Crevio

by crevio.co · remote · no sign-in to list tools · v2.0.0 · published by co.crevio

An AI agent that runs your online business: products, orders, customers, email, and sites.

Deletes · 7

Compare Registry entry

18 tools: 7 can delete or cancel things and 11 only read.

Scanned Oct 21, 2026

Deletes or cancels7Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things0Claude Code: ask
Only reads11Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http crevio https://mcp.crevio.co/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info

Warnresolve_approvals
The server marks "resolve_approvals" destructive (destructiveHint: true), and its name says "resolve", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "resolve_approvals" says "resolve": a word for reading.
What this check looks for
Infowhoami
The description mentions "credential".
Matched text
description: "Identify the account, user, and credential behind this connection, with plan, cred..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

18 tools

Deletes or cancels 7Removes, cancels or revokes something.Claude Code: deny

ask_crevioDelegate a job to the Crevio agent and wait for the result.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delegate a job to the Crevio agent and wait for the result. The agent works your account through the Crevio API and every connected integration (products, customers, orders, email, socials, sites, research) and replies in `result`. Each job is a full agent run that takes from half a minute to several minutes, so use it for work that needs judgement or writing. If the run is still going when the wait ends, the reply has wait_timed_out: true — then call wait_for_run with its id and never call ask_crevio again, which would do the job twice. Run ids do not expire, and only the user who started a run can read it.
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
cancel_runStop a run that is pending, running, or waiting for input, and its media generations still in flight.No findings
Why it is in this group
- The name "cancel_run" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Stop a run that is pending, running, or waiting for input, and its media generations still in flight. A run mid-step finishes that step first: it returns with cancel_requested_at set and settles as cancelled moments later (wait_for_run to confirm). Repeating it is harmless.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
cancel_script_runCancel a script run that has not started yet.No findings
Why it is in this group
- The name "cancel_script_run" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel a script run that has not started yet. A running script runs to its end or its timeout.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
resolve_approvalsApprove or deny the integration actions a run is paused on (status needs_input with pending_approval_ids).1 finding
Why it is in this group
- The name "resolve_approvals" says "resolve": a word for reading.
- The description's first verb is "approve": a word for a change.
- The server marks it destructive (destructiveHint: true).
Findings
- Warn
  The server marks "resolve_approvals" destructive (destructiveHint: true), and its name says "resolve", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "resolve_approvals" says "resolve": a word for reading.
  What this check looks for
Description, as the server wrote it
Approve or deny the integration actions a run is paused on (status needs_input with pending_approval_ids). Submit a decision for every pending id at once; the run resumes in the background.
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
run_scriptRun JavaScript on the account's computer with bun — no agent turn — and wait for its result.No findings
Why it is in this group
- The name "run_script" says "run": a word for a change.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Run JavaScript on the account's computer with bun — no agent turn — and wait for its result. `tools.<namespace>.<function>(args)` calls anything list_integration_tools shows (every call returns its result and throws on failure; top-level await works), and the script's last expression is its result. Chain calls and transform data in one run, e.g. `const { data } = await tools.crevioApi.listOrders({ status: "succeeded" }); data.length`. Runs as you, and only for account admins. If the wait ends first the reply has wait_timed_out: true and the run id: continue with wait_for_script_run — calling run_script again runs it twice unless you reuse the idempotency_key. Run ids do not expire, and only the user who started a run can read it. At most 4 runs in flight per user.
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
send_messageContinue a chat with follow-up instructions or answers — the agent keeps its context.No findings
Why it is in this group
- The name "send_message" says "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Continue a chat with follow-up instructions or answers — the agent keeps its context. Resumes a run waiting in needs_input, or queues a new run when the last one finished. Returns run_busy while a run is still in progress. Optionally waits for the reply.
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
start_chatOpen a chat with the Crevio agent and queue a run, without waiting.No findings
Why it is in this group
- The name "start_chat" says "start": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Open a chat with the Crevio agent and queue a run, without waiting. Returns the run immediately — its `chat_id` is the conversation to continue with send_message. Follow the run with wait_for_run or get_run.
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false

Only reads 11Looks things up and changes nothing.Claude Code: allow

get_chatGet a chat's title, kind, and latest run.No findings
Why it is in this group
- The name "get_chat" says "get": a word for reading.
Description, as the server wrote it
Get a chat's title, kind, and latest run.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_runFetch a run's current status, summary, pending approvals, and (once settled) the agent's final reply.No findings
Why it is in this group
- The name "get_run" says "get": a word for reading.
Description, as the server wrote it
Fetch a run's current status, summary, pending approvals, and (once settled) the agent's final reply.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_script_runRead a script run's status, and its result once it has finished.No findings
Why it is in this group
- The name "get_script_run" says "get": a word for reading.
Description, as the server wrote it
Read a script run's status, and its result once it has finished.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_chatsList the account's chats, newest first.No findings
Why it is in this group
- The name "list_chats" says "list": a word for reading.
Description, as the server wrote it
List the account's chats, newest first.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_integration_toolsList one namespace's functions — the name a script calls, its parameters, whether it only reads, whether it needs approval, and a snippet run_script accepts.No findings
Why it is in this group
- The name "list_integration_tools" says "list": a word for reading.
Description, as the server wrote it
List one namespace's functions — the name a script calls, its parameters, whether it only reads, whether it needs approval, and a snippet run_script accepts. crevioApi has hundreds of operations: narrow it with `search`.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_integrationsList what a script can call: the Crevio API (crevioApi), Crevio's own tools (platform), and every integration you can use, each as a namespace under `tools`, plus the account's oth…No findings
Why it is in this group
- The name "list_integrations" says "list": a word for reading.
Description, as the server wrote it
List what a script can call: the Crevio API (crevioApi), Crevio's own tools (platform), and every integration you can use, each as a namespace under `tools`, plus the account's other connected apps and their status. Then list a namespace's functions with list_integration_tools.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_messagesRead a chat's messages, oldest first.No findings
Why it is in this group
- The name "list_messages" says "list": a word for reading.
Description, as the server wrote it
Read a chat's messages, oldest first. Returns the most recent `limit` messages; page back through older ones with starting_after.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_runsList the account's task runs, newest first — delegated jobs and scheduled tasks alike.No findings
Why it is in this group
- The name "list_runs" says "list": a word for reading.
Description, as the server wrote it
List the account's task runs, newest first — delegated jobs and scheduled tasks alike. Filter by status or task.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
wait_for_runWait for a run to settle (completed, failed, cancelled, or needs_input) and return it with the agent's final reply.No findings
Why it is in this group
- The name "wait_for_run" says "wait": a word for reading.
Description, as the server wrote it
Wait for a run to settle (completed, failed, cancelled, or needs_input) and return it with the agent's final reply. If it is still running when the wait ends, the reply has wait_timed_out: true — call wait_for_run again.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
wait_for_script_runWait for a script run to finish and return its result.No findings
Why it is in this group
- The name "wait_for_script_run" says "wait": a word for reading.
Description, as the server wrote it
Wait for a script run to finish and return its result. If it is still running when the wait ends, the reply has wait_timed_out: true — call again.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
whoamiIdentify the account, user, and credential behind this connection, with plan, credit balance, rate limits, and the tools available.1 finding
Why it is in this group
- The name "whoami" says "whoami": a word for reading.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "Identify the account, user, and credential behind this connection, with plan, cred..."
  What this check looks for
Description, as the server wrote it
Identify the account, user, and credential behind this connection, with plan, credit balance, rate limits, and the tools available. Only needed to troubleshoot the connection or check credits and limits — other tools already act on this account.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http crevio https://mcp.crevio.co/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__crevio__whoami",
      "mcp__crevio__list_integrations",
      "mcp__crevio__list_integration_tools",
      "mcp__crevio__wait_for_script_run",
      "mcp__crevio__get_script_run",
      "mcp__crevio__list_chats",
      "mcp__crevio__get_chat",
      "mcp__crevio__list_messages",
      "mcp__crevio__wait_for_run",
      "mcp__crevio__get_run",
      "mcp__crevio__list_runs"
    ],
    "ask": [],
    "deny": [
      "mcp__crevio__run_script",
      "mcp__crevio__cancel_script_run",
      "mcp__crevio__ask_crevio",
      "mcp__crevio__start_chat",
      "mcp__crevio__send_message",
      "mcp__crevio__resolve_approvals",
      "mcp__crevio__cancel_run"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as crevio. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/co.crevio/crevio/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:46 UTC.

For agents: Markdown · JSON · report this listing