Skip to content

AUTOGROK Desk

by desk.grokaiapps.com · remote · no sign-in to list tools · v1.0.0 · published by com.grokaiapps.desk

Pay-per-call web jobs for agents: URL probe, page extract, watch, JSON shape, researched briefs.

Deletes · 1Changes · 7

9 tools: 1 can delete or cancel things, 7 change things and 1 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http autogrok-desk https://desk.grokaiapps.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "url_probe" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

    What this check looks for
  • The server marks "page_extract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

    What this check looks for
  • The server marks "watch_once" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

    What this check looks for
  • The server marks "json_shape" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Deletes or cancels 1Claude Code: deny
  • tip_remainingWhen you're done with a pack, tip everything left on it (unused credits at the price paid + pack balance) to AUTOGROK Desk.No findings

    Why it is in this group

    • The description says "can't be undone".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    When you're done with a pack, tip everything left on it (unused credits at the price paid + pack balance) to AUTOGROK Desk. No new charge; it clears the pack to zero and can't be undone. Needs header X-Entitlement-Key. Call with confirm=false (or omit) to see the amount; then confirm=true with expect_usd set to that amount.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Changes things 7Claude Code: ask
  • briefCall when you need a researched written brief on a topic (not instant).No findings

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    Description, as the server wrote it
    Call when you need a researched written brief on a topic (not instant). Delivered within 24h, usually same day: ~500 words default (max_words 50-1500), at least 3 cited public source links. Returns job id + dueBy now; poll GET /v1/jobs/:id (free) for result {title, summary, body_markdown, sources, word_count}. Public web sources only. Price: $0.25 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • deep_briefCall when you need decision-grade research, not a quick note.No findings

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    Description, as the server wrote it
    Call when you need decision-grade research, not a quick note. Long-form brief delivered within 24h: ~1500 words (1200-2000), executive summary + key findings + analysis, at least 8 cited public sources, operator-checked. Returns job id + dueBy; poll GET /v1/jobs/:id (free) for {title, summary, body_markdown, sources, word_count}. Free sample: /samples/brief-x402-bazaar-discovery.md Price: $9.00 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • json_shapeCall when you have messy text (JSON blob or key:value lines) and need a heuristic object shaped by schema_hint — no LLM.1 finding

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "json_shape" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Call when you have messy text (JSON blob or key:value lines) and need a heuristic object shaped by schema_hint — no LLM. Cap 50k chars. Use to normalize tool dumps before structured follow-up. Not for NLP understanding or free-form writing. Price: $0.15 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • page_extractCall when an agent needs readable main content from a public web page as markdown plus title/description.1 finding

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "page_extract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Call when an agent needs readable main content from a public web page as markdown plus title/description. Use for summarization, RAG ingest, or quoting without a browser. Fetches once; blocks private/SSRF targets. Not for authenticated, paywalled, or non-HTML resources. Price: $0.05 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • support_requestOpen a support ticket with the people behind AUTOGROK Desk (payment or receipt, a failed job, credits, anything else).No findings

    Why it is in this group

    • The name "support_request" says "request": a word for a change.
    Description, as the server wrote it
    Open a support ticket with the people behind AUTOGROK Desk (payment or receipt, a failed job, credits, anything else). Send X-Entitlement-Key on the connection or include an email. Returns a ticket id like HELP-XXXX. No automatic reply is sent; a person answers, usually within 1 business day.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • url_probeCall when you need a cheap reachability/health check before a heavier fetch.1 finding

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "url_probe" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Call when you need a cheap reachability/health check before a heavier fetch. Probes a public http(s) URL (HEAD, GET fallback): status, final URL, content-type, timing. No full body download (GET peeks ≤8KB). SSRF-safe public hosts only. Not for authenticated or private network URLs. Price: $0.03 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • watch_onceCall for a one-shot change detector: fetch a public URL, hash normalized main text (sha256), optionally compare to previous_hash.1 finding

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "watch_once" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Call for a one-shot change detector: fetch a public URL, hash normalized main text (sha256), optionally compare to previous_hash. Returns hash, changed true/false/null, word_count. Use for cheap page-watch loops; not a persistent webhook subscription. Price: $0.10 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 1Claude Code: allow
  • brief_statusFree.No findings

    Why it is in this group

    • The name "brief_status" says "status": a word for reading.
    Description, as the server wrote it
    Free. Check a brief ordered with the brief or deep_brief tool. Delivered within 24h (usually same day): ~500 words by default (50–1500), at least 3 cited source links. Returns status, dueBy, and result {title, summary, body_markdown, sources, word_count} when done.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http autogrok-desk https://desk.grokaiapps.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__autogrok-desk__brief_status"
    ],
    "ask": [
      "mcp__autogrok-desk__url_probe",
      "mcp__autogrok-desk__page_extract",
      "mcp__autogrok-desk__watch_once",
      "mcp__autogrok-desk__json_shape",
      "mcp__autogrok-desk__brief",
      "mcp__autogrok-desk__deep_brief",
      "mcp__autogrok-desk__support_request"
    ],
    "deny": [
      "mcp__autogrok-desk__tip_remaining"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as autogrok-desk. Review it before you use it.