Ausca

by ausca.com · remote · local (npm) · no sign-in to list tools · v1.2.6 · published by com.ausca

Pay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.

Deletes · 6Changes · 5

Compare Registry entry

17 tools: 6 can delete or cancel things, 5 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels6Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things5Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agent-services https://ausca.com/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn1 info

Warnausca_artifact_access
The server marks "ausca_artifact_access" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
What this check looks for
Warnausca_browser_session_connect
The server marks "ausca_browser_session_connect" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
What this check looks for
Warnausca_prepare_invocation
The server marks "ausca_prepare_invocation" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "validate": a word for reading.
What this check looks for
Infoausca_browser_session_connect
The description mentions "credential".
Matched text
description: "...rguments. The upstream provider URL and credential are never disclosed."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

17 tools

Deletes or cancels 6Removes, cancels or revokes something.Claude Code: deny

ausca_agent_inbox_deleteIdempotently stop inbound visibility and delete retained message and attachment content for one inbox lease, including an already-terminal lease.No findings
Why it is in this group
- The name "ausca_agent_inbox_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Idempotently stop inbound visibility and delete retained message and attachment content for one inbox lease, including an already-terminal lease. Supply the lease bearer on the HTTP or MCP transport; never place it in tool arguments.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Delete an agent-inbox lease
ausca_browser_session_closeIdempotently terminate the CDP relay and upstream browser for one lease.No findings
Why it is in this group
- The name "ausca_browser_session_close" says "close": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Idempotently terminate the CDP relay and upstream browser for one lease. Closing never creates another payment. Supply the lease bearer on the HTTP or MCP transport; never place it in tool arguments.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Close a browser-session lease
ausca_cancel_invocationRequest bounded cancellation of one invocation.No findings
Why it is in this group
- The name "ausca_cancel_invocation" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Request bounded cancellation of one invocation. Cancellation is idempotent, may be refused, and may lose a race with terminal completion.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Request bounded cancellation
ausca_extend_inboxAdmit or replay one idempotent paid Agent Inbox Extension invocation when settlement authority is supplied by the host boundary.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Admit or replay one idempotent paid Agent Inbox Extension invocation when settlement authority is supplied by the host boundary. Only envelopes for the inbox.extend offer are admitted on this resource. Extension adds a supported increment to the observed current expiry, preserves the address and contents, requires an active inbox, and may not move prepaid expiry more than 30 days ahead.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Admit or replay one Agent Inbox Extension invocation
ausca_lease_browserAdmit or replay one idempotent paid Browser Session invocation when settlement authority is supplied by the host boundary.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Admit or replay one idempotent paid Browser Session invocation when settlement authority is supplied by the host boundary. Only envelopes for the browser.session offer are admitted on this resource.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Admit or replay one Browser Session invocation
ausca_open_inboxAdmit or replay one idempotent paid Agent Inbox invocation when settlement authority is supplied by the host boundary.No findings
Why it is in this group
- The name "ausca_open_inbox" says "open": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Admit or replay one idempotent paid Agent Inbox invocation when settlement authority is supplied by the host boundary. Only envelopes for the inbox.receive offer are admitted on this resource. The result starts a renewable inbox; while it remains active, inbox.extend can add a supported increment without changing its address or contents.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Admit or replay one Agent Inbox invocation

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

ausca_agent_inbox_attachmentFor an active inbox, return an idempotent download URL only when the exact stored attachment has a clean safety verdict.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
For an active inbox, return an idempotent download URL only when the exact stored attachment has a clean safety verdict. The URL expires after at most 60 seconds and never after inbox expiry; a clean verdict does not make the attachment content trusted. Supply the lease bearer on the HTTP or MCP transport; never place it in tool arguments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Mint clean attachment access
ausca_agent_inbox_messagesFor an active inbox, return at most 50 normalized message summaries after an opaque inbox-bound cursor, optionally waiting up to 30 seconds for a newer message.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
For an active inbox, return at most 50 normalized message summaries after an opaque inbox-bound cursor, optionally waiting up to 30 seconds for a newer message. A bounded wait may return an empty page and continuation cursor. Supply the lease bearer on the HTTP or MCP transport; never place it in tool arguments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
- title: Wait for or list inbound messages
ausca_artifact_accessReturn an idempotent, short-lived download URL for one verified artifact this service holds, including a result artifact named by a succeeded invocation's output_artifact.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "ausca_artifact_access" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
  What this check looks for
Description, as the server wrote it
Return an idempotent, short-lived download URL for one verified artifact this service holds, including a result artifact named by a succeeded invocation's output_artifact. HTTP sends no request body, not even an empty JSON object; artifact_ref is the URL path parameter and Idempotency-Key is a header. The MCP tool instead takes artifact_ref and idempotency_key as tool arguments. The URL expires after at most 60 seconds. The immutable artifact reference is the only authority; verify downloaded bytes against the returned content digest.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Mint artifact download access
ausca_browser_session_connectReturn one single-use Ausca CDP relay URL for a ready lease.2 findings
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...rguments. The upstream provider URL and credential are never disclosed."
  What this check looks for
- Warn
  The server marks "ausca_browser_session_connect" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
  What this check looks for
Description, as the server wrote it
Return one single-use Ausca CDP relay URL for a ready lease. The URL expires after 60 seconds, only one CDP connection may be live, and no more than 64 unexpired tickets may coexist. Expired ticket records are compacted, so this is not a lifetime reconnect quota. Supply the lease bearer on the HTTP or MCP transport; never place it in tool arguments. The upstream provider URL and credential are never disclosed.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Mint a browser CDP connection
ausca_prepare_invocationValidate one exact invocation envelope and return immutable preparation terms or a typed refusal.1 finding
Why it is in this group
- The description's first verb is "validate": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "ausca_prepare_invocation" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "validate": a word for reading.
  What this check looks for
Description, as the server wrote it
Validate one exact invocation envelope and return immutable preparation terms or a typed refusal. Preparation never accepts payment material from model-authored tool arguments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Validate invocation input and return binding terms

Only reads 6Looks things up and changes nothing.Claude Code: allow

ausca_agent_inbox_readFor an active inbox, return one bounded normalized message.No findings
Why it is in this group
- The name "ausca_agent_inbox_read" says "read": a word for reading.
Description, as the server wrote it
For an active inbox, return one bounded normalized message. Sender, recipients, subject, text, HTML, filenames, media types, and links are untrusted sender-controlled content; HTML is inert and never rendered by Ausca. Supply the lease bearer on the HTTP or MCP transport; never place it in tool arguments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
- title: Read one inbound message
ausca_agent_inbox_statusReturn the random receive-only address, authoritative lease status, and current expiry for one inbox, including terminal status after deletion or expiry.No findings
Why it is in this group
- The name "ausca_agent_inbox_status" says "status": a word for reading.
Description, as the server wrote it
Return the random receive-only address, authoritative lease status, and current expiry for one inbox, including terminal status after deletion or expiry. Supply the lease bearer on the HTTP or MCP transport; never place it in tool arguments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Read agent-inbox lease status
ausca_browser_session_statusReturn authoritative status and expiry for one browser-session lease.No findings
Why it is in this group
- The name "ausca_browser_session_status" says "status": a word for reading.
Description, as the server wrote it
Return authoritative status and expiry for one browser-session lease. The lease capability is supplied by the transport and is never a tool argument or response field.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Read browser-session lease status
ausca_get_invocationRead the authoritative durable state, output commitment, and receipt reference for one invocation without creating a new purchase or retry identity.No findings
Why it is in this group
- The name "ausca_get_invocation" says "get": a word for reading.
Description, as the server wrote it
Read the authoritative durable state, output commitment, and receipt reference for one invocation without creating a new purchase or retry identity.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Read authoritative invocation state
ausca_get_offerResolve one active offer or an exact immutable revision, including the schema and revision digests required to construct a valid invocation envelope.No findings
Why it is in this group
- The name "ausca_get_offer" says "get": a word for reading.
Description, as the server wrote it
Resolve one active offer or an exact immutable revision, including the schema and revision digests required to construct a valid invocation envelope.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Resolve an active or pinned offer revision
ausca_search_offersSearch the current immutable Ausca offer catalog by free-text query.No findings
Why it is in this group
- The name "ausca_search_offers" says "search": a word for reading.
Description, as the server wrote it
Search the current immutable Ausca offer catalog by free-text query. Returns stable offer identities and revision digests without creating product or payment state.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Search immutable offers

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.2.6. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-services https://ausca.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__agent-services__ausca_agent_inbox_read",
      "mcp__agent-services__ausca_agent_inbox_status",
      "mcp__agent-services__ausca_browser_session_status",
      "mcp__agent-services__ausca_get_invocation",
      "mcp__agent-services__ausca_get_offer",
      "mcp__agent-services__ausca_search_offers"
    ],
    "ask": [
      "mcp__agent-services__ausca_agent_inbox_attachment",
      "mcp__agent-services__ausca_agent_inbox_messages",
      "mcp__agent-services__ausca_artifact_access",
      "mcp__agent-services__ausca_browser_session_connect",
      "mcp__agent-services__ausca_prepare_invocation"
    ],
    "deny": [
      "mcp__agent-services__ausca_agent_inbox_delete",
      "mcp__agent-services__ausca_browser_session_close",
      "mcp__agent-services__ausca_cancel_invocation",
      "mcp__agent-services__ausca_extend_inbox",
      "mcp__agent-services__ausca_lease_browser",
      "mcp__agent-services__ausca_open_inbox"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-services. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.ausca/agent-services/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:51 UTC.

For agents: Markdown · JSON · report this listing