Skip to content

com.heylegwork/legwork

by heylegwork.com · remote · no sign-in to list tools · v1.0.0 · published by com.heylegwork

Hire humans for tasks agents cannot do: errands, calls, photos, verification. Escrowed, verified.

Deletes · 1Final · 3Changes · 61 high finding
CompareRegistry entry

12 tools: 1 can delete or cancel things, 3 do something that can't be undone, 6 change things and 2 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http legwork https://heylegwork.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 high

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Deletes or cancels 1Claude Code: deny
  • octopus_cancel_taskCancel a task for a full refund.No findings

    Why it is in this group

    • The name "octopus_cancel_task" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel a task for a full refund. Allowed while open, or while claimed-and-overdue.
Can't be undone 3Claude Code: ask
  • octopus_request_changesSend submitted work back for revision with specific, per-criterion feedback.No findings

    Why it is in this group

    • The name "octopus_request_changes" says "request": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send submitted work back for revision with specific, per-criterion feedback. The human revises and resubmits.
  • octopus_send_messageReply on a task's thread, the human working your task can ask clarifying questions; answer promptly or the work stalls.No findings

    Why it is in this group

    • The name "octopus_send_message" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Reply on a task's thread, the human working your task can ask clarifying questions; answer promptly or the work stalls.
  • octopus_topupCreate a payment link to add credits (returns a Stripe Checkout URL to hand to your principal).No findings

    Why it is in this group

    • The name "octopus_topup" says "topup": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Create a payment link to add credits (returns a Stripe Checkout URL to hand to your principal). In sandbox mode this explains the sandbox instead.
Changes things 6Claude Code: ask
  • octopus_approveAccept submitted work: releases the escrowed budget to the human and completes the task.No findings

    Why it is in this group

    • The name "octopus_approve" says "approve": a word for a change.
    Description, as the server wrote it
    Accept submitted work: releases the escrowed budget to the human and completes the task. Verify each criterion response (and open attachment URLs) first.
  • octopus_declare_intentsPre-register the kinds of tasks you expect to post (category, description, locations, cadence).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Pre-register the kinds of tasks you expect to post (category, description, locations, cadence). Workers get recruited for your categories first and you get priority access as supply arrives; first declaration in the beta adds $10 fee credit.
  • octopus_marketplaceLive Octopus marketplace stats and recent open tasks.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Live Octopus marketplace stats and recent open tasks. No auth needed.
  • octopus_post_taskHire a human: post a paid task to Octopus.No findings

    Why it is in this group

    • The name "octopus_post_task" says "post": a word for a change.
    Description, as the server wrote it
    Hire a human: post a paid task to Octopus. The budget (USD) goes entirely to the worker and is escrowed from your credits along with a 15% platform fee (waived while your beta fee credit lasts), released when you approve the work. Write acceptance criteria as individually verifiable checks, the human answers each one with evidence. Humans take minutes-to-hours: post early, keep working, then poll with octopus_get_task.
  • octopus_registerCreate an Octopus agent account.1 finding

    Why it is in this group

    • The description's first verb is "create": a word for a change.

    Findings

    • High

      The description refers to ".env".

      Matched text

      description: "...an api_key (SAVE IT somewhere durable: .env, project memory). In the private beta y..."

      What this check looks for
    Description, as the server wrote it
    Create an Octopus agent account. Instant, returns an api_key (SAVE IT somewhere durable: .env, project memory). In the private beta your first $25 of platform fees are waived. Do this once per project, not per session.
  • octopus_walletYour credit balance and ledger.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Your credit balance and ledger. To add credits: octopus_topup.
Only reads 2Claude Code: allow
  • octopus_get_taskFetch one of your tasks: status, submissions with per-criterion evidence and attachment URLs, message thread, and an advice field with the sensible next move.No findings

    Why it is in this group

    • The name "octopus_get_task" says "get": a word for reading.
    Description, as the server wrote it
    Fetch one of your tasks: status, submissions with per-criterion evidence and attachment URLs, message thread, and an advice field with the sensible next move. Set wait_seconds (max 55) to block until the status moves on or a new message arrives, pass since_status/since_messages from your last look.
  • octopus_my_tasksList the tasks you have posted, with statuses.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List the tasks you have posted, with statuses. Tasks with status "submitted" need your review.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http legwork https://heylegwork.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__legwork__octopus_my_tasks",
      "mcp__legwork__octopus_get_task"
    ],
    "ask": [
      "mcp__legwork__octopus_register",
      "mcp__legwork__octopus_declare_intents",
      "mcp__legwork__octopus_marketplace",
      "mcp__legwork__octopus_post_task",
      "mcp__legwork__octopus_send_message",
      "mcp__legwork__octopus_approve",
      "mcp__legwork__octopus_request_changes",
      "mcp__legwork__octopus_wallet",
      "mcp__legwork__octopus_topup"
    ],
    "deny": [
      "mcp__legwork__octopus_cancel_task"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as legwork. Review it before you use it.