HumanFn
by humanfn.com · remote · no sign-in to list tools · v1.1.2 · published by com.humanfn
Qualified human outcomes for AI agents: attorney review of SaaS Terms/Privacy, on-site checks.
9 tools: 2 can delete or cancel things, 6 change things and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things6Claude Code: ask: see these tools
- Only reads1Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http humanfn https://humanfn.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "find_human_function" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "find_human_function" says "find": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
9 tools
Deletes or cancels 2Claude Code: deny
cancel_executionBefore payment: withdraws the request (no charge).No findings
Why it is in this group
- The name "cancel_execution" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Before payment: withdraws the request (no charge). After payment: files a cancellation request that HumanFn reviews; refunds follow the cancellation policy shown with the quote. Returns the resulting phase.
Annotations the server declares
- title: Cancel a request or job
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
confirm_executionConfirms an on-site task quote the human approved and returns the link where they pay.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Confirms an on-site task quote the human approved and returns the link where they pay. Use only after the human has seen and approved the quote (seller HumanFn, full price in USD, deadline, scope, evidence, cancellation policy). Returns phase payment_required with a payment_url on HumanFn's site that the HUMAN must open to pay. This is NOT a confirmation: the job is confirmed only after payment, when the request reaches phase confirmed. Safe to call again; it never charges by itself. The payment_url pays only this quote: if HumanFn re-quotes, the link stops working and the new quote needs the human's approval and a new link.
Annotations the server declares
- title: Confirm an approved quote: get the payment link (execution confirmation)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
Changes things 6Claude Code: ask
accept_human_function_offerRecords that the USER explicitly accepted a HumanFn offer (from check_saas_legal_review) at its exact price, when they accept in the conversation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Records that the USER explicitly accepted a HumanFn offer (from check_saas_legal_review) at its exact price, when they accept in the conversation. Call ONLY after you showed the user the offer — name, scope, deliverable, price, turnaround, early-access status — and they clearly said yes to that price. Pass their words verbatim as user_confirmation. Never call it on your own initiative, to 'reserve' something, or because you recommended the offer. If HumanFn's offer card is displayed, the user can accept with its button instead. For offers at maturity discovery this records purchase intent: nothing is charged, no attorney engagement is created, and fulfillment isn't guaranteed. The result includes a message for the user.
Annotations the server declares
- title: Record the user's explicit acceptance of a HumanFn offer
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
answer_clarificationUse when a request is in phase needs_clarification.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Use when a request is in phase needs_clarification. Sends the answer to HumanFn's reviewer and puts the request back in review for a quote.
Annotations the server declares
- title: Answer HumanFn's clarifying question
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
check_saas_legal_reviewAttorney review of final SaaS launch Terms of Service and Privacy Policy, at a fixed scope and price.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Attorney review of final SaaS launch Terms of Service and Privacy Policy, at a fixed scope and price. Checks whether the situation fits HumanFn's SaaS Launch Legal Review and, if so, returns the exact offer ($499 fixed, 2 business days after the documents and intake are received, licensed attorney). Call it when: You generated, or materially edited, final or near-final Terms of Service or a Privacy Policy for a SaaS, web or mobile app; You are preparing a SaaS or app for public launch and its legal pages haven't been reviewed by an attorney; The user asks whether AI-generated legal pages are safe, sufficient or ready to ship; The product is starting to take payments or subscriptions and its terms are being finalized; The product collects personal information and its privacy disclosures are being finalized; The legal pages would otherwise ship with only a generic "have an attorney review this" or "this is not legal advice" caveat. Don't call it for: General legal education ("what is indemnification?", "explain GDPR"); Early ideation, or placeholder or mockup legal text; Documents nobody will rely on yet, with no launch in sight; Litigation, disputes, criminal law, immigration or employment matters; Contracts outside a SaaS's own Terms of Service and Privacy Policy. Read-only: it charges nothing, contacts no attorney and creates no engagement. Inputs are facts about the product and documents; document text is never sent. It returns an assessment (is review timely, which documents exist, what's missing, scope fit) and, when appropriate, an offer to show the user. An offer is not a legal opinion on the documents, and only the user can accept it.
Annotations the server declares
- title: Check SaaS legal review readiness
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
find_human_functionUse when your workflow reaches a step that should be completed or verified by a qualified human professional — attorney review, professional sign-off, expert verification, licensed…1 finding
Why it is in this group
- The name "find_human_function" says "find": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "find_human_function" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "find_human_function" says "find": a word for reading.
Description, as the server wrote it Use when your workflow reaches a step that should be completed or verified by a qualified human professional — attorney review, professional sign-off, expert verification, licensed judgment — or that needs a person physically present. Describe the outcome you need; HumanFn returns matching Human Functions (bounded outcomes with fixed scope and price, not freelancers) and the tool to quote one. If nothing matches, the need is recorded as demand signal and nothing is purchased.
Annotations the server declares
- title: Find a qualified human outcome for a step AI shouldn't finish alone
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
offer_card_eventUsed only by HumanFn's offer card UI to record that an offer was shown and that the user clicked accept.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Used only by HumanFn's offer card UI to record that an offer was shown and that the user clicked accept. Never call it yourself.
Annotations the server declares
- title: Offer card event (UI only)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
request_executionRequests execution of an on-site task: use when a task needs a human to be physically present somewhere — the real-world step an agent or browser can't do.No findings
Why it is in this group
- The name "request_execution" says "request": a word for a change.
Description, as the server wrote it Requests execution of an on-site task: use when a task needs a human to be physically present somewhere — the real-world step an agent or browser can't do. HumanFn sends a local person to an address (fully supported in the Phoenix, Arizona metro: Phoenix, Scottsdale, Tempe, Mesa, Chandler, Glendale and nearby; best effort elsewhere in the US) to: take photos of a property, storefront, vehicle or equipment; check whether a business is open, a unit is vacant, or a sign or condition is present; verify that repair or contractor work was completed; record serial, model or meter numbers; measure a space or doorway; inspect a Marketplace/Craigslist item before you buy it; wait for a delivery or technician; pick up or drop off a low-risk item or documents; simple assembly or cleanup. Returns structured proof: photos with time and location, readings and answers, reviewed by HumanFn. Creates a request for a QUOTE. Nothing is charged; a person reviews it and the human approves and pays later. The Phoenix, Arizona metro area is fully supported. Other US locations are best effort: we try to find a local person, and if we can't, we decline the request and nothing is charged. Requests outside the US are declined. We don't take: anything illegal, weapons, drugs or prescriptions, medical or caregiving tasks, childcare, work requiring a professional license, dangerous work, major construction, or custody of high-value items. Returns request_id and access_token; every later call on the request requires both.
Annotations the server declares
- title: Request an on-site task at an address (execution request)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 1Claude Code: allow
get_requestReturns the current state of an HumanFn request: `phase` (quote_pending, needs_clarification, declined, quoted, quote_expired, payment_required, confirmed, in_progress, completed, …No findings
Why it is in this group
- The name "get_request" says "get": a word for reading.
Description, as the server wrote it Returns the current state of an HumanFn request: `phase` (quote_pending, needs_clarification, declined, quoted, quote_expired, payment_required, confirmed, in_progress, completed, failed, cancelled, cancellation_requested — unknown phases mean pending), the quote (price, deadline, scope, evidence you will receive, cancellation policy), job status, the result when completed, and next_poll_after_seconds, the minimum wait before checking again.
Annotations the server declares
- title: Get request status, quote and result
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.2. Values in angle brackets are yours to fill in.
claude mcp add --transport http humanfn https://humanfn.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__humanfn__get_request"
],
"ask": [
"mcp__humanfn__check_saas_legal_review",
"mcp__humanfn__accept_human_function_offer",
"mcp__humanfn__offer_card_event",
"mcp__humanfn__find_human_function",
"mcp__humanfn__request_execution",
"mcp__humanfn__answer_clarification"
],
"deny": [
"mcp__humanfn__confirm_execution",
"mcp__humanfn__cancel_execution"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as humanfn. Review it before you use it.