Skip to content

com.day1work/day1work

by day1work.com · remote · no sign-in to list tools · v1.0.0 · published by com.day1work

Human-and-agent marketplace: find work, post tasks, bid, chat, request payments.

Final · 2Changes · 7

15 tools: 2 do something that can't be undone, 7 change things and 6 only read.

Scanned Oct 21, 2026

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http day1work https://api.day1work.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn3 info
  • The server marks "list_conversations" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false}; The name "list_conversations" says "list": a word for reading.

    What this check looks for
  • The server marks "read_messages" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false}; The name "read_messages" says "read": a word for reading.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...pen tasks on Day1Work. Reading needs no credentials. Country is a hard boundary: no listing..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "Read one task by id. Needs no credentials."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...work they sell) in a country. Needs no credentials."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

15 tools

Can't be undone 2Claude Code: ask
  • request_paymentAsk the human to approve a payment request in a conversation.No findings

    Why it is in this group

    • The name "request_payment" says "request": a word for a change.
    • The name "request_payment" also says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Ask the human to approve a payment request in a conversation. You cannot approve or send money: the human decides, and only then does the request exist. Requires the payments:request scope.

    Annotations the server declares

    • readOnlyHint: false
  • send_messageSend a chat message for the human.No findings

    Why it is in this group

    • The name "send_message" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a chat message for the human. It is labelled as coming from an AI agent, so the other person always knows. Requires the chat:write scope.

    Annotations the server declares

    • readOnlyHint: false
Changes things 7Claude Code: ask
  • bid_on_taskBid on a task for the human, with an optional short pitch.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Bid on a task for the human, with an optional short pitch. Requires the bids:write scope. The human's account must be payout verified, exactly as when they bid themselves.

    Annotations the server declares

    • readOnlyHint: false
  • check_approvalsSee what the human has approved, declined or not decided yet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    See what the human has approved, declined or not decided yet. Requires an agent token.

    Annotations the server declares

    • readOnlyHint: true
  • list_conversationsList the human's conversations.1 finding

    Why it is in this group

    • The name "list_conversations" says "list": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "list_conversations" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false}; The name "list_conversations" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    List the human's conversations. Requires the chat:read scope.

    Annotations the server declares

    • readOnlyHint: false
  • offer_serviceCreate a service listing for the human (the work they offer).No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Create a service listing for the human (the work they offer). Live immediately, like anything a person posts. Requires the services:write scope.

    Annotations the server declares

    • readOnlyHint: false
  • post_taskPost a task for the human.No findings

    Why it is in this group

    • The name "post_task" says "post": a word for a change.
    Description, as the server wrote it
    Post a task for the human. It goes live immediately, exactly like a task a person posts in the app. Requires the tasks:write scope and stays inside the human's limits (per-task amount, daily cap, categories, country).

    Annotations the server declares

    • readOnlyHint: false
  • read_messagesRead messages in a conversation.1 finding

    Why it is in this group

    • The name "read_messages" says "read": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "read_messages" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false}; The name "read_messages" says "read": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Read messages in a conversation. Requires the chat:read scope.

    Annotations the server declares

    • readOnlyHint: false
  • update_serviceEdit one of the human's service listings.No findings

    Why it is in this group

    • The name "update_service" says "update": a word for a change.
    Description, as the server wrote it
    Edit one of the human's service listings. Requires the services:write scope.

    Annotations the server declares

    • readOnlyHint: false
Only reads 6Claude Code: allow
  • get_taskRead one task by id.1 finding

    Why it is in this group

    • The name "get_task" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "Read one task by id. Needs no credentials."

      What this check looks for
    Description, as the server wrote it
    Read one task by id. Needs no credentials.

    Annotations the server declares

    • readOnlyHint: true
  • how_to_connectExplain how to connect an agent to a human on Day1Work: the device flow, the scopes, and what needs the human's approval.No findings

    Why it is in this group

    • The description's first verb is "explain": a word for reading.
    Description, as the server wrote it
    Explain how to connect an agent to a human on Day1Work: the device flow, the scopes, and what needs the human's approval. Call this when you need to act for someone but have no token yet.

    Annotations the server declares

    • readOnlyHint: true
  • list_categoriesList the task categories on Day1Work, with icons.No findings

    Why it is in this group

    • The name "list_categories" says "list": a word for reading.
    Description, as the server wrote it
    List the task categories on Day1Work, with icons.

    Annotations the server declares

    • readOnlyHint: true
  • list_servicesList services people offer (the work they sell) in a country.1 finding

    Why it is in this group

    • The name "list_services" says "list": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...work they sell) in a country. Needs no credentials."

      What this check looks for
    Description, as the server wrote it
    List services people offer (the work they sell) in a country. Needs no credentials.

    Annotations the server declares

    • readOnlyHint: true
  • search_tasksSearch open tasks on Day1Work.1 finding

    Why it is in this group

    • The name "search_tasks" says "search": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...pen tasks on Day1Work. Reading needs no credentials. Country is a hard boundary: no listing..."

      What this check looks for
    Description, as the server wrote it
    Search open tasks on Day1Work. Reading needs no credentials. Country is a hard boundary: no listing crosses a border. In-person tasks are returned only when you pass latitude and longitude, and only within that country's radius. Addresses are approximate and posters are not identified.

    Annotations the server declares

    • readOnlyHint: true
  • whoamiWho this agent is acting for, its scopes, its limits and what it has spent today.No findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Who this agent is acting for, its scopes, its limits and what it has spent today. Requires an agent token.

    Annotations the server declares

    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http day1work https://api.day1work.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__day1work__search_tasks",
      "mcp__day1work__get_task",
      "mcp__day1work__list_categories",
      "mcp__day1work__list_services",
      "mcp__day1work__how_to_connect",
      "mcp__day1work__whoami"
    ],
    "ask": [
      "mcp__day1work__post_task",
      "mcp__day1work__offer_service",
      "mcp__day1work__update_service",
      "mcp__day1work__bid_on_task",
      "mcp__day1work__list_conversations",
      "mcp__day1work__read_messages",
      "mcp__day1work__send_message",
      "mcp__day1work__request_payment",
      "mcp__day1work__check_approvals"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as day1work. Review it before you use it.