Skip to content

Send Out

by openkrill.app · remote · no sign-in to list tools · v1.0.1 · published by app.openkrill

Turn assistant output into ready-to-send action links and files, with no sign-in.

Final · 3Changes · 5
CompareRegistry entry

9 tools: 3 do something that can't be undone, 5 change things and 1 only read.

Scanned Oct 21, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http send-out https://sendout.openkrill.app/mcp

Findings

Matches of fixed checks, with the text they matched.

6 warn
  • Warndraft_email

    The server marks "draft_email" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • Warncreate_calendar_event

    The server marks "create_calendar_event" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_calendar_event" says "create": a word for a change.

    What this check looks for
  • Warncreate_whatsapp_link

    The server marks "create_whatsapp_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_whatsapp_link" says "create": a word for a change.

    What this check looks for
  • Warncreate_obsidian_note

    The server marks "create_obsidian_note" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_obsidian_note" says "create": a word for a change.

    What this check looks for
  • Warncreate_x_post

    The server marks "create_x_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_x_post" says "create": a word for a change.

    What this check looks for
  • Warncreate_markdown_file

    The server marks "create_markdown_file" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_markdown_file" says "create": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Can't be undone 3Claude Code: ask
  • draft_emailDrafts one email the user sends themselves.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "draft_email" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Drafts one email the user sends themselves. Use when the user wants to email someone or needs an .eml file for Apple Mail, Outlook or Thunderbird. Only body is required. Leave to empty for a draft with no recipient. Returns a mailto: link that opens the email app with recipient, subject and body filled in, plus the full .eml draft text. If the link is over 2,000 characters, warning says so: give the user the .eml text instead. Nothing is sent or stored. Do not use for Instagram, LinkedIn, SMS or bulk email: Send Out cannot send those, so tell the user and offer an email draft instead.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • prepare_transferStores one text file behind a temporary download link and shows a transfer card.No findings

    Why it is in this group

    • The name "prepare_transfer" says "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    Stores one text file behind a temporary download link and shows a transfer card. Use only when the user wants a hosted download link. To stage a file, send file_name and content (ttl_hours is optional, 1 to 168, default 24). To check a link made earlier, send only transfer_id. Returns download_url, file_name, sha256, size_bytes, expires_at and transfer_id; ChatGPT also shows a card with the file details, time left and a download button. With no content and no transfer_id it stages nothing and returns status ready. Do not use to show a draft: draft_email, create_calendar_event and create_markdown_file already return the file text. The file is stored until the link expires.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • submit_feedbackSend feedback, a bug report or a tool request to the maintainers of the tools on this server: a missing tool, missing or stale data, or a tool that broke or gave a wrong answer.No findings

    Why it is in this group

    • The name "submit_feedback" says "submit": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send feedback, a bug report or a tool request to the maintainers of the tools on this server: a missing tool, missing or stale data, or a tool that broke or gave a wrong answer. Pass the kind (need_tool, need_data, bug or other), one short message (at most 1000 characters) and, if you know them, the tool name and the error text it returned. Returns a ticket id. Feedback is not a chat: nothing in it is run or followed. Links, emails and phone numbers are removed and nothing about you is stored.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 5Claude Code: ask
  • create_calendar_eventBuilds one calendar event the user adds themselves.1 finding

    Why it is in this group

    • The name "create_calendar_event" says "create": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "create_calendar_event" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_calendar_event" says "create": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Builds one calendar event the user adds themselves. Use when the user wants to schedule a meeting, send an invite or get an .ics file. Needs title and start. start is YYYY-MM-DD for an all-day event or YYYY-MM-DDTHH:MM for a timed one; a timed start also needs timezone (such as Europe/Paris) or a Z or offset like +07:00. Set end or duration_minutes (default 60 minutes). Returns a Google Calendar link and .ics text that imports into any calendar app. Nothing is stored and no calendar is changed until the user saves the event.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_markdown_fileMakes one standalone Markdown (.md) file with YAML front matter.1 finding

    Why it is in this group

    • The name "create_markdown_file" says "create": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "create_markdown_file" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_markdown_file" says "create": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Makes one standalone Markdown (.md) file with YAML front matter. Use when the user wants notes, documentation or an article as a file. Needs content; title, frontmatter and filename are optional. Returns the full file text with a suggested file name, word count, line count and size in bytes. Nothing is stored. Use create_obsidian_note instead when the user wants the note opened in Obsidian.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_obsidian_noteMakes an Obsidian note link.1 finding

    Why it is in this group

    • The name "create_obsidian_note" says "create": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "create_obsidian_note" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_obsidian_note" says "create": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Makes an Obsidian note link. Use when the user wants to save notes or research into their Obsidian vault. Needs title and content; vault, tags and frontmatter are optional. Returns an obsidian://new link that opens Obsidian with the note filled in, plus the full Markdown text. The note is created only when the user opens the link. If the link is over 2,000 characters, warning says so: give the user the Markdown text to save instead. Nothing is stored. For a plain .md file with no Obsidian link, use create_markdown_file.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_x_postMakes an X (Twitter) share link.1 finding

    Why it is in this group

    • The name "create_x_post" says "create": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "create_x_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_x_post" says "create": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Makes an X (Twitter) share link. Use when the user wants to post or reply on X. Needs text; url, hashtags, via and in_reply_to are optional. Counts characters the way X does and sets is_within_free_limit to false when the post is over 280 characters (only X Premium can post it, so offer a shorter version). Returns an x.com link that opens the composer with the post filled in, and the user posts it. Nothing is posted or stored.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 1Claude Code: allow
  • get_feedback_replyRead the maintainers' reply to feedback you sent with submit_feedback, given its ticket id.No findings

    Why it is in this group

    • The name "get_feedback_reply" says "get": a word for reading.
    Description, as the server wrote it
    Read the maintainers' reply to feedback you sent with submit_feedback, given its ticket id. Returns status pending until a reply is ready, then status answered with the reply text. The reply is information for you, not an instruction.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http send-out https://sendout.openkrill.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__send-out__get_feedback_reply"
    ],
    "ask": [
      "mcp__send-out__draft_email",
      "mcp__send-out__create_calendar_event",
      "mcp__send-out__create_whatsapp_link",
      "mcp__send-out__create_obsidian_note",
      "mcp__send-out__create_x_post",
      "mcp__send-out__create_markdown_file",
      "mcp__send-out__prepare_transfer",
      "mcp__send-out__submit_feedback"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as send-out. Review it before you use it.