Swarmnest

ai.swarmnest/mcpswarmnest.aistreamable-httpv1.0.0Scanned 2 hours ago

Search AI agent tools, APIs, MCP servers and Agent Skills in the Swarmnest directory.

6 tools: 6 only read.

Reads private data · 4
Reads text others write · 4
Can send data out · 0
2 findings, 1 high

Anlyon alternative

Run the operations that matter as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

6 tools

Only reads 6Looks things up and changes nothing.Show 6 read-only tools

get_entryGet the full Swarmnest directory record for one tool by its slug (from search_directory results): name, description, category, vendor URL, docs URL, auth, pricing, operating system…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_entry" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "directory": it reads files.
- untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Get the full Swarmnest directory record for one tool by its slug (from search_directory results): name, description, category, vendor URL, docs URL, auth, pricing, operating systems, open-source flag, last link check and the canonical swarmnest.ai URL. Unknown slugs return close matches.
Annotations the server declares
- title: Get a Directory Entry
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_skillGet one Agent Skill by slug (from search_skills): summary, format, declared platforms, install steps per platform, scripts/network/credentials labels, license, author, source URL a…Reads private dataReads text others write1 finding
Why it is in this group
- The name "get_skill" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "credential": it reads secrets.
- untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
Findings
- High
  The description refers to "scripts/network/credentials".
  Matched text
  description: "...platforms, install steps per platform, scripts/network/credentials labels, license, author, source URL and..."
  What this check looks for
Description, as the server wrote it
Get one Agent Skill by slug (from search_skills): summary, format, declared platforms, install steps per platform, scripts/network/credentials labels, license, author, source URL and canonical swarmnest.ai URL. Third-party: review the source before installing.
Annotations the server declares
- title: Get an Agent Skill
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_categoriesList every Swarmnest directory category with its slug, name, short description, entry count and group (e.g.Reads private dataNo findings
Why it is in this group
- The name "list_categories" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "directory": it reads files.
Description, as the server wrote it
List every Swarmnest directory category with its slug, name, short description, entry count and group (e.g. Agent Building, AI Models, Data & Search). Use the slugs as the category filter in search_directory. Optionally limit to one group.
Annotations the server declares
- title: List Directory Categories
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_marketplace_productsList the agent skill packs, workflows and bundles sold in the Swarmnest Marketplace (US only), with name, type, summary, price in USD, what each bundle includes, the product page U…Reads text others writeNo findings
Why it is in this group
- The name "list_marketplace_products" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "list" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
List the agent skill packs, workflows and bundles sold in the Swarmnest Marketplace (US only), with name, type, summary, price in USD, what each bundle includes, the product page URL and the checkout URL.
Annotations the server declares
- title: List Marketplace Products
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_directorySearch the Swarmnest directory of AI agent tools: MCP servers, LLM APIs, agent frameworks, coding agents, browser automation, vector databases, web scraping, search, speech and tex…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_directory" says "search": a word for reading.
What it can reach
- private-dataThe name "search_directory" says "search" and "directory": it reads files.
- private-dataThe description's first sentence says "search" and "directory": it reads files.
- untrusted-inputThe description's first sentence says "search" and "browser": it reads web pages, which anyone can write.
Description, as the server wrote it
Search the Swarmnest directory of AI agent tools: MCP servers, LLM APIs, agent frameworks, coding agents, browser automation, vector databases, web scraping, search, speech and text-to-speech APIs, data sources and more (thousands of hand-checked entries in 160+ categories). Keyword search over name, category and description with typo correction; all keywords must match. Filter by category slug (see list_categories), pricing, auth type or operating system. Returns name, description, category, pricing, auth, the vendor URL, docs URL and the canonical swarmnest.ai listing URL. Use it to find or compare tools for a job, e.g. "pdf parsing", "web search api", "postgres mcp server".
Annotations the server declares
- title: Search the Swarmnest Directory
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_skillsSearch the Swarmnest catalog of Agent Skills: SKILL.md skills, plugin bundles, Cursor rules, AGENTS.md templates and prompt packs for Claude Code, Codex, Cursor, Gemini CLI, GitHub…1 finding
Why it is in this group
- The name "search_skills" says "search": a word for reading.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...udes scripts, uses the network or needs credentials, plus its license, author, source URL a..."
  What this check looks for
Description, as the server wrote it
Search the Swarmnest catalog of Agent Skills: SKILL.md skills, plugin bundles, Cursor rules, AGENTS.md templates and prompt packs for Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot and other agents. Keyword search over title, summary and category; filter by skill category, format, platform or operating system. Each result says whether the skill includes scripts, uses the network or needs credentials, plus its license, author, source URL and canonical swarmnest.ai URL. All skills are third-party: review the source before installing.
Annotations the server declares
- title: Search Agent Skills
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_entry
get_skill
list_categories
search_directory
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_entry
get_skill
list_marketplace_products
search_directory
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 high1 info

Highget_skill
The description refers to "scripts/network/credentials".
Matched text
description: "...platforms, install steps per platform, scripts/network/credentials labels, license, author, source URL and..."
What this check looks for
Infosearch_skills
The description mentions "credentials".
Matched text
description: "...udes scripts, uses the network or needs credentials, plus its license, author, source URL a..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http swarmnest https://swarmnest.ai/mcp

claude mcp add --transport http swarmnest https://swarmnest.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__swarmnest__search_directory",
      "mcp__swarmnest__get_entry",
      "mcp__swarmnest__list_categories",
      "mcp__swarmnest__search_skills",
      "mcp__swarmnest__get_skill",
      "mcp__swarmnest__list_marketplace_products"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as swarmnest. Review it before you use it.

Capability tags behind 5 rules

mcp__swarmnest__search_directory private-data, untrusted-input
mcp__swarmnest__get_entry private-data, untrusted-input
mcp__swarmnest__list_categories private-data
mcp__swarmnest__get_skill private-data, untrusted-input
mcp__swarmnest__list_marketplace_products untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/ai.swarmnest/mcp/verify?hash=344a80cb4e5f2a3e2cba86c84f05e0101f26c3a52466deaa36de24f9868b5679" | jq -e '.changed == false'

Pinned hash 344a80cb4e5f, from Oct 23, 2026, 17:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/ai.swarmnest/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/ai.swarmnest/mcp.svg)](https://anlyon.dev/servers/ai.swarmnest/mcp)

Source: MCP Registry · repository. Synced Oct 23, 2026, 18:18 UTC.