com. day1work/ day1work
by day1work.com · remote · no sign-in to list tools · v1.0.0 · published by com.day1work
Human-and-agent marketplace: find work, post tasks, bid, chat, request payments.
15 tools: 2 do something that can't be undone, 7 change things and 6 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone2Claude Code: ask: see these tools
- Changes things7Claude Code: ask: see these tools
- Only reads6Claude Code: allow: see these tools
5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http day1work https://api.day1work.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "list_conversations" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false}; The name "list_conversations" says "list": a word for reading.
- Warnread_messages
The server marks "read_messages" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false}; The name "read_messages" says "read": a word for reading.
- Infosearch_tasks
The description mentions "credentials".
What this check looks forMatched text
description: "...pen tasks on Day1Work. Reading needs no credentials. Country is a hard boundary: no listing..."
- Infoget_task
The description mentions "credentials".
What this check looks forMatched text
description: "Read one task by id. Needs no credentials."
- Infolist_services
The description mentions "credentials".
What this check looks forMatched text
description: "...work they sell) in a country. Needs no credentials."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
15 tools
Can't be undone 2Claude Code: ask
request_paymentAsk the human to approve a payment request in a conversation.No findings
Why it is in this group
- The name "request_payment" says "request": a word for a change.
- The name "request_payment" also says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Ask the human to approve a payment request in a conversation. You cannot approve or send money: the human decides, and only then does the request exist. Requires the payments:request scope.
Annotations the server declares
- readOnlyHint: false
send_messageSend a chat message for the human.No findings
Why it is in this group
- The name "send_message" says "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Send a chat message for the human. It is labelled as coming from an AI agent, so the other person always knows. Requires the chat:write scope.
Annotations the server declares
- readOnlyHint: false
Changes things 7Claude Code: ask
bid_on_taskBid on a task for the human, with an optional short pitch.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Bid on a task for the human, with an optional short pitch. Requires the bids:write scope. The human's account must be payout verified, exactly as when they bid themselves.
Annotations the server declares
- readOnlyHint: false
check_approvalsSee what the human has approved, declined or not decided yet.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it See what the human has approved, declined or not decided yet. Requires an agent token.
Annotations the server declares
- readOnlyHint: true
list_conversationsList the human's conversations.1 finding
Why it is in this group
- The name "list_conversations" says "list": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "list_conversations" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false}; The name "list_conversations" says "list": a word for reading.
Description, as the server wrote it List the human's conversations. Requires the chat:read scope.
Annotations the server declares
- readOnlyHint: false
offer_serviceCreate a service listing for the human (the work they offer).No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it Create a service listing for the human (the work they offer). Live immediately, like anything a person posts. Requires the services:write scope.
Annotations the server declares
- readOnlyHint: false
post_taskPost a task for the human.No findings
Why it is in this group
- The name "post_task" says "post": a word for a change.
Description, as the server wrote it Post a task for the human. It goes live immediately, exactly like a task a person posts in the app. Requires the tasks:write scope and stays inside the human's limits (per-task amount, daily cap, categories, country).
Annotations the server declares
- readOnlyHint: false
read_messagesRead messages in a conversation.1 finding
Why it is in this group
- The name "read_messages" says "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "read_messages" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false}; The name "read_messages" says "read": a word for reading.
Description, as the server wrote it Read messages in a conversation. Requires the chat:read scope.
Annotations the server declares
- readOnlyHint: false
update_serviceEdit one of the human's service listings.No findings
Why it is in this group
- The name "update_service" says "update": a word for a change.
Description, as the server wrote it Edit one of the human's service listings. Requires the services:write scope.
Annotations the server declares
- readOnlyHint: false
Only reads 6Claude Code: allow
get_taskRead one task by id.1 finding
Why it is in this group
- The name "get_task" says "get": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "Read one task by id. Needs no credentials."
Description, as the server wrote it Read one task by id. Needs no credentials.
Annotations the server declares
- readOnlyHint: true
how_to_connectExplain how to connect an agent to a human on Day1Work: the device flow, the scopes, and what needs the human's approval.No findings
Why it is in this group
- The description's first verb is "explain": a word for reading.
Description, as the server wrote it Explain how to connect an agent to a human on Day1Work: the device flow, the scopes, and what needs the human's approval. Call this when you need to act for someone but have no token yet.
Annotations the server declares
- readOnlyHint: true
list_categoriesList the task categories on Day1Work, with icons.No findings
Why it is in this group
- The name "list_categories" says "list": a word for reading.
Description, as the server wrote it List the task categories on Day1Work, with icons.
Annotations the server declares
- readOnlyHint: true
list_servicesList services people offer (the work they sell) in a country.1 finding
Why it is in this group
- The name "list_services" says "list": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...work they sell) in a country. Needs no credentials."
Description, as the server wrote it List services people offer (the work they sell) in a country. Needs no credentials.
Annotations the server declares
- readOnlyHint: true
search_tasksSearch open tasks on Day1Work.1 finding
Why it is in this group
- The name "search_tasks" says "search": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...pen tasks on Day1Work. Reading needs no credentials. Country is a hard boundary: no listing..."
Description, as the server wrote it Search open tasks on Day1Work. Reading needs no credentials. Country is a hard boundary: no listing crosses a border. In-person tasks are returned only when you pass latitude and longitude, and only within that country's radius. Addresses are approximate and posters are not identified.
Annotations the server declares
- readOnlyHint: true
whoamiWho this agent is acting for, its scopes, its limits and what it has spent today.No findings
Why it is in this group
- The name "whoami" says "whoami": a word for reading.
Description, as the server wrote it Who this agent is acting for, its scopes, its limits and what it has spent today. Requires an agent token.
Annotations the server declares
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http day1work https://api.day1work.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__day1work__search_tasks",
"mcp__day1work__get_task",
"mcp__day1work__list_categories",
"mcp__day1work__list_services",
"mcp__day1work__how_to_connect",
"mcp__day1work__whoami"
],
"ask": [
"mcp__day1work__post_task",
"mcp__day1work__offer_service",
"mcp__day1work__update_service",
"mcp__day1work__bid_on_task",
"mcp__day1work__list_conversations",
"mcp__day1work__read_messages",
"mcp__day1work__send_message",
"mcp__day1work__request_payment",
"mcp__day1work__check_approvals"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as day1work. Review it before you use it.