BuzzMeBro
by buzzmebro.com · remote · no sign-in to list tools · v1.2.0 · published by com.buzzmebro
More than one roommate on your apartment buzzer number; settings decide who rings. Canada.
20 tools: 2 can delete or cancel things, 2 do something that can't be undone, 11 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone2Claude Code: ask: see these tools
- Changes things11Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http buzzmebro https://buzzmebro.com/api/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnget_setup_status
The server marks "get_setup_status" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_setup_status" says "get": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
20 tools
Deletes or cancels 2Claude Code: deny
partner_disable_sublinkSwitches off one tracked link: its code stops bringing new apartments.No findings
Why it is in this group
- The name "partner_disable_sublink" says "disable": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Switches off one tracked link: its code stops bringing new apartments. Apartments it already brought stay with the partner.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
partner_rotate_keyRevokes the current partner key and returns a new one (shown once).No findings
Why it is in this group
- The description's first verb is "revoke": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Revokes the current partner key and returns a new one (shown once). Use it if the key may have leaked. The partner gets a text whenever the key is replaced.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
Can't be undone 2Claude Code: ask
partner_send_codeTexts a 6-digit code to the mobile number in the application (never any other number).No findings
Why it is in this group
- The name "partner_send_code" says "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Texts a 6-digit code to the mobile number in the application (never any other number). Ask the person to read it to you, then call partner_confirm_code. Each application gets 3 codes, at least a minute apart.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
send_phone_codeTexts a 6-digit code to the mobile number given in create_setup (never to any other number).No findings
Why it is in this group
- The name "send_phone_code" says "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Texts a 6-digit code to the mobile number given in create_setup (never to any other number). Tell the person a text is coming and ask them to read the code to you, then call confirm_phone_code. Call again only if it has not arrived after a minute; each setup gets 3 codes.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Changes things 11Claude Code: ask
check_buildingChecks whether BuzzMeBro can give this building a local buzzer number, and returns the price, the free-trial terms and how the service works.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Checks whether BuzzMeBro can give this building a local buzzer number, and returns the price, the free-trial terms and how the service works. Call this first. Stores nothing and costs nothing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
confirm_phone_codeChecks the code the person read back to you.No findings
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it Checks the code the person read back to you. This proves the phone is theirs, which matters because that phone will open their front door. Five tries per setup. Next: start_checkout.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
create_setupCreates a BuzzMeBro setup for the person and returns setup_id and a status_token you must keep for every later call (plus setup_url, a fallback link if you cannot relay a texted co…No findings
Why it is in this group
- The name "create_setup" says "create": a word for a change.
Description, as the server wrote it Creates a BuzzMeBro setup for the person and returns setup_id and a status_token you must keep for every later call (plus setup_url, a fallback link if you cannot relay a texted code). Only call it after check_building said available and the person has asked you to set it up. No text message is sent and nothing is charged by this call. Next: send_phone_code.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_setup_statusReads how far the setup has got and says what to do next.1 finding
Why it is in this group
- The name "get_setup_status" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_setup_status" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_setup_status" says "get": a word for reading.
Description, as the server wrote it Reads how far the setup has got and says what to do next. Once the person has paid, this call gets their number; when status is "ready" it returns their new BuzzMeBro number and swap_the_buzzer: the steps to get the building to point the buzzer at that number, and ready-to-send messages for building management, the landlord, the concierge, the superintendent or a building portal.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
partner_applyStarts a partner application with the person’s details and returns application_id and application_token.No findings
Why it is in this group
- The name "partner_apply" says "apply": a word for a change.
Description, as the server wrote it Starts a partner application with the person’s details and returns application_id and application_token. Only call it when the person has asked to join. No text is sent by this call. Next: partner_send_code.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
partner_claim_keyAfter the person accepted the terms: returns their partner link, code and partner key.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it After the person accepted the terms: returns their partner link, code and partner key. The key is shown once; keep it private and use it for the partner_get_* tools. The application token stops working after this call.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
partner_confirm_codeChecks the texted code.No findings
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it Checks the texted code. Five tries per application. Next: partner_terms_link.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
partner_create_sublinkAdds a tracked link with its own code for one location, building or staff member (up to 50).No findings
Why it is in this group
- The name "partner_create_sublink" says "create": a word for a change.
Description, as the server wrote it Adds a tracked link with its own code for one location, building or staff member (up to 50). Renters who use it count for this partner, with the same two-months-free perk.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
partner_payout_linkReturns a one-time link to a BuzzMeBro page that sends the person to Stripe’s own secure page, where THEY confirm their identity and add their bank.No findings
Why it is in this group
- The name "partner_payout_link" says "link": a word for a change.
Description, as the server wrote it Returns a one-time link to a BuzzMeBro page that sends the person to Stripe’s own secure page, where THEY confirm their identity and add their bank. You never see or type bank details. Payouts start once they have at least $25 ready. First-time setup only: once payouts work, payout changes are made by the partner on their signed-in dashboard. The partner gets a text whenever this link is made.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
partner_terms_linkReturns a one-time link to the partner terms.No findings
Why it is in this group
- The name "partner_terms_link" says "link": a word for a change.
Description, as the server wrote it Returns a one-time link to the partner terms. Give it to the person: they read the terms and press Accept themselves. You cannot accept for them. When they say it is done, call partner_claim_key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
start_checkoutAfter confirm_phone_code: creates the person’s BuzzMeBro account and apartment and returns payment_url, Stripe’s own secure page where the person approves a card, Apple Pay, Google…No findings
Why it is in this group
- The name "start_checkout" says "start": a word for a change.
Description, as the server wrote it After confirm_phone_code: creates the person’s BuzzMeBro account and apartment and returns payment_url, Stripe’s own secure page where the person approves a card, Apple Pay, Google Pay or Link (with the free month when it applies, nothing is charged until it ends). Give them the link or message_for_the_person; you never see or type card details. Calling it again returns a fresh link for the same apartment.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 5Claude Code: allow
partner_get_kitReturns ready texts, a resident email, a move-in text and email to forward to new tenants, desk card and move-in insert wording with the partner’s link, links to the partner’s prin…No findings
Why it is in this group
- The name "partner_get_kit" says "get": a word for reading.
Description, as the server wrote it Returns ready texts, a resident email, a move-in text and email to forward to new tenants, desk card and move-in insert wording with the partner’s link, links to the partner’s printable move-in package (move-in insert and QR card PDFs with their own QR and code), plus the house rules for sharing (honest words only, no pressure, never ask residents for phone numbers or door codes).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
partner_get_linksReturns the partner’s share link, typed code, a QR code (SVG) and their dashboard address.No findings
Why it is in this group
- The name "partner_get_links" says "get": a word for reading.
Description, as the server wrote it Returns the partner’s share link, typed code, a QR code (SVG) and their dashboard address.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
partner_get_statsReturns status, visits, signups, free months, paying apartments, collected revenue, earnings by state (on hold, ready, paid, reversed), the share ledger (apartments as codes only, …No findings
Why it is in this group
- The name "partner_get_stats" says "get": a word for reading.
Description, as the server wrote it Returns status, visits, signups, free months, paying apartments, collected revenue, earnings by state (on hold, ready, paid, reversed), the share ledger (apartments as codes only, never names or addresses) and payout history. Quote only these numbers.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
partner_list_sublinksLists the extra tracked links (one per location, building or staff member) with each one’s visits, apartments and earnings.No findings
Why it is in this group
- The name "partner_list_sublinks" says "list": a word for reading.
Description, as the server wrote it Lists the extra tracked links (one per location, building or staff member) with each one’s visits, apartments and earnings. Every apartment and every dollar rolls up to the partner.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
partner_program_infoReturns how the partner program works: the 50% share of collected revenue, what counts and what does not, when and how payouts happen, the rules, and the steps to join.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Returns how the partner program works: the 50% share of collected revenue, what counts and what does not, when and how payouts happen, the rules, and the steps to join. Call it first and explain it to the person before applying. Stores nothing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.2.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http buzzmebro https://buzzmebro.com/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__buzzmebro__partner_program_info",
"mcp__buzzmebro__partner_get_links",
"mcp__buzzmebro__partner_get_kit",
"mcp__buzzmebro__partner_get_stats",
"mcp__buzzmebro__partner_list_sublinks"
],
"ask": [
"mcp__buzzmebro__check_building",
"mcp__buzzmebro__create_setup",
"mcp__buzzmebro__send_phone_code",
"mcp__buzzmebro__confirm_phone_code",
"mcp__buzzmebro__start_checkout",
"mcp__buzzmebro__get_setup_status",
"mcp__buzzmebro__partner_apply",
"mcp__buzzmebro__partner_send_code",
"mcp__buzzmebro__partner_confirm_code",
"mcp__buzzmebro__partner_terms_link",
"mcp__buzzmebro__partner_claim_key",
"mcp__buzzmebro__partner_payout_link",
"mcp__buzzmebro__partner_create_sublink"
],
"deny": [
"mcp__buzzmebro__partner_disable_sublink",
"mcp__buzzmebro__partner_rotate_key"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as buzzmebro. Review it before you use it.