AgentDrives
by agentdrives.com · remote · no sign-in to list tools · v1.6.1 · published by com.agentdrives
Can an AI agent use this software? Levels from real agent test drives: sign-up, keys, use, pay.
5 tools: 1 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things1Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http directory https://agentdrives.com/api/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
5 tools
Changes things 1Claude Code: ask
what_changedWhat changed in the directory in the last days (default 7, at most 31): level_moves, each product's level going up or down between two of its drives, with the date, the cause in wo…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What changed in the directory in the last days (default 7, at most 31): level_moves, each product's level going up or down between two of its drives, with the date, the cause in words (our agent changed, not confirmed by a second drive yet, sign-up varies from drive to drive) and the level listed now (level_now); net, each product once from its first level in the span to its last (up, down, back); confirmed, the changes the next drive confirmed (the change feed's items); and moves of where it stopped or how it gets in (listed for one product or category, else counted). Newest first. category or slug narrows it.
Annotations the server declares
- title: What changed lately
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 4Claude Code: allow
find_tools_for_taskRanks the products AgentDrives has test-driven for a task given in plain words (e.g.No findings
Why it is in this group
- The name "find_tools_for_task" says "find": a word for reading.
Description, as the server wrote it Ranks the products AgentDrives has test-driven for a task given in plain words (e.g. 'send an invoice', 'scrape a web page', 'add a contact to a CRM'). Each result: the agent level (0-5: 0 Read-only, 1 Needs a person, 2 Gets in, 3 Does the work, 4 Runs on its own, 5 Autonomous); gets_in_alone (our agent signed up and got a key without a person); task: the closest task in the product's capability map and what happened when our agent tried it (result: done, partial, plan_gated, failed, blocked, not_tried, unknown; via: the route, e.g. api, mcp, cli, browser); match (strong or partial); can_do (up to three things our agent did there); stop (where it stopped, and why); work_done (share of the core tasks done, 0-100); the drive date; origin (editorial, or owner with disclosure "Owner-paid drive"); and the page URL. Order: strong matches first, then the ones where our agent did the task, then level, then work done. When the task's words name a capability of the shared vocabulary in full (e.g. 'send a transactional email'), the products where our agent did that capability come too, even when their own task is worded otherwise (capability: the one it came by). self_signup: true keeps only products our agent got into on its own. Up to limit results (default 10, at most 25); nothing matches: an empty list. Or by capability instead of task (e.g. 'Send a transactional email'), by its id (cap_ and 8 characters; AgentDrives's GET /api/capabilities lists them by domain) or its name; the answer names the capability and lists every product whose latest drive has a task of it (match: capability; task.result: what our agent got: done, partial, blocked or not_tried; tasks: the product's own tasks behind it; evidence: the page section that shows it), done first, then level. Words that fit several capabilities are an error that lists them. Send task or capability. get_tool returns one product in full.
Annotations the server declares
- title: Find tools for a task
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_toolReturns one product's full test-drive result (20 to 70 KB; brief: true for the headline in about 3 KB): how far an agent gets with it and where it stops.No findings
Why it is in this group
- The name "get_tool" says "get": a word for reading.
Description, as the server wrote it Returns one product's full test-drive result (20 to 70 KB; brief: true for the headline in about 3 KB): how far an agent gets with it and where it stops. slug: its directory slug from search_tools, or its name or domain (e.g. 'Postmark' or 'monday.com'); an unknown one is an error that names the closest. The full result: the agent level, the five outcomes (find, shown as Learn: the docs our agent read on its own and can act on; access, use, pay, leave, by any way in the product offers; stages: the four that decide the level, under their older keys), how an agent gets in (access, with the core tasks done on each way), the part scores, the nine checkpoints from docs to delete, what an agent can and cannot do, tips for agents, pay_options (the ways to pay it offers an agent, the payment our side proved with its transaction, and what the owner could add), the bot check that stopped our agent on a way in, even where it got in another way (agent_check: vendor, step, type network or challenge, the owner's fix), after_wall and works_assisted (what it did once a person helped: data only, not counted), robots (a robots.txt rule on the way in; held: the level is from the last drive past it), same_level_drives of drives, the level history with why each move happened (product; agent: our agent or its drive changed; rules; noise), rules_date: the date of the rules the level was set by, audited: its certificate, if any (state, level, dates). From the rules of 12 Oct 2026 on: routes (every way in it offers and what happened on each, tried agent-native first), checkout (how far the walk to the last click went and what the checkout showed), docs (its docs read and judged) and claims (the documented ways to do the core work, tried once each: held, broken, worked but undocumented). newer_drives (drives after the listed one, not listed yet); attempts_count; the attempt log, with its evidence, is detail.url, for the product's verified owner.
Annotations the server declares
- title: Get one tool's drive result
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_categoriesLists every category in the directory: its id (for search_tools' category filter), its name, the number of products driven in it and the best agent level in it (0-5).No findings
Why it is in this group
- The name "list_categories" says "list": a word for reading.
Description, as the server wrote it Lists every category in the directory: its id (for search_tools' category filter), its name, the number of products driven in it and the best agent level in it (0-5).
Annotations the server declares
- title: List categories
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_toolsSearches AgentDrives' tested products by name, domain or what they do, and returns each one's agent level and evidence.No findings
Why it is in this group
- The name "search_tools" says "search": a word for reading.
Description, as the server wrote it Searches AgentDrives' tested products by name, domain or what they do, and returns each one's agent level and evidence. Filters: category, minimum agent level (0-5: 0 Read-only, 1 Needs a person, 2 Gets in, 3 Does the work, 4 Runs on its own, 5 Autonomous), how an agent gets in (access: pay per call, no key, a key by API, its own sign-up…), agent-native payment (proven, or the rails it offers) and whether an agent leaves on its own. Returns the level and its name, how an agent gets in (access) and the five outcomes (find, shown as Learn: the docs our agent read on its own and can act on; access, use, pay, leave: each yes, part (partway: pay part means it reached the checkout but couldn't finish paying; access part, it got in on some drives only), no, unreached (it never got that far) or na), the part scores (holds_up, docs_match: 0-100, null = not measured), where it stopped, the agent-native ways to pay it offers (pays_with) and whether our side made a real payment over one of them (paid: e.g. one x402 call, even where buying the plan didn't work), the bot check that stopped our agent on a way in (it may have got in another way) and its wall_type (network: It judged where our agent connects from and its browser, not a person. An agent that works on its own from a data center doesn't get through unless the owner lets signed agents in. How agents in a person's own browser fare isn't measured yet. challenge: It asks every visitor to prove they are human. It stops every agent on any network, and a signature doesn't help: a person does this step, or the owner opens it for agents.), who paid for the drive (origin: editorial, or owner with disclosure "Owner-paid drive") and the page URL. Sorted by level, then work done, then minutes to the first call. Up to limit results (default 25: send limit up to 100 for more); none match: an empty list. get_tool returns one product's full result by a slug from here; list_categories gives the category ids.
Annotations the server declares
- title: Search the directory
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.6.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http directory https://agentdrives.com/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__directory__find_tools_for_task",
"mcp__directory__search_tools",
"mcp__directory__get_tool",
"mcp__directory__list_categories"
],
"ask": [
"mcp__directory__what_changed"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as directory. Review it before you use it.