Skip to content

ai.duvera/gateway

by duvera.ai · remote · no sign-in to list tools · v1.0.0 · published by ai.duvera

Governed AI actions with signed, verifiable receipts: free keyless reads, human-approved writes.

Final · 1Changes · 22

52 tools: 1 do something that can't be undone, 22 change things and 29 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gateway https://app.duvera.ai/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

52 tools

Can't be undone 1Claude Code: ask
  • venmo__payment_request[venmo · risk:low] Request a payment from a contact via Venmo (no money leaves your account)No findings

    Why it is in this group

    • The name "venmo__payment_request" says "payment": a word that usually means money moves, which cannot be taken back.
    • The input addresses people (input.recipient): what it sends cannot be taken back.
    Description, as the server wrote it
    [venmo · risk:low] Request a payment from a contact via Venmo (no money leaves your account)
Changes things 22Claude Code: ask
  • amazon__package_track[amazon · risk:low] Look up the delivery status of an Amazon order (read-only)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [amazon · risk:low] Look up the delivery status of an Amazon order (read-only)
  • chase__balance_check[chase · risk:low] Read the current balance of a Chase account (read-only)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [chase · risk:low] Read the current balance of a Chase account (read-only)
  • duvera__dev_npm_package[duvera · risk:low] Look up the latest version, description, license, and dependencies of an npm package.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Look up the latest version, description, license, and dependencies of an npm package. Works for scoped packages too (e.g. "@types/node"). No account required.
  • duvera__dev_pypi_package[duvera · risk:low] Look up the current version, summary, license, and homepage of a Python package on PyPI.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Look up the current version, summary, license, and homepage of a Python package on PyPI. No account required.
  • duvera__finance_crypto_price[duvera · risk:low] Current spot price for one or more cryptocurrencies (CoinGecko ids like "bitcoin,ethereum,solana") in a fiat currency (default USD).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Current spot price for one or more cryptocurrencies (CoinGecko ids like "bitcoin,ethereum,solana") in a fiat currency (default USD). Read-only market data. No account required.
  • duvera__finance_exchange_rates[duvera · risk:low] Live USD exchange rates against major currencies.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Live USD exchange rates against major currencies. Read-only, no account required.
  • duvera__geo_geocode[duvera · risk:low] Convert a city or place name (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Convert a city or place name (e.g. "Berlin", "San Francisco") to latitude/longitude, country, timezone, and population. Use this before weather.current or weather.air-quality when you only have a place name. No account required.
  • duvera__github_latest_release[duvera · risk:low] Get the latest published release (tag, name, notes, date) of a public GitHub repository.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Get the latest published release (tag, name, notes, date) of a public GitHub repository. Returns 404 for repos that publish no releases. No auth required.
  • duvera__news_top_stories[duvera · risk:low] Top stories from Hacker News.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Top stories from Hacker News. Read-only, no account required.
  • duvera__reference_dictionary[duvera · risk:low] Definitions, phonetics, part of speech, and examples for an English word.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Definitions, phonetics, part of speech, and examples for an English word. No account required.
  • duvera__reference_public_holidays[duvera · risk:low] Public holidays for a given year and ISO country code (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Public holidays for a given year and ISO country code (e.g. 2026 + "US"). Includes national and regional holidays with dates and names. No account required.
  • duvera__time_now[duvera · risk:low] Current date and time in an IANA timezone (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Current date and time in an IANA timezone (e.g. "America/New_York", "Asia/Tokyo"). Includes day of week and DST status. No account required.
  • duvera__weather_air_quality[duvera · risk:low] Current air quality (US AQI, PM2.5, PM10, ozone) for a latitude/longitude.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Current air quality (US AQI, PM2.5, PM10, ozone) for a latitude/longitude. Use geo.geocode first if you only have a place name. No account required.
  • duvera__weather_current[duvera · risk:low] Current temperature, conditions, wind, and humidity for a latitude/longitude (Open-Meteo).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Current temperature, conditions, wind, and humidity for a latitude/longitude (Open-Meteo). Use geo.geocode first if you only have a city or place name. No account required.
  • duvera__wiki_summary[duvera · risk:low] Get the lead summary of a Wikipedia article by title (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [duvera · risk:low] Get the lead summary of a Wikipedia article by title (e.g. "Zero_trust_architecture"). Use wiki.search first to find the exact page key. No account required.
  • grubhub__order_track[grubhub · risk:low] Check the live status and ETA of a Grubhub orderNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [grubhub · risk:low] Check the live status and ETA of a Grubhub order
  • hackernews__stories_top[hackernews · risk:low] Fetch the current list of top-story ids on Hacker News.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [hackernews · risk:low] Fetch the current list of top-story ids on Hacker News. Returns an array of item ids (resolve details via the item endpoint). No account or API key required; the hacker-news.firebaseio.com endpoint is open and unmetered.
  • maps__eta_share[maps · risk:low] Share your estimated time of arrival with a contact from Apple MapsNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [maps · risk:low] Share your estimated time of arrival with a contact from Apple Maps
  • open_meteo__weather_forecast[open-meteo · risk:low] Current temperature, conditions, humidity, and wind for a latitude/longitude, from Open-Meteo.No findings

    Why it is in this group

    • The name "open_meteo__weather_forecast" says "open": a word for a change.
    Description, as the server wrote it
    [open-meteo · risk:low] Current temperature, conditions, humidity, and wind for a latitude/longitude, from Open-Meteo.
  • opensky__flights_live[opensky · risk:low] List aircraft currently airborne within a latitude/longitude box, from OpenSky's live ADS-B feed.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [opensky · risk:low] List aircraft currently airborne within a latitude/longitude box, from OpenSky's live ADS-B feed.
  • shazam__audio_identify[shazam · risk:low] Identify the song currently playing using ShazamNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [shazam · risk:low] Identify the song currently playing using Shazam
  • uber__fare_estimate[uber · risk:low] Estimate the fare for a trip in the Uber appNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    [uber · risk:low] Estimate the fare for a trip in the Uber app
Only reads 29Claude Code: allow
  • applehealth__heart_rate_read[applehealth · risk:medium] Read heart-rate data from Apple HealthNo findings

    Why it is in this group

    • The name "applehealth__heart_rate_read" says "read": a word for reading.
    Description, as the server wrote it
    [applehealth · risk:medium] Read heart-rate data from Apple Health
  • applehealth__sleep_read[applehealth · risk:medium] Read sleep-analysis data from Apple HealthNo findings

    Why it is in this group

    • The name "applehealth__sleep_read" says "read": a word for reading.
    Description, as the server wrote it
    [applehealth · risk:medium] Read sleep-analysis data from Apple Health
  • applehealth__steps_read[applehealth · risk:medium] Read step-count data from Apple HealthNo findings

    Why it is in this group

    • The name "applehealth__steps_read" says "read": a word for reading.
    Description, as the server wrote it
    [applehealth · risk:medium] Read step-count data from Apple Health
  • datadog__logs_view[datadog · risk:low] Search and read logs from Datadog over a time rangeNo findings

    Why it is in this group

    • The name "datadog__logs_view" says "log": a word for reading.
    Description, as the server wrote it
    [datadog · risk:low] Search and read logs from Datadog over a time range
  • delta__boardingpass_show[delta · risk:low] Pull up the boarding pass for a Delta flightNo findings

    Why it is in this group

    • The name "delta__boardingpass_show" says "show": a word for reading.
    Description, as the server wrote it
    [delta · risk:low] Pull up the boarding pass for a Delta flight
  • duvera__github_read_file[duvera · risk:low] Read a file from a public GitHub repository.No findings

    Why it is in this group

    • The name "duvera__github_read_file" says "read": a word for reading.
    Description, as the server wrote it
    [duvera · risk:low] Read a file from a public GitHub repository. Read-only.
  • duvera__github_search_repos[duvera · risk:low] Search public GitHub repositories by keyword.No findings

    Why it is in this group

    • The name "duvera__github_search_repos" says "search": a word for reading.
    Description, as the server wrote it
    [duvera · risk:low] Search public GitHub repositories by keyword. Returns top 5 results by stars. No auth required.
  • gmail__mail_read[gmail · risk:low] Read recent emails from the Gmail inboxNo findings

    Why it is in this group

    • The name "gmail__mail_read" says "read": a word for reading.
    Description, as the server wrote it
    [gmail · risk:low] Read recent emails from the Gmail inbox
  • googlecalendar__availability_find[googlecalendar · risk:low] Find open time slots within a date range in Google CalendarNo findings

    Why it is in this group

    • The name "googlecalendar__availability_find" says "find": a word for reading.
    Description, as the server wrote it
    [googlecalendar · risk:low] Find open time slots within a date range in Google Calendar
  • microsoft365__calendar_list[microsoft365 · risk:low] List Calendar via Outlook Calendar, governed by Duvera.No findings

    Why it is in this group

    • The name "microsoft365__calendar_list" says "list": a word for reading.
    Description, as the server wrote it
    [microsoft365 · risk:low] List Calendar via Outlook Calendar, governed by Duvera.
  • postgres__sql_read[postgres · risk:low] Execute a read-only SQL query against a Postgres databaseNo findings

    Why it is in this group

    • The name "postgres__sql_read" says "read": a word for reading.
    Description, as the server wrote it
    [postgres · risk:low] Execute a read-only SQL query against a Postgres database
  • southwest__flight_status[southwest · risk:low] Check the status of a Southwest flightNo findings

    Why it is in this group

    • The name "southwest__flight_status" says "status": a word for reading.
    Description, as the server wrote it
    [southwest · risk:low] Check the status of a Southwest flight
  • telegram__message_read[telegram · risk:low] Read recent messages from a Telegram chatNo findings

    Why it is in this group

    • The name "telegram__message_read" says "read": a word for reading.
    Description, as the server wrote it
    [telegram · risk:low] Read recent messages from a Telegram chat
  • united__flight_status[united · risk:low] Check the status of a United flightNo findings

    Why it is in this group

    • The name "united__flight_status" says "status": a word for reading.
    Description, as the server wrote it
    [united · risk:low] Check the status of a United flight
  • wallet__boardingpass_show[wallet · risk:low] Pull up a boarding pass stored in Apple WalletNo findings

    Why it is in this group

    • The name "wallet__boardingpass_show" says "show": a word for reading.
    Description, as the server wrote it
    [wallet · risk:low] Pull up a boarding pass stored in Apple Wallet

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http gateway https://app.duvera.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__gateway__applehealth__heart_rate_read",
      "mcp__gateway__applehealth__sleep_read",
      "mcp__gateway__applehealth__steps_read",
      "mcp__gateway__bluesky__trending_get",
      "mcp__gateway__datadog__logs_view",
      "mcp__gateway__delta__boardingpass_show",
      "mcp__gateway__duvera__dev_stackoverflow_search",
      "mcp__gateway__duvera__food_recipe_search",
      "mcp__gateway__duvera__food_restaurant_search",
      "mcp__gateway__duvera__github_read_file",
      "mcp__gateway__duvera__github_search_repos",
      "mcp__gateway__duvera__news_search",
      "mcp__gateway__duvera__travel_flight_search",
      "mcp__gateway__duvera__wiki_search",
      "mcp__gateway__gmail__mail_read",
      "mcp__gateway__google_workspace__mail_search",
      "mcp__gateway__googlecalendar__availability_find",
      "mcp__gateway__instacart__menu_search",
      "mcp__gateway__microsoft365__calendar_list",
      "mcp__gateway__microsoft365__mail_search",
      "mcp__gateway__notion__notes_search",
      "mcp__gateway__obsidian__notes_search",
      "mcp__gateway__postgres__sql_read",
      "mcp__gateway__slack__message_search",
      "mcp__gateway__southwest__flight_status",
      "mcp__gateway__telegram__message_read",
      "mcp__gateway__twitter__tweets_search",
      "mcp__gateway__united__flight_status",
      "mcp__gateway__wallet__boardingpass_show"
    ],
    "ask": [
      "mcp__gateway__amazon__package_track",
      "mcp__gateway__chase__balance_check",
      "mcp__gateway__duvera__dev_npm_package",
      "mcp__gateway__duvera__dev_pypi_package",
      "mcp__gateway__duvera__finance_crypto_price",
      "mcp__gateway__duvera__finance_exchange_rates",
      "mcp__gateway__duvera__geo_geocode",
      "mcp__gateway__duvera__github_latest_release",
      "mcp__gateway__duvera__news_top_stories",
      "mcp__gateway__duvera__reference_dictionary",
      "mcp__gateway__duvera__reference_public_holidays",
      "mcp__gateway__duvera__time_now",
      "mcp__gateway__duvera__weather_air_quality",
      "mcp__gateway__duvera__weather_current",
      "mcp__gateway__duvera__wiki_summary",
      "mcp__gateway__grubhub__order_track",
      "mcp__gateway__hackernews__stories_top",
      "mcp__gateway__maps__eta_share",
      "mcp__gateway__open_meteo__weather_forecast",
      "mcp__gateway__opensky__flights_live",
      "mcp__gateway__shazam__audio_identify",
      "mcp__gateway__uber__fare_estimate",
      "mcp__gateway__venmo__payment_request"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gateway. Review it before you use it.