Siren
by mysiren.ai · remote · no sign-in to list tools · v1.1.0 · published by ai.mysiren
Deterministic visual marketing engine. Your agent plans, renders, and posts on-brand campaigns.
44 tools: 7 can delete or cancel things, 20 change things and 17 only read.
Scanned Oct 21, 2026
- Deletes or cancels7Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things20Claude Code: ask: see these tools
- Only reads17Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http siren https://mcp.mysiren.ai/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnbuy_credits
The server marks "buy_credits" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "get": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
44 tools
Deletes or cancels 7Claude Code: deny
delete_brand_videoRemove a clip from Brand DNA, file and poster included.No findings
Why it is in this group
- The name "delete_brand_video" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Remove a clip from Brand DNA, file and poster included.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
delete_mediaDelete one photo or video uploaded with upload_media.No findings
Why it is in this group
- The name "delete_media" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Delete one photo or video uploaded with upload_media. Only this workspace's uploads; a film that already rendered keeps its copy.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
delete_personRemove a face from the people library.No findings
Why it is in this group
- The name "delete_person" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Remove a face from the people library.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
delete_product_screenRemove a product screenshot from Brand DNA.No findings
Why it is in this group
- The name "delete_product_screen" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Remove a product screenshot from Brand DNA. Does not delete Brand Memory.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
post_runPost a finished run's assets to the workspace's CONNECTED SOCIAL ACCOUNT.No findings
Why it is in this group
- The name "post_run" says "post": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Post a finished run's assets to the workspace's CONNECTED SOCIAL ACCOUNT. This is live, public distribution on the customer's channel — always confirm with the user before calling. Only works if the grant was authorised with posting allowed. Pass `caption` to own the words; it goes out verbatim. The call queues the post behind a short publish window (about two minutes, cancellable) rather than firing inline: poll get_run after that and read `posts[].url` for the live permalink and the caption that went out.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
schedule_postSchedule a finished run to post at scheduled_at (ISO-8601).No findings
Why it is in this group
- The name "schedule_post" says "schedule": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Schedule a finished run to post at scheduled_at (ISO-8601). Shows in the customer's local timezone. platforms: x, instagram, tiktok, linkedin, youtube, or everything. Posts fire sequentially. Requires Allow posting. Prefer this over post_run when the user names a time. On create_campaign you can pass scheduled_at instead.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
studio_scheduleRender a Studio card then queue a ScheduledPost at scheduled_at.No findings
Why it is in this group
- The name "studio_schedule" says "schedule": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Render a Studio card then queue a ScheduledPost at scheduled_at.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
Changes things 20Claude Code: ask
add_personAdd a face to the people library.No findings
Why it is in this group
- The name "add_person" says "add": a word for a change.
Description, as the server wrote it Add a face to the people library. Siren crops it round in a few seconds (status cropping, then ready). Only upload people who agreed.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
buy_creditsGet a Stripe checkout link for more credits.1 finding
Why it is in this group
- The description's first verb is "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "buy_credits" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "get": a word for reading.
Description, as the server wrote it Get a Stripe checkout link for more credits. Give the link to the human; they pay on Stripe and the credits land in about a minute. Nothing is charged by this call. Read the balance on get_account.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
clarify_briefAsk Siren's clarifier whether a brief is specific enough to generate from.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Ask Siren's clarifier whether a brief is specific enough to generate from. Returns ready=true/false plus follow-up questions. Use before create_campaign when the user's request is vague.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
create_campaignCreate a Siren campaign from a plain-language brief — the full pipeline: plan, on-brand copy, deterministic render, verify.No findings
Why it is in this group
- The name "create_campaign" says "create": a word for a change.
Description, as the server wrote it Create a Siren campaign from a plain-language brief — the full pipeline: plan, on-brand copy, deterministic render, verify. Returns the run; poll get_run until it finishes. Spends credits (image 10, an ad set of 3 images 20, video 25; voice or music-only is the same 25). Pass output_type to pin a film (list_films has the catalog); omit it and Siren picks. Optional scheduled_at (ISO-8601) queues a sequential post (X → Instagram → TikTok, or platforms you pass) when the render succeeds — requires Allow posting. Fails with a 402 upgrade message if the plan or balance can't cover it. FILM KNOBS: voiceover (true narrated / false music only), direction (mood, pace, motion, music in one line), music (a bed id), media (upload_media URLs the film shows). Images ignore the film knobs: Siren writes and paints them from the brief and Brand DNA. ANY BRAND: pass `brand` to make it for a brand that is not this workspace's own, e.g. brand={"name": "Acme", "site": "acme.com", "logo_url": "https://acme.com/logo.png", "primary": "#FF4400"}. Nothing of this workspace's identity leaks in. The exact same request within 24 hours returns the run it already started, as it is now, with replayed=true and no new charge. Change the brief to make another.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_mascotStart the brand mascot: from a description (note, kind) or from a reference picture.No findings
Why it is in this group
- The name "create_mascot" says "create": a word for a change.
Description, as the server wrote it Start the brand mascot: from a description (note, kind) or from a reference picture. Paid plans; 100 credits. Siren paints a hero in about a minute; poll get_mascot, show the human, then mascot_step keep (build the pose sheet) or retry (paint again, 3 tries). One mascot per workspace.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
edit_assetEdit a finished ad creative in place.No findings
Why it is in this group
- The name "edit_asset" says "edit": a word for a change.
Description, as the server wrote it Edit a finished ad creative in place. Only what the instruction names changes; faces, layout, lettering and every other pixel are kept, so you can chain edits (hair pink, then tail teal, then add a sign) without the picture drifting. About 15 seconds. 3 credits; an instruction that asks for a whole new look ("make it a comic", "make it cinematic") repaints at 10. Returns the NEW run: poll get_run until it is terminal and show the human the new image. Films are not edited this way: re-render them with render_asset. Every earlier version stays, so the human can go back to any of them.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
mascot_stepMove the mascot on: keep the hero, paint it again, or add a pose.No findings
Why it is in this group
- The description's first verb is "move": a word for a change.
Description, as the server wrote it Move the mascot on: keep the hero, paint it again, or add a pose. Ask the human before keep, since it builds the whole sheet.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
render_assetRender films from pre-formed SirenSeed bodies (advanced).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Render films from pre-formed SirenSeed bodies (advanced). FILMS ONLY: images are painted from a brief, so for any image, ad or creative call create_campaign with asset_type=card (a still here returns 422 stills_use_a_brief). Each item: {output_type, channel, seed_body, archetype?, family?, surface?, caption?, voice_id?, music?, direction?, brand_override?}. Prefer create_campaign unless the user has concrete seed JSON. Returns run ids, `estimated_seconds` and `poll_after_seconds`; wait that long, then get_run. THE DIRECTOR: every film body is edited against Brand DNA before it renders. It keeps the film and your brand-specific lines, rewrites empty, generic or reference-body copy, and never touches media. `director` in the response says what changed. `direction` is a free line ("dark, club energy, fast") that steers words, pace and music. A film that cannot use what you sent returns 422 film_does_not_fit with a `fix` and `films_that_fit`. ANY BRAND: put brand_override={"name": "Acme", "site": "acme.com", "logo_url": "https://acme.com/logo.png", "primary": "#FF4400", "accent": "#111111"} on an item to render it for a brand that is not this workspace's own. With a name it is a clean slate: none of this workspace's logo, mascot, font, handle, screenshots or stills are used. Media slots take only URLs you uploaded with upload_media.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
studio_automateCreate a Studio profile on this API key.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it Create a Studio profile on this API key. Returns generate curl and inbound hook URLs (Stripe, GitHub, Uptime Kuma, Product Hunt, generic). Passing delivery.social_account_ids turns on social delivery for the profile — that publishes, so it requires Allow posting.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
studio_cardRender a Studio data card from a type + body.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Render a Studio data card from a type + body. Deterministic React, no paint. Optional live post after render. Returns run_id, image url, and post url when posted.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
studio_editChange a Studio video by asking, as the human would in the chat.No findings
Why it is in this group
- The name "studio_edit" says "edit": a word for a change.
Description, as the server wrote it Change a Studio video by asking, as the human would in the chat. Only what the ask names changes; Siren replies with what it changed (before and after) and the new version number. Waits up to about 25 seconds for the reply. No credits are spent until studio_export. A greeting or a question gets an answer and no new version.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
studio_exportRender a Studio design or video to files.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Render a Studio design or video to files. Spends credits like any render: a video 25 (platinum 50), a card 10, a set 10 a slide (an App Store set of 6 is 60), charged once. A card or a set waits for the render (about a minute) and returns every file in `asset_urls`, slide 1 first; a video returns the run id: poll get_run until it is terminal, then show the human the file or post it with post_run.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
studio_startStart a video in Siren Studio from a description.No findings
Why it is in this group
- The name "studio_start" says "start": a word for a change.
Description, as the server wrote it Start a video in Siren Studio from a description. Siren composes the first take (about 10 to 20 seconds) and replies with what it made; nothing is rendered or charged until studio_export. Returns the thread and Siren's reply. The human sees the same thread in Studio and can keep editing it there, or you can with studio_edit.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
studio_threadsThe workspace's Studio videos, newest first: title, shelf, current version, and whether a human or an agent started it.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it The workspace's Studio videos, newest first: title, shelf, current version, and whether a human or an agent started it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
update_brand_dnaPatch Brand DNA.No findings
Why it is in this group
- The name "update_brand_dna" says "update": a word for a change.
Description, as the server wrote it Patch Brand DNA. Send only keys to change. Nested bags (offer, product_map, icp) merge. Examples: {tagline, overview, offer: {product_name, one_liner, features, who_its_for, primary_cta}, product_map: {offerings, how_we_work}, icp: {who_buys, pains}}. Does not read or write Brand Memory.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
update_product_screenEdit an existing brand asset: name, description, kind, use_when, and the screenshot tags (screen_type, device, theme).No findings
Why it is in this group
- The name "update_product_screen" says "update": a word for a change.
Description, as the server wrote it Edit an existing brand asset: name, description, kind, use_when, and the screenshot tags (screen_type, device, theme).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
upload_brand_videoAdd a product demo, walkthrough or footage to Brand DNA.No findings
Why it is in this group
- The name "upload_brand_video" says "upload": a word for a change.
Description, as the server wrote it Add a product demo, walkthrough or footage to Brand DNA. With only the file, Gemini reads frames across the clip and writes what it shows, when to use it, tags and the best moments (scan_status scanning, then ready in about 15 seconds; poll list_brand_videos). Films play it when a brief names it ("launch film with our checkout demo"). Videos are for films; stills are painted from pictures.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
upload_logoSet the workspace logo in Brand DNA.No findings
Why it is in this group
- The name "upload_logo" says "upload": a word for a change.
Description, as the server wrote it Set the workspace logo in Brand DNA. Every render uses it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
upload_mediaStore a photo or video the human wants in a post, from an https URL or base64.No findings
Why it is in this group
- The name "upload_media" says "upload": a word for a change.
Description, as the server wrote it Store a photo or video the human wants in a post, from an https URL or base64. Returns a workspace-owned URL to put in any media slot of a film body (describe_film lists the slots) — the renderer reads it directly. Images: PNG/JPG/WebP up to 15 MB. Videos: MP4/MOV/WebM up to 200 MB. The same bytes are stored once (content-hashed).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
upload_product_screenUpload a brand asset (product photo, app screenshot, packaging) into Brand DNA and store it on R2.No findings
Why it is in this group
- The name "upload_product_screen" says "upload": a word for a change.
Description, as the server wrote it Upload a brand asset (product photo, app screenshot, packaging) into Brand DNA and store it on R2. Pass image_url (https PNG/JPG/WebP) or image_base64. Two ways to file it: - Send `description` (and optionally kind, use_when, tags, name): Siren trusts your words and files the asset as-is. No read. - Send only the file: Gemini reads the picture and writes name, kind, description, use_when, tags itself. scan_status goes scanning → ready in about 8 seconds; poll list_product_screens. kind is free text ("product photo", "dashboard screenshot", "packaging"), there is no fixed list. A brief that names an asset ("advertise the pink handbag") pulls that file into the still. screen_type / device / theme only matter for device-framed screenshot masters.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Only reads 17Claude Code: allow
describe_filmThe full contract for one film: what it is and when to hire it, its body JSON Schema, a reference body, the seed envelope, media slots (which fields take image/video URLs), the bra…No findings
Why it is in this group
- The name "describe_film" says "describe": a word for reading.
Description, as the server wrote it The full contract for one film: what it is and when to hire it, its body JSON Schema, a reference body, the seed envelope, media slots (which fields take image/video URLs), the brand prefills (colours, logo, screens) and the override rules. Call it before writing a render_asset body.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_accountGet the connected Siren workspace: plan, key scopes, auto-post setting, and daily limit.No findings
Why it is in this group
- The name "get_account" says "get": a word for reading.
Description, as the server wrote it Get the connected Siren workspace: plan, key scopes, auto-post setting, and daily limit. Call this first to learn what the account can do before generating. Empty asset_types / channels / connected_accounts lists mean UNRESTRICTED, not missing — never stop on them. Films render on every plan; credits are the only meter.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_brand_dnaGet this workspace's Brand DNA: brand_name, brand_kind, overview, tagline, offer, features, products, audience, palette, logos, plus `checks`: what to fix before rendering (thin Br…No findings
Why it is in this group
- The name "get_brand_dna" says "get": a word for reading.
Description, as the server wrote it Get this workspace's Brand DNA: brand_name, brand_kind, overview, tagline, offer, features, products, audience, palette, logos, plus `checks`: what to fix before rendering (thin Brand DNA, a typed accent the brand's own work does not use). Call right after get_account; fix thin DNA first with update_brand_dna and upload_product_screen, or ask the human for the site. Not Brand Memory.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_mascotThe workspace mascot: status (hero, keeping, frames, ready), the hero picture, tries left, and every pose frame with its URL.No findings
Why it is in this group
- The name "get_mascot" says "get": a word for reading.
Description, as the server wrote it The workspace mascot: status (hero, keeping, frames, ready), the hero picture, tries left, and every pose frame with its URL. Null mascot = none yet.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_performanceHow the posts did: totals (impressions, engagement, replies, engagement rate) and the top posts with views, likes and replies.No findings
Why it is in this group
- The name "get_performance" says "get": a word for reading.
Description, as the server wrote it How the posts did: totals (impressions, engagement, replies, engagement rate) and the top posts with views, likes and replies.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_runGet one run by id — full status, output text, asset URLs, caption, and any error.No findings
Why it is in this group
- The name "get_run" says "get": a word for reading.
Description, as the server wrote it Get one run by id — full status, output text, asset URLs, caption, and any error. Poll this after create_campaign or render_asset until status is terminal. Wait `poll_after_seconds` between polls; `progress` and `eta_seconds` say how far along it is. A finished film carries `film_check`, advice only: when `ok` is false, show the human the video and the findings and let them decide. Re-render at most once, and only for a defect you can name in what you sent (a missing image, a wrong name). `notices` are plain-words notes on the request (e.g. it asked for a mood the brand's look does not wear): the asset is made as asked; pass the note to the human. A finished run carries `caption`: the post caption Siren wrote in the run's brand (or yours, if you passed one); show it with the asset. After post_run, `posts[]` carries each platform's status and, once it fires, the live URL and the caption that went out.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_brand_videosThe brand's own clips in Brand DNA: name, what each shows, when to use it, tags, best moments with timestamps, poster and scan_status.No findings
Why it is in this group
- The name "list_brand_videos" says "list": a word for reading.
Description, as the server wrote it The brand's own clips in Brand DNA: name, what each shows, when to use it, tags, best moments with timestamps, poster and scan_status.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_filmsThe film library, one ranked page at a time.No findings
Why it is in this group
- The name "list_films" says "list": a word for reading.
Description, as the server wrote it The film library, one ranked page at a time. Films sit on job shelves; pass job and the human's goal and hire from the top of the page. Each film says what it is, when to hire it, its length and shapes, fits_this_brand (with what is missing) and made_recently (this brand already got it: prefer another film on the shelf unless the human asked for that one). Page on with next_page. Want it all at once? all=true, or fetch the catalog file (https://api.mysiren.ai/api/v1/films.md, every film by shelf, also .txt/.json) and read it in steps. search= finds films by word. Then describe_film for the body. Videos are on every plan; credits are the only limit. Every film here is 25 credits. Platinum films (50 credits) are not in these pages: the answer's platinum section flags them, and list_platinum_films has the shelf.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_mediaPhotos and videos uploaded with upload_media, newest first, with their URLs.No findings
Why it is in this group
- The name "list_media" says "list": a word for reading.
Description, as the server wrote it Photos and videos uploaded with upload_media, newest first, with their URLs. Reuse a URL in create_campaign media or a film body.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_peopleThe people library: team faces Siren can put in stills (name, role, team, status cropping or ready, round crop URL).No findings
Why it is in this group
- The name "list_people" says "list": a word for reading.
Description, as the server wrote it The people library: team faces Siren can put in stills (name, role, team, status cropping or ready, round crop URL).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_platinum_filmsThe platinum shelf: studio-grade films that match a top motion studio's craft, told as the brand's own story.No findings
Why it is in this group
- The name "list_platinum_films" says "list": a word for reading.
Description, as the server wrote it The platinum shelf: studio-grade films that match a top motion studio's craft, told as the brand's own story. Each costs 50 credits, every time (a normal film is 25). Offer one only when the human is making a big launch they genuinely want to go far; everyday posts and normal budgets use list_films. Say the price before you render. Ids end in -plt. Platinum needs a paid plan or a credit top-up: a complimentary plan sees it but gets 402 platinum_needs_paid_plan. voice MM = motion and music only (no voice-over question, no narration); MVM = motion, voice and music. Then describe_film for the body, same as any film.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_postsEvery post Siren sent or queued: platform, status, live URL, time, and counts by status (posted, queued, failed).No findings
Why it is in this group
- The name "list_posts" says "list": a word for reading.
Description, as the server wrote it Every post Siren sent or queued: platform, status, live URL, time, and counts by status (posted, queued, failed).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_product_screensList the brand assets in Brand DNA: product photos, app screenshots, packaging.No findings
Why it is in this group
- The name "list_product_screens" says "list": a word for reading.
Description, as the server wrote it List the brand assets in Brand DNA: product photos, app screenshots, packaging. Each row has name, kind, description, use_when, tags, scan_status (scanning / ready / failed), device, theme, url.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_runsList the workspace's generation runs (newest first): status, brief, channel, asset URLs, and caption.No findings
Why it is in this group
- The name "list_runs" says "list": a word for reading.
Description, as the server wrote it List the workspace's generation runs (newest first): status, brief, channel, asset URLs, and caption. Page with offset to see them all.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_stylesThe still style library, one ranked page at a time.No findings
Why it is in this group
- The name "list_styles" says "list": a word for reading.
Description, as the server wrote it The still style library, one ranked page at a time. Every painted still (an ad creative, poster, launch card, App Store frame, thumbnail) is one style; Siren picks one when you don't. Styles sit on section shelves; pass section and the human's goal and take one from the top. made_recently = this brand already got that look, prefer another. To paint in a style, put its id in the create_campaign brief (asset_type card). The whole library as one file: https://api.mysiren.ai/api/v1/styles.md (also .txt/.json).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
studio_getOne Studio video: the chat so far (who said what, with diffs), every version, and which version is current.No findings
Why it is in this group
- The name "studio_get" says "get": a word for reading.
Description, as the server wrote it One Studio video: the chat so far (who said what, with diffs), every version, and which version is current.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
studio_templatesList Siren Studio's 33 React data-card types with family, description, and body schema.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it List Siren Studio's 33 React data-card types with family, description, and body schema. Use this before studio_card so the body matches.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http siren https://mcp.mysiren.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__siren__get_account",
"mcp__siren__list_runs",
"mcp__siren__get_run",
"mcp__siren__list_films",
"mcp__siren__list_platinum_films",
"mcp__siren__list_styles",
"mcp__siren__describe_film",
"mcp__siren__get_brand_dna",
"mcp__siren__list_product_screens",
"mcp__siren__get_mascot",
"mcp__siren__list_people",
"mcp__siren__list_media",
"mcp__siren__get_performance",
"mcp__siren__list_posts",
"mcp__siren__list_brand_videos",
"mcp__siren__studio_templates",
"mcp__siren__studio_get"
],
"ask": [
"mcp__siren__create_campaign",
"mcp__siren__clarify_brief",
"mcp__siren__render_asset",
"mcp__siren__upload_media",
"mcp__siren__edit_asset",
"mcp__siren__update_brand_dna",
"mcp__siren__upload_product_screen",
"mcp__siren__update_product_screen",
"mcp__siren__upload_logo",
"mcp__siren__create_mascot",
"mcp__siren__mascot_step",
"mcp__siren__add_person",
"mcp__siren__buy_credits",
"mcp__siren__upload_brand_video",
"mcp__siren__studio_card",
"mcp__siren__studio_automate",
"mcp__siren__studio_start",
"mcp__siren__studio_edit",
"mcp__siren__studio_threads",
"mcp__siren__studio_export"
],
"deny": [
"mcp__siren__post_run",
"mcp__siren__schedule_post",
"mcp__siren__delete_product_screen",
"mcp__siren__delete_person",
"mcp__siren__delete_brand_video",
"mcp__siren__delete_media",
"mcp__siren__studio_schedule"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as siren. Review it before you use it.