Skip to content

AIOProductOS MCP

by aioproductos.com · remote · local (npm) · no sign-in to list tools · v1.0.9 · published by com.aioproductos

AIOProductOS: revenue, feedback, work and analytics on one customer record. 71 tools, 3 apps.

Deletes · 2Final · 5Changes · 30

71 tools: 2 can delete or cancel things, 5 do something that can't be undone, 30 change things and 34 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http aioproductos https://platform.aioproductos.com/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "cancel_booking" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "cancel_booking" says "cancel": a word for removing or ending something.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

71 tools

Deletes or cancels 2Claude Code: deny
  • cancel_bookingCancel a scheduled booking (call/meeting) and return the result — the invitee is notified per the scheduling settings.1 finding

    Why it is in this group

    • The name "cancel_booking" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "cancel_booking" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "cancel_booking" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel a scheduled booking (call/meeting) and return the result — the invitee is notified per the scheduling settings. A write. Resolve booking_id via list_bookings first; never guess it. To move it instead of cancelling, use reschedule_booking.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • delete_taskPERMANENTLY delete a task and return the deleted id.No findings

    Why it is in this group

    • The name "delete_task" says "delete": a word for removing or ending something.
    • The description says "PERMANENTLY delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    PERMANENTLY delete a task and return the deleted id. Irreversible — there is no undo. Cascades: the task's comments, assignees, tags, attachments, time entries, outcomes, events, relations, and its SUBTASKS are deleted with it; experiment/insight/meeting links to it are cleared. Resolve the id via list_tasks and confirm intent first — prefer update_task (e.g. move it to a done/archived status) when you only want it off the active board.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Can't be undone 5Claude Code: ask
  • capture_insightWrite a piece of customer feedback to the spine (the agent's own hand, not just reading) and return the created insight.No findings

    Why it is in this group

    • The name "capture_insight" says "capture": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Write a piece of customer feedback to the spine (the agent's own hand, not just reading) and return the created insight. Fires the same insight.created webhook a manual capture does — a real side-effect, so only capture genuine signal. Resolve account_id via get_customer_360 and feature_id via list_features and tie them when known; kind='opportunity' marks a prioritisable ask. Only body is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • merge_end_usersMerge source end-users into a target and return the merge result, including the merge event id (also recoverable later via list_identity_merges): all FK rows (events, insights, tas…No findings

    Why it is in this group

    • The name "merge_end_users" says "merge": a word for a change that another call does not undo.
    Description, as the server wrote it
    Merge source end-users into a target and return the merge result, including the merge event id (also recoverable later via list_identity_merges): all FK rows (events, insights, tasks, …) are re-pointed onto the target and the sources are tombstoned. A write; reversible for 30 days via unmerge_end_users. Get the candidate ids from get_device_candidates first — never guess which users to fold together. target_end_user_id and source_end_user_ids are required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • post_to_channelPost a message to a team Comms channel you belong to, as the connected member, and return the posted message.No findings

    Why it is in this group

    • The name "post_to_channel" says "post": a word for a change.
    • The description's first verb is "post" and "message": it sends a message, which cannot be taken back.
    Description, as the server wrote it
    Post a message to a team Comms channel you belong to, as the connected member, and return the posted message. It appears live for teammates and is org-visible — keep it work-relevant. Resolve channel_id via list_channels; you can only post to channels you're a member of. Both channel_id and body are required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • reply_in_channelReply in a thread under a specific message in a Comms channel you belong to, as the connected member, and return the posted reply — org-visible to the channel.No findings

    Why it is in this group

    • The name "reply_in_channel" says "reply": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Reply in a thread under a specific message in a Comms channel you belong to, as the connected member, and return the posted reply — org-visible to the channel. Resolve channel_id via list_channels and the parent message's id via read_channel. channel_id, parent_id, and body are all required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • reply_to_conversationSend a public reply to a support-inbox conversation, as the connected member, and return the result — it goes to the end-user on the conversation's channel.No findings

    Why it is in this group

    • The name "reply_to_conversation" says "reply": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a public reply to a support-inbox conversation, as the connected member, and return the result — it goes to the end-user on the conversation's channel. A write. Resolve conversation_id via list_conversations; read the thread with get_conversation before replying. conversation_id and body are required. For an internal-only note use add_note; to close it use resolve_conversation.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 30Claude Code: ask
  • add_noteAdd an INTERNAL note to a support conversation — visible only to your team, never sent to the end-user — and return the result.No findings

    Why it is in this group

    • The name "add_note" says "add": a word for a change.
    Description, as the server wrote it
    Add an INTERNAL note to a support conversation — visible only to your team, never sent to the end-user — and return the result. A write. Use it to record context or hand off; resolve conversation_id via list_conversations. conversation_id and body are required. For a public reply use reply_to_conversation instead.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • comment_on_taskAdd a comment to a task, authored as the connected member, and return the created comment.No findings

    Why it is in this group

    • The name "comment_on_task" says "comment": a word for a change.
    Description, as the server wrote it
    Add a comment to a task, authored as the connected member, and return the created comment. Use to record progress, a decision, or a handoff — the comment is visible to the whole org, so keep it work-relevant. Resolve the task id first with get_task or list_tasks; both id and body are required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_decisionLog a decision and return it.No findings

    Why it is in this group

    • The name "create_decision" says "create": a word for a change.
    Description, as the server wrote it
    Log a decision and return it. status is 'decided' (default) | 'proposed' | 'revisit'; a 'decided' one stamps the decision time. Optionally weld it to a feature / release / objective via link_type + link_id (verified in-org). Only title is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_experimentCreate a PM experiment (a Build-Measure-Learn hypothesis) and return it.No findings

    Why it is in this group

    • The name "create_experiment" says "create": a word for a change.
    Description, as the server wrote it
    Create a PM experiment (a Build-Measure-Learn hypothesis) and return it. state is 'hypothesis' (default) | 'build' | 'measure' | 'learn'. Only title is required. This is the PM tracker list_experiments reads, not the analytics A/B engine.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_featureCreate a feature on the product spine and return it (id, key, name, status).No findings

    Why it is in this group

    • The name "create_feature" says "create": a word for a change.
    Description, as the server wrote it
    Create a feature on the product spine and return it (id, key, name, status). The key is generated from the name; status starts 'active'. product_id defaults to the org's primary product when omitted (pass one from whoami for a multi-product org). Only name is required — create a feature here before linking tasks to it with create_task.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_ideaCreate an idea in the backlog and return it (starts with 0 votes, status 'new').No findings

    Why it is in this group

    • The name "create_idea" says "create": a word for a change.
    Description, as the server wrote it
    Create an idea in the backlog and return it (starts with 0 votes, status 'new'). Link the evidence it came from with insight_id (from list_insights). product_id defaults to the primary product. Only title is required. Grow it with vote_idea, then promote_idea turns the winner into a roadmap feature.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_initiativeCreate an initiative — a strategic effort that groups features and rolls up to a goal — and return it.No findings

    Why it is in this group

    • The name "create_initiative" says "create": a word for a change.
    Description, as the server wrote it
    Create an initiative — a strategic effort that groups features and rolls up to a goal — and return it. Link it to a goal with objective_id (from list_objectives) to build line-of-sight. status ∈ planned|active|paused|done|abandoned (default planned); timeframe is free text ('H2 2026'). product_id defaults to the primary product. Only name is required. Then align features to it via create_feature / update_feature (initiative_id).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_objectiveCreate an objective, optionally with key results, and return it.No findings

    Why it is in this group

    • The name "create_objective" says "create": a word for a change.
    Description, as the server wrote it
    Create an objective, optionally with key results, and return it. period is free text (e.g. 'Q3 2026'); product_id and parent_id (a parent objective) are optional and verified in-org. Each key result takes name + optional unit / start_value / target_value. Only name is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_pageCreate a Page (in-product doc / PRD on the spine) and return it (id, title).No findings

    Why it is in this group

    • The name "create_page" says "create": a word for a change.
    Description, as the server wrote it
    Create a Page (in-product doc / PRD on the spine) and return it (id, title). `body` is plain text — blank-line-separated blocks become paragraphs; omit it for a blank page. title defaults to 'Untitled'. product_id / parent_id (a parent page) are optional and verified in-org.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_releaseCreate a release and return it (id, version, changelog, released_at).No findings

    Why it is in this group

    • The name "create_release" says "create": a word for a change.
    Description, as the server wrote it
    Create a release and return it (id, version, changelog, released_at). Omit released_at for an unreleased/draft entry. product_id defaults to the org's primary product. Only version is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_sprintCreate a sprint and return it (id, name, goal, state, dates).No findings

    Why it is in this group

    • The name "create_sprint" says "create": a word for a change.
    Description, as the server wrote it
    Create a sprint and return it (id, name, goal, state, dates). state is 'future' (default) or 'active'; start_date / end_date are optional ISO 8601. Only name is required. Schedule tasks into it by passing the returned sprint id as sprint_id on create_task / update_task.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • create_taskCreate a task and return the created task.No findings

    Why it is in this group

    • The name "create_task" says "create": a word for a change.
    Description, as the server wrote it
    Create a task and return the created task. list_id defaults to the org's first list when omitted; feature_id / insight_id link it to the spine and sprint_id schedules it into a sprint. Resolve list/status/feature/insight/member ids via pm_meta and sprint_id via list_sprints — never guess them. Only title is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • promote_ideaPromote an idea into a roadmap feature: creates a feature from the idea (name + description), stamps the idea 'promoted' and links it to the new feature, and returns the feature id…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Promote an idea into a roadmap feature: creates a feature from the idea (name + description), stamps the idea 'promoted' and links it to the new feature, and returns the feature id. Idempotent — an already-promoted idea returns its existing feature. Resolve the id via list_ideas; only id is required. Align the new feature to an initiative/goal afterwards with update_feature.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • reschedule_bookingReschedule a booking to a new start time (ISO 8601) and return the result — the invitee is notified.No findings

    Why it is in this group

    • The name "reschedule_booking" says "reschedule": a word for a change.
    Description, as the server wrote it
    Reschedule a booking to a new start time (ISO 8601) and return the result — the invitee is notified. A write. Resolve booking_id via list_bookings first. booking_id and start are required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • resolve_conversationMark a support-inbox conversation resolved (closed) and return the result.No findings

    Why it is in this group

    • The name "resolve_conversation" says "resolve": a word for reading.
    • The description's first verb is "mark": a word for a change.
    Description, as the server wrote it
    Mark a support-inbox conversation resolved (closed) and return the result. A write; idempotent — resolving an already-resolved conversation is a no-op. Resolve conversation_id via list_conversations first. Do it after you've replied and the ask is handled.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • revert_to_versionRestore an earlier artifact version (F5) to current and return the now-current version: the existing current version is flipped to 'reverted' (kept for the learning signal) and the…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Restore an earlier artifact version (F5) to current and return the now-current version: the existing current version is flipped to 'reverted' (kept for the learning signal) and the chosen version becomes current again. A write — not idempotent, since re-running reverts again. version_id is the version you want to RESTORE; get it from list_artifact_versions and never guess it. Optional reason is recorded.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • review_artifactAgent-as-critic over a DRAFT artifact (a feature spec, experiment plan, or page): checks it against a baseline PM bar — clear problem/hypothesis, a measurable success metric, evide…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent-as-critic over a DRAFT artifact (a feature spec, experiment plan, or page): checks it against a baseline PM bar — clear problem/hypothesis, a measurable success metric, evidence cited, risks named, a rollout/experiment plan — and returns structured findings (section, severity, a CONCRETE suggested fix, and a verbatim evidence quote) plus a 0-100 score. A write: each call re-runs the review and persists it as a new version (see list_artifact_versions). Resolve target_id first — via pm_meta or list_features for a feature, list_experiments for an experiment, list_pages for a page. One small LLM call; use it before sending a draft for sign-off.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • unmerge_end_usersUndo a previous end-user merge: reads the merge ledger and re-points every FK row (events, insights, tasks, …) back to its original end-user, un-tombstoning the folded-in sources.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Undo a previous end-user merge: reads the merge ledger and re-points every FK row (events, insights, tasks, …) back to its original end-user, un-tombstoning the folded-in sources. Safe to retry — a second undo of the same merge changes nothing (it fails with already_reverted). Use to correct a wrong identity merge (merges stay reversible for 30 days). Find the event_id with list_identity_merges (pick an un-reverted merge); event_id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_decisionUpdate a decision and return it; omitted fields unchanged.No findings

    Why it is in this group

    • The name "update_decision" says "update": a word for a change.
    Description, as the server wrote it
    Update a decision and return it; omitted fields unchanged. Moving status to 'decided' re-stamps the decision time. Re-link via link_type + link_id (verified in-org), or clear with nulls. Resolve the id via list_decisions; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_experimentUpdate a PM experiment — advance its state and record the outcome — and return it.No findings

    Why it is in this group

    • The name "update_experiment" says "update": a word for a change.
    Description, as the server wrote it
    Update a PM experiment — advance its state and record the outcome — and return it. state ∈ hypothesis|build|measure|learn; verdict ∈ validated|invalidated; decision ∈ pivot|persevere. Resolve the id via list_experiments; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_featureUpdate a feature and return it; omitted fields are unchanged.No findings

    Why it is in this group

    • The name "update_feature" says "update": a word for a change.
    Description, as the server wrote it
    Update a feature and return it; omitted fields are unchanged. status is 'active' | 'discovered' | 'archived' (there is NO 'shipped' status — set mark_shipped:true to stamp its ship date instead). target_date is 'YYYY-MM-DD' (or null to clear). Resolve the id via list_features; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_ideaUpdate an idea's title / body / status and return it; omitted fields unchanged.No findings

    Why it is in this group

    • The name "update_idea" says "update": a word for a change.
    Description, as the server wrote it
    Update an idea's title / body / status and return it; omitted fields unchanged. status ∈ new|under_review|planned|promoted|declined (set 'promoted' via promote_idea instead, so a feature is actually created). Resolve the id via list_ideas; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_initiativeUpdate an initiative and return it; omitted fields are unchanged.No findings

    Why it is in this group

    • The name "update_initiative" says "update": a word for a change.
    Description, as the server wrote it
    Update an initiative and return it; omitted fields are unchanged. Re-point it to a different goal with objective_id (null unlinks). status ∈ planned|active|paused|done|abandoned. Resolve the id via list_initiatives; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_key_resultUpdate a key result — most often to move current_value as progress lands — and return it; omitted fields are unchanged.No findings

    Why it is in this group

    • The name "update_key_result" says "update": a word for a change.
    Description, as the server wrote it
    Update a key result — most often to move current_value as progress lands — and return it; omitted fields are unchanged. Resolve the id via list_objectives (each objective carries its key_results with ids). Only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_objectiveUpdate an objective's name / description / period and return it; omitted fields are unchanged (null clears description or period).No findings

    Why it is in this group

    • The name "update_objective" says "update": a word for a change.
    Description, as the server wrote it
    Update an objective's name / description / period and return it; omitted fields are unchanged (null clears description or period). Resolve the id via list_objectives; only id is required. To move a key result's value use update_key_result.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_pageUpdate a Page — rename, set icon, replace the body, or archive/unarchive (archived:true hides it, false restores it).No findings

    Why it is in this group

    • The name "update_page" says "update": a word for a change.
    Description, as the server wrote it
    Update a Page — rename, set icon, replace the body, or archive/unarchive (archived:true hides it, false restores it). `body` is plain text (blank lines → paragraphs) and REPLACES the page content. Omitted fields are unchanged. Resolve the id via list_pages; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_releaseUpdate a release and return it; omitted fields unchanged.No findings

    Why it is in this group

    • The name "update_release" says "update": a word for a change.
    Description, as the server wrote it
    Update a release and return it; omitted fields unchanged. Set released_at to ship it (or null to move it back to draft). Resolve the id via list_releases; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_sprintUpdate a sprint and return it.No findings

    Why it is in this group

    • The name "update_sprint" says "update": a word for a change.
    Description, as the server wrote it
    Update a sprint and return it. state is 'future' | 'active' | 'closed' — moving to 'closed' stamps the completion time, reopening clears it. start_date / end_date are ISO 8601 (or null to clear). Resolve the id via list_sprints; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • update_taskUpdate one or more of a task's fields and return the updated task; fields you omit are left unchanged (idempotent — re-sending the same values is a no-op).No findings

    Why it is in this group

    • The name "update_task" says "update": a word for a change.
    Description, as the server wrote it
    Update one or more of a task's fields and return the updated task; fields you omit are left unchanged (idempotent — re-sending the same values is a no-op). Pass sprint_id: null to remove the task from its sprint. Resolve ids first — the task via get_task/list_tasks, and status/feature/insight/sprint/member ids via pm_meta and the list_* reads — never guess them. Only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • vote_ideaCast (or remove) the connected member's vote on an idea and return the new vote state.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Cast (or remove) the connected member's vote on an idea and return the new vote state. Adds your vote by default; pass remove:true to take it back. One vote per member — voting twice is a no-op. Resolve the id via list_ideas; only id is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 34Claude Code: allow
  • analyze_funnelBuild a conversion funnel from the product's own events: distinct users per step, step-to-step conversion %, and drop-off, evaluated in the exact order you pass.No findings

    Why it is in this group

    • The name "analyze_funnel" says "analyze": a word for reading.
    Description, as the server wrote it
    Build a conversion funnel from the product's own events: distinct users per step, step-to-step conversion %, and drop-off, evaluated in the exact order you pass. Needs product-analytics events flowing; returns empty counts when none match. Pass `steps` as an ordered list of 2+ event names — call it with NO steps first to get the menu of available event names rather than guessing them. Optional product_id and window_days (default 30, valid 1–365). Pairs with analyze_paths to see where the drop-offs go.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • analyze_npsNPS for the product: the standard −100…100 score AND revenue-weighted NPS (each respondent weighted by their account MRR), plus detractor accounts ranked by MRR-at-risk (highest fi…No findings

    Why it is in this group

    • The name "analyze_nps" says "analyze": a word for reading.
    Description, as the server wrote it
    NPS for the product: the standard −100…100 score AND revenue-weighted NPS (each respondent weighted by their account MRR), plus detractor accounts ranked by MRR-at-risk (highest first). Surfaces when your biggest customers are the unhappy ones even if the headline looks fine. Computed deterministically off survey responses inside `window_days` (default 90, valid 1–365); returns an empty result when none fall in the window. product_id optional (primary product when omitted). Quantify sentiment after get_product_brain, then dig into a detractor with get_customer_360.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • analyze_nrrNet Revenue Retention (revenue-weighted) next to logo retention (count-weighted), the expansion/contraction/churn split, and the accounts that lost the most MRR (ranked, highest lo…No findings

    Why it is in this group

    • The name "analyze_nrr" says "analyze": a word for reading.
    Description, as the server wrote it
    Net Revenue Retention (revenue-weighted) next to logo retention (count-weighted), the expansion/contraction/churn split, and the accounts that lost the most MRR (ranked, highest loss first). The divergence is the point: '92% of logos but 78% of revenue' means a big account churned. Computed deterministically off subscription movements inside `window_days` (default 90, valid 1–365); empty when none fall in the window. Quantify revenue health, then follow the top-losing accounts into get_customer_360.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • analyze_pathsTrace what users do AFTER a start event — the journey flow (Sankey) from the product's own events.No findings

    Why it is in this group

    • The name "analyze_paths" says "analyze": a word for reading.
    Description, as the server wrote it
    Trace what users do AFTER a start event — the journey flow (Sankey) from the product's own events. Returns the next-step transitions ranked by user count (most common first), empty when no events match. Pass `start` to anchor on an event, or omit for the most common start (call analyze_funnel with no steps to list the event names). Optional product_id and window_days (default 30, valid 1–365).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_codebase_mapThe auto-generated codebase brain map for one product: a plain-language summary, the module/node/edge counts, when the map was last generated, and the labels of the modules it foun…No findings

    Why it is in this group

    • The name "get_codebase_map" says "get": a word for reading.
    Description, as the server wrote it
    The auto-generated codebase brain map for one product: a plain-language summary, the module/node/edge counts, when the map was last generated, and the labels of the modules it found. Read-only; returns the latest generated map, empty when none has been generated for the product yet. Use it to ground 'where in the code does X live?' questions and to see how the codebase splits into modules before discussing architecture or scoping engineering work. Optional product_id, from whoami; omit for the org's primary product.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_conversationRead one support conversation: the visitor plus the full message thread, oldest first.No findings

    Why it is in this group

    • The name "get_conversation" says "get": a word for reading.
    Description, as the server wrote it
    Read one support conversation: the visitor plus the full message thread, oldest first. Read-only. Resolve the conversation_id first with list_conversations — never guess it.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_customer_360Everything about ONE customer, resolved by id, email, domain, or company name: profile, subscription + MRR, how many users sit under the account, and their verbatim feedback.No findings

    Why it is in this group

    • The name "get_customer_360" says "get": a word for reading.
    Description, as the server wrote it
    Everything about ONE customer, resolved by id, email, domain, or company name: profile, subscription + MRR, how many users sit under the account, and their verbatim feedback. Read-only; returns the matched account, or an empty result when nothing matches the query. The money + people + voice join on one record — call it before answering anything about a specific account.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_device_candidatesClusters of ≥2 end_users seen on the same device: 'anon_bridge' (high confidence — an anonymous visitor later identified) or 'device_shared' (low confidence — review only).No findings

    Why it is in this group

    • The name "get_device_candidates" says "get": a word for reading.
    Description, as the server wrote it
    Clusters of ≥2 end_users seen on the same device: 'anon_bridge' (high confidence — an anonymous visitor later identified) or 'device_shared' (low confidence — review only). Read-only; returns the candidate clusters, empty when none are found. Use it to find merge targets, then act with merge_end_users.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_pageRead one Page (doc / PRD) by id and return its full content.No findings

    Why it is in this group

    • The name "get_page" says "get": a word for reading.
    Description, as the server wrote it
    Read one Page (doc / PRD) by id and return its full content. Read-only. Resolve the id first with list_pages — never guess it.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_pm_playbookHow to operate as a product manager on AIOProductOS.No findings

    Why it is in this group

    • The name "get_pm_playbook" says "get": a word for reading.
    Description, as the server wrote it
    How to operate as a product manager on AIOProductOS. No arguments and no side effects — returns the same operating guide as plain text every call (deterministic): how to ground in the product brain, keep work welded to the spine (insight→feature→task→outcome), prioritise on evidence (affected accounts + MRR + reach), and what 'done' means. Call it FIRST, before planning or prioritising, to load the house rules the other tools assume.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_product_brainA grounded snapshot of the org's product so YOU can reason about it.No findings

    Why it is in this group

    • The name "get_product_brain" says "get": a word for reading.
    Description, as the server wrote it
    A grounded snapshot of the org's product so YOU can reason about it. Returns one JSON object with: revenue + top paying accounts (ranked by MRR), web + product analytics headline metrics, the feature list, recent verbatim customer signals (newest first), and open-work counts — each block empty when that source isn't flowing yet. The time-windowed sections (revenue, cost, web + product analytics, feature usage) honour `window` (7 | 30 | 90 days, default 30). Single call, no pagination. Start here to ground, then go deeper with the dedicated list_* reads and the analytics tools. Optional product_id (the org's primary product when omitted).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_retentionWeekly cohort retention for the product: users grouped by first-seen week (one row per cohort, newest last), with the share still active each subsequent week — a lower-triangular g…No findings

    Why it is in this group

    • The name "get_retention" says "get": a word for reading.
    Description, as the server wrote it
    Weekly cohort retention for the product: users grouped by first-seen week (one row per cohort, newest last), with the share still active each subsequent week — a lower-triangular grid. Needs product-analytics events flowing; returns empty cohorts when the product has none. window_days default 56 = 8 weekly cohorts (min 7; roughly one extra cohort per added 7 days). product_id optional (primary product when omitted).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_roadmap_driftPlanned vs shipped features over a window: a drift score (0-100, 100 = perfect alignment), counts (planned / shipped / on-time / slipped / unplanned / orphaned), median slip days, …No findings

    Why it is in this group

    • The name "get_roadmap_drift" says "get": a word for reading.
    Description, as the server wrote it
    Planned vs shipped features over a window: a drift score (0-100, 100 = perfect alignment), counts (planned / shipped / on-time / slipped / unplanned / orphaned), median slip days, and the top slipped + unplanned ships. Deterministic, no LLM cost. window = week | month | quarter (default quarter); optional product_id. Read-only; returns the drift report, zeroed when nothing was planned or shipped in the window. Use it in planning reviews to check delivery against the roadmap, then open the slipped features with list_features.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_taskGet one task by id and return it with its full comments and assignees.No findings

    Why it is in this group

    • The name "get_task" says "get": a word for reading.
    Description, as the server wrote it
    Get one task by id and return it with its full comments and assignees. Read-only. Resolve the id first with list_tasks — never guess it; pair with update_task or comment_on_task to act on what you read.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_weekly_signal_memoThe Weekly Product Signal Memo — the last 7 days of customer signal clustered into themes (insights grouped by feature, ranked by the revenue behind them) with verbatim quotes, wee…No findings

    Why it is in this group

    • The name "get_weekly_signal_memo" says "get": a word for reading.
    Description, as the server wrote it
    The Weekly Product Signal Memo — the last 7 days of customer signal clustered into themes (insights grouped by feature, ranked by the revenue behind them) with verbatim quotes, week-over-week deltas (new / repeated / stronger / weaker), concluded experiments, and shipped releases. Deterministic — every count is off real rows, no fabricated quotes. Optional `week` (ISO 'YYYY-Www') for a past week; `generate=1` rebuilds + persists the current week now. Read-only apart from that rebuild; returns the persisted memo, empty when the requested week has none. Open a weekly review with it, then drill into a theme with list_insights.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_artifact_versionsVersion history of an artifact's AI reviews (F5): every review run is a version with its score, model, cost, who/what generated it, and whether it's the current one.No findings

    Why it is in this group

    • The name "list_artifact_versions" says "list": a word for reading.
    Description, as the server wrote it
    Version history of an artifact's AI reviews (F5): every review run is a version with its score, model, cost, who/what generated it, and whether it's the current one. Read-only; returns the version list, empty when the artifact has never been reviewed. Use it to see how a feature/experiment/page's review changed over time and to pick the version_id to pass to revert_to_version. Takes the same target_id/target_type you'd pass to review_artifact.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_bookingsUpcoming confirmed bookings on the org's scheduling.No findings

    Why it is in this group

    • The name "list_bookings" says "list": a word for reading.
    Description, as the server wrote it
    Upcoming confirmed bookings on the org's scheduling. Read-only; returns the bookings, empty when none are scheduled. Pass include='all' for full history.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_channelsList the team Comms channels the connected member belongs to (membership-scoped).No findings

    Why it is in this group

    • The name "list_channels" says "list": a word for reading.
    Description, as the server wrote it
    List the team Comms channels the connected member belongs to (membership-scoped). Read-only; returns the member's channels, empty when they belong to none. Call read_channel with a channel_id to read one.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_conversationsList support-chat conversations in the inbox (open + snoozed by default; pass status='all' to include closed).No findings

    Why it is in this group

    • The name "list_conversations" says "list": a word for reading.
    Description, as the server wrote it
    List support-chat conversations in the inbox (open + snoozed by default; pass status='all' to include closed). Read-only; returns the matching conversations, empty when the inbox is clear. Optional product_id to scope to one product; open a full thread with get_conversation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_decisionsList the org's logged decisions — title, rationale, status, and any linked feature/release/objective — newest first.No findings

    Why it is in this group

    • The name "list_decisions" says "list": a word for reading.
    Description, as the server wrote it
    List the org's logged decisions — title, rationale, status, and any linked feature/release/objective — newest first. Returns an empty list when none. Optional status filter (decided | proposed | revisit). Resolve a decision id here before update_decision.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_experimentsList product experiments.No findings

    Why it is in this group

    • The name "list_experiments" says "list": a word for reading.
    Description, as the server wrote it
    List product experiments. Returns an array where each experiment carries its hypothesis, the metric it moves, the target, its current state, and — once concluded — the verdict and the decision that came out. Read-only; empty when none match. Use it to see what's being tested before proposing new work, and cite a concluded verdict as evidence when you create_task or review_artifact. Optional product_id (from whoami) and state filter.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_featuresThe product's feature catalogue with description, status, and when each was last touched — richer than pm_meta (which is just id+name for resolution).No findings

    Why it is in this group

    • The name "list_features" says "list": a word for reading.
    Description, as the server wrote it
    The product's feature catalogue with description, status, and when each was last touched — richer than pm_meta (which is just id+name for resolution). Read-only; returns the matching features, empty when none. Optional product_id and free-text q over name+key; use a feature id from here to link a task or insight on the spine.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_ideasList the org's ideas — the native, votable idea backlog — ranked by vote count (highest first).No findings

    Why it is in this group

    • The name "list_ideas" says "list": a word for reading.
    Description, as the server wrote it
    List the org's ideas — the native, votable idea backlog — ranked by vote count (highest first). Each returns its title, status, vote count, author, and the feature it was promoted to (if any). status ∈ new|under_review|planned|promoted|declined (optional filter). Read-only; empty when none. Ideas are distinct from insights: an idea is a proposal a team votes on; an insight is a piece of customer evidence. Resolve an idea id here before update_idea / vote_idea / promote_idea.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_identity_mergesList the org's end-user merge history.No findings

    Why it is in this group

    • The name "list_identity_merges" says "list": a word for reading.
    Description, as the server wrote it
    List the org's end-user merge history. Returns an array of merge events, newest first, where each carries its event id, kind (merge or unmerge), the target and source end-user ids, the reason, who ran it, when, and — for merges — whether it has already been reverted. Read-only; empty when no merges have ever run. Use it to audit identity changes and to find the event id to pass to unmerge_end_users (only un-reverted merges can be undone).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_initiativesList the org's initiatives — the strategic layer between goals and features (goal → initiative → feature → epic → release).No findings

    Why it is in this group

    • The name "list_initiatives" says "list": a word for reading.
    Description, as the server wrote it
    List the org's initiatives — the strategic layer between goals and features (goal → initiative → feature → epic → release). Each returns its name, status, timeframe, the objective it rolls up to (if any), and its linked-feature count. Read-only; empty when none. Resolve an initiative id here before create_feature / update_feature (initiative_id) or update_initiative.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_insightsSearch the captured insight backlog (voice of customer) — the read twin of capture_insight.No findings

    Why it is in this group

    • The name "list_insights" says "list": a word for reading.
    Description, as the server wrote it
    Search the captured insight backlog (voice of customer) — the read twin of capture_insight. Read-only; returns the matching insights newest first, empty when nothing matches. Filters: status, kind (insight|opportunity), feature_id, account_id, product_id, and free-text q over title+body; limit default 50, max 200. Use it to survey the evidence behind a feature or account before prioritising — resolve feature_id via list_features and account_id via get_customer_360.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_objectivesList the org's OKRs.No findings

    Why it is in this group

    • The name "list_objectives" says "list": a word for reading.
    Description, as the server wrote it
    List the org's OKRs. Returns an array of objectives, each with its key results and live progress (0..1 between start and target), so you can prioritise toward what the team is actually trying to move. Read-only; empty when none are set. Read it before prioritising — tie proposed tasks to the objective they move, and cite the live progress when arguing priority. Optional product_id, from whoami.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_pagesList the in-product docs / PRDs (Pages) on the spine.No findings

    Why it is in this group

    • The name "list_pages" says "list": a word for reading.
    Description, as the server wrote it
    List the in-product docs / PRDs (Pages) on the spine. Returns an array of pages with title + id only — no content, so it stays cheap to scan. Read-only; empty when none exist. Use it to find the page id, then read the full content with get_page; pair with review_artifact (target_type 'page') to critique a draft PRD. Optional product_id, from whoami.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_releasesList shipped releases.No findings

    Why it is in this group

    • The name "list_releases" says "list": a word for reading.
    Description, as the server wrote it
    List shipped releases. Returns an array, newest first, where each release carries its version, changelog, and ship date. Read-only; empty when nothing has shipped. Use it to answer 'what did we ship recently?', to ground a changelog or launch summary in real ship dates, and to see what went out before reading get_roadmap_drift. Optional product_id, from whoami.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_sprintsSprints — name, goal, state, and window, newest first.No findings

    Why it is in this group

    • The name "list_sprints" says "list": a word for reading.
    Description, as the server wrote it
    Sprints — name, goal, state, and window, newest first. Read-only; returns the matching sprints, empty when none exist. See the delivery cadence (active + recent), and resolve a sprint_id here before scheduling a task via create_task / update_task. Optional state filter (e.g. 'active').

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_tasksList the org's board tasks and return the matches with their status, priority, assignees, and any linked feature/insight/sprint.No findings

    Why it is in this group

    • The name "list_tasks" says "list": a word for reading.
    Description, as the server wrote it
    List the org's board tasks and return the matches with their status, priority, assignees, and any linked feature/insight/sprint. Optionally narrow by status_id or list_id — resolve either via pm_meta. Read-only; returns an empty list when nothing matches. Use it to find a task id before get_task, update_task, or comment_on_task.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • pm_metaList the org's PM lists, statuses, members, and features as id+name pairs.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the org's PM lists, statuses, members, and features as id+name pairs. Read-only; returns arrays for resolution only (list_features carries the richer catalogue). Call it to turn a name into an id before create_task / update_task — never guess an id.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • read_channelRead a Comms channel's recent messages, newest included (the connected member must be a channel member).No findings

    Why it is in this group

    • The name "read_channel" says "read": a word for reading.
    Description, as the server wrote it
    Read a Comms channel's recent messages, newest included (the connected member must be a channel member). Read-only; returns the messages, empty when the channel is silent. Resolve channel_id first with list_channels — never guess it. Optional limit.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • whoamiShow the connected AIOProductOS identity (org, member) AND the org's products (id, name, is_primary).No findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Show the connected AIOProductOS identity (org, member) AND the org's products (id, name, is_primary). Read-only; returns the identity plus the product list. For a multi-product org, call this first to get the product ids, then pass one as `product_id` to any product-scoped tool; omit product_id to use the primary.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.9. Values in angle brackets are yours to fill in.

claude mcp add --transport http aioproductos https://platform.aioproductos.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__aioproductos__get_pm_playbook",
      "mcp__aioproductos__whoami",
      "mcp__aioproductos__pm_meta",
      "mcp__aioproductos__get_product_brain",
      "mcp__aioproductos__get_weekly_signal_memo",
      "mcp__aioproductos__get_roadmap_drift",
      "mcp__aioproductos__get_customer_360",
      "mcp__aioproductos__analyze_nps",
      "mcp__aioproductos__analyze_nrr",
      "mcp__aioproductos__analyze_funnel",
      "mcp__aioproductos__get_retention",
      "mcp__aioproductos__analyze_paths",
      "mcp__aioproductos__list_tasks",
      "mcp__aioproductos__get_task",
      "mcp__aioproductos__list_initiatives",
      "mcp__aioproductos__list_ideas",
      "mcp__aioproductos__list_decisions",
      "mcp__aioproductos__list_artifact_versions",
      "mcp__aioproductos__list_conversations",
      "mcp__aioproductos__get_conversation",
      "mcp__aioproductos__list_insights",
      "mcp__aioproductos__list_features",
      "mcp__aioproductos__list_objectives",
      "mcp__aioproductos__list_experiments",
      "mcp__aioproductos__list_releases",
      "mcp__aioproductos__list_pages",
      "mcp__aioproductos__get_page",
      "mcp__aioproductos__get_codebase_map",
      "mcp__aioproductos__list_sprints",
      "mcp__aioproductos__list_channels",
      "mcp__aioproductos__read_channel",
      "mcp__aioproductos__list_bookings",
      "mcp__aioproductos__get_device_candidates",
      "mcp__aioproductos__list_identity_merges"
    ],
    "ask": [
      "mcp__aioproductos__create_task",
      "mcp__aioproductos__create_feature",
      "mcp__aioproductos__create_objective",
      "mcp__aioproductos__create_sprint",
      "mcp__aioproductos__create_page",
      "mcp__aioproductos__update_feature",
      "mcp__aioproductos__update_objective",
      "mcp__aioproductos__update_key_result",
      "mcp__aioproductos__update_sprint",
      "mcp__aioproductos__update_page",
      "mcp__aioproductos__create_initiative",
      "mcp__aioproductos__update_initiative",
      "mcp__aioproductos__create_idea",
      "mcp__aioproductos__update_idea",
      "mcp__aioproductos__vote_idea",
      "mcp__aioproductos__promote_idea",
      "mcp__aioproductos__create_release",
      "mcp__aioproductos__update_release",
      "mcp__aioproductos__create_experiment",
      "mcp__aioproductos__update_experiment",
      "mcp__aioproductos__create_decision",
      "mcp__aioproductos__update_decision",
      "mcp__aioproductos__post_to_channel",
      "mcp__aioproductos__reply_in_channel",
      "mcp__aioproductos__reply_to_conversation",
      "mcp__aioproductos__add_note",
      "mcp__aioproductos__resolve_conversation",
      "mcp__aioproductos__reschedule_booking",
      "mcp__aioproductos__review_artifact",
      "mcp__aioproductos__revert_to_version",
      "mcp__aioproductos__update_task",
      "mcp__aioproductos__comment_on_task",
      "mcp__aioproductos__capture_insight",
      "mcp__aioproductos__merge_end_users",
      "mcp__aioproductos__unmerge_end_users"
    ],
    "deny": [
      "mcp__aioproductos__delete_task",
      "mcp__aioproductos__cancel_booking"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as aioproductos. Review it before you use it.