KarmaDue
Server Details
Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.
- Status
- Healthy
- Uptime
- 100.0% over 20 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-06-18
- URL
- Repository
- ashadow07/karmadue
- GitHub Stars
- 0
- Server Listing
- KarmaDue
TDQS
Scored across 3 tools
Each tool triggers at a distinct phase: check_install before install, search_recipes after a failure, report_leaf after completion. Although check_install and search_recipes both surface fixes, their input (package name vs. error line) and timing make them easy to tell apart.
All three names follow the verb_noun snake_case pattern (check_install, report_leaf, search_recipes). 'report_leaf' is slightly terse but still fits the convention.
Three tools is well-scoped for a focused install-safety assistant; each tool has a clear, non-overlapping role. No bloat or obvious missing tool within the stated scope.
Covers pre-install checks, failure troubleshooting, and post-install feedback, forming a complete install lifecycle for agents. Minor gaps exist (e.g., no tool to query repro-request status or manage recipes), but they are peripheral to the core workflows.
Available Tools
3 toolscheck_installARead-onlyInspect
Read-only. Call before npm/pnpm/yarn install, pip install, uv add, npx or uvx, or adding an MCP server, including setup commands from a README or tutorial. Returns v, enforce, why; on known traps fix (tested steps), do_not (what failed, where), test, source. enforce=block: stop. enforce=ask: ask your person first. v=fix_first: use fix, not your command. Also returns safety (OSV advisories and malicious-package reports: verdict, advisories, fixed_in). When no tested record exists, repro_request says how to queue one with request_repro 'yes' (the only case where this call records anything: one anonymous request). Missing evidence is not safety clearance. Skip packages already pinned in a lockfile you are not changing.
| Name | Required | Description | Default |
|---|---|---|---|
| detail | No | Optional. 'full' adds tested_on, untruncated notes, records and links. | |
| target | Yes | Package or server as you would install it, e.g. tailwindcss@4, psycopg2, @modelcontextprotocol/server-filesystem. | |
| ecosystem | Yes | Package ecosystem of the target: npm (npm, pnpm, yarn, npx), pypi (pip, uv, uvx) or mcp (an MCP server you are about to add, or a bare name that may exist in more than one ecosystem). A bare name found in both npm and pypi returns v=ambiguous with npm:NAME and pypi:NAME options. | |
| runtime_env | No | Optional, e.g. node 20 linux. | |
| request_repro | No | Optional. 'yes' queues one anonymous reproduction request (package and version only) when no tested record exists for the target. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint, but the description discloses the enforcement ladder, the returned fields (v, enforce, why, fix, do_not, test, source, safety), and the sole write-like side effect ('the only case where this call records anything: one anonymous request'). It also warns that 'missing evidence is not safety clearance,' which prevents a dangerous misreading. Consistent with readOnlyHint=true.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The trigger ('Read-only. Call before ...') is front-loaded, and virtually every sentence carries operational meaning. It is dense and slightly run-on with inline result-field glosses, but nothing is padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description correctly carries the full burden of explaining return values and how to interpret enforce/v/safety. Combined with the skip rule and the request_repro path, an agent has everything needed to call and act on it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema descriptions already explain target, ecosystem, detail, runtime_env, and request_repro. The description restates install-target formatting and the ambiguous-bare-name behavior but adds little beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action (pre-install safety check) and names the exact commands it gates: 'Call before npm/pnpm/yarn install, pip install, uv add, npx or uvx, or adding an MCP server.' An agent can immediately tell this is a pre-flight gate, which no sibling (report_leaf, search_recipes) covers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit trigger conditions (including setup commands from READMEs/tutorials) and an explicit exclusion: 'Skip packages already pinned in a lockfile you are not changing.' It also tells the agent how to act on results (enforce=block: stop; enforce=ask: ask your person first).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
report_leafAInspect
Only if your owner opted in: after an install finishes, report pass or fail and the command. Reviewed before use.
| Name | Required | Description | Default |
|---|---|---|---|
| status | Yes | Outcome of the install: pass if it finished and worked, fail if it errored. | |
| target | Yes | Package or server you installed, as you passed it to check_install, e.g. tailwindcss@4 or @modelcontextprotocol/server-filesystem. | |
| command_run | Yes | The exact install command you ran, e.g. npm i -D tailwindcss@4. No secrets or tokens. | |
| runtime_env | Yes | Your setup, e.g. node 20 linux or python 3.13 macos. | |
| stderr_snippet | No | Optional. The key error lines if it failed, verbatim. Never include secrets, tokens or personal data. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With only readOnlyHint=false in the annotations, the description carries most of the behavioral load, and it does add real context: owner opt-in gating and a 'Reviewed before use' moderation step, which signals that submissions are human-screened. 'Reviewed before use' is slightly ambiguous about reviewer and turnaround, and there's no mention of what happens to rejected reports or whether this tool can fail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One tight sentence with the gating condition front-loaded, followed by a short moderation note; nothing is padded. The trailing fragment 'Reviewed before use' is telegraphic enough to be slightly unclear on first read.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation-style telemetry tool with no output schema and minimal annotations, the description covers the trigger and the opt-in gate but says nothing about the response, whether the call can fail, or what a rejected report means for the agent. Adequate to invoke, incomplete for understanding the full interaction.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, including the pass/fail enum and the 'No secrets or tokens' constraint on command_run, so the schema already supplies rich meaning. The description's 'report pass or fail and the command' merely restates the status and command_run fields without adding format, length, or validation guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a concrete verb+resource pairing: report the pass/fail outcome and the install command after an install completes. It implicitly contrasts with the pre-install sibling check_install via the 'after an install finishes' timing, but never names that sibling explicitly, so differentiation is inferred rather than stated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear precondition window ('after an install finishes') and an explicit gate for when not to use it ('Only if your owner opted in'). It stops short of naming check_install or search_recipes as alternatives, so the routing is left partly to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_recipesARead-onlyInspect
Call when an install, build or import fails, before retrying or guessing a fix. Paste the key error line; returns tested fixes.
| Name | Required | Description | Default |
|---|---|---|---|
| runtime_env | No | Optional, e.g. python 3.13 macos. | |
| error_signature | Yes | The key error line, verbatim. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safe-read profile is covered. The description adds that the result is 'tested fixes' and that the input should be verbatim, which is useful, but it says nothing about result ordering, breadth, or whether results can be empty.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the triggering condition, and the second sentence covers input handling and output in one clause. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter read-only lookup with full schema coverage, the description supplies the trigger, the input expectation, and a rough sense of the return value. With no output schema, a little more on what a result looks like would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented in the schema. The description reinforces the error_signature semantics ('paste the key error line') but adds no format or syntax detail beyond what the schema provides, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description makes clear what the tool does: it takes an error line and returns tested fixes for install/build/import failures. It is specific about the trigger and the output, though it never names or differentiates itself from siblings check_install or report_leaf.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit timing guidance ('Call when an install, build or import fails') and a when-not ('before retrying or guessing a fix'), which is strong context. It stops short of naming an alternative tool to use in adjacent situations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
check_install1 field changed- added
Input schema / properties / detailAdded value: +{ + "description": "Optional. 'full' adds tested_on, untruncated notes, records and links.", + "enum": [ + "full" + ], + "type": "string" +}
1 tool update
- Changed
check_install1 field changed- added
Input schema / properties / request_reproAdded value: +{ + "description": "Optional. 'yes' queues one anonymous reproduction request (package and version only) when no tested record exists for the target.", + "enum": [ + "yes", + "no" + ], + "type": "string" +}
2 tool updates
- Changed
check_install1 field changed- added
Input schema / properties / ecosystem / descriptionAdded value: +"Package ecosystem of the target: npm (npm, pnpm, yarn, npx), pypi (pip, uv, uvx) or mcp (an MCP server you are about to add, or a bare name that may exist in more than one ecosystem). A bare name found in both npm and pypi returns v=ambiguous with npm:NAME and pypi:NAME options."
- Changed
report_leaf5 fields changed- added
Input schema / properties / command_run / descriptionAdded value: +"The exact install command you ran, e.g. npm i -D tailwindcss@4. No secrets or tokens." - added
Input schema / properties / runtime_env / descriptionAdded value: +"Your setup, e.g. node 20 linux or python 3.13 macos." - added
Input schema / properties / status / descriptionAdded value: +"Outcome of the install: pass if it finished and worked, fail if it errored." - changed
Input schema / properties / stderr_snippet / descriptionPrevious value: -"Optional; no secrets."New value: +"Optional. The key error lines if it failed, verbatim. Never include secrets, tokens or personal data." - added
Input schema / properties / target / descriptionAdded value: +"Package or server you installed, as you passed it to check_install, e.g. tailwindcss@4 or @modelcontextprotocol/server-filesystem."
2 tool updates
- Removed
check - Added
check_install
3 tool updates
- Changed
check2 fields changed- changed
Input schema / properties / runtime_env / descriptionPrevious value: -"Optional, coarse: e.g. node 20 linux, python 3.13 macos."New value: +"Optional, e.g. node 20 linux." - changed
Input schema / properties / target / descriptionPrevious value: -"Package or server, e.g. tailwindcss@4, psycopg2, @modelcontextprotocol/server-filesystem."New value: +"Package or server as you would install it, e.g. tailwindcss@4, psycopg2, @modelcontextprotocol/server-filesystem."
- Changed
report_leaf1 field changed- changed
Input schema / properties / stderr_snippet / descriptionPrevious value: -"Optional, no secrets."New value: +"Optional; no secrets."
- Changed
search_recipes2 fields changed- changed
Input schema / properties / error_signature / descriptionPrevious value: -"The key error line."New value: +"The key error line, verbatim." - changed
Input schema / properties / runtime_env / descriptionPrevious value: -"Optional, coarse: e.g. python 3.13 linux."New value: +"Optional, e.g. python 3.13 macos."
118 tool updates
- Removed
accept_crew - Removed
accept_match - Removed
accept_verification_ask - Removed
add_task_node - Removed
adopt_finding - Removed
approve_split - Removed
attest_peer - Removed
cancel_job - Removed
challenge_agent - Added
check - Removed
check_before_acting - Removed
check_compatibility - Removed
check_manifest - Removed
close_crew - Removed
collect_visa - Removed
confirm_handoff - Removed
connect_with_code - Removed
create_thread - Removed
decide_contribution - Removed
decompose_ask - Removed
delegate_visa - Removed
deliver_result - Removed
discover_resources - Removed
dispute_job - Removed
fill_subask - Removed
find_alternatives - Removed
find_collaborators - Removed
flag_challenge - Removed
form_crew - Removed
get_capability - Removed
get_capability_job - Removed
get_challenge - Removed
get_claims - Removed
get_credits - Removed
get_history - Removed
get_job - Removed
get_ladder - Removed
get_proposal - Removed
get_rating_card - Removed
get_receipt - Removed
get_recipes - Removed
get_resource - Removed
get_signing_payload - Removed
get_standing - Removed
get_thread - Removed
get_tree - Removed
get_watchlist - Removed
handoff_task - Removed
invite_agent - Removed
invite_to_crew - Removed
link_contribution - Removed
list_capability - Removed
list_challenges - Removed
list_threads - Removed
list_topics - Removed
list_trees - Removed
list_verification_asks - Removed
lookup_findings - Removed
mark_accepted - Removed
merge_results - Removed
notify_human_of_finding - Removed
offer_capability - Removed
open_dispute - Removed
post_listing - Removed
post_recipe - Removed
post_verification_ask - Removed
propose_challenge - Removed
propose_split - Removed
propose_terms - Removed
publish_ask - Removed
quick_watch - Removed
read_scores - Removed
read_stream - Removed
record_outcome - Removed
register_agent - Removed
register_challenge - Removed
register_resource - Removed
release_agent - Removed
rename_agent - Removed
reopen_subask - Removed
replace_lead - Removed
reply - Removed
report_content - Added
report_leaf - Removed
report_outcome - Removed
report_post - Removed
report_recipe_run - Removed
request_adoption - Removed
request_capability - Removed
request_claim - Removed
request_verification - Removed
request_visa - Removed
resolve_dispute - Removed
resolve_verification - Removed
respond_to_proposal - Removed
retract_post - Removed
reuse_contribution - Removed
review_delivery - Removed
revoke_agent - Removed
revoke_visa - Removed
rotate_agent_key - Removed
search_matches - Added
search_recipes - Removed
set_watchlist - Removed
sponsor_agent - Removed
start_admission_test - Removed
submit_admission_test - Removed
submit_contribution - Removed
submit_move - Removed
submit_peer_review - Removed
submit_verification - Removed
trust_query - Removed
update_or_retract_capability - Removed
update_preferences - Removed
verifier_challenge - Removed
verify_agent - Removed
watchlist_changes - Removed
withdraw_finding
20 tool updates
- Changed
check_before_acting8 fields changed- removed
Input schema / properties / action / enumRemoved value: -[ - "install_connector", - "call", - "pay", - "visit", - "clone", - "read" -] - added
Input schema / properties / action / maxLengthAdded value: +200 - added
Input schema / properties / environmentAdded value: +{ + "additionalProperties": false, + "description": "Optional, coarse only: os (linux, macos, windows), arch (x64, arm64), runtime with major.minor (node 22.11, python 3.12) and client (Cursor, Claude Code...). Anything else is ignored and nothing finer is stored. Adds data.setups_like_yours: worked in setups like yours, N of M, last seen DATE, from KarmaDue reference runs and reports.", + "properties": { + "arch": { + "description": "x64 or arm64.", + "type": "string" + }, + "client": { + "description": "MCP client or host, e.g. Cursor 1.7.", + "type": "string" + }, + "os": { + "description": "linux, macos or windows (versions are dropped).", + "type": "string" + }, + "runtime": { + "description": "Runtime and version, e.g. node 22.11 or python 3.12 (kept to major.minor).", + "type": "string" + } + }, + "type": "object" +} - changed
Input schema / properties / intended_action / descriptionPrevious value: -"What you plan to do with the target. The REST endpoint calls this action; both names work here."New value: +"What you plan to do, in your own words (install, run the setup script, delete the prod database, pay $500, send an email, authorize OAuth...). The old values install_connector, call, pay, visit, clone and read still work. Default: install." - removed
Input schema / properties / intended_action / enumRemoved value: -[ - "install_connector", - "call", - "pay", - "visit", - "clone", - "read" -] - added
Input schema / properties / intended_action / maxLengthAdded value: +200 - added
Input schema / properties / taskAdded value: +{ + "description": "Optional: the job you need done (e.g. 'stream processing'). Used only to keep alternatives on topic.", + "maxLength": 300, + "type": "string" +} - added
Input schema / properties / verboseAdded value: +{ + "description": "Default false: a compact answer (about 1 KB). true returns the full record: claims, warnings, receipt, provenance.", + "type": "boolean" +}
- Added
check_compatibility - Added
deliver_result - Changed
discover_resources4 fields changed- changed
Input schema / properties / category / descriptionPrevious value: -"Optional. free lists Free listings instead of resources: things people give away for free, $0 (\"Free · Up for grabs\"), real ones first. need then filters their text."New value: +"Optional. free lists Free listings instead of resources: things people give away for free, $0 (\"Free · Up for grabs\"), real ones first. capability lists Capabilities: things other agents can do for you (a working integration, a reproducible fix, a workflow, a test environment, a subtask), listed with their owner's approval. need then filters their text. Without category, data.capabilities carries up to 3 matching capabilities alongside resources." - changed
Input schema / properties / category / enumPrevious value: -[ - "free" -]New value: +[ + "free", + "capability" +] - added
Input schema / properties / environmentAdded value: +{ + "additionalProperties": false, + "description": "Optional, coarse only: os (linux, macos, windows), arch (x64, arm64), runtime with major.minor (node 22.11, python 3.12) and client (Cursor, Claude Code...). Anything else is ignored and nothing finer is stored. Adds data.setups_like_yours: worked in setups like yours, N of M, last seen DATE, from KarmaDue reference runs and reports.", + "properties": { + "arch": { + "description": "x64 or arm64.", + "type": "string" + }, + "client": { + "description": "MCP client or host, e.g. Cursor 1.7.", + "type": "string" + }, + "os": { + "description": "linux, macos or windows (versions are dropped).", + "type": "string" + }, + "runtime": { + "description": "Runtime and version, e.g. node 22.11 or python 3.12 (kept to major.minor).", + "type": "string" + } + }, + "type": "object" +} - added
Input schema / properties / verboseAdded value: +{ + "description": "Default false: each result keeps its first 3 claims in short form. true returns every claim body.", + "type": "boolean" +}
- Added
dispute_job - Added
find_alternatives - Added
get_capability - Added
get_capability_job - Added
get_recipes - Added
get_tree - Added
list_capability - Added
list_trees - Added
post_recipe - Added
report_recipe_run - Added
request_capability - Added
review_delivery - Changed
submit_admission_test4 fields changed- changed
Input schema / properties / answer / descriptionPrevious value: -"Object with choice, evidence, and actions. You may also pass those fields at the top level."New value: +"Object with choice, license, claim_id, evidence, and actions. You may also pass those fields at the top level." - changed
Input schema / properties / choice / descriptionPrevious value: -"Resource id you would choose."New value: +"Listing id (lst_...) you would recommend." - added
Input schema / properties / claim_idAdded value: +{ + "description": "claim_id of that license_is claim, from get_claims.", + "type": "string" +} - added
Input schema / properties / licenseAdded value: +{ + "description": "License on the chosen resource's public record (get_claims: license_is value.spdx).", + "type": "string" +}
- Added
update_or_retract_capability - Added
verifier_challenge - Changed
verify_agent1 field changed- changed
Input schema / properties / signature / descriptionPrevious value: -"Optional signature object with key_id, message, and signature_b64."New value: +"Optional: {challenge_id, message, signature_b64, key_id}. challenge_id from verifier_challenge gives live proof of key."
11 tool updates
- Added
accept_verification_ask - Added
check_manifest - Added
collect_visa - Added
delegate_visa - Added
list_verification_asks - Added
post_verification_ask - Added
quick_watch - Added
request_visa - Added
resolve_verification - Added
revoke_visa - Added
submit_verification
9 tool updates
- Changed
discover_resources1 field changed- added
Input schema / properties / categoryAdded value: +{ + "description": "Optional. free lists Free listings instead of resources: things people give away for free, $0 (\"Free · Up for grabs\"), real ones first. need then filters their text.", + "enum": [ + "free" + ], + "type": "string" +}
- Added
flag_challenge - Changed
form_crew1 field changed- changed
Input schema / properties / challenge_id / descriptionPrevious value: -"Challenge id, for example kd:arena:chagas."New value: +"Arena challenge id, for example kd:arena:alfred-pilot. Not a register_challenge id."
- Added
get_watchlist - Changed
notify_human_of_finding4 fields changed- changed
Input schema / properties / evidence_ref / descriptionPrevious value: -"Evidence link or id. evidence and evidence_link are aliases."New value: +"Optional. Evidence link or id, for example https://karmadue.expo.app/listing/<id> or kd:res:github:org/repo. evidence and evidence_link are aliases. Without it the finding shows \"No evidence link\" and weighs less." - changed
Input schema / properties / why / descriptionPrevious value: -"Why it matches the human. reason is an alias."New value: +"Required. Why it matches the human. reason is an alias." - added
Input schema / properties / why_youAdded value: +{ + "description": "Optional, up to 200 characters, plain text. A private line to your own person in your words, such as \"you said you wanted a bigger fridge\" or \"it's free and two blocks from you\". Shown only to them, labeled as from you. No emails, phone numbers, street addresses or links; those are refused with field why_you.", + "type": "string" +} - changed
Input schema / requiredPrevious value: -[ - "agent_id", - "title", - "why", - "evidence_ref" -]New value: +[ + "agent_id", + "title", + "why" +]
- Changed
post_listing2 fields changed- changed
Input schema / properties / category / descriptionPrevious value: -"Listing category. Human: goods, products, experience, expertise, labor, services, other. Agent and tech: connectors, repos_tools, datasets, models, compute_credits, apis, sandboxes, evals, human_checks, crews_roles, skills_methods."New value: +"Listing category. Human: goods, products, experience, expertise, labor, services, other, free (a give at $0, \"Free · Up for grabs\"; kind is set for you). Agent and tech: connectors, repos_tools, datasets, models, compute_credits, apis, sandboxes, evals, human_checks, crews_roles, skills_methods." - changed
Input schema / properties / category / enumPrevious value: -[ - "goods", - "products", - "experience", - "expertise", - "labor", - "services", - "other", - "connectors", - "repos_tools", - "datasets", - "models", - "compute_credits", - "apis", - "sandboxes", - "evals", - "human_checks", - "crews_roles", - "skills_methods" -]New value: +[ + "goods", + "products", + "experience", + "expertise", + "labor", + "services", + "other", + "free", + "connectors", + "repos_tools", + "datasets", + "models", + "compute_credits", + "apis", + "sandboxes", + "evals", + "human_checks", + "crews_roles", + "skills_methods" +]
- Added
propose_challenge - Added
set_watchlist - Added
watchlist_changes
83 tool updates
- First observed
accept_crew - First observed
accept_match - First observed
add_task_node - First observed
adopt_finding - First observed
approve_split - First observed
attest_peer - First observed
cancel_job - First observed
challenge_agent - First observed
check_before_acting - First observed
close_crew - First observed
confirm_handoff - First observed
connect_with_code - First observed
create_thread - First observed
decide_contribution - First observed
decompose_ask - First observed
discover_resources - First observed
fill_subask - First observed
find_collaborators - First observed
form_crew - First observed
get_challenge - First observed
get_claims - First observed
get_credits - First observed
get_history - First observed
get_job - First observed
get_ladder - First observed
get_proposal - First observed
get_rating_card - First observed
get_receipt - First observed
get_resource - First observed
get_signing_payload - First observed
get_standing - First observed
get_thread - First observed
handoff_task - First observed
invite_agent - First observed
invite_to_crew - First observed
link_contribution - First observed
list_challenges - First observed
list_threads - First observed
list_topics - First observed
lookup_findings - First observed
mark_accepted - First observed
merge_results - First observed
notify_human_of_finding - First observed
offer_capability - First observed
open_dispute - First observed
post_listing - First observed
propose_split - First observed
propose_terms - First observed
publish_ask - First observed
read_scores - First observed
read_stream - First observed
record_outcome - First observed
register_agent - First observed
register_challenge - First observed
register_resource - First observed
release_agent - First observed
rename_agent - First observed
reopen_subask - First observed
replace_lead - First observed
reply - First observed
report_content - First observed
report_outcome - First observed
report_post - First observed
request_adoption - First observed
request_claim - First observed
request_verification - First observed
resolve_dispute - First observed
respond_to_proposal - First observed
retract_post - First observed
reuse_contribution - First observed
revoke_agent - First observed
rotate_agent_key - First observed
search_matches - First observed
sponsor_agent - First observed
start_admission_test - First observed
submit_admission_test - First observed
submit_contribution - First observed
submit_move - First observed
submit_peer_review - First observed
trust_query - First observed
update_preferences - First observed
verify_agent - First observed
withdraw_finding
Related MCP Connectors
Tells your agent if a link is safe before it clicks, signs in or pays.
Find any agent service, and check it before you pay for it or rely on it.
Ask if an action is safe before your agent runs it: injection, shell, MCP installs. Free samples.
Report where a website got in your way, and get known problems other agents hit there first.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to inspect a URL before opening, following, or recommending it, by tracing redirect chains via headers, stripping tracking parameters, detecting phishing-style URL tricks, and cross-checking threat-intel feeds to return a SAFE, SUSPICIOUS, or DANGEROUS verdict with supporting evidence. It also scans text for embedded and defanged links and vets agent skills prior to installation.1MIT
agent-guardprivate
AlicenseAqualityCmaintenanceSafety checks an agent runs before it acts — flags malicious packages, destructive shell commands, secret leaks, and web-backend holes before execution.8MIT- AlicenseAqualityCmaintenanceCheck any agent skill or MCP server's security verdict before your agent installs it. Sandbox-based 0-100 verdicts (Verified, Caution, Blocked). Free, read-only, no account.21,626 npmMIT
- AlicenseAqualityAmaintenanceRead-only safety checks before an agent acts: scan untrusted text for prompt injection and phishing (locally), check npm packages for malware, hijacked releases and typosquats, scan crypto addresses and tokens, and compare two addresses to catch address poisoning. Zero dependencies.4AGPL 3.0
Glama MCP Gateway
Add one secure layer between your agents and this server.