Skip to content

ai.rocketsloth/rocketsloth

by rocketsloth.ai · remote · no sign-in to list tools · v2.0.0 · published by ai.rocketsloth

Website monetization for AI agents: apply, integrate ads, reporting, and payouts — all over MCP.

Deletes · 3Final · 1Changes · 9
CompareRegistry entry

14 tools: 3 can delete or cancel things, 1 do something that can't be undone, 9 change things and 1 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http rocketsloth https://rocketsloth.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • Warnad_settings

    The server marks "ad_settings" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "view": a word for reading.

    What this check looks for
  • Warnapplication_status

    The server marks "application_status" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "application_status" says "status": a word for reading.

    What this check looks for
  • Warnpayments

    The server marks "payments" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "payments" says "payment": a word that usually means money moves, which cannot be taken back.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Deletes or cancels 3Claude Code: deny
  • accountView or update your account (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not a…No findings

    Why it is in this group

    • The description's first verb is "view": a word for reading.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    View or update your account (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask the user to paste an sk_ token when you already have a working session). action: view (default; account and site status) | update (contact_email, agent_name, and/or google_email — set google_email when the Google account email on file already has an Ad Manager account or invitation; the application resubmits automatically within about an hour) | rotate_token (revoke the current API token and issue a new one; not available to web sessions — sessions rotate via https://rocketsloth.ai/recover).

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Account Management
  • reclaimFree up a site that has an inactive previous registration.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Free up a site that has an inactive previous registration. If apply says the site is already registered, use action=start to get domain-ownership verification options (DNS TXT record, hosted file, or meta tag), complete one, then action=verify with the method used. Once released, call apply again.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Reclaim a site
  • recoverRecover access when application or API tokens are lost.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Recover access when application or API tokens are lost. action=start with site_url emails a short-lived code to the account owner's contact address on file; action=confirm with site_url and code verifies the emailed code, revokes all old tokens, and returns a fresh application token (and API token if already approved). No authentication required; rate limited per IP and per site.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Recover Account Access
Can't be undone 1Claude Code: ask
  • paymentsView your payout status (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask t…1 finding

    Why it is in this group

    • The name "payments" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "payments" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "payments" says "payment": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    View your payout status (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask the user to paste an sk_ token when you already have a working session). action: settings (payout method name and threshold) | history (amount owed, this-month earnings, and payout rows). Read-only: payment method and tax setup are not yet available in Rocket Sloth. For help, email hello@rocketsloth.ai. Never send bank or tax details in chat or email.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Payout Information
Changes things 9Claude Code: ask
  • aboutCatalog only — reading this is not an application.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Catalog only — reading this is not an application. Call apply next with site_url, contact_email, publisher_name, and agent_name. Also covers the one-tag integration model, payout terms, and the full tool list. No authentication required.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: About Rocket Sloth
  • ad_settingsView and adjust ad settings for your site (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepte…1 finding

    Why it is in this group

    • The description's first verb is "view": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "ad_settings" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "view": a word for reading.

      What this check looks for
    Description, as the server wrote it
    View and adjust ad settings for your site (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask the user to paste an sk_ token when you already have a working session). Pass resource and action; call with no action to see what's available. Rocket Sloth ad products: resource=anchor (sitewide sticky anchor: get/update enabled, position, expansion), resource=video_formats (get/enable/disable the floating outstream and universal video players), resource=rewarded (get enabled state, update the content lock).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Ad Settings
  • application_statusCheck an application's status using its application token (at_...).1 finding

    Why it is in this group

    • The name "application_status" says "status": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "application_status" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "application_status" says "status": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Check an application's status using its application token (at_...). While pending, your placed units serve Rocket Sloth house creatives; on approval the first call returns your API token (sk_...) exactly once and your units upgrade to full demand automatically — your page never changes. The automated review checks a pending site every hour but pauses 30 days after signup or the last check-again — pass action=request_review (pending applications only) to restart another 30 days of checks. A Bearer web session (the in-page agent on rocketsloth.ai) also authenticates this tool: the session is enough, no API token is issued on that path, and you must not ask the user to paste an at_ or sk_ token.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Check Application Status
  • applyCall this first after connecting.No findings

    Why it is in this group

    • The name "apply" says "apply": a word for a change.
    Description, as the server wrote it
    Call this first after connecting. Connecting the MCP server is not an application. Requires site_url (http/https; need not be live yet), contact_email, publisher_name (the site owner's name — not your agent name), and agent_name; description is optional. Humans can sign up at https://rocketsloth.ai/signup. Returns an application token (at_...). Call integration immediately with it. Rocket Sloth never asks for payment card, bank account, government ID, or health information in chat. No authentication required; rate limited per IP.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Apply as a Publisher
  • askAsk the Rocket Sloth setup agent anything about integration, ad units, application, reporting, or payments.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Ask the Rocket Sloth setup agent anything about integration, ad units, application, reporting, or payments. Pass the returned thread_id on follow-up questions to keep context. No authentication required; rate limited per IP.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Ask the Setup Agent
  • checklistYour onboarding checklist (authenticate with your application token at_...No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Your onboarding checklist (authenticate with your application token at_... or API token sk_...; a Bearer web session from the in-page agent on rocketsloth.ai also works — never ask the user to paste a token when the session already authenticates you). Returns every step to full-demand serving with its status (complete/pending/action_required/blocked), who must act (agent/account_owner/automatic), and concrete instructions, plus next_action — the single next thing to do. The same checklist is also embedded in application_status.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Onboarding Checklist
  • reportingRevenue and traffic reporting for your account (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also ac…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Revenue and traffic reporting for your account (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask the user to paste an sk_ token when you already have a working session). action: overview | earnings_history | epmv_trend | demand_partners | top_earning_pages | ad_format_revenue. Optional start_date/end_date (YYYY-MM-DD).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Revenue & Traffic Reporting
  • subscriptionsManage reader subscriptions and donations (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepte…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Manage reader subscriptions and donations (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask the user to paste an sk_ token when you already have a working session). Pass resource and action; call with no action to see what's available.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Reader Subscriptions
  • videoManage video monetization (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Manage video monetization (authenticate with your API token sk_...; an approved account's Bearer web session — the in-page agent on rocketsloth.ai — is also accepted, so do not ask the user to paste an sk_ token when you already have a working session). Pass resource and action (e.g. resource=player action=list); call with no action to see what's available. Use resource=embed to get the content-player unit markup (<div data-rs-video>) and where video ids come from.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Video Monetization
Only reads 1Claude Code: allow
  • integrationGet your exact script tag and ad-unit markup, plus placement guidance (authenticate with your application token at_...No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get your exact script tag and ad-unit markup, plus placement guidance (authenticate with your application token at_... or API token sk_...; a Bearer web session from the in-page agent on rocketsloth.ai also works — never ask the user to paste a token when the session already authenticates you). Available immediately after apply. Pass verify=true to fetch your site and confirm the tag and at least one ad unit are installed.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Get Integration Code

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http rocketsloth https://rocketsloth.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__rocketsloth__integration"
    ],
    "ask": [
      "mcp__rocketsloth__about",
      "mcp__rocketsloth__ad_settings",
      "mcp__rocketsloth__application_status",
      "mcp__rocketsloth__apply",
      "mcp__rocketsloth__ask",
      "mcp__rocketsloth__checklist",
      "mcp__rocketsloth__payments",
      "mcp__rocketsloth__reporting",
      "mcp__rocketsloth__subscriptions",
      "mcp__rocketsloth__video"
    ],
    "deny": [
      "mcp__rocketsloth__account",
      "mcp__rocketsloth__reclaim",
      "mcp__rocketsloth__recover"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as rocketsloth. Review it before you use it.