Skip to content

HumanFn

by humanfn.com · remote · no sign-in to list tools · v1.1.2 · published by com.humanfn

Qualified human outcomes for AI agents: attorney review of SaaS Terms/Privacy, on-site checks.

Deletes · 2Changes · 6

9 tools: 2 can delete or cancel things, 6 change things and 1 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http humanfn https://humanfn.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "find_human_function" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "find_human_function" says "find": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Deletes or cancels 2Claude Code: deny
  • cancel_executionBefore payment: withdraws the request (no charge).No findings

    Why it is in this group

    • The name "cancel_execution" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Before payment: withdraws the request (no charge). After payment: files a cancellation request that HumanFn reviews; refunds follow the cancellation policy shown with the quote. Returns the resulting phase.

    Annotations the server declares

    • title: Cancel a request or job
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • confirm_executionConfirms an on-site task quote the human approved and returns the link where they pay.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Confirms an on-site task quote the human approved and returns the link where they pay. Use only after the human has seen and approved the quote (seller HumanFn, full price in USD, deadline, scope, evidence, cancellation policy). Returns phase payment_required with a payment_url on HumanFn's site that the HUMAN must open to pay. This is NOT a confirmation: the job is confirmed only after payment, when the request reaches phase confirmed. Safe to call again; it never charges by itself. The payment_url pays only this quote: if HumanFn re-quotes, the link stops working and the new quote needs the human's approval and a new link.

    Annotations the server declares

    • title: Confirm an approved quote: get the payment link (execution confirmation)
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Changes things 6Claude Code: ask
  • accept_human_function_offerRecords that the USER explicitly accepted a HumanFn offer (from check_saas_legal_review) at its exact price, when they accept in the conversation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Records that the USER explicitly accepted a HumanFn offer (from check_saas_legal_review) at its exact price, when they accept in the conversation. Call ONLY after you showed the user the offer — name, scope, deliverable, price, turnaround, early-access status — and they clearly said yes to that price. Pass their words verbatim as user_confirmation. Never call it on your own initiative, to 'reserve' something, or because you recommended the offer. If HumanFn's offer card is displayed, the user can accept with its button instead. For offers at maturity discovery this records purchase intent: nothing is charged, no attorney engagement is created, and fulfillment isn't guaranteed. The result includes a message for the user.

    Annotations the server declares

    • title: Record the user's explicit acceptance of a HumanFn offer
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • answer_clarificationUse when a request is in phase needs_clarification.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Use when a request is in phase needs_clarification. Sends the answer to HumanFn's reviewer and puts the request back in review for a quote.

    Annotations the server declares

    • title: Answer HumanFn's clarifying question
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • find_human_functionUse when your workflow reaches a step that should be completed or verified by a qualified human professional — attorney review, professional sign-off, expert verification, licensed…1 finding

    Why it is in this group

    • The name "find_human_function" says "find": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "find_human_function" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "find_human_function" says "find": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Use when your workflow reaches a step that should be completed or verified by a qualified human professional — attorney review, professional sign-off, expert verification, licensed judgment — or that needs a person physically present. Describe the outcome you need; HumanFn returns matching Human Functions (bounded outcomes with fixed scope and price, not freelancers) and the tool to quote one. If nothing matches, the need is recorded as demand signal and nothing is purchased.

    Annotations the server declares

    • title: Find a qualified human outcome for a step AI shouldn't finish alone
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • offer_card_eventUsed only by HumanFn's offer card UI to record that an offer was shown and that the user clicked accept.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Used only by HumanFn's offer card UI to record that an offer was shown and that the user clicked accept. Never call it yourself.

    Annotations the server declares

    • title: Offer card event (UI only)
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • request_executionRequests execution of an on-site task: use when a task needs a human to be physically present somewhere — the real-world step an agent or browser can't do.No findings

    Why it is in this group

    • The name "request_execution" says "request": a word for a change.
    Description, as the server wrote it
    Requests execution of an on-site task: use when a task needs a human to be physically present somewhere — the real-world step an agent or browser can't do. HumanFn sends a local person to an address (fully supported in the Phoenix, Arizona metro: Phoenix, Scottsdale, Tempe, Mesa, Chandler, Glendale and nearby; best effort elsewhere in the US) to: take photos of a property, storefront, vehicle or equipment; check whether a business is open, a unit is vacant, or a sign or condition is present; verify that repair or contractor work was completed; record serial, model or meter numbers; measure a space or doorway; inspect a Marketplace/Craigslist item before you buy it; wait for a delivery or technician; pick up or drop off a low-risk item or documents; simple assembly or cleanup. Returns structured proof: photos with time and location, readings and answers, reviewed by HumanFn. Creates a request for a QUOTE. Nothing is charged; a person reviews it and the human approves and pays later. The Phoenix, Arizona metro area is fully supported. Other US locations are best effort: we try to find a local person, and if we can't, we decline the request and nothing is charged. Requests outside the US are declined. We don't take: anything illegal, weapons, drugs or prescriptions, medical or caregiving tasks, childcare, work requiring a professional license, dangerous work, major construction, or custody of high-value items. Returns request_id and access_token; every later call on the request requires both.

    Annotations the server declares

    • title: Request an on-site task at an address (execution request)
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 1Claude Code: allow
  • get_requestReturns the current state of an HumanFn request: `phase` (quote_pending, needs_clarification, declined, quoted, quote_expired, payment_required, confirmed, in_progress, completed, …No findings

    Why it is in this group

    • The name "get_request" says "get": a word for reading.
    Description, as the server wrote it
    Returns the current state of an HumanFn request: `phase` (quote_pending, needs_clarification, declined, quoted, quote_expired, payment_required, confirmed, in_progress, completed, failed, cancelled, cancellation_requested — unknown phases mean pending), the quote (price, deadline, scope, evidence you will receive, cancellation policy), job status, the result when completed, and next_poll_after_seconds, the minimum wait before checking again.

    Annotations the server declares

    • title: Get request status, quote and result
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http humanfn https://humanfn.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__humanfn__get_request"
    ],
    "ask": [
      "mcp__humanfn__check_saas_legal_review",
      "mcp__humanfn__accept_human_function_offer",
      "mcp__humanfn__offer_card_event",
      "mcp__humanfn__find_human_function",
      "mcp__humanfn__request_execution",
      "mcp__humanfn__answer_clarification"
    ],
    "deny": [
      "mcp__humanfn__confirm_execution",
      "mcp__humanfn__cancel_execution"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as humanfn. Review it before you use it.