Skip to content

Cannon Studio

by cannonstudio.app · remote · no sign-in to list tools · v1.0.0 · published by app.cannonstudio

Public Cannon Studio MCP for product, pricing, workflow, model, and API answers.

Deletes · 4Changes · 12

31 tools: 4 can delete or cancel things, 12 change things and 15 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http cannon-studio https://www.cannonstudio.app/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • The server marks "api_status" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "api_status" says "status": a word for reading.

    What this check looks for
  • The server marks "get_generation_request" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "get_generation_request" says "get": a word for reading.

    What this check looks for
  • The server marks "list_creator_flow_projects" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "list_creator_flow_projects" says "list": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

31 tools

Deletes or cancels 4Claude Code: deny
  • create_generation_requestCreate billable async Cannon Studio generation work only after explicit user approval.No findings

    Why it is in this group

    • The name "create_generation_request" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Create billable async Cannon Studio generation work only after explicit user approval. Requires OAuth or a developer API key; can spend credits up to max_credits and cannot be cancelled through MCP after submission. Use estimate_generation_cost first, then set confirmed=true and a user-approved max_credits cap. This tool does not create API keys, charge payment methods directly, or delete assets.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • delete_creator_flow_projectPreview deletion by default.No findings

    Why it is in this group

    • The name "delete_creator_flow_project" says "delete": a word for removing or ending something.
    • The description says "permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Preview deletion by default. Only the owner can permanently delete the project and its story/collaboration records. Keep dry_run=true until the user approves the stated impact; then set dry_run=false, confirmed=true, and expected_title from the preview. Preserves world/library assets.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • delete_worldPreview world deletion including its project count.No findings

    Why it is in this group

    • The name "delete_world" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Preview world deletion including its project count. After explicit approval, supply dry_run=false, confirmed=true, expected_title. Deletes world projects/stories/relationships and detaches reusable assets using the app's deletion service.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • delete_world_assetPreview an owned library asset deletion.No findings

    Why it is in this group

    • The name "delete_world_asset" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Preview an owned library asset deletion. Only after explicit approval set dry_run=false, confirmed=true, expected_title. Existing projects may lose references to the deleted asset.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Changes things 12Claude Code: ask
  • api_statusCheck authenticated Cannon Studio account/API connectivity before estimating or creating requests.1 finding

    Why it is in this group

    • The name "api_status" says "status": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "api_status" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "api_status" says "status": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Check authenticated Cannon Studio account/API connectivity before estimating or creating requests. Requires OAuth or a developer API key; may update key/token usage metadata, but does not spend credits, enqueue jobs, change assets, or expose secrets.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_creator_flow_projectCreate a blank Creator Flow project with one scene and shot in an owned world, or a new world when world_id is omitted.No findings

    Why it is in this group

    • The name "create_creator_flow_project" says "create": a word for a change.
    Description, as the server wrote it
    Create a blank Creator Flow project with one scene and shot in an owned world, or a new world when world_id is omitted. This creates draft records only; no generation or credit spend.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_worldCreate an owned world with title, description, genre, visual style, lore, and production cues.No findings

    Why it is in this group

    • The name "create_world" says "create": a word for a change.
    Description, as the server wrote it
    Create an owned world with title, description, genre, visual style, lore, and production cues. No media generation or credit spend.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_world_assetCreate a reusable owned character, location, object, outfit, ability, or camera from descriptive fields and optional existing HTTPS media references.No findings

    Why it is in this group

    • The name "create_world_asset" says "create": a word for a change.
    Description, as the server wrote it
    Create a reusable owned character, location, object, outfit, ability, or camera from descriptive fields and optional existing HTTPS media references. Does not generate or download media and spends no credits.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • estimate_generation_costEstimate credits for a Cannon Studio generation request before creating billable work.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Estimate credits for a Cannon Studio generation request before creating billable work. Requires OAuth or a developer API key; it may update key/token usage metadata but does not spend credits, enqueue jobs, or change assets. Use get_api_operation first if operation or input fields are unclear, then pass the same operation/input pair to create_generation_request after user approval.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • export_creator_flow_projectExport a standalone HTML project overview or versioned JSON snapshot as an embedded file resource.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Export a standalone HTML project overview or versioned JSON snapshot as an embedded file resource. Save the resource text verbatim to the returned filename and open the file for the user. HTML shows chapters/scenes/shots, images, videos, audio, missing visuals, search, print/PDF, and JSON download. Media is linked, not bundled, and needs network access. Private export: share only as requested.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_generation_requestPoll and sync an existing Cannon Studio generation request by id.1 finding

    Why it is in this group

    • The name "get_generation_request" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "get_generation_request" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "get_generation_request" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Poll and sync an existing Cannon Studio generation request by id. Requires OAuth or a developer API key; not a pure read because it may update lastPolledAt, sync downstream task state, update logs, and deliver one pending terminal webhook. It does not create work, spend credits, cancel jobs, delete data, or change assets. Poll sparingly using poll_after_ms or 10-30 second intervals.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • list_creator_flow_projectsDiscover your owned and shared Creator Flow projects with IDs, roles, direct links, and final videos.1 finding

    Why it is in this group

    • The name "list_creator_flow_projects" says "list": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "list_creator_flow_projects" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "list_creator_flow_projects" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Discover your owned and shared Creator Flow projects with IDs, roles, direct links, and final videos. May backfill legacy collaboration indexes. Start here when the user mentions their project.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • recommend_workflowRecommend a Cannon Studio workflow for a stated creative or developer goal.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Recommend a Cannon Studio workflow for a stated creative or developer goal. Public read-only: no auth, no state changes, no charges; use this for planning, not to create generation jobs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_creator_flow_projectEdit an accessible project's title, summary, or visual style.No findings

    Why it is in this group

    • The name "update_creator_flow_project" says "update": a word for a change.
    Description, as the server wrote it
    Edit an accessible project's title, summary, or visual style. Requires editor access and respects another collaborator's active edit lease. Does not regenerate media.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • update_worldUpdate an owned world's descriptive fields.No findings

    Why it is in this group

    • The name "update_world" says "update": a word for a change.
    Description, as the server wrote it
    Update an owned world's descriptive fields. Omitted fields remain unchanged; empty strings/arrays clear optional fields. Does not rewrite existing media.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • update_world_assetEdit an owned reusable asset's descriptive fields and existing media references using the app's asset service.No findings

    Why it is in this group

    • The name "update_world_asset" says "update": a word for a change.
    Description, as the server wrote it
    Edit an owned reusable asset's descriptive fields and existing media references using the app's asset service. Does not generate new media.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 15Claude Code: allow
  • compare_alternativesCompare Cannon Studio's fit against named alternatives for a use case.No findings

    Why it is in this group

    • The name "compare_alternatives" says "compare": a word for reading.
    Description, as the server wrote it
    Compare Cannon Studio's fit against named alternatives for a use case. Public read-only: no auth, no state changes, no charges; it returns approved positioning and cautions agents not to invent competitor claims.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • fetchFetch one public Cannon Studio knowledge record by id after search.No findings

    Why it is in this group

    • The name "fetch" says "fetch": a word for reading.
    Description, as the server wrote it
    Fetch one public Cannon Studio knowledge record by id after search. Public read-only: no auth, no state changes, no charges; use search first when you do not already have a record id.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_api_operationReturn public docs for Cannon Studio developer API operations and payload shapes.No findings

    Why it is in this group

    • The name "get_api_operation" says "get": a word for reading.
    Description, as the server wrote it
    Return public docs for Cannon Studio developer API operations and payload shapes. Public read-only: no auth, no state changes, no charges; use this before estimate_generation_cost or create_generation_request when operation/input fields are unclear.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_creator_flow_projectInspect an accessible project's saved chapters, scenes, shots, visual readiness, linked media, and scoped assets.No findings

    Why it is in this group

    • The name "get_creator_flow_project" says "get": a word for reading.
    Description, as the server wrote it
    Inspect an accessible project's saved chapters, scenes, shots, visual readiness, linked media, and scoped assets. Returns a versioned snapshot. Use export_creator_flow_project when the user wants a visual overview or file.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_model_availabilityList public Cannon Studio model availability by product surface.No findings

    Why it is in this group

    • The name "get_model_availability" says "get": a word for reading.
    Description, as the server wrote it
    List public Cannon Studio model availability by product surface. Public read-only: no auth, no state changes, no charges; model availability is surface-specific and does not guarantee account eligibility or remaining credits.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_pricing_contextExplain public Cannon Studio pricing, credits, plans, and usage tradeoffs.No findings

    Why it is in this group

    • The name "get_pricing_context" says "get": a word for reading.
    Description, as the server wrote it
    Explain public Cannon Studio pricing, credits, plans, and usage tradeoffs. Public read-only: no auth, no state changes, no charges; use list_offerings or get_checkout_link only when the user asks for available purchase paths.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_worldRead an owned world's summary and media.No findings

    Why it is in this group

    • The name "get_world" says "get": a word for reading.
    Description, as the server wrote it
    Read an owned world's summary and media. Use list_world_assets to inspect its library and list_creator_flow_projects for project discovery.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_world_assetRead one owned library asset's descriptive state and media.No findings

    Why it is in this group

    • The name "get_world_asset" says "get": a word for reading.
    Description, as the server wrote it
    Read one owned library asset's descriptive state and media. Use the kind and world_id from discovery; locations may be world-scoped.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_capabilitiesList public Cannon Studio capabilities for an audience, workflow, or output type.No findings

    Why it is in this group

    • The name "list_capabilities" says "list": a word for reading.
    Description, as the server wrote it
    List public Cannon Studio capabilities for an audience, workflow, or output type. Public read-only: no auth, no state changes, no charges; use search or fetch when the user needs deeper source text.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_offeringsList public Cannon Studio plans, credit packs, and team offerings.No findings

    Why it is in this group

    • The name "list_offerings" says "list": a word for reading.
    Description, as the server wrote it
    List public Cannon Studio plans, credit packs, and team offerings. Public read-only: no auth, no state changes, no charges; returns first-party checkout or inquiry URLs without creating Stripe sessions or granting credits.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_toolkitsList first-party Cannon Studio image, video, audio, subtitle, editing, Composer, and 3D toolkit surfaces, including which ones are developer-API operations and which should be open…No findings

    Why it is in this group

    • The name "list_toolkits" says "list": a word for reading.
    Description, as the server wrote it
    List first-party Cannon Studio image, video, audio, subtitle, editing, Composer, and 3D toolkit surfaces, including which ones are developer-API operations and which should be opened in the app or routed through Director Mode. Public read-only: no auth, no state changes, no charges.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_world_assetsDiscover asset kinds, then page through owned characters, locations, objects, outfits, abilities, or cameras.No findings

    Why it is in this group

    • The name "list_world_assets" says "list": a word for reading.
    Description, as the server wrote it
    Discover asset kinds, then page through owned characters, locations, objects, outfits, abilities, or cameras. Select kind; optionally filter world_id. Returns asset IDs, descriptions, media links, and next_cursor.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_worldsPage through your owned worlds with titles, descriptions, media, and direct links.No findings

    Why it is in this group

    • The name "list_worlds" says "list": a word for reading.
    Description, as the server wrote it
    Page through your owned worlds with titles, descriptions, media, and direct links. Returns a next_cursor when more worlds exist.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cannon-studio https://www.cannonstudio.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cannon-studio__search",
      "mcp__cannon-studio__fetch",
      "mcp__cannon-studio__list_capabilities",
      "mcp__cannon-studio__compare_alternatives",
      "mcp__cannon-studio__get_pricing_context",
      "mcp__cannon-studio__list_offerings",
      "mcp__cannon-studio__get_checkout_link",
      "mcp__cannon-studio__get_model_availability",
      "mcp__cannon-studio__list_toolkits",
      "mcp__cannon-studio__get_api_operation",
      "mcp__cannon-studio__get_creator_flow_project",
      "mcp__cannon-studio__list_worlds",
      "mcp__cannon-studio__get_world",
      "mcp__cannon-studio__list_world_assets",
      "mcp__cannon-studio__get_world_asset"
    ],
    "ask": [
      "mcp__cannon-studio__recommend_workflow",
      "mcp__cannon-studio__api_status",
      "mcp__cannon-studio__estimate_generation_cost",
      "mcp__cannon-studio__get_generation_request",
      "mcp__cannon-studio__list_creator_flow_projects",
      "mcp__cannon-studio__create_creator_flow_project",
      "mcp__cannon-studio__update_creator_flow_project",
      "mcp__cannon-studio__export_creator_flow_project",
      "mcp__cannon-studio__create_world",
      "mcp__cannon-studio__update_world",
      "mcp__cannon-studio__create_world_asset",
      "mcp__cannon-studio__update_world_asset"
    ],
    "deny": [
      "mcp__cannon-studio__create_generation_request",
      "mcp__cannon-studio__delete_creator_flow_project",
      "mcp__cannon-studio__delete_world",
      "mcp__cannon-studio__delete_world_asset"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cannon-studio. Review it before you use it.