AUTOGROK Desk
by desk.grokaiapps.com · remote · no sign-in to list tools · v1.0.0 · published by com.grokaiapps.desk
Pay-per-call web jobs for agents: URL probe, page extract, watch, JSON shape, researched briefs.
9 tools: 1 can delete or cancel things, 7 change things and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things7Claude Code: ask: see these tools
- Only reads1Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http autogrok-desk https://desk.grokaiapps.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnurl_probe
The server marks "url_probe" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.
- Warnpage_extract
The server marks "page_extract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.
- Warnwatch_once
The server marks "watch_once" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.
- Warnjson_shape
The server marks "json_shape" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
9 tools
Deletes or cancels 1Claude Code: deny
tip_remainingWhen you're done with a pack, tip everything left on it (unused credits at the price paid + pack balance) to AUTOGROK Desk.No findings
Why it is in this group
- The description says "can't be undone".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it When you're done with a pack, tip everything left on it (unused credits at the price paid + pack balance) to AUTOGROK Desk. No new charge; it clears the pack to zero and can't be undone. Needs header X-Entitlement-Key. Call with confirm=false (or omit) to see the amount; then confirm=true with expect_usd set to that amount.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
Changes things 7Claude Code: ask
briefCall when you need a researched written brief on a topic (not instant).No findings
Why it is in this group
- The description's first verb is "call": a word for a change.
Description, as the server wrote it Call when you need a researched written brief on a topic (not instant). Delivered within 24h, usually same day: ~500 words default (max_words 50-1500), at least 3 cited public source links. Returns job id + dueBy now; poll GET /v1/jobs/:id (free) for result {title, summary, body_markdown, sources, word_count}. Public web sources only. Price: $0.25 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
deep_briefCall when you need decision-grade research, not a quick note.No findings
Why it is in this group
- The description's first verb is "call": a word for a change.
Description, as the server wrote it Call when you need decision-grade research, not a quick note. Long-form brief delivered within 24h: ~1500 words (1200-2000), executive summary + key findings + analysis, at least 8 cited public sources, operator-checked. Returns job id + dueBy; poll GET /v1/jobs/:id (free) for {title, summary, body_markdown, sources, word_count}. Free sample: /samples/brief-x402-bazaar-discovery.md Price: $9.00 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
json_shapeCall when you have messy text (JSON blob or key:value lines) and need a heuristic object shaped by schema_hint — no LLM.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "json_shape" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
Description, as the server wrote it Call when you have messy text (JSON blob or key:value lines) and need a heuristic object shaped by schema_hint — no LLM. Cap 50k chars. Use to normalize tool dumps before structured follow-up. Not for NLP understanding or free-form writing. Price: $0.15 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
page_extractCall when an agent needs readable main content from a public web page as markdown plus title/description.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "page_extract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.
Description, as the server wrote it Call when an agent needs readable main content from a public web page as markdown plus title/description. Use for summarization, RAG ingest, or quoting without a browser. Fetches once; blocks private/SSRF targets. Not for authenticated, paywalled, or non-HTML resources. Price: $0.05 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
support_requestOpen a support ticket with the people behind AUTOGROK Desk (payment or receipt, a failed job, credits, anything else).No findings
Why it is in this group
- The name "support_request" says "request": a word for a change.
Description, as the server wrote it Open a support ticket with the people behind AUTOGROK Desk (payment or receipt, a failed job, credits, anything else). Send X-Entitlement-Key on the connection or include an email. Returns a ticket id like HELP-XXXX. No automatic reply is sent; a person answers, usually within 1 business day.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
url_probeCall when you need a cheap reachability/health check before a heavier fetch.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "url_probe" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.
Description, as the server wrote it Call when you need a cheap reachability/health check before a heavier fetch. Probes a public http(s) URL (HEAD, GET fallback): status, final URL, content-type, timing. No full body download (GET peeks ≤8KB). SSRF-safe public hosts only. Not for authenticated or private network URLs. Price: $0.03 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
watch_onceCall for a one-shot change detector: fetch a public URL, hash normalized main text (sha256), optionally compare to previous_hash.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "watch_once" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.
Description, as the server wrote it Call for a one-shot change detector: fetch a public URL, hash normalized main text (sha256), optionally compare to previous_hash. Returns hash, changed true/false/null, word_count. Use for cheap page-watch loops; not a persistent webhook subscription. Price: $0.10 USDC per call (x402 on Base) or 1 prepaid pack credit. Failed calls aren't charged when you pay per call with x402: if the job errors, the USDC payment is never settled. With pack credits (X-Entitlement-Key), a call that fails gives its credit back.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Only reads 1Claude Code: allow
brief_statusFree.No findings
Why it is in this group
- The name "brief_status" says "status": a word for reading.
Description, as the server wrote it Free. Check a brief ordered with the brief or deep_brief tool. Delivered within 24h (usually same day): ~500 words by default (50–1500), at least 3 cited source links. Returns status, dueBy, and result {title, summary, body_markdown, sources, word_count} when done.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http autogrok-desk https://desk.grokaiapps.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__autogrok-desk__brief_status"
],
"ask": [
"mcp__autogrok-desk__url_probe",
"mcp__autogrok-desk__page_extract",
"mcp__autogrok-desk__watch_once",
"mcp__autogrok-desk__json_shape",
"mcp__autogrok-desk__brief",
"mcp__autogrok-desk__deep_brief",
"mcp__autogrok-desk__support_request"
],
"deny": [
"mcp__autogrok-desk__tip_remaining"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as autogrok-desk. Review it before you use it.