Summary
This connection can send push notifications to your users, which puts it in the same category as the WhatsApp one.
A misfired push reaches every device on a subscription list and cannot be recalled. The read-only tools — health, config, reference — are safe to leave connected and genuinely useful for checking configuration. The send path is guarded per their material, but treat the guard as a backstop rather than a policy: decide deliberately whether an agent should hold this at all.
What it is
OneSignal's hosted endpoint. Their official Cursor plugin is a wrapper around this same address, so the plugin and a direct connection reach the same tools.
What you get
- onesignal_health, onesignal_config, onesignal_reference_overview — read-only status and reference
- Sending and other write operations, which their material describes as guarded
Requirements
OAuth, or a OneSignal API key in the Authorization header.
Setup effort
Paste a URL, then authorize — add the endpoint to your client, then approve the OAuth consent screen