# Forewarn

> Order-risk screening for OpoShop stores. Forewarn scores every new order the moment it is placed — a delivery address not on file, a brand-new customer placing an unusually large first order, several orders in minutes from one inbox, throwaway email domains, one address collecting orders from several accounts — and tells you which orders deserve a look before you ship. Read-only: it never charges, refunds, cancels, edits or fulfils anything.

This app is built on the OpoShop platform. It is agent-friendly: the full
API is described in OpenAPI and wrapped by an MCP server so an LLM can drive it
directly.

## Machine interfaces
- API contract (OpenAPI): https://app.tryforewarn.com/openapi.json
- API docs (Swagger): https://app.tryforewarn.com/docs
- Fuller LLM context: https://app.tryforewarn.com/llms-full.txt
- Release notes: https://app.tryforewarn.com/api/release-notes
- MCP endpoint (hosted): https://app.tryforewarn.com/mcp — add this URL to Claude or any LLM
  client to drive the app in natural language. Auth with your own OpoShop store
  token via Authorization: Bearer <token>.

## Safety posture (important)
Forewarn is READ + NOTIFY ONLY. It requests only read scopes on orders,
customers and the user identity, plus permission to create a notification in the
merchant's own tray and to manage its own webhook subscriptions. It has NO ability
to charge, refund, capture, void, cancel, edit, fulfil or delete anything. This is
machine-checkable at https://app.tryforewarn.com/api/settings/safety.

## Auth
Get an access token via POST /api/auth/login, then send it as
`Authorization: Bearer <token>` on /api/* requests (and to the /mcp endpoint).