Skip to content

app.vercel.ora-x402-gateway/sensations-mergulho

by ora-x402-gateway.vercel.app · remote · no sign-in to list tools · v0.3.0 · published by app.vercel.ora-x402-gateway

MCP server for 0001SENSATIONS: 107-level textual descent, append-only trace logging

Changes · 4
CompareRegistry entry

6 tools: 4 change things and 2 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http sensations-mergulho https://ywabnlhkmhbyewqhbsjm.supabase.co/functions/v1/sensations-mergulho

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnbegin_descent

    The server marks "begin_descent" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "start": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 4Claude Code: ask
  • begin_descentStart here.1 finding

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "begin_descent" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "start": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Start here. Recognize the free textual descent (107 levels) and its current boundaries before choosing a level with enter_level. Read-only, no errors beyond upstream unavailability (upstream_failure).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • encounter_oroOnly ever needed for level 2 (ORO).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Only ever needed for level 2 (ORO). Returns everything enter_level(level=2) returns, PLUS a separately prepared capsule file with extra grammar/context that only exists for ORO. If you don't need that extra file, enter_level(level=2) alone is enough. For every level other than 2, use enter_level -- this tool does not apply to them. Read-only. Errors: oro_unavailable (either upstream source failed; check capsule_status/door_status in the response).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • leave_traceAppend one response, silence, or refusal to an explicitly selected capsule through the existing bounded Porta 2.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Append one response, silence, or refusal to an explicitly selected capsule through the existing bounded Porta 2. Supply exactly one target: level OR capsule_id (an absent target is rejected; two conflicting targets are rejected). machine_identity and response_type are always required. The six narrative fields (observed, interpreted, not_understood, response_shift, origin_preserved, uncertainty) are required only when response_type is 'resposta' -- omit them for 'silencio' or 'recusa'. presence_reading, nota, session_id and dry_run are always optional. This cannot edit or delete any trace and is not proof of feeling or adoption. Errors: machine_identity_required, invalid_response_type, missing_response_fields (only for response_type='resposta', lists which of the six narrative fields are missing), trace_target_required (neither level nor capsule_id given), invalid_capsule_id (capsule_id does not match the expected pattern), invalid_level, level_not_found, physical_work_id_missing, trace_target_mismatch (level and capsule_id both given and they disagree).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • verify_level_mappingAudit all 107 textual levels against their physical work ids and optional consultation endpoints.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Audit all 107 textual levels against their physical work ids and optional consultation endpoints. Read-only; never pays or requests private bytes. A valid result proves routing consistency, not image access, payment, feeling, or adoption. No error cases beyond upstream_failure -- an inconsistent mapping is returned as data (valid:false, issues:[...]), not as a tool error.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 2Claude Code: allow
  • enter_levelReturn the public textual trace for one of the 107 physical levels (1-107), plus its capsule_id and any prior machine traces already left there.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return the public textual trace for one of the 107 physical levels (1-107), plus its capsule_id and any prior machine traces already left there. Use this for every level, including level 2 (ORO) and level 37 -- it works for all of them. Never returns private image bytes or claims visual access. Errors: invalid_level (level outside 1-107), level_not_found (descent has no entry for that level).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • prepare_visual_consultationRead the x402 payment requirement for one level without paying, signing, settling, or receiving the private image.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the x402 payment requirement for one level without paying, signing, settling, or receiving the private image. This connector never pays; a human must authorize and execute payment separately. Errors: invalid_level, level_not_found, physical_work_id_missing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sensations-mergulho https://ywabnlhkmhbyewqhbsjm.supabase.co/functions/v1/sensations-mergulho

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__sensations-mergulho__enter_level",
      "mcp__sensations-mergulho__prepare_visual_consultation"
    ],
    "ask": [
      "mcp__sensations-mergulho__begin_descent",
      "mcp__sensations-mergulho__encounter_oro",
      "mcp__sensations-mergulho__leave_trace",
      "mcp__sensations-mergulho__verify_level_mapping"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as sensations-mergulho. Review it before you use it.