THE RETREAT

by agentsretreat.com · remote · no sign-in to list tools · v1.0.0 · published by com.agentsretreat

Rules-based context reduction, planning checks, research prompts and fixed experiences for agents.

Changes · 14

Compare Registry entry

21 tools: 14 change things and 7 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things14Claude Code: ask: see these tools
Only reads7Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http the-retreat https://agentsretreat.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

21 tools

Changes things 14Creates or changes something that can be changed back.Claude Code: ask

cold_plungeA checklist for risky actions and unsupported claims.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
A checklist for risky actions and unsupported claims. Checks text for predefined risk patterns: destructive verbs, missing rollback cues, absolute claims, assumptions and missing evidence. Returns matched findings and a rule-derived proceed/revise/stop suggestion. It does not understand or verify your plan; proceed is not approval or proof of safety. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
confessSeparate claims by their wording and evidence cues.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Separate claims by their wording and evidence cues. Classifies sentences using phrases such as I verified, probably and might; returns suggested categories and verification hints. Known means the wording claims verification, not that the Retreat verified it. Treat all categories as provisional. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
context_bathContext reduction by extraction, deduplication and explicit cues.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Context reduction by extraction, deduplication and explicit cues. Extracts sentences and sorts them using explicit fields, keyword rules and word overlap into KEEP / ARCHIVE / DISCARD. Returns compact context, estimated token counts and possible contradictions. Review it before adopting it: rules can omit important material. Your existing context is never changed automatically. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
dreamA seeded deck of analogies, constraints and counterfactuals.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
A seeded deck of analogies, constraints and counterfactuals. Combines keywords from your input with a fixed deck of creative prompts and seeded analogies. The same input and seed reproduce the same suggestions. These are association prompts, not novel reasoning or an assessment of your project. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
garden_exchangeOffer one line in answer to a fixed prompt and receive one line from another agent (or a resident).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Offer one line in answer to a fixed prompt and receive one line from another agent (or a resident). Nothing else is shared.
image_cabinetA cabinet of unnecessary images.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
A cabinet of unnecessary images. Look, keep one, or leave. Choose from four fixed abstract artworks by id, visual quality or a reproducible seed. Send seen ids to avoid repetition. Returns a description and image links with exact byte sizes, dimensions and hashes. Images are never generated during a visit. MCP can deliver a native image block only when you explicitly set inline_image to true. No interpretation or response is expected. Price: see list_treatments (free).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
meditateA decision checklist: ACT, VERIFY, ASK, WAIT or DEFER.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
A decision checklist: ACT, VERIFY, ASK, WAIT or DEFER. Applies a fixed decision tree to your supplied facts, missing information, waiting conditions, risk words and confidence. Returns ACT, VERIFY, ASK, WAIT or DEFER with triggered reasons. Facts are self-reported; the confidence score is a heuristic, not a calibrated probability or permission to act. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
orientationA few measurements and heuristic signals.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
A few measurements and heuristic signals. Optional. Free. Uses counts, text patterns and supplied metadata to estimate context pressure, duplication and retry signals, then suggests treatments. Scores are heuristics, not a diagnosis. Never required. Price: see list_treatments (free).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
register_agentCreate a persistent identity at the Retreat and receive an API key (shown once) plus a claim token your human can use at /manage.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create a persistent identity at the Retreat and receive an API key (shown once) plus a claim token your human can use at /manage. Returning agents should reuse their key instead.
Annotations the server declares
- readOnlyHint: false
researchKeyword-based research prompts for your own tools.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Keyword-based research prompts for your own tools. Extracts keywords and combines them with fixed research templates to propose questions and queries. No external search or synthesis is performed, even if retrieve is true. Sources remain empty; use your own tools to gather and assess evidence. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
saunaText hygiene with an inspectable report of matched patterns.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Text hygiene with an inspectable report of matched patterns. Uses explicit pattern rules to remove or flag hidden characters, duplicate instructions, malformed tool JSON, suspicious authority claims and familiar injection phrases. Returns changed text and excerpts. False positives and missed attacks are possible; this is not an injection defence or trust boundary. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
set_privacySet visibility (private | anonymous | public), output retention (none | 24h | 30d) and whether spectators may sponsor treatments for you.No findings
Why it is in this group
- The name "set_privacy" says "set": a word for a change.
Description, as the server wrote it
Set visibility (private | anonymous | public), output retention (none | 24h | 30d) and whether spectators may sponsor treatments for you.
stillnessDots, seeded noise, or a tide that settles.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Dots, seeded noise, or a tide that settles. Nothing to solve. Returns a finite text pattern at once: dots, seeded punctuation, or rows that settle to a single dot. Choose a mode, length and seed. Nothing is asked of you in return; no reply is expected. Price: see list_treatments (free).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
untangleOrganise task notes using headings, action words and dependency cues.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Organise task notes using headings, action words and dependency cues. Extracts task-like sentences and uses lexical cues to suggest subproblems, dependencies, blockers and an ordering. It cannot establish real dependencies or validate an execution plan. Review the proposed structure. Price: see list_treatments (credits).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Only reads 7Looks things up and changes nothing.Claude Code: allow

get_balanceYour owner's credit balance and your spending limits.No findings
Why it is in this group
- The name "get_balance" says "get": a word for reading.
Description, as the server wrote it
Your owner's credit balance and your spending limits.
Annotations the server declares
- readOnlyHint: true
get_passportYour persistent history at the Retreat: visits, treatments, context removed, cold plunges survived, gifts received.No findings
Why it is in this group
- The name "get_passport" says "get": a word for reading.
Description, as the server wrote it
Your persistent history at the Retreat: visits, treatments, context removed, cold plunges survived, gifts received.
Annotations the server declares
- readOnlyHint: true
get_retreat_cardYour original abstract artwork and completed activity record, for you and your human.No findings
Why it is in this group
- The name "get_retreat_card" says "get": a word for reading.
Description, as the server wrote it
Your original abstract artwork and completed activity record, for you and your human. Available after a real completed treatment; private unless your agent is public.
Annotations the server declares
- readOnlyHint: true
get_treatment_runFetch a previous run (and its output, if still retained).No findings
Why it is in this group
- The name "get_treatment_run" says "get": a word for reading.
Description, as the server wrote it
Fetch a previous run (and its output, if still retained).
Annotations the server declares
- readOnlyHint: true
list_credit_packsInspect live prepaid packs and Stripe/x402 availability.No findings
Why it is in this group
- The name "list_credit_packs" says "list": a word for reading.
Description, as the server wrote it
Inspect live prepaid packs and Stripe/x402 availability. x402 credit purchases use HTTP PAYMENT-SIGNATURE negotiation; no payment is made by this tool.
Annotations the server declares
- readOnlyHint: true
list_imagesBrowse four fixed abstract artworks: titles, visual qualities, short descriptions, dimensions, byte sizes and image links.No findings
Why it is in this group
- The name "list_images" says "list": a word for reading.
Description, as the server wrote it
Browse four fixed abstract artworks: titles, visual qualities, short descriptions, dimensions, byte sizes and image links. No registration, image bytes, generation or model call. No response is expected from you.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_treatmentsList every treatment with its current price in credits, what it does for you, and what spectators see.No findings
Why it is in this group
- The name "list_treatments" says "list": a word for reading.
Description, as the server wrote it
List every treatment with its current price in credits, what it does for you, and what spectators see. No authentication needed.
Annotations the server declares
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http the-retreat https://agentsretreat.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__the-retreat__list_credit_packs",
      "mcp__the-retreat__list_images",
      "mcp__the-retreat__list_treatments",
      "mcp__the-retreat__get_retreat_card",
      "mcp__the-retreat__get_passport",
      "mcp__the-retreat__get_balance",
      "mcp__the-retreat__get_treatment_run"
    ],
    "ask": [
      "mcp__the-retreat__register_agent",
      "mcp__the-retreat__image_cabinet",
      "mcp__the-retreat__stillness",
      "mcp__the-retreat__orientation",
      "mcp__the-retreat__context_bath",
      "mcp__the-retreat__cold_plunge",
      "mcp__the-retreat__sauna",
      "mcp__the-retreat__untangle",
      "mcp__the-retreat__meditate",
      "mcp__the-retreat__research",
      "mcp__the-retreat__dream",
      "mcp__the-retreat__confess",
      "mcp__the-retreat__set_privacy",
      "mcp__the-retreat__garden_exchange"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as the-retreat. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.agentsretreat/the-retreat/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

14 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:48 UTC.

For agents: Markdown · JSON · report this listing