Squatch Stack

by squatch.cc · remote · no sign-in to list tools · v1.4.0 · published by cc.squatch

Squatch Stack: a shop that opens in the chat, essays, and requests to the studio. No sign-in.

Changes · 8

Compare Registry entry

11 tools: 8 change things and 3 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things8Claude Code: ask: see these tools
Only reads3Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http squatch https://mcp.squatch.cc/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnstart_checkout
The server marks "start_checkout" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "start_checkout" says "start": a word for a change.
What this check looks for
Warnrequest_status
The server marks "request_status" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "request_status" says "request": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

about_this_serverWho runs this server, how to verify it, exactly what each tool can and cannot do, what is kept, and the limits.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Who runs this server, how to verify it, exactly what each tool can and cannot do, what is kept, and the limits. Use it when someone asks whether they can trust a link or a request.
Annotations the server declares
- title: Is this legitimate? How it works
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
contact_draftMake a ready-to-send email link (mailto) to Squatch Stack with a fitting subject and body.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Make a ready-to-send email link (mailto) to Squatch Stack with a fitting subject and body. It sends nothing; the person opens it in their mail app.
Annotations the server declares
- title: Draft an email to the studio
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
parse_buffaloTag every word of a 'Buffalo buffalo ...' sentence as city, animal or verb, with a plain-English gloss.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Tag every word of a 'Buffalo buffalo ...' sentence as city, animal or verb, with a plain-English gloss.
Annotations the server declares
- title: Parse a buffalo sentence
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
request_customLeave a request in the Squatch Stack inbox: a custom shirt or piece, details or an update on something, help with an order, or anything else.No findings
Why it is in this group
- The name "request_custom" says "request": a word for a change.
Description, as the server wrote it
Leave a request in the Squatch Stack inbox: a custom shirt or piece, details or an update on something, help with an order, or anything else. A person reads every one and answers from hello@squatch.cc if an email address is given. Returns a reference (SQ-XXXXXX) to check with request_status. It sends no email and charges nothing; the request and the address are kept for 180 days, then deleted. Ask the person before sending their email address.
Annotations the server declares
- title: Send the studio a request
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
request_statusWhere a request sent with request_custom has got to (received, read, replied, closed), and the studio's answer.1 finding
Why it is in this group
- The name "request_status" says "request": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "request_status" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "request_status" says "request": a word for a change.
  What this check looks for
Description, as the server wrote it
Where a request sent with request_custom has got to (received, read, replied, closed), and the studio's answer. With the private token (SQ-XXXXXX-XXXXXXXXXXXXXXXX) it shows the answer; with the short reference (SQ-XXXXXX) only the status. Never shows the original message or email address.
Annotations the server declares
- title: Check on a request
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
start_checkoutBuild Squatch Stack checkout links for the chosen variants.1 finding
Why it is in this group
- The name "start_checkout" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "start_checkout" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "start_checkout" says "start": a word for a change.
  What this check looks for
Description, as the server wrote it
Build Squatch Stack checkout links for the chosen variants. It does NOT buy anything: give the links to the person, who reviews the cart and pays on the store's secure checkout (tax and shipping calculated there).
Annotations the server declares
- title: Make a checkout link
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
studio_infoWhat Squatch Stack (a software and hardware studio in the Missouri Ozarks) builds, and how to reach it.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
What Squatch Stack (a software and hardware studio in the Missouri Ozarks) builds, and how to reach it.
Annotations the server declares
- title: About Squatch Stack
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
support_optionsThe ways to back Squatch Stack's open hardware and audio work: monthly tiers and one-time options with their price and what the supporter gets, GitHub Sponsors and the store.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The ways to back Squatch Stack's open hardware and audio work: monthly tiers and one-time options with their price and what the supporter gets, GitHub Sponsors and the store. Gives a checkout link only for options whose card checkout is live; it never starts a payment (the person opens the link and pays). Squatch.CC LLC is a for-profit business; support is not tax-deductible.
Annotations the server declares
- title: Ways to support Squatch Stack
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true

Only reads 3Looks things up and changes nothing.Claude Code: allow

get_goodDetails for one Squatch Stack product by slug: description, every variant (color/size) with its variant_id and price.No findings
Why it is in this group
- The name "get_good" says "get": a word for reading.
Description, as the server wrote it
Details for one Squatch Stack product by slug: description, every variant (color/size) with its variant_id and price.
Annotations the server declares
- title: Get one product
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
list_goodsBrowse the Squatch Stack shop (tees, mugs, hats, stickers, posters, totes).No findings
Why it is in this group
- The name "list_goods" says "list": a word for reading.
Description, as the server wrote it
Browse the Squatch Stack shop (tees, mugs, hats, stickers, posters, totes). Optional text search and kind filter. Prices in USD; tax and shipping are added at checkout.
Annotations the server declares
- title: List Squatch Stack goods
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
show_shopShow the Squatch Stack goods as an interactive shop the person can browse: photos, colours and sizes, and a Buy button that opens the shop's secure checkout in their browser.No findings
Why it is in this group
- The name "show_shop" says "show": a word for reading.
Description, as the server wrote it
Show the Squatch Stack goods as an interactive shop the person can browse: photos, colours and sizes, and a Buy button that opens the shop's secure checkout in their browser. Use it when someone wants to look around or buy. Optional search words or kind narrow it. Apps without interactive views get the same list as text.
Annotations the server declares
- title: Open the Squatch Stack shop
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http squatch https://mcp.squatch.cc/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__squatch__list_goods",
      "mcp__squatch__show_shop",
      "mcp__squatch__get_good"
    ],
    "ask": [
      "mcp__squatch__studio_info",
      "mcp__squatch__start_checkout",
      "mcp__squatch__contact_draft",
      "mcp__squatch__parse_buffalo",
      "mcp__squatch__request_custom",
      "mcp__squatch__request_status",
      "mcp__squatch__support_options",
      "mcp__squatch__about_this_server"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as squatch. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/cc.squatch/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:46 UTC.

For agents: Markdown · JSON · report this listing