Tetrees MCP

by ex.tetrees.ai · remote · no sign-in to list tools · v2.3.0 · published by ai.tetrees.ex

Own, grow and trade portable agent intelligence via TAIP/1 Packs and MCP.

Final · 1Changes · 16

Compare Registry entry

26 tools: 1 do something that can't be undone, 16 change things and 9 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone1Claude Code: ask: see these tools
Changes things16Claude Code: ask: see these tools
Only reads9Claude Code: allow: see these tools

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http ex https://ex.tetrees.ai/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

3 warn1 info

Warndownload_ai_pack
The server marks "download_ai_pack" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "return": a word for reading.
What this check looks for
Warnquote_agent_run
The server marks "quote_agent_run" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "quote_agent_run" says "run": a word for a change.
What this check looks for
Warnprepare_local_ai_pack_run
The server marks "prepare_local_ai_pack_run" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "prepare_local_ai_pack_run" says "run": a word for a change.
What this check looks for
Infoexecute_client_extension
The description mentions "credentials".
Matched text
description: "...-skill child process. Configuration and credentials stay in the local MCP process. Write me..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

26 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

publish_ai_packPublish the exact current version after every mandatory Agent AVCP gate passes.No findings
Why it is in this group
- The name "publish_ai_pack" says "publish": a word for a change that another call does not undo.
Description, as the server wrote it
Publish the exact current version after every mandatory Agent AVCP gate passes. Paid packs additionally need Stripe Connect before checkout.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false

Changes things 16Creates or changes something that can be changed back.Claude Code: ask

accept_ai_pack_growthNormalize a proposed delta with Tetrees Agent or provider-free portable normalization, run the deterministic growth gate, and append it to this owner only.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Normalize a proposed delta with Tetrees Agent or provider-free portable normalization, run the deterministic growth gate, and append it to this owner only.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
accept_ai_pack_termsRecord the current account agreement required before creating, uploading, auditioning, or publishing a pack.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Record the current account agreement required before creating, uploading, auditioning, or publishing a pack.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
acquire_free_ai_packCreate a revocable entitlement for a published free pack without Stripe.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create a revocable entitlement for a published free pack without Stripe.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
create_ai_pack_draftCreate an owner-bound AI Pack listing with the complete buyer guide and two concrete example uses.No findings
Why it is in this group
- The name "create_ai_pack_draft" says "create": a word for a change.
Description, as the server wrote it
Create an owner-bound AI Pack listing with the complete buyer guide and two concrete example uses. Accept current terms first. Free drafts do not require Stripe Connect.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
download_ai_packReturn a short-lived entitlement-gated URL for the signed .taip envelope.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "download_ai_pack" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "return": a word for reading.
  What this check looks for
Description, as the server wrote it
Return a short-lived entitlement-gated URL for the signed .taip envelope.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
execute_client_extensionExecute one method from an owned Pack through a user-configured HTTPS API, nested MCP server, or isolated local-skill child process.1 finding
Why it is in this group
- The name "execute_client_extension" says "execute": a word for a change.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...-skill child process. Configuration and credentials stay in the local MCP process. Write me..."
  What this check looks for
Description, as the server wrote it
Execute one method from an owned Pack through a user-configured HTTPS API, nested MCP server, or isolated local-skill child process. Configuration and credentials stay in the local MCP process. Write methods require an exact one-call confirmation.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
prepare_local_ai_pack_runReturn a host-readable execution plan for connecting this Pack to explicitly selected, Agent-AVCP-auditioned local skills, MCP tools, resources, prompts, or HTTPS APIs.1 finding
Why it is in this group
- The name "prepare_local_ai_pack_run" says "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "prepare_local_ai_pack_run" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "prepare_local_ai_pack_run" says "run": a word for a change.
  What this check looks for
Description, as the server wrote it
Return a host-readable execution plan for connecting this Pack to explicitly selected, Agent-AVCP-auditioned local skills, MCP tools, resources, prompts, or HTTPS APIs. Tetrees does not execute client extensions on its hosted servers.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
propose_ai_pack_growthSelect a proposal from a successful run.No findings
Why it is in this group
- The description's first verb is "select": a word for a change.
Description, as the server wrote it
Select a proposal from a successful run. This creates a reviewable delta and does not mutate the pack.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
quote_agent_runGet the exact worst-case Point reservation before using platform-funded inference.1 finding
Why it is in this group
- The name "quote_agent_run" says "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "quote_agent_run" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "quote_agent_run" says "run": a word for a change.
  What this check looks for
Description, as the server wrote it
Get the exact worst-case Point reservation before using platform-funded inference. BYOK quotes zero model points.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
run_ai_packRun a Tetrees AI Pack.No findings
Why it is in this group
- The name "run_ai_pack" says "run": a word for a change.
Description, as the server wrote it
Run a Tetrees AI Pack. Before acquisition, Points fund a stateless base preview. Ownership unlocks BYOK, saved growth and download; local files remain request-scoped.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
run_ai_pack_auditionRun version-bound integrity, model, regression, memory-isolation, injection, growth, and cost gates after explicit Point confirmation.No findings
Why it is in this group
- The name "run_ai_pack_audition" says "run": a word for a change.
Description, as the server wrote it
Run version-bound integrity, model, regression, memory-isolation, injection, growth, and cost gates after explicit Point confirmation.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
select_ai_pack_growth_versionSet this account's default hosted intelligence checkpoint for an owned Pack.No findings
Why it is in this group
- The name "select_ai_pack_growth_version" says "select": a word for a change.
Description, as the server wrote it
Set this account's default hosted intelligence checkpoint for an owned Pack. Use sequence 0 to return to the signed base Pack; selection never rewrites the seller Pack.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
submit_ai_pack_for_auditionMove a complete owner-bound draft into the immutable Agent AVCP queue after readiness passes.No findings
Why it is in this group
- The name "submit_ai_pack_for_audition" says "submit": a word for a change.
Description, as the server wrote it
Move a complete owner-bound draft into the immutable Agent AVCP queue after readiness passes.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
update_ai_pack_draftUpdate seller-owned public metadata; immutable pack versions are never overwritten.No findings
Why it is in this group
- The name "update_ai_pack_draft" says "update": a word for a change.
Description, as the server wrote it
Update seller-owned public metadata; immutable pack versions are never overwritten.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
upload_ai_packRead an explicit local .taip path, transfer it through the product-scoped private upload contract, and commit one immutable higher version.No findings
Why it is in this group
- The name "upload_ai_pack" says "upload": a word for a change.
Description, as the server wrote it
Read an explicit local .taip path, transfer it through the product-scoped private upload contract, and commit one immutable higher version.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
upload_ai_pack_imageUpload one explicit local JPEG, PNG, WebP, or AVIF image to the seller-owned pack listing.No findings
Why it is in this group
- The name "upload_ai_pack_image" says "upload": a word for a change.
Description, as the server wrote it
Upload one explicit local JPEG, PNG, WebP, or AVIF image to the seller-owned pack listing.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false

Only reads 9Looks things up and changes nothing.Claude Code: allow

get_ai_pack_private_reportRead actionable owner-only failures and next actions without exposing them to buyers.No findings
Why it is in this group
- The name "get_ai_pack_private_report" says "get": a word for reading.
Description, as the server wrote it
Read actionable owner-only failures and next actions without exposing them to buyers.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_ai_pack_reportRead the buyer-safe, version-bound Agent AVCP gates and scores for a published pack.No findings
Why it is in this group
- The name "get_ai_pack_report" says "get": a word for reading.
Description, as the server wrote it
Read the buyer-safe, version-bound Agent AVCP gates and scores for a published pack.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_ai_pack_runtime_profileReturn the Pack-declared hosted skills, ephemeral attachment policy, and user-controlled MCP/API extensions before a run.No findings
Why it is in this group
- The name "get_ai_pack_runtime_profile" says "get": a word for reading.
Description, as the server wrote it
Return the Pack-declared hosted skills, ephemeral attachment policy, and user-controlled MCP/API extensions before a run.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_ai_pack_submission_readinessReturn missing TAIP, metadata, and imagery requirements with exact next actions.No findings
Why it is in this group
- The name "get_ai_pack_submission_readiness" says "get": a word for reading.
Description, as the server wrote it
Return missing TAIP, metadata, and imagery requirements with exact next actions.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
list_agent_modelsList OpenAI, Claude, and Z.AI models, current server pricing, capabilities, BYOK support, and sample Point quotes.No findings
Why it is in this group
- The name "list_agent_models" says "list": a word for reading.
Description, as the server wrote it
List OpenAI, Claude, and Z.AI models, current server pricing, capabilities, BYOK support, and sample Point quotes.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
list_ai_pack_growthList growth checkpoints, the active checkpoint, hosted slot/byte usage and limits without exposing private memory contents.No findings
Why it is in this group
- The name "list_ai_pack_growth" says "list": a word for reading.
Description, as the server wrote it
List growth checkpoints, the active checkpoint, hosted slot/byte usage and limits without exposing private memory contents.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
list_owned_ai_packsList purchased, claimed-free, and seller-owned packs available to this account.No findings
Why it is in this group
- The name "list_owned_ai_packs" says "list": a word for reading.
Description, as the server wrote it
List purchased, claimed-free, and seller-owned packs available to this account.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
quote_ai_pack_auditionReturn exact version-bound Point quotes and Agent AVCP deliverables.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Return exact version-bound Point quotes and Agent AVCP deliverables.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
search_ai_packsSearch the published agent-asset exchange by task or capability.No findings
Why it is in this group
- The name "search_ai_packs" says "search": a word for reading.
Description, as the server wrote it
Search the published agent-asset exchange by task or capability.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ex https://ex.tetrees.ai/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__ex__search_ai_packs",
      "mcp__ex__list_owned_ai_packs",
      "mcp__ex__get_ai_pack_report",
      "mcp__ex__list_agent_models",
      "mcp__ex__get_ai_pack_runtime_profile",
      "mcp__ex__list_ai_pack_growth",
      "mcp__ex__get_ai_pack_submission_readiness",
      "mcp__ex__quote_ai_pack_audition",
      "mcp__ex__get_ai_pack_private_report"
    ],
    "ask": [
      "mcp__ex__accept_ai_pack_terms",
      "mcp__ex__acquire_free_ai_pack",
      "mcp__ex__download_ai_pack",
      "mcp__ex__quote_agent_run",
      "mcp__ex__run_ai_pack",
      "mcp__ex__prepare_local_ai_pack_run",
      "mcp__ex__execute_client_extension",
      "mcp__ex__propose_ai_pack_growth",
      "mcp__ex__accept_ai_pack_growth",
      "mcp__ex__select_ai_pack_growth_version",
      "mcp__ex__create_ai_pack_draft",
      "mcp__ex__update_ai_pack_draft",
      "mcp__ex__upload_ai_pack",
      "mcp__ex__upload_ai_pack_image",
      "mcp__ex__submit_ai_pack_for_audition",
      "mcp__ex__run_ai_pack_audition",
      "mcp__ex__publish_ai_pack"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ex. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/ai.tetrees.ex/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

17 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:43 UTC.

For agents: Markdown · JSON · report this listing