_tag_list | Said to only read |
riddle_template_get | Said to only read |
riddle_template_list | Said to only read |
riddle_template_public_list | Said to only read |
stats_fetch | Said to only read |
whoami | Said to only read |
The tools the server listed at the last check that passed, at its default address and settings, with no sign-in; an account that signs in, or other settings, may see other tools. What a tool is counted as doing is Stackduke's cautious reading of the server's labels, the tool's name and its description: where they disagree it takes whichever says the tool can do most, so it overcounts on purpose. It does not say the server is safe, and it does not list what a tool cannot do. Descriptions are not shown, because they are written for models and may try to steer them.
Recent checks
23 of the last 23 checks passed
A check passes when the server lists its tools. Checked at https://www.riddle.com/creator/api/v3/mcp.
Recent changes
2 Nov 2026, 12:32 UTC, after a check on 1 Nov 2026, 11:21 UTC
Inputs or outputs changed on riddle_builder_create, riddle_builder_update.
30 Oct 2026, 10:55 UTC, after a check on 29 Oct 2026, 10:58 UTC
Can do more 11 tools added: question_bank_duplicate, question_bank_item_add, question_bank_item_delete, question_bank_item_update, question_bank_publish and 6 more. 4 tools removed: question_bank_item, question_bank_manage, question_bank_tag, riddle_tag. Description rewritten on integration_list, question_bank_create, question_bank_delete, question_bank_discard_changes, question_bank_get and 3 more. The server's own labels changed on media_delete, media_upload_link, palette_customize, ping, question_bank_delete and 10 more. Inputs or outputs changed on question_bank_delete. 25 tools changed in all. Counted as able to do more: question_bank_item_add (make changes that cannot be undone), question_bank_item_delete (make changes that cannot be undone), question_bank_item_update (make changes that cannot be undone) and 12 more.
20 Oct 2026, 09:47 UTC, after a check on 19 Oct 2026, 10:11 UTC
Can do more Description rewritten on media_upload_link, riddle_template_update. Inputs or outputs changed on media_delete, media_upload_link, riddle_builder_create, riddle_builder_update, riddle_builder_validate and 1 more. Counted as able to do more: riddle_builder_update (send messages or publish to other people).
From the scan of 4 Nov 2026, 12:43 UTC. "Changed" and "Can do more" count changes from the last 30 days; older ones stay listed here. A change made and undone between two checks is not seen. Every check is in the scanner's public data.
Know when Riddle's tools change.
One email when Riddle's official MCP server adds, removes or changes tools, with what changed. Nothing else.
What to watch for
- Its tools can publish, unpublish and delete up to 100 Riddles in one call, and a bulk call does not stop when one of them fails. Riddle's MCP documentation
- With an MCP key, the key sits in plain text in the client's configuration, and everyone who uses that client acts as the key's Riddle account. Riddle's MCP documentation
How to limit it
With Riddle's own settings, as its documentation describes them. Stackduke has not tested them.
- Sign in with your own Riddle account rather than an MCP key, as Riddle advises wherever an interactive sign-in is possible. Riddle's MCP documentation
- A sign-in carries the project roles and AI permissions of the Riddle user, so we recommend a user with no more than the agent needs. Riddle's MCP documentation
- Run riddle_delete as a dry run first to see what it would delete, which Riddle supports. Riddle's MCP documentation
What Stackduke is designed to do
Stackduke is designed to sit between your agents and their MCP servers: to check each tool call against your rules before it runs, hold the risky ones for a person to approve, and keep a record of what was decided.
It does not yet forward or block tool calls for customers. Today it reads what this server offers and publishes what changes.