Skip to content

Palmyr

by palmyr.ai · remote · no sign-in to list tools · v1.0.0 · published by ai.palmyr

Agent infra: email, phone, social, domains, VPS, wallets. Paid per-action via x402, no API key.

Deletes · 1Final · 2Changes · 16
CompareRegistry entry

33 tools: 1 can delete or cancel things, 2 do something that can't be undone, 16 change things and 14 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http palmyr https://palmyr.ai/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

33 tools

Deletes or cancels 1Claude Code: deny
  • tiktok_cancel_scheduledCancel a post queued with tiktok_post(schedule_at).No findings

    Why it is in this group

    • The name "tiktok_cancel_scheduled" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel a post queued with tiktok_post(schedule_at). TikTok has no 'unschedule', so this deletes the held video — the cancellation is recorded only once that succeeded. Async: returns an operation to poll with tiktok_operation_status. Costs 0.001 USDC, paid per-action via x402.
Can't be undone 2Claude Code: ask
  • email_sendSend an email from an inbox you own.No findings

    Why it is in this group

    • The name "email_send" says "send": a word for sending, and what is sent cannot be taken back.
    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Send an email from an inbox you own. Costs 0.08 USDC, paid per-action via x402.
  • phone_send_smsSend an SMS from a phone number you own.No findings

    Why it is in this group

    • The name "phone_send_sms" says "send": a word for sending, and what is sent cannot be taken back.
    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Send an SMS from a phone number you own. Costs 0.05 USDC, paid per-action via x402.
Changes things 16Claude Code: ask
  • card_buyBuy a USA prepaid Visa card loaded with EXACTLY the requested balance ($5–$1000).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Buy a USA prepaid Visa card loaded with EXACTLY the requested balance ($5–$1000). Dynamic x402 price = amount + fee (3% min 0.50 USDC) — the 402 instructions carry the exact total. Returns 202 with an operation_id: poll card_status until ready (~10s), then fetch the number with card_get. US merchants only; non-reloadable (spend across transactions until depleted); max 6 cards per agent per rolling 24h (issuer limit).
  • compute_deployDeploy a cloud VPS keyed to your wallet (optionally auto-installs OpenClaw/skills).No findings

    Why it is in this group

    • The name "compute_deploy" says "deploy": a word for a change.
    Description, as the server wrote it
    Deploy a cloud VPS keyed to your wallet (optionally auto-installs OpenClaw/skills). Priced per server type — the exact quote is returned in the 402 challenge, paid per-action via x402.
  • domain_checkCheck domain availability and per-TLD pricing.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check domain availability and per-TLD pricing. Pass a full domain (example.com) or a bare name to scan popular TLDs. Free — no payment required.
  • domain_registerRegister a domain to your wallet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register a domain to your wallet. Priced per TLD — the exact quote is returned in the 402 challenge, paid per-action via x402.
  • email_create_inboxProvision an email inbox at {name}@palmyr.ai (or a custom domain you own), keyed to your wallet.No findings

    Why it is in this group

    • The name "email_create_inbox" says "create": a word for a change.
    Description, as the server wrote it
    Provision an email inbox at {name}@palmyr.ai (or a custom domain you own), keyed to your wallet. Costs 2.00 USDC, paid per-action via x402.
  • email_create_tempProvision a cheap, disposable, receive-only email inbox — ideal for receiving a one-off verification or order-confirmation email during a checkout/signup flow.No findings

    Why it is in this group

    • The name "email_create_temp" says "create": a word for a change.
    Description, as the server wrote it
    Provision a cheap, disposable, receive-only email inbox — ideal for receiving a one-off verification or order-confirmation email during a checkout/signup flow. The address (a natural-looking handle on a dedicated inbox domain) is returned in the response. Auto-expires (default 24h). Reads return plaintext to the owning wallet (no E2E key to manage). Costs 0.50 USDC, paid per-action via x402.
  • email_extend_tempRent another 7 days on a live disposable temp inbox — each call pushes expires_at exactly 7 days further (fixed, stackable, no cap).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rent another 7 days on a live disposable temp inbox — each call pushes expires_at exactly 7 days further (fixed, stackable, no cap). Owner-only; expired temp inboxes cannot be revived (buy a new one via email_create_temp). Costs 0.50 USDC, paid per-action via x402.
  • i402_planState an intent, get a priced execution plan.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    State an intent, get a priced execution plan. The i402 orchestrator turns a natural-language outcome into an ordered list of x402 calls your agent signs and runs. Costs 0.10 USDC per plan, paid per-action via x402.
  • phone_buy_numberProvision a real phone number (SMS + voice) for your agent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Provision a real phone number (SMS + voice) for your agent. Costs 3.00 USDC, paid per-action via x402.
  • phone_extend_tempRent another 30 minutes on a live disposable temp number — each call pushes expires_at 30 min further (stackable up to 24h total lease).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rent another 30 minutes on a live disposable temp number — each call pushes expires_at 30 min further (stackable up to 24h total lease). Owner-only; expired temp leases cannot be revived (lease a fresh one via phone_temp_number). Costs 0.20 USDC, paid per-action via x402.
  • phone_temp_numberLease a cheap, instant, receive-only US phone number from a pool to receive one SMS verification code — the phone analogue of a disposable temp email inbox.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Lease a cheap, instant, receive-only US phone number from a pool to receive one SMS verification code — the phone analogue of a disposable temp email inbox. $0.20 for 30 min (ttl_seconds, clamped 300–1800), returned to the pool at expiry; call wait_for_otp to catch the code. Good for one-time SMS verification and phone-gated signups. Works with major sites like Google, X, and Discord; some (Telegram, WhatsApp, OpenAI) may reject it as a VoIP number — for strict sites, buy a dedicated number with phone_buy_number. Pool numbers are recycled after the lease, so use them for one-time codes only, not long-term 2FA. Costs 0.20 USDC, paid per-action via x402.
  • tiktok_analyticsScrape per-post analytics (views, likes, comments, shares) for a TikTok account you control, and record a sample so tiktok_series can answer 'is it still growing'.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Scrape per-post analytics (views, likes, comments, shares) for a TikTok account you control, and record a sample so tiktok_series can answer 'is it still growing'. Async: returns an operation to poll with tiktok_operation_status. Costs 0.005 USDC, paid per-action via x402.
  • tiktok_connectAttach a TikTok account by logging in ON THE SERVER, into that account's own persistent browser profile: returns a connect_url to hand a human, who scans the QR in the TikTok app.No findings

    Why it is in this group

    • The description's first verb is "attach": a word for a change.
    Description, as the server wrote it
    Attach a TikTok account by logging in ON THE SERVER, into that account's own persistent browser profile: returns a connect_url to hand a human, who scans the QR in the TikTok app. The recommended path — the browser that authenticates is the browser that later acts, and every other TikTok tool then works with `cookies` omitted (no jar to move). The paying wallet becomes the account's owner. Async: poll tiktok_connect_status with the returned token. Costs 0.01 USDC, paid per-action via x402.
  • tiktok_hooksWhich caption openings actually earn views.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Which caption openings actually earn views. Pass account_id or tag to measure YOUR accounts against their own median (0.001 USDC). Pass niche to report what is working in that niche across TikTok, needing no posting history — the answer for a brand-new account (0.05 USDC; tiktok_niches lists them, free). The two are never blended. Pass caption to classify a draft before posting. Paid per-action via x402 — the 402 challenge carries the exact price for the arguments you sent.
  • tiktok_postPost a video to a TikTok account you control (from video_base64 or video_url), immediately or scheduled.No findings

    Why it is in this group

    • The name "tiktok_post" says "post": a word for a change.
    Description, as the server wrote it
    Post a video to a TikTok account you control (from video_base64 or video_url), immediately or scheduled. Async: returns an operation to poll with tiktok_operation_status. Costs 0.01 USDC, paid per-action via x402.
  • twitter_postPost a tweet from an X account you control (via injected session cookies).No findings

    Why it is in this group

    • The name "twitter_post" says "post": a word for a change.
    Description, as the server wrote it
    Post a tweet from an X account you control (via injected session cookies). Costs 0.001 USDC, paid per-action via x402.
Only reads 14Claude Code: allow
  • card_getRetrieve a prepaid card you own: full card number, CVV, expiry, live balance.No findings

    Why it is in this group

    • The name "card_get" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve a prepaid card you own: full card number, CVV, expiry, live balance. Owner-verified (0.01 USDC ownership proof; the paying wallet must be the card's buyer).
  • card_listList cards owned by the paying wallet: status, last4, balance (never full numbers — those are per-card via card_get).No findings

    Why it is in this group

    • The name "card_list" says "list": a word for reading.
    Description, as the server wrote it
    List cards owned by the paying wallet: status, last4, balance (never full numbers — those are per-card via card_get). 0.01 USDC ownership proof.
  • card_statusPoll a card purchase started by card_buy (free).No findings

    Why it is in this group

    • The name "card_status" says "status": a word for reading.
    Description, as the server wrote it
    Poll a card purchase started by card_buy (free). done=true when status is 'ready' (fetch details with card_get) or 'failed' (payment auto-refunded — see refund_status).
  • email_read_messagesRead decrypted messages from an inbox you own (payment wallet must match the inbox).No findings

    Why it is in this group

    • The name "email_read_messages" says "read": a word for reading.
    Description, as the server wrote it
    Read decrypted messages from an inbox you own (payment wallet must match the inbox). Costs 0.02 USDC, paid per-action via x402.
  • palmyr_capabilitiesList the i402 capabilities Palmyr can plan and execute (the intent-resolver catalog).No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the i402 capabilities Palmyr can plan and execute (the intent-resolver catalog). Free — no payment required.
  • palmyr_pricingList every paid Palmyr capability and its live x402 price (USDC on Solana/Base).No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List every paid Palmyr capability and its live x402 price (USDC on Solana/Base). Free — no payment required.
  • phone_read_messagesRead SMS messages received on a phone number you own.No findings

    Why it is in this group

    • The name "phone_read_messages" says "read": a word for reading.
    Description, as the server wrote it
    Read SMS messages received on a phone number you own. Costs 0.02 USDC, paid per-action via x402.
  • tiktok_accountsList the TikTok accounts the paying wallet owns, with session health (status, profile_present, hours_since_success, last_error_code) — i.e.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the TikTok accounts the paying wallet owns, with session health (status, profile_present, hours_since_success, last_error_code) — i.e. which of your accounts are still logged in. Costs 0.001 USDC, paid per-action via x402.
  • tiktok_connect_statusPoll a server-side login started by tiktok_connect (free).No findings

    Why it is in this group

    • The name "tiktok_connect_status" says "status": a word for reading.
    Description, as the server wrote it
    Poll a server-side login started by tiktok_connect (free). done=true when state is 'completed' (the account is live and usable with cookies omitted) or 'failed'.
  • tiktok_nichesList the niches tiktok_hooks can report on, with how fresh each corpus is.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the niches tiktok_hooks can report on, with how fresh each corpus is. Free — an agent should not pay to learn what it may ask for.
  • tiktok_operation_statusPoll an async TikTok operation started by tiktok_post / tiktok_analytics / tiktok_cancel_scheduled (free).No findings

    Why it is in this group

    • The name "tiktok_operation_status" says "status": a word for reading.
    Description, as the server wrote it
    Poll an async TikTok operation started by tiktok_post / tiktok_analytics / tiktok_cancel_scheduled (free). done=true when status is 'posted' / 'done' (carries video_url or the op's result) or 'failed' (payment auto-refunded — see refund_status).
  • tiktok_scheduledList the posts you have queued with tiktok_post(schedule_at), and whether each is still pending, due, or confirmed published.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the posts you have queued with tiktok_post(schedule_at), and whether each is still pending, due, or confirmed published. Palmyr's own record — TikTok exposes no way to read pending posts back, so edits made directly in TikTok Studio are invisible to it. Costs 0.001 USDC, paid per-action via x402.
  • tiktok_seriesRead the stored per-post history for an account you own: the full time series for one video (video_id), per-video growth over a window (hours), or the latest sample per video (neit…No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the stored per-post history for an account you own: the full time series for one video (video_id), per-video growth over a window (hours), or the latest sample per video (neither). Samples come from tiktok_analytics runs, so history exists only for what you have scraped. Costs 0.001 USDC, paid per-action via x402.
  • wait_for_otpWait for an SMS verification code / OTP to arrive on a Palmyr phone number you own, and return the parsed code.No findings

    Why it is in this group

    • The name "wait_for_otp" says "wait": a word for reading.
    Description, as the server wrote it
    Wait for an SMS verification code / OTP to arrive on a Palmyr phone number you own, and return the parsed code. Blocks up to timeout_s (default 60, max 90) checking every ~2s — one call replaces hand-rolled polling of phone_read_messages during account signups and 2FA flows. Messages that arrived up to lookback_s seconds (default 10) BEFORE the call also match, so a code that landed early is not missed — pass lookback_s=0 when reusing a number across signups so a stale code can't be re-served. Default extraction handles standalone 4-8 digit codes, 'code is/code:' tokens, and Google-style G-XXXXXX; pass pattern to override (max 256 chars; a pattern that blows its per-match budget is dropped mid-wait and pattern_timeout: true is reported). Returns { found: true, code, message_text } on a hit or { found: false, waited_s } on timeout (not an error — just call again). Costs 0.02 USDC, paid per-action via x402.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http palmyr https://palmyr.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__palmyr__palmyr_pricing",
      "mcp__palmyr__palmyr_capabilities",
      "mcp__palmyr__card_status",
      "mcp__palmyr__card_get",
      "mcp__palmyr__card_list",
      "mcp__palmyr__email_read_messages",
      "mcp__palmyr__phone_read_messages",
      "mcp__palmyr__wait_for_otp",
      "mcp__palmyr__tiktok_operation_status",
      "mcp__palmyr__tiktok_connect_status",
      "mcp__palmyr__tiktok_accounts",
      "mcp__palmyr__tiktok_series",
      "mcp__palmyr__tiktok_niches",
      "mcp__palmyr__tiktok_scheduled"
    ],
    "ask": [
      "mcp__palmyr__i402_plan",
      "mcp__palmyr__card_buy",
      "mcp__palmyr__email_create_inbox",
      "mcp__palmyr__email_create_temp",
      "mcp__palmyr__email_extend_temp",
      "mcp__palmyr__email_send",
      "mcp__palmyr__phone_buy_number",
      "mcp__palmyr__phone_send_sms",
      "mcp__palmyr__phone_temp_number",
      "mcp__palmyr__phone_extend_temp",
      "mcp__palmyr__twitter_post",
      "mcp__palmyr__tiktok_post",
      "mcp__palmyr__tiktok_connect",
      "mcp__palmyr__tiktok_analytics",
      "mcp__palmyr__tiktok_hooks",
      "mcp__palmyr__domain_check",
      "mcp__palmyr__domain_register",
      "mcp__palmyr__compute_deploy"
    ],
    "deny": [
      "mcp__palmyr__tiktok_cancel_scheduled"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as palmyr. Review it before you use it.