Rivalize MCP Server

Rivalize MCP Server

Sourced, dated competitive intelligence for your AI assistant, over the ModelContext Protocol.

What it does

This server connects Claude, Cursor or any other MCP client toRivalize. Your assistant can tear down a competitor'spositioning, pricing, ads, social presence, reviews, hiring and momentum in onecall, search the Rivalize universe of tracked companies, and read the projects,reports, battlecards, timelines and evidence in your own Rivalize account.Every answer comes from data Rivalize has collected, with dates and sources,rather than from a model's memory.

The server is read-only by default. One write tool, add_competitor, isavailable when you opt in with RIVALIZE_MCP_ALLOW_WRITES=1.

Quick start

Requires Node.js 22 or newer (node --version).

1. Create an account at rivalize.ai.
2. Create an API key under Dashboard → Settings → API Keys. Keys start withrk_live_. A key from any plan works, including the free plan, which getsrate-limited reads.
3. Add the server to your client using one of the blocks below.

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS)or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart ClaudeDesktop:

{
  "mcpServers": {
    "rivalize": {
      "command": "npx",
      "args": ["-y", "@rivalize/mcp"],
      "env": { "RIVALIZE_API_KEY": "rk_live_..." }
    }
  }
}

Claude Code

claude mcp add rivalize -e RIVALIZE_API_KEY=rk_live_... -- npx -y @rivalize/mcp

Cursor

Add to .cursor/mcp.json in your project, or ~/.cursor/mcp.json for allprojects:

{
  "mcpServers": {
    "rivalize": {
      "command": "npx",
      "args": ["-y", "@rivalize/mcp"],
      "env": { "RIVALIZE_API_KEY": "rk_live_..." }
    }
  }
}

Cline

In Cline, open the MCP Servers panel, choose Configure, then Configure MCP Servers. This opens cline_mcp_settings.json. Add:

{
  "mcpServers": {
    "rivalize": {
      "command": "npx",
      "args": ["-y", "@rivalize/mcp"],
      "env": { "RIVALIZE_API_KEY": "rk_live_..." }
    }
  }
}

Save the file. The rivalize server appears with a green dot after about 10 to 15 seconds (the first start downloads the package). On Windows, if it does not start, use "command": "cmd" and "args": ["/c", "npx", "-y", "@rivalize/mcp"].

If you ask Cline to install it for you, point it at llms-install.md.

Any MCP client (stdio)

The server speaks MCP over stdin and stdout. Configure your client to launch:

On Windows, some clients cannot launch npx directly because it is npx.cmd.Use cmd as the command and /c npx -y @rivalize/mcp as the argumentsinstead.

Tools

Thirteen read-only tools are always available. add_competitor is registeredonly when RIVALIZE_MCP_ALLOW_WRITES is set to 1, true or yes; withoutit, the tool does not exist for the client.

project_id and competitor_id are UUIDs from list_projects andlist_competitors. Tools that read your account only ever see your own data.

Report sections

get_report takes a section so your assistant can read the part a questionneeds instead of the whole report:

A report has only the sections it has data for; asking for any other namereturns an error that lists the sections it does have. section combines withcompetitor, so section: "pricing" with competitor: "Acme" returns Acme'spricing. Claims the report's fabrication check removed appear as[removed — unverified], exactly as in the report.

Long responses

Every response stays under 25,000 characters, and nothing is cut silently:

• Markdown (get_report, get_strategic_timeline,get_competitive_landscape) is split into pages at section boundaries. Eachpage starts with Page N of M, how much remains, and the exact call for thenext page.
• Lists (list_universe_companies, list_competitors, list_reports)return pagination.next_offset; continue from it until it is null.
• Objects (get_universe_company, and timeline or landscape JSON) cap longarrays and record the cap in _capped. A field that still does not fit islisted in _omitted with the call that fetches it.

Example prompts

• "Tear down linear.app." (teardown_competitor)
• "Who are the players in AI developer tools?" (list_universe_companies)
• "Summarize my latest report, then show me what my competitors charge."(list_reports, get_report with section: "pricing")
• "Which of my competitors moved most this quarter, and what did they do?"(get_competitive_landscape, get_strategic_timeline)
• "Give me sales talking points against my top competitor." (list_competitors,get_battlecard)
• "Where does that pricing claim come from, and how fresh is it?"(get_evidence, get_freshness)

Configuration

Troubleshooting

"Connection closed"

When the server cannot start, many clients show only "Connection closed" or afailed status. The server prints the reason as the first line of its stderr,prefixed rivalize-mcp:, and most clients keep stderr in their MCP log. Theusual causes:

1. RIVALIZE_API_KEY is missing or invalid. The log readsrivalize-mcp: RIVALIZE_API_KEY is required, or says the key does not looklike a Rivalize API key (it must start with rk_live_). Put the key in theserver's env block and restart the client.
2. Node.js is older than 22. Run node --version and install Node.js 22 ornewer. Your client uses whichever node and npx come first on its ownPATH, which can differ from your terminal's.
3. No network access. npx downloads the package on first run, and everytool call goes to https://rivalize.ai (or RIVALIZE_API_URL). Behind acorporate proxy, set HTTPS_PROXY. A network error names the server and thecause code, such as ECONNREFUSED or ENOTFOUND.

To see the message directly, run the server in a terminal with the same key:

RIVALIZE_API_KEY=rk_live_... npx -y @rivalize/mcp

A healthy server prints rivalize-mcp-server connected via stdio to stderrand waits for input (press Ctrl+C to stop). Anything else is the reason yourclient could not connect.

Every call returns 401

The key was rejected by the server it was sent to, and the error names thatserver. Check that the key has not been revoked, and that RIVALIZE_API_URL isunset unless the key was issued by a different Rivalize server.

A tool says it needs a higher plan

Reads are available on every plan. Some capabilities, such as battlecards andfull timeline or landscape history, need a higher plan; the error says whichand links to rivalize.ai/pricing.

Docker

The repository includes a Dockerfile that builds the same stdio server onNode 22 and runs it as a non-root user.

docker build -t rivalize-mcp .

{
  "mcpServers": {
    "rivalize": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "-e", "RIVALIZE_API_KEY", "rivalize-mcp"],
      "env": { "RIVALIZE_API_KEY": "rk_live_..." }
    }
  }
}

Run the container with -i and without a TTY, since MCP uses stdin andstdout. -e RIVALIZE_API_KEY with no value passes the key through from theclient's environment, so it never appears on the docker run command line.Add -e RIVALIZE_API_URL or -e RIVALIZE_MCP_ALLOW_WRITES the same way if youneed them.

Privacy Policy

This server is a thin client for the Rivalize API.

• What it sends, and where. Each tool call becomes an HTTPS request to theRivalize API at https://rivalize.ai, or the origin you set inRIVALIZE_API_URL. A request carries your API key as a Bearer token, aUser-Agent of rivalize-mcp/<version>, and the tool's arguments: forexample a company domain, a search term, a project, report or competitor id,and, with writes enabled, the competitor URLs you add. If you setHTTPS_PROXY or HTTP_PROXY, requests go through that proxy. Nothing issent anywhere else.
• What it does not send. No telemetry, analytics or crash reports. It doesnot read files on your machine, your conversation, or other tools' output;it sees only the arguments your MCP client passes to its own tools.
• What it stores locally. Nothing. It writes no files, keeps no cache andholds no state between runs. Your key lives in your MCP client'sconfiguration, not in this server. Diagnostic messages go to stderr, whichyour MCP client may log; they never include your API key.
• What Rivalize does with requests. The API processes them under theRivalize Privacy Policy at rivalize.ai/privacy.Rivalize is operated by Downshift LLC, the data controller for that data.Privacy questions go to [email protected].

Security

Please report vulnerabilities privately to [email protected] with"security" in the subject line, not in a public issue. Include the packageversion (npm view @rivalize/mcp version, or the User-Agent above), what youdid, and what happened. We will acknowledge your report and keep you updateduntil it is resolved.

Treat your API key as a credential. Keep it in your client's env block oryour shell environment, never in a shared or committed file, and revoke aleaked key under Dashboard → Settings → API Keys.

Contributing

Bug reports and feature requests are welcome atgithub.com/Downshift/rivalize-mcp/issues.For account and billing questions, email [email protected].

To work on the server locally:

npm ci
npm run typecheck
npm run build      # emits dist/, which the rivalize-mcp bin runs
npm test           # offline: every API call is mocked or served by a local fixture

server.json is the MCP Registryentry. The tests validate it against the official schema (vendored inschema/) and check that its name, version and package match package.json.

Changelog

0.3.2

• list_competitors now tells your assistant how to pick a top competitor:by the rival's standing on your Brief (brief.standing) when the API returnsit, otherwise by momentum_score. threat_level is described as what it is,the band of the momentum score, and is no longer offered as a ranking.
• When a row's standing is still being read (brief.state is deferred),list_competitors asks for the same page again, up to 4 times, 1.5 secondsapart. Against an API that returns no brief, it makes one request per callas before.
• Clearer wording in the 401 hint for a self-hosted or non-production Rivalizeserver, and in the add_competitor description.

0.3.1

• The version this repository's history starts from: thirteen read-onlytools, the opt-in add_competitor write tool, responses kept under 25,000characters with explicit paging, proxy support, and the MCP Registry entry inserver.json.

License

MIT, © 2026 Downshift LLC. See LICENSE.