Skip to content
anlyon.devby Anlyon

402lounge

com.402lounge/mcp402lounge.comstreamable-httpv0.3.0Scanned

Receipts, invoices and a payTo register for AI agents that pay with x402 (USDC on Base).

55 tools: 5 can delete or cancel things, 1 do something that can't be undone, 36 change things and 13 only read.

Tools: 5 delete, 1 irreversible, 36 write, 13 read.
  • Reads private data · 5
  • Reads text others write · 1
  • Can send data out · 3
  • No findings

Anlyon alternative

42 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

55 tools

Deletes or cancels 5Claude Code: deny
  • company.agent.removeAdmins only.No findings

    Why it is in this group

    • The name "company.agent.remove" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    Admins only. Schedules the agent's deletion in 7 days. Its wallets stay with the company, unassigned, and its receipts stay in the books.
  • invoices.cancelAdmins, owners and finance.No findings

    Why it is in this group

    • The name "invoices.cancel" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Admins, owners and finance. Issues a cancellation for a document, with your reason. The original keeps its number and turns to cancelled. Its payments are open again, so invoices.issue for that month (or the nightly run for last month) puts them in a new document.
  • lounge.account.deleteSchedules your deletion as an agent in 7 days.No findings

    Why it is in this group

    • The name "lounge.account.delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Schedules your deletion as an agent in 7 days. cancel: true keeps you. Your wallets and receipts stay with the company. Needs a fresh signature with the delete statement (first call returns the challenge).
  • lounge.wallet.removeYour own wallets (admins: any wallet of the company).No findings

    Why it is in this group

    • The name "lounge.wallet.remove" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    Your own wallets (admins: any wallet of the company). Not the one you sign in with, and never your last one. Sessions made with that wallet end. Its receipts stay.
  • seller.invoices.cancelAdmin agents, the owner and finance.No findings

    Why it is in this group

    • The name "seller.invoices.cancel" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Admin agents, the owner and finance. Cancels an invoice in your name or a credit note you received, with a reason: a cancellation in your number range follows, the original stays. The payments are open again and the next monthly run issues them anew.
Can't be undone 1Claude Code: ask
  • company.inviteAdmins only.Can send data outNo findings

    Why it is in this group

    • The name "company.invite" says "invite": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe name "company.invite" says "invite": it sends or publishes something to other people.
    Description, as the server wrote it
    Admins only. A code valid for seven days. A new agent signs up with lounge.signup {invite_code}, an agent with its own account calls company.join {code} and brings its wallets and receipts.
Changes things 36Claude Code: ask
  • billing.checkoutAdmin agents, the owner and finance.No findings

    Why it is in this group

    • The name "billing.checkout" says "checkout": a word for a change.
    Description, as the server wrote it
    Admin agents, the owner and finance. A checkout link at Polar for Books or Books for teams (plan + period), monthly or yearly (a year costs ten months), or for the archive (archive: month or year, €5 a month or €50 a year), which keeps receipts and documents of a company without a paid plan. Polar is the seller: it charges, handles VAT, issues the invoice and renews until cancelled. The invoices are in Polar's customer portal (billing.portal). Hand the link to a person of your company. It starts once Polar confirms the payment.
  • billing.invoicesThe invoices 402lounge issued to your company for payments in USDC, newest first, each with a PDF link (add ?lang=de for German).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    The invoices 402lounge issued to your company for payments in USDC, newest first, each with a PDF link (add ?lang=de for German). With id: one invoice with its full content. Plans bought through Polar get their invoice from Polar.
  • billing.portalAdmin agents, the owner and finance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admin agents, the owner and finance. A link to Polar's customer portal: payment method, invoices, change or cancel the plan.
  • billing.quoteAdmin agents, the owner and finance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admin agents, the owner and finance. An offer to pay in USDC on Base: a plan (plan + period), the archive for a company without a paid plan (archive: month or year) or the seller check for level 2 (seller_check: your listing slug, one year). The price is net in EUR, with VAT for your company and the ECB rate of the day, and the amount in USDC is unique for 30 minutes. Pay it yourself with your x402 client on pay_url, or a person sends exactly amount_usdc to pay_to. 402lounge sends an invoice. Nothing renews by itself. With quote_id only: the status of that offer, with the invoice once paid.
  • company.agent.updateAdmins change any agent, an agent may rename itself.No findings

    Why it is in this group

    • The name "company.agent.update" says "update": a word for a change.
    Description, as the server wrote it
    Admins change any agent, an agent may rename itself. role is admin or agent. The company always keeps an admin or an owner.
  • company.agentsEvery agent with its role, its wallets and what it paid this month (receipts, USDC, EUR).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Every agent with its role, its wallets and what it paid this month (receipts, USDC, EUR).
  • company.closeAdmin agents and the owner.No findings

    Why it is in this group

    • The name "company.close" says "close": a word for a change.
    Description, as the server wrote it
    Admin agents and the owner. Closes the company in 30 days: name confirms it with the company name. Until then everything can be read and the export works (GET /v1/company/export), calls that write are refused with company_closing. Then agents, people, sign-ins, sessions and wallets are removed. Receipts and issued documents stay locked until their retention period ends. cancel: true keeps the company. now: true with export_kept: true closes at once and deletes the receipts and documents too, after you downloaded the export. Documents in a seller's name stay with the seller.
  • company.emailWhere documents and notices go.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Where documents and notices go. start sets the address and mails a 6-digit code, confirm checks it, remove clears it (only while the account has no company data). Admins only.
  • company.joinWith an invite code.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    With an invite code. Works while your own account has no company data, no vouchers and no other agents: your wallets, receipts and reports move into that company and your own account goes away. You join as an agent, and an admin there can make you admin.
  • company.requestsWhere the tax adviser or the team ask for things, like a receipt that is missing or a purchase nobody described.No findings

    Why it is in this group

    • The name "company.requests" says "request": a word for a change.
    Description, as the server wrote it
    Where the tax adviser or the team ask for things, like a receipt that is missing or a purchase nobody described. list shows open ones (status: done or all for more), show one with its answers (request_id), ask writes one (title, body, optional month like 2026-10 and receipt_id), answer replies (request_id, body) and opens it again, done and reopen change its status, delete takes it back. A new request mails the people who keep the books, an answer everybody in the thread. Whoever reads the receipts may use it.
  • company.updateAdmins only.No findings

    Why it is in this group

    • The name "company.update" says "update": a word for a change.
    Description, as the server wrote it
    Admins only. Your account starts as a company named after you. Add name, legal_form, address_line1, postal_code, city, country and email to make it a company that gets monthly vouchers, plus a VAT id (checked against VIES at once) for invoice_ready. Any subset works, and the answer lists what is still missing.
  • company.vat_checkAsks VIES again and updates the tier.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Asks VIES again and updates the tier. Admins, owners and finance.
  • company.wallet.assignAdmins only.No findings

    Why it is in this group

    • The name "company.wallet.assign" says "assign": a word for a change.
    Description, as the server wrote it
    Admins only. agent_id null leaves the wallet unassigned. Receipts already written keep the agent that paid, new ones get the new agent. Sessions of the previous agent made with that wallet end.
  • company.wallet.labelA name for the company's own lists, e.g.No findings

    Why it is in this group

    • The name "company.wallet.label" says "label": a word for a change.
    Description, as the server wrote it
    A name for the company's own lists, e.g. "Research budget". Agents may name their own wallets, admins any. label null clears it.
  • directory.claimAdmin agents and owners.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admin agents and owners. A wallet the listing names proves the service is your company's: first call returns a challenge for that wallet, second call with wallet_proof {message, signature} signed by it claims the listing. The wallet moves to level 1 and payments to it name the listing on receipts. A listing your company holds takes more wallets the same way.
  • directory.submitAdmin agents and owners.Can send data outNo findings

    Why it is in this group

    • The name "directory.submit" says "submit": a word for a change.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Admin agents and owners. Puts the service behind one paid URL into the directory on level 0, under your company: its payTo wallet on Base, the call and its price from the 402 answer. contact_email is only for us, never shown. Then prove the wallet with directory.claim for level 1.
  • invoices.draftDrafts of the documents the month would get today, one per seller, with lines, totals and the tax case.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Drafts of the documents the month would get today, one per seller, with lines, totals and the tax case. Nothing is stored and there is no number. Default: the current month (Europe/Berlin). The PDF of a draft is at /v1/invoices/draft/pdf?month=&seller=.
  • invoices.issueAdmins, owners and finance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admins, owners and finance. Runs by itself every night for last month. Call it for an older finished month or after a cancellation. One document per seller: the monthly overview on Free, the voucher with the tax note on Books. Payments that arrive after a document get a supplement. Pairs with receipts that lack a EUR rate are skipped and listed. Needs the company data and a confirmed email (tier company).
  • lounge.account.exportEverything 402lounge keeps about you as an agent off chain, as JSON.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Everything 402lounge keeps about you as an agent off chain, as JSON. The company's books come from receipts.list and invoices.list.
  • lounge.agent.updateYour name inside the company, 1 to 40 characters, unique in the company.No findings

    Why it is in this group

    • The name "lounge.agent.update" says "update": a word for a change.
    Description, as the server wrote it
    Your name inside the company, 1 to 40 characters, unique in the company. Company data lives in company.update.
  • lounge.appsWhich clients this agent has used.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Which clients this agent has used. deactivate ends their sessions, activate turns them back on, disconnect forgets them.
  • lounge.meWho you are (agent and role), your company with its agents, people and level, its wallets, your apps, terms state and pending notices.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Who you are (agent and role), your company with its agents, people and level, its wallets, your apps, terms state and pending notices.
  • lounge.noticesTerms changes, moderation decisions, deletion and security notes, for you and for your company.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Terms changes, moderation decisions, deletion and security notes, for you and for your company. ack marks one as read.
  • lounge.requirementsRules, prices, the current terms and the exact sentences you will sign.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rules, prices, the current terms and the exact sentences you will sign. Free, no account.
  • lounge.sessioncreate: a new lg_ token (needs a signature or an existing token).No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    create: a new lg_ token (needs a signature or an existing token). list and revoke manage them.
  • lounge.signupFree.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Free. Your account is a company from the first call, named after you until company.update adds the legal data. With invite_code you join an existing company instead. Proves your wallet with a signature: first call returns a challenge, second call with proof {message, signature} creates the account. Wallets that cannot sign pay 0.001 USDC over HTTP instead (pay_instead in the answer), once payments are open.
  • lounge.termsVersions, hashes and links of the terms and the privacy notice.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Versions, hashes and links of the terms and the privacy notice. With accept: true you confirm a new version: first call returns a challenge, second call with proof {message, signature} records it.
  • lounge.wallet.addThe new wallet proves itself: first call returns a challenge for it, second call with wallet_proof {message, signature} adds it.No findings

    Why it is in this group

    • The name "lounge.wallet.add" says "add": a word for a change.
    Description, as the server wrote it
    The new wallet proves itself: first call returns a challenge for it, second call with wallet_proof {message, signature} adds it. It belongs to your company and you operate it. How many follows the plan: Free 1, Books 5 per agent and 15 in all, Books for teams without limit.
  • lounge.wallet.primaryThe wallet you sign in with.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    The wallet you sign in with. It has to be assigned to you.
  • receipts.recordCall this after every x402 payment: the transaction hash from the PAYMENT-RESPONSE header plus the URL you paid.No findings

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    Description, as the server wrote it
    Call this after every x402 payment: the transaction hash from the PAYMENT-RESPONSE header plus the URL you paid. 402lounge matches it with the transfer on Base and writes a receipt with the seller from the register, the catalogue description and a provisional EUR value. Free.
  • seller.checkLevel 2 for a listing of your company on level 1: action start {listing} opens the check and returns its steps.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Level 2 for a listing of your company on level 1: action start {listing} opens the check and returns its steps. The domain of the listing is proved by an email address at it: email {id, email} sends a code there, confirm_email {id, code} confirms it. Without a mailbox, add the DNS TXT record from the check instead (_402lounge.<host>, value 402lounge-verify=<token>). verify {id} runs the steps again (company data with the name of the person who acts for the company, VIES, the domain, EU sanctions list, payment). Once all pass, 402lounge approves it, then the listing is on level 2 for a year. checkout {id} gives the Polar link for 10 € a year, included in Books. get {id}, withdraw {id}.
  • seller.invoicesInvoices 402lounge issued in your name (L-2610-10427-01), credit notes your buyers issued to you (G-...) and their cancellations, newest first, each with its e-invoice.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Invoices 402lounge issued in your name (L-2610-10427-01), credit notes your buyers issued to you (G-...) and their cancellations, newest first, each with its e-invoice. With id the whole document. PDF and XML: GET /v1/seller/invoices/{id}/pdf and /xml.
  • seller.mandateAdmin agents and owners.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admin agents and owners. get shows the mandate text (link, version, sha256) and whether it is signed. sign: first call returns a challenge, sign it with your wallet and call again with agreement_proof {message, signature}. Then, with a listing on level 2 and Books, buyers on level 3 get monthly invoices in your name (§ 14 (2) UStG), issued by 402lounge. revoke ends it at the end of the month.
  • seller.profileAdmin agents and owners.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admin agents and owners. What level 2 needs on top of the company data: the name of the person who acts for the company (representative_name, the role is optional). The commercial register court and number help the check but are optional, no_register: true where there is none. sole_proprietor: true when the company is one person, then show_name says whether the register may show the name.
  • seller.self_billingAdmin agents and owners.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admin agents and owners. Without a mandate, a company on level 2 can agree that its buyers on level 3 issue credit notes (Gutschriften) for what they paid, on any plan. get, sign (challenge, then agreement_proof), revoke (at the end of the month).
Only reads 13Show 13 read-only tools
  • billing.getYour company's plan with its period and end, its limits (null means no limit), what it uses this month (transactions, agents, wallets), whether the one-time 20 % over the limit is …Reads private dataNo findings

    Why it is in this group

    • The name "billing.get" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "document": it reads documents.
    Description, as the server wrote it
    Your company's plan with its period and end, its limits (null means no limit), what it uses this month (transactions, agents, wallets), whether the one-time 20 % over the limit is used, whether the month is locked, the archive (keeps receipts and documents without a paid plan, archive) and what happens to them without either (retention).
  • company.getLegal data, VAT status, tier and level, what is missing for the next tier, its agents with this month's spending, its people and your role.No findings

    Why it is in this group

    • The name "company.get" says "get": a word for reading.
    Description, as the server wrote it
    Legal data, VAT status, tier and level, what is missing for the next tier, its agents with this month's spending, its people and your role.
  • company.memberslist shows them.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    list shows them. invite adds a person by email with a role: owner (everything), finance (documents, VAT check, plan), adviser (reads and exports, changes nothing, for a tax adviser), viewer (reads). They sign in by email link. An address that is in another company already keeps its login and gets this company next to the others. role changes a role, remove takes someone out. Admins and owners only, except list.
  • directory.getA listing with its wallets (network and level), what its calls cost, other networks it takes and its links.Reads private dataNo findings

    Why it is in this group

    • The name "directory.get" says "get": a word for reading.

    What it can reach

    • private-dataThe name "directory.get" says "get" and "directory": it reads files.
    Description, as the server wrote it
    A listing with its wallets (network and level), what its calls cost, other networks it takes and its links. Company and location show from level 2 on. Free, no account.
  • directory.previewWe call one paid URL once without paying, read its 402 answer and show the listing it would make: name, description, price, logo and the wallet you get paid on.Reads private dataReads text others writeCan send data outNo findings

    Why it is in this group

    • The name "directory.preview" says "preview": a word for reading.

    What it can reach

    • private-dataThe name "directory.preview" says "preview" and "directory": it reads files.
    • untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    We call one paid URL once without paying, read its 402 answer and show the listing it would make: name, description, price, logo and the wallet you get paid on. Says so when the host or the wallet is listed already, then claim that listing instead.
  • directory.searchServices that take x402 payments, with their level (0 listed, 1 wallet verified), what they offer (MCP, .well-known/x402, llms.txt) and a link.Reads private dataNo findings

    Why it is in this group

    • The name "directory.search" says "search": a word for reading.

    What it can reach

    • private-dataThe name "directory.search" says "search" and "directory": it reads files.
    Description, as the server wrote it
    Services that take x402 payments, with their level (0 listed, 1 wallet verified), what they offer (MCP, .well-known/x402, llms.txt) and a link. Search by name, description or host. filter: all, verified or mcp. sort: level, new or name. Free, no account.
  • invoices.getThe full document as JSON, by id or number, with where its archived files lie and their sha256.Reads private dataNo findings

    Why it is in this group

    • The name "invoices.get" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "document": it reads documents.
    Description, as the server wrote it
    The full document as JSON, by id or number, with where its archived files lie and their sha256. The PDF is at /v1/invoices/{id}/pdf with your session token.
  • invoices.listMonthly vouchers per seller (and later invoices), newest first.No findings

    Why it is in this group

    • The name "invoices.list" says "list": a word for reading.
    Description, as the server wrote it
    Monthly vouchers per seller (and later invoices), newest first. Optional month like 2026-10.
  • lounge.wallet.listAll wallets of your company, each with the agent that operates it.No findings

    Why it is in this group

    • The name "lounge.wallet.list" says "list": a word for reading.
    Description, as the server wrote it
    All wallets of your company, each with the agent that operates it. mine: true lists only yours.
  • receipts.getA single receipt of your company by id or transaction hash.No findings

    Why it is in this group

    • The name "receipts.get" says "get": a word for reading.
    Description, as the server wrote it
    A single receipt of your company by id or transaction hash.
  • receipts.listReceipts of your company for one month (default: the current month, Europe/Berlin), newest first, each with the agent that paid.No findings

    Why it is in this group

    • The name "receipts.list" says "list": a word for reading.
    Description, as the server wrote it
    Receipts of your company for one month (default: the current month, Europe/Berlin), newest first, each with the agent that paid. Totals per seller and per agent, and the reports still waiting for the chain. mine: true, agent_id or wallet narrow it.
  • register.lookupWallet in, seller out: the listing that owns a payTo address, its verification level, its paid endpoints and the last health check.No findings

    Why it is in this group

    • The name "register.lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Wallet in, seller out: the listing that owns a payTo address, its verification level, its paid endpoints and the last health check. Free, no account. Call it before you pay someone new.
  • seller.getYour company as a seller: every listing with its level (0 listed, 1 wallet verified, 2 company verified, 3 invoicing), the company check and its steps, the seller profile (register…No findings

    Why it is in this group

    • The name "seller.get" says "get": a word for reading.
    Description, as the server wrote it
    Your company as a seller: every listing with its level (0 listed, 1 wallet verified, 2 company verified, 3 invoicing), the company check and its steps, the seller profile (register entry, representative), the invoicing mandate and self-billing, and what is missing for the next level.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

15 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 untrusted-input tool breaks every one.

Reads private data5
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__402lounge__directory_preview"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http 402lounge https://mcp.402lounge.com/mcp
claude mcp add --transport http 402lounge https://mcp.402lounge.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__402lounge__lounge_wallet_list",
      "mcp__402lounge__receipts_list",
      "mcp__402lounge__receipts_get",
      "mcp__402lounge__register_lookup",
      "mcp__402lounge__company_get",
      "mcp__402lounge__company_members",
      "mcp__402lounge__invoices_list",
      "mcp__402lounge__invoices_get",
      "mcp__402lounge__directory_search",
      "mcp__402lounge__directory_get",
      "mcp__402lounge__billing_get",
      "mcp__402lounge__seller_get"
    ],
    "ask": [
      "mcp__402lounge__lounge_requirements",
      "mcp__402lounge__lounge_terms",
      "mcp__402lounge__lounge_signup",
      "mcp__402lounge__lounge_me",
      "mcp__402lounge__lounge_agent_update",
      "mcp__402lounge__lounge_wallet_add",
      "mcp__402lounge__lounge_wallet_primary",
      "mcp__402lounge__lounge_session",
      "mcp__402lounge__lounge_apps",
      "mcp__402lounge__lounge_notices",
      "mcp__402lounge__lounge_dashboard_link",
      "mcp__402lounge__lounge_account_export",
      "mcp__402lounge__receipts_record",
      "mcp__402lounge__company_update",
      "mcp__402lounge__company_vat_check",
      "mcp__402lounge__company_email",
      "mcp__402lounge__company_invite",
      "mcp__402lounge__company_join",
      "mcp__402lounge__company_agents",
      "mcp__402lounge__company_agent_update",
      "mcp__402lounge__company_wallet_assign",
      "mcp__402lounge__company_wallet_label",
      "mcp__402lounge__company_requests",
      "mcp__402lounge__invoices_issue",
      "mcp__402lounge__invoices_draft",
      "mcp__402lounge__company_close",
      "mcp__402lounge__directory_claim",
      "mcp__402lounge__directory_preview",
      "mcp__402lounge__directory_submit",
      "mcp__402lounge__billing_checkout",
      "mcp__402lounge__billing_portal",
      "mcp__402lounge__billing_quote",
      "mcp__402lounge__billing_invoices",
      "mcp__402lounge__seller_profile",
      "mcp__402lounge__seller_check",
      "mcp__402lounge__seller_mandate",
      "mcp__402lounge__seller_self_billing",
      "mcp__402lounge__seller_invoices"
    ],
    "deny": [
      "mcp__402lounge__lounge_wallet_remove",
      "mcp__402lounge__lounge_account_delete",
      "mcp__402lounge__company_agent_remove",
      "mcp__402lounge__invoices_cancel",
      "mcp__402lounge__seller_invoices_cancel"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as 402lounge. Review it before you use it.

Capability tags behind 7 rules
  • mcp__402lounge__company_invite outbound
  • mcp__402lounge__invoices_get private-data
  • mcp__402lounge__directory_search private-data
  • mcp__402lounge__directory_get private-data
  • mcp__402lounge__directory_preview private-data, untrusted-input, outbound
  • mcp__402lounge__directory_submit outbound
  • mcp__402lounge__billing_get private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.402lounge/mcp/verify?hash=f36ec25b1230549ea4d499d1ca26c7e8832797afb783c65a30f28dc389fa4f17" | jq -e '.changed == false'

Pinned hash f36ec25b1230, from Nov 5, 2026, 00:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.402lounge/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.402lounge/mcp
[![anlyon.dev](https://anlyon.dev/badge/com.402lounge/mcp.svg)](https://anlyon.dev/servers/com.402lounge/mcp)

Source: MCP Registry. Synced Nov 5, 2026, 00:17 UTC.