Skip to content

BuzzMeBro

by buzzmebro.com · remote · no sign-in to list tools · v1.2.0 · published by com.buzzmebro

More than one roommate on your apartment buzzer number; settings decide who rings. Canada.

Deletes · 2Final · 2Changes · 11

20 tools: 2 can delete or cancel things, 2 do something that can't be undone, 11 change things and 5 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http buzzmebro https://buzzmebro.com/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "get_setup_status" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_setup_status" says "get": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

20 tools

Deletes or cancels 2Claude Code: deny
  • partner_rotate_keyRevokes the current partner key and returns a new one (shown once).No findings

    Why it is in this group

    • The description's first verb is "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Revokes the current partner key and returns a new one (shown once). Use it if the key may have leaked. The partner gets a text whenever the key is replaced.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Can't be undone 2Claude Code: ask
  • partner_send_codeTexts a 6-digit code to the mobile number in the application (never any other number).No findings

    Why it is in this group

    • The name "partner_send_code" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Texts a 6-digit code to the mobile number in the application (never any other number). Ask the person to read it to you, then call partner_confirm_code. Each application gets 3 codes, at least a minute apart.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • send_phone_codeTexts a 6-digit code to the mobile number given in create_setup (never to any other number).No findings

    Why it is in this group

    • The name "send_phone_code" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Texts a 6-digit code to the mobile number given in create_setup (never to any other number). Tell the person a text is coming and ask them to read the code to you, then call confirm_phone_code. Call again only if it has not arrived after a minute; each setup gets 3 codes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 11Claude Code: ask
  • check_buildingChecks whether BuzzMeBro can give this building a local buzzer number, and returns the price, the free-trial terms and how the service works.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Checks whether BuzzMeBro can give this building a local buzzer number, and returns the price, the free-trial terms and how the service works. Call this first. Stores nothing and costs nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • confirm_phone_codeChecks the code the person read back to you.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Checks the code the person read back to you. This proves the phone is theirs, which matters because that phone will open their front door. Five tries per setup. Next: start_checkout.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_setupCreates a BuzzMeBro setup for the person and returns setup_id and a status_token you must keep for every later call (plus setup_url, a fallback link if you cannot relay a texted co…No findings

    Why it is in this group

    • The name "create_setup" says "create": a word for a change.
    Description, as the server wrote it
    Creates a BuzzMeBro setup for the person and returns setup_id and a status_token you must keep for every later call (plus setup_url, a fallback link if you cannot relay a texted code). Only call it after check_building said available and the person has asked you to set it up. No text message is sent and nothing is charged by this call. Next: send_phone_code.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_setup_statusReads how far the setup has got and says what to do next.1 finding

    Why it is in this group

    • The name "get_setup_status" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "get_setup_status" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_setup_status" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Reads how far the setup has got and says what to do next. Once the person has paid, this call gets their number; when status is "ready" it returns their new BuzzMeBro number and swap_the_buzzer: the steps to get the building to point the buzzer at that number, and ready-to-send messages for building management, the landlord, the concierge, the superintendent or a building portal.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • partner_applyStarts a partner application with the person’s details and returns application_id and application_token.No findings

    Why it is in this group

    • The name "partner_apply" says "apply": a word for a change.
    Description, as the server wrote it
    Starts a partner application with the person’s details and returns application_id and application_token. Only call it when the person has asked to join. No text is sent by this call. Next: partner_send_code.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • partner_claim_keyAfter the person accepted the terms: returns their partner link, code and partner key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    After the person accepted the terms: returns their partner link, code and partner key. The key is shown once; keep it private and use it for the partner_get_* tools. The application token stops working after this call.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • partner_confirm_codeChecks the texted code.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Checks the texted code. Five tries per application. Next: partner_terms_link.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • start_checkoutAfter confirm_phone_code: creates the person’s BuzzMeBro account and apartment and returns payment_url, Stripe’s own secure page where the person approves a card, Apple Pay, Google…No findings

    Why it is in this group

    • The name "start_checkout" says "start": a word for a change.
    Description, as the server wrote it
    After confirm_phone_code: creates the person’s BuzzMeBro account and apartment and returns payment_url, Stripe’s own secure page where the person approves a card, Apple Pay, Google Pay or Link (with the free month when it applies, nothing is charged until it ends). Give them the link or message_for_the_person; you never see or type card details. Calling it again returns a fresh link for the same apartment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 5Claude Code: allow
  • partner_get_kitReturns ready texts, a resident email, a move-in text and email to forward to new tenants, desk card and move-in insert wording with the partner’s link, links to the partner’s prin…No findings

    Why it is in this group

    • The name "partner_get_kit" says "get": a word for reading.
    Description, as the server wrote it
    Returns ready texts, a resident email, a move-in text and email to forward to new tenants, desk card and move-in insert wording with the partner’s link, links to the partner’s printable move-in package (move-in insert and QR card PDFs with their own QR and code), plus the house rules for sharing (honest words only, no pressure, never ask residents for phone numbers or door codes).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • partner_get_statsReturns status, visits, signups, free months, paying apartments, collected revenue, earnings by state (on hold, ready, paid, reversed), the share ledger (apartments as codes only, …No findings

    Why it is in this group

    • The name "partner_get_stats" says "get": a word for reading.
    Description, as the server wrote it
    Returns status, visits, signups, free months, paying apartments, collected revenue, earnings by state (on hold, ready, paid, reversed), the share ledger (apartments as codes only, never names or addresses) and payout history. Quote only these numbers.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • partner_program_infoReturns how the partner program works: the 50% share of collected revenue, what counts and what does not, when and how payouts happen, the rules, and the steps to join.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns how the partner program works: the 50% share of collected revenue, what counts and what does not, when and how payouts happen, the rules, and the steps to join. Call it first and explain it to the person before applying. Stores nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http buzzmebro https://buzzmebro.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__buzzmebro__partner_program_info",
      "mcp__buzzmebro__partner_get_links",
      "mcp__buzzmebro__partner_get_kit",
      "mcp__buzzmebro__partner_get_stats",
      "mcp__buzzmebro__partner_list_sublinks"
    ],
    "ask": [
      "mcp__buzzmebro__check_building",
      "mcp__buzzmebro__create_setup",
      "mcp__buzzmebro__send_phone_code",
      "mcp__buzzmebro__confirm_phone_code",
      "mcp__buzzmebro__start_checkout",
      "mcp__buzzmebro__get_setup_status",
      "mcp__buzzmebro__partner_apply",
      "mcp__buzzmebro__partner_send_code",
      "mcp__buzzmebro__partner_confirm_code",
      "mcp__buzzmebro__partner_terms_link",
      "mcp__buzzmebro__partner_claim_key",
      "mcp__buzzmebro__partner_payout_link",
      "mcp__buzzmebro__partner_create_sublink"
    ],
    "deny": [
      "mcp__buzzmebro__partner_disable_sublink",
      "mcp__buzzmebro__partner_rotate_key"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as buzzmebro. Review it before you use it.