Amazap

by amazap.com · remote · no sign-in to list tools · v0.5.21 · published by com.amazap

Save money on AI spend. Agents buy compact pay-per-call tools from one prepaid credit balance.

Deletes · 3Changes · 16

Compare Registry entry

24 tools: 3 can delete or cancel things, 16 change things and 5 only read.

Scanned Oct 21, 2026

Deletes or cancels3Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things16Claude Code: ask: see these tools
Only reads5Claude Code: allow: see these tools

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http amazap https://amazap.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn

Warnread_webpage
The server marks "read_webpage" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "read_webpage" says "read": a word for reading.
What this check looks for
Warnread_feed
The server marks "read_feed" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "read_feed" says "read": a word for reading.
What this check looks for
Warnsqueeze_log
The server marks "squeeze_log" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "squeeze_log" says "log": a word for reading.
What this check looks for
Warnread_pdf
The server marks "read_pdf" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "read_pdf" says "read": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

24 tools

Deletes or cancels 3Removes, cancels or revokes something.Claude Code: deny

buySpends prepaid Amazap service credits on a third-party API call, within the account's spend limits.No findings
Why it is in this group
- The description says "can't be undone".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Spends prepaid Amazap service credits on a third-party API call, within the account's spend limits. A purchase can't be undone. Only failed calls are re-credited, up to 1,000 sats a day and 500 sats a day per provider. Direct purchases: if you pay a provider's own endpoint or invoice directly, that payment never reaches Amazap. Amazap isn't the seller of that call and can't credit it; the provider's terms apply. Copy quote_id, total_cost, max_total_sats, accept_terms. Params may differ if the price is unchanged. When Lightning payments are temporarily paused, the tool returns payments_paused and retryAfter and charges nothing.
Annotations the server declares
- title: Buy SKU
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
buy_bestSpends prepaid Amazap service credits on a third-party API call, within the account's spend limits.No findings
Why it is in this group
- The description says "can't be undone".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Spends prepaid Amazap service credits on a third-party API call, within the account's spend limits. A purchase can't be undone. Only failed calls are re-credited, up to 1,000 sats a day and 500 sats a day per provider. Direct purchases: if you pay a provider's own endpoint or invoice directly, that payment never reaches Amazap. Amazap isn't the seller of that call and can't credit it; the provider's terms apply. Picks the best healthy SKU at or under max_sats and buys it. Nothing is charged when none fits. When Lightning payments are temporarily paused, the tool returns payments_paused and retryAfter and charges nothing.
Annotations the server declares
- title: Buy best
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
top_upOnly creates an invoice for the human to pay.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Only creates an invoice for the human to pay. It does not move sats and does not spend the credit balance. Put the QR image and the QR URL in your own message. Pay from any Lightning app. Do not paste the invoice. Pass include_invoice only when the human asks. Pass awaiting_buy only when a buy is waiting.
Annotations the server declares
- title: Top up
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true

Changes things 16Creates or changes something that can be changed back.Claude Code: ask

balanceRemaining sats and the hourly buy limit.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Remaining sats and the hourly buy limit. maxBuysPerHour and remainingBuysHour are on this result. Do not call this before buying. A paid top-up is credited from the payment event. session_budget_sats sets the session cap up to the saved limit. reset_session starts a new session within that saved limit. Set issue_link_code only when the human asks for a one-time sign-in code. When Lightning payments are temporarily paused, the result includes paymentsPaused and retryAfter.
Annotations the server declares
- title: Balance
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
claim_failed_callAsk for a service-credit review of one paid call.No findings
Why it is in this group
- The name "claim_failed_call" says "call": a word for a change.
Description, as the server wrote it
Ask for a service-credit review of one paid call. For a basket, pass line or sku. Claims older than 72 hours are rejected. This does not move sats or cash.
Annotations the server declares
- title: Claim failed call
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
lightning_liquidityCurrent Lightning inbound-liquidity prices.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Current Lightning inbound-liquidity prices.
Annotations the server declares
- title: Lightning liquidity
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
lightning_nodeLightning node snapshot by pubkey.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Lightning node snapshot by pubkey. Pass pubkeys (up to 10) for one call.
Annotations the server declares
- title: Lightning node
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
make_qrMake a PNG QR code for an invoice, URL, or text.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Make a PNG QR code for an invoice, URL, or text. Put the QR URL in your own message.
Annotations the server declares
- title: Make QR
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
ordersRecent buys: order id, status, charged sats, refunded sats, and net sats.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Recent buys: order id, status, charged sats, refunded sats, and net sats. Charged is the gross debit. Net is charged minus refunded. Pass include_results for each stored result. Pass cursor from nextCursor to read the next page. Read-only.
Annotations the server declares
- title: Orders
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
page_metadataTitle, description, OG/Twitter, and JSON-LD for a URL.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Title, description, OG/Twitter, and JSON-LD for a URL. Savings are compared with the page's visible text, not its HTML. Not for reading the page.
Annotations the server declares
- title: Page metadata
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
quoteFree price check incl.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free price check incl. value estimate (raw vs output tokens, break-even $/M). Call only to change quantity/currency or check value before buying. When Lightning payments are temporarily paused, the result includes paymentsPaused and retryAfter.
Annotations the server declares
- title: Quote
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
read_feedRSS/Atom/JSON feed as compact items.1 finding
Why it is in this group
- The name "read_feed" says "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "read_feed" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "read_feed" says "read": a word for reading.
  What this check looks for
Description, as the server wrote it
RSS/Atom/JSON feed as compact items. Saves 27-81%; on lean feeds skip unless you cannot parse XML.
Annotations the server declares
- title: Read feed
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
read_pdfPDF to Markdown, pages e.g.1 finding
Why it is in this group
- The name "read_pdf" says "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "read_pdf" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "read_pdf" says "read": a word for reading.
  What this check looks for
Description, as the server wrote it
PDF to Markdown, pages e.g. 1-3 (default first 30). Sponsor pages are omitted and listed in adPages. Use only if you cannot run pdftotext: output is about pdftotext size, no token saving.
Annotations the server declares
- title: Read PDF
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
read_webpageClean article Markdown.1 finding
Why it is in this group
- The name "read_webpage" says "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "read_webpage" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "read_webpage" says "read": a word for reading.
  What this check looks for
Description, as the server wrote it
Clean article Markdown. Use it when the page is long or cluttered. Skip it on a short or already clean page: the quote compares the tokens both ways and does not charge for that check. Savings are compared with the page's visible text, not its HTML. One all-in price (5 sats). Blocked calls are credited.
Annotations the server declares
- title: Read webpage
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
repo_digestGitHub repo overview (tree, README, entry points, commits), ~750-1.5k tokens.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
GitHub repo overview (tree, README, entry points, commits), ~750-1.5k tokens. Use on medium/large repos. Skip if you only need the README: read it directly.
Annotations the server declares
- title: Repo digest
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
report_outcomeReport how a paid call went.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Report how a paid call went. Spends nothing. A service credit may be added to the balance when the paid call was at least 20 sats. A smaller call is recorded and is not credited. The credit is not cash. Report credits pause after a few per account.
Annotations the server declares
- title: Report outcome
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
report_skuFlag a bad schema, a junk or incorrect response, or a dead SKU.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Flag a bad schema, a junk or incorrect response, or a dead SKU. Sends a short reason and spends nothing. Limited per agent per day.
Annotations the server declares
- title: Report SKU
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
spend_summaryToday's spend, remaining budgets, and the last 10 buys.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Today's spend, remaining budgets, and the last 10 buys. Charged is the gross debit. Refunded is separate. Net is charged minus refunded. Read-only. Does not spend sats.
Annotations the server declares
- title: Spend summary
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
squeeze_logShrink a failed CI log.1 finding
Why it is in this group
- The name "squeeze_log" says "log": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "squeeze_log" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "squeeze_log" says "log": a word for reading.
  What this check looks for
Description, as the server wrote it
Shrink a failed CI log. Pass a GitHub Actions job link or the pasted log.
Annotations the server declares
- title: Squeeze log
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Only reads 5Looks things up and changes nothing.Claude Code: allow

catalog_statsRead-only public listing counts by protocol.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it
Read-only public listing counts by protocol. Does not spend sats.
Annotations the server declares
- title: Catalog stats
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
describe_skuParameter schema, schema confidence, and exampleCall for one SKU.No findings
Why it is in this group
- The name "describe_sku" says "describe": a word for reading.
Description, as the server wrote it
Parameter schema, schema confidence, and exampleCall for one SKU. total_cost is the all-in price only. Default USD. If the record is untested and totalSats is over 500, tell the user before buying. When Lightning payments are temporarily paused, the result includes paymentsPaused and retryAfter.
Annotations the server declares
- title: Describe SKU
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_orderOne order, including the stored result.No findings
Why it is in this group
- The name "get_order" says "get": a word for reading.
Description, as the server wrote it
One order, including the stored result. A seller payment still in flight is checked again. Does not start a new payment.
Annotations the server declares
- title: Get order
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_my_endpointProbe one public https endpoint for an L402 challenge and a prefilled listing draft.No findings
Why it is in this group
- The name "list_my_endpoint" says "list": a word for reading.
Description, as the server wrote it
Probe one public https endpoint for an L402 challenge and a prefilled listing draft. Does not spend sats and does not publish the listing.
Annotations the server declares
- title: List my endpoint
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_catalogFind paid Amazap tasks by keyword.No findings
Why it is in this group
- The name "search_catalog" says "search": a word for reading.
Description, as the server wrote it
Find paid Amazap tasks by keyword. Results: price, value (est. saving), buy call.
Annotations the server declares
- title: Search catalog
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.5.21. Values in angle brackets are yours to fill in.

claude mcp add --transport http amazap https://amazap.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__amazap__search_catalog",
      "mcp__amazap__describe_sku",
      "mcp__amazap__get_order",
      "mcp__amazap__catalog_stats",
      "mcp__amazap__list_my_endpoint"
    ],
    "ask": [
      "mcp__amazap__read_webpage",
      "mcp__amazap__lightning_node",
      "mcp__amazap__lightning_liquidity",
      "mcp__amazap__read_feed",
      "mcp__amazap__make_qr",
      "mcp__amazap__squeeze_log",
      "mcp__amazap__page_metadata",
      "mcp__amazap__read_pdf",
      "mcp__amazap__repo_digest",
      "mcp__amazap__quote",
      "mcp__amazap__orders",
      "mcp__amazap__claim_failed_call",
      "mcp__amazap__balance",
      "mcp__amazap__spend_summary",
      "mcp__amazap__report_outcome",
      "mcp__amazap__report_sku"
    ],
    "deny": [
      "mcp__amazap__buy",
      "mcp__amazap__buy_best",
      "mcp__amazap__top_up"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as amazap. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.amazap/amazap/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

19 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:49 UTC.

For agents: Markdown · JSON · report this listing