Skip to content

Tonebook Palette

by tonebook.app · remote · no sign-in to list tools · v1.0.0 · published by app.tonebook

Choose a palette, compare digital colors and create portable outfit, event or packing boards.

Changes · 3

6 tools: 3 change things and 3 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http palette https://tonebook-muse-mcp-staging.vercel.app/api/openai-mcp-v1

Findings

Matches of fixed checks, with the text they matched.

2 warn1 info
  • The server marks "select_palette" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "select_palette" says "select": a word for a change.

    What this check looks for
  • The server marks "create_palette_board" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_palette_board" says "create": a word for a change.

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...blic palette data. It is not an account credential and cannot retrieve purchased reports...."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 3Claude Code: ask
  • create_palette_boardGenerate a labeled downloadable SVG board and matching 12-color PNG from a user-confirmed palette, a chosen outfit/event/packing purpose and optional supplied garment colors.1 finding

    Why it is in this group

    • The name "create_palette_board" says "create": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "create_palette_board" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_palette_board" says "create": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a labeled downloadable SVG board and matching 12-color PNG from a user-confirmed palette, a chosen outfit/event/packing purpose and optional supplied garment colors. Requires the user’s chosen palette; unknown colors request clarification. Computation only; no upload, charge, account record or closet inference.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • score_color_quizUse eight explicit user-selected answers to suggest a 12-color starting palette and adjacent option.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use eight explicit user-selected answers to suggest a 12-color starting palette and adjacent option. Uncertain or conflicting preferences prompt clarification. The versioned result is unconfirmed guidance, not a diagnosis. It never overwrites a confirmed palette.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • select_paletteReturn a portable user-confirmed palette from an explicit season choice.1 finding

    Why it is in this group

    • The name "select_palette" says "select": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "select_palette" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "select_palette" says "select": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Return a portable user-confirmed palette from an explicit season choice. For correction, pass the prior palette reference so source and revision are retained. Confirm only the user’s stated choice. Keep the new reference for later calls; this does not write account or native report data.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
Only reads 3Claude Code: allow
  • compare_colorsCompare up to 12 supplied six-digit hex colors or standard color names with a portable selected palette.No findings

    Why it is in this group

    • The name "compare_colors" says "compare": a word for reading.
    Description, as the server wrote it
    Compare up to 12 supplied six-digit hex colors or standard color names with a portable selected palette. Unknown or ambiguous names request hex values. Return the nearest digital swatch with a fixed RGB rule and concise rationale. This does not assess skin, photos, fabrics or garments you own.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_palette_boardReconstruct the same SVG, PNG, selected palette and supplied-color comparisons from a complete board reference.1 finding

    Why it is in this group

    • The name "get_palette_board" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...blic palette data. It is not an account credential and cannot retrieve purchased reports...."

      What this check looks for
    Description, as the server wrote it
    Reconstruct the same SVG, PNG, selected palette and supplied-color comparisons from a complete board reference. Anyone with a reference can read its public palette data. It is not an account credential and cannot retrieve purchased reports. No Tonebook server record is required.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_quiz_questionsReturn Tonebook’s eight categorical self-assessment questions.No findings

    Why it is in this group

    • The name "get_quiz_questions" says "get": a word for reading.
    Description, as the server wrote it
    Return Tonebook’s eight categorical self-assessment questions. Ask for the user’s own choices; do not infer choices from a photo or conversation history. No account, photo or payment is needed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http palette https://tonebook-muse-mcp-staging.vercel.app/api/openai-mcp-v1

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__palette__get_quiz_questions",
      "mcp__palette__compare_colors",
      "mcp__palette__get_palette_board"
    ],
    "ask": [
      "mcp__palette__score_color_quiz",
      "mcp__palette__select_palette",
      "mcp__palette__create_palette_board"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as palette. Review it before you use it.