Skip to content

ActionDock

by actiondock.app · remote · no sign-in to list tools · v0.2.0 · published by app.actiondock

Supervised API-write gateway for AI agents with policy, human approval and execution receipts.

Deletes · 1
CompareRegistry entry

8 tools: 1 can delete or cancel things and 7 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http actiondock https://actiondock.app/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

1 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Deletes or cancels 1Claude Code: deny
  • run_actionCreate an action job.No findings

    Why it is in this group

    • The name "run_action" says "run": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Create an action job. External writes always wait for workspace-owner approval in the dashboard; the owner is emailed, and wait_for_job blocks until the decision.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Only reads 7Claude Code: allow
  • get_jobGet the current status and result of an action job.No findings

    Why it is in this group

    • The name "get_job" says "get": a word for reading.
    Description, as the server wrote it
    Get the current status and result of an action job.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_actionsList every action available to the agent, including input schemas and side-effect flags.No findings

    Why it is in this group

    • The name "list_actions" says "list": a word for reading.
    Description, as the server wrote it
    List every action available to the agent, including input schemas and side-effect flags.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_connectionsList the workspace-approved HTTPS API connections, method/path allowlists and public operator identification with the effective User-Agent.1 finding

    Why it is in this group

    • The name "list_connections" says "list": a word for reading.

    Findings

    • Info

      The description mentions "Credentials".

      Matched text

      description: "...fication with the effective User-Agent. Credentials are never returned."

      What this check looks for
    Description, as the server wrote it
    List the workspace-approved HTTPS API connections, method/path allowlists and public operator identification with the effective User-Agent. Credentials are never returned.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_eventsList recent job and callback events for workflow continuation and audit.No findings

    Why it is in this group

    • The name "list_events" says "list": a word for reading.
    Description, as the server wrote it
    List recent job and callback events for workflow continuation and audit.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_job_reconciliationsRead the owner's append-only observations about an unknown write.No findings

    Why it is in this group

    • The name "list_job_reconciliations" says "list": a word for reading.
    Description, as the server wrote it
    Read the owner's append-only observations about an unknown write. These are owner reports, not verified provider facts, a changed job status, or permission to retry. Agents cannot record observations.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_usageList metered action debits and the current UTC-month usage total.No findings

    Why it is in this group

    • The name "list_usage" says "list": a word for reading.
    Description, as the server wrote it
    List metered action debits and the current UTC-month usage total.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • wait_for_jobWait for an action job to reach a decision or a final state: approved and executed, rejected, failed, or execution_unknown.No findings

    Why it is in this group

    • The name "wait_for_job" says "wait": a word for reading.
    Description, as the server wrote it
    Wait for an action job to reach a decision or a final state: approved and executed, rejected, failed, or execution_unknown. A job still awaiting owner approval when the timeout elapses is returned as awaiting_approval; call again to keep waiting. Keep timeout_seconds below your client's tool timeout.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http actiondock https://actiondock.app/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__actiondock__list_actions",
      "mcp__actiondock__get_job",
      "mcp__actiondock__list_job_reconciliations",
      "mcp__actiondock__wait_for_job",
      "mcp__actiondock__list_events",
      "mcp__actiondock__list_connections",
      "mcp__actiondock__list_usage"
    ],
    "ask": [],
    "deny": [
      "mcp__actiondock__run_action"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as actiondock. Review it before you use it.