Skip to content

Hydracept

by hydracept.com · remote · local (pypi) · no sign-in to list tools · v0.5.3 · published by com.hydracept

Hosted MCP for Hydracept: discover capabilities, run jobs, receipts, BYOK or managed billing.

Deletes · 1Changes · 2
CompareRegistry entry

11 tools: 1 can delete or cancel things, 2 change things and 8 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hydracept https://api.hydracept.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnhydracept_cancel_job

    The server marks "hydracept_cancel_job" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "hydracept_cancel_job" says "cancel": a word for removing or ending something.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Deletes or cancels 1Claude Code: deny
  • hydracept_cancel_jobRequest cancellation of one job.1 finding

    Why it is in this group

    • The name "hydracept_cancel_job" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "hydracept_cancel_job" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "hydracept_cancel_job" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Request cancellation of one job. Use only when the user explicitly asks to cancel the job itself; stopping a local polling loop is not a cancellation. Returns whether the request was accepted, whether the job is already terminal, and the next action. Never promise that upstream provider work stopped or that already-incurred cost is refunded. Safe to retry: a terminal job reports its terminal state. Requires bearer key. Returns: Cancellation outcome envelope with job status, terminal flag, and next action. Errors: WORKSPACE_KEY_REQUIRED, NOT_FOUND, INVALID_ARGUMENT.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
    • title: Cancel a job
Changes things 2Claude Code: ask
  • hydracept_runRun a capability (paid).No findings

    Why it is in this group

    • The name "hydracept_run" says "run": a word for a change.
    Description, as the server wrote it
    Run a capability (paid). Use when the user wants execution — not for quotes (hydracept_quote_capability), status (hydracept_job_status), or receipts (hydracept_get_receipt). Default wait=true waits until the job finishes; use hydracept_submit_job when this call must return immediately. Picks invoke vs durable job from the capability descriptor. Requires bearer key. Settles at actual provider cost plus any managed service fee; no per-call minimum. May create jobs, artifacts, and provider usage. Returns: Terminal hydracept.run-result.v1 or job envelope when wait=false. Errors: WORKSPACE_KEY_REQUIRED, INVALID_ARGUMENT, FundingRequired, EXECUTION_FAILED, job timeout when wait exhausts.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Run a capability
  • hydracept_submit_jobStart a capability job and return its id immediately (paid).No findings

    Why it is in this group

    • The name "hydracept_submit_job" says "submit": a word for a change.
    Description, as the server wrote it
    Start a capability job and return its id immediately (paid). Use when execution is required but this MCP call must not block — not for quotes or status checks. Prefer hydracept_run when waiting is acceptable. Poll with hydracept_job_status. Same billing as hydracept_run. Requires bearer key. Returns: Job admission envelope with jobId and nextAction poll. Errors: WORKSPACE_KEY_REQUIRED, INVALID_ARGUMENT, FundingRequired, EXECUTION_FAILED.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Submit a durable job
Only reads 8Claude Code: allow
  • hydracept_capabilitiesBrowse or fetch capability descriptors (keys, modes, schemas).No findings

    Why it is in this group

    • The description's first verb is "browse": a word for reading.
    Description, as the server wrote it
    Browse or fetch capability descriptors (keys, modes, schemas). Use hydracept_resolve_capability when routing from intent alone. List/resolve is keyless; a bearer key may add project-scoped fields. No charge. Read-only. Returns: Capability list or single CapabilityDescriptor when key is set. Errors: NOT_FOUND for unknown key; INVALID_ARGUMENT for conflicting query parameters.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List capabilities
  • hydracept_download_artifactFetch artifact metadata (and SHA-256 on hosted MCP) for a succeeded job output.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch artifact metadata (and SHA-256 on hosted MCP) for a succeeded job output. Stdio may also write bytes when output_path is set. Requires bearer key. No charge on hosted. Returns: Artifact downloadUrl, mediaType, sha256 (hosted does not write local files). Errors: WORKSPACE_KEY_REQUIRED, NOT_FOUND, DIRECTORY_CAPABILITY_DENIED when policy blocks.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read artifact metadata
  • hydracept_get_receiptRead billing and provenance for a finished job.No findings

    Why it is in this group

    • The name "hydracept_get_receipt" says "get": a word for reading.
    Description, as the server wrote it
    Read billing and provenance for a finished job. Does not run capabilities or spend money. Use after terminal success; use hydracept_job_status while still running. Hosted MCP accepts job_id only. Requires bearer key. No charge. Returns: HydraceptReceipt JSON for a terminal job. Errors: WORKSPACE_KEY_REQUIRED, NOT_FOUND when job or receipt is missing.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read a receipt
  • hydracept_job_statusRead one job's current status.No findings

    Why it is in this group

    • The name "hydracept_job_status" says "status": a word for reading.
    Description, as the server wrote it
    Read one job's current status. Use after hydracept_submit_job or hydracept_run with wait=false; use hydracept_get_receipt after success. If the job id is unknown, use hydracept_jobs_find first. Requires bearer key. No charge. Returns: HydraceptJob status projection for the jobId. Errors: WORKSPACE_KEY_REQUIRED, NOT_FOUND.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read job status
  • hydracept_jobs_findFind a prior job in the bound project when you do not have its id.No findings

    Why it is in this group

    • The name "hydracept_jobs_find" says "find": a word for reading.
    Description, as the server wrote it
    Find a prior job in the bound project when you do not have its id. intent is recent, failed, or reusable. The list never includes prompt text. Use after context loss, for failure triage, or to recover a job to cancel. Requires bearer key. No charge. Read-only. Returns: Matching job summaries for the filter. Errors: WORKSPACE_KEY_REQUIRED, INVALID_ARGUMENT.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Find a prior job
  • hydracept_quote_capabilityPreview what a run would cost — does not execute, create a job, or charge the wallet.No findings

    Why it is in this group

    • The description's first verb is "preview": a word for reading.
    Description, as the server wrote it
    Preview what a run would cost — does not execute, create a job, or charge the wallet. Use before spending when the user asks about price; use hydracept_run or hydracept_submit_job only to execute. Not the same as request_capability_quote (POST /mcp/full) on the full profile (human-paid capability commission). Requires bearer API key. No charge for the quote itself. Returns: Quote envelope with customerTotal and currency (no wallet charge). Errors: WORKSPACE_KEY_REQUIRED, INVALID_ARGUMENT, NOT_FOUND, FundingRequired when quote cannot be priced.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Quote a capability
  • hydracept_resolve_capabilityMatch the user's goal to a capability key using natural language.No findings

    Why it is in this group

    • The name "hydracept_resolve_capability" says "resolve": a word for reading.
    Description, as the server wrote it
    Match the user's goal to a capability key using natural language. Use when the key is unknown; use hydracept_capabilities when you already have a key or need the catalog. Keyless. No charge. Read-only. Returns: CapabilityResolutionResponse with ranked keys and rationale. Errors: INVALID_ARGUMENT when intent is empty; UNAUTHORIZED when bearer is invalid.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Resolve a capability
  • hydracept_workspace_statusCheck workspace/session authentication and readiness, plus common setup errors.No findings

    Why it is in this group

    • The name "hydracept_workspace_status" says "status": a word for reading.
    Description, as the server wrote it
    Check workspace/session authentication and readiness, plus common setup errors. Use when setup, auth, or project binding is in doubt; use hydracept_job_status for a specific execution. Does not execute capabilities or spend money. Hosted requires bearer (WORKSPACE_KEY_REQUIRED when missing); stdio checks local project binding. Not a substitute for hydracept_capabilities. Returns: Workspace/session authentication and readiness diagnostics for the authenticated principal. Errors: WORKSPACE_KEY_REQUIRED when bearer is missing on hosted MCP.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Workspace status

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.5.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http hydracept https://api.hydracept.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__hydracept__hydracept_workspace_status",
      "mcp__hydracept__hydracept_capabilities",
      "mcp__hydracept__hydracept_resolve_capability",
      "mcp__hydracept__hydracept_quote_capability",
      "mcp__hydracept__hydracept_job_status",
      "mcp__hydracept__hydracept_get_receipt",
      "mcp__hydracept__hydracept_download_artifact",
      "mcp__hydracept__hydracept_jobs_find"
    ],
    "ask": [
      "mcp__hydracept__hydracept_run",
      "mcp__hydracept__hydracept_submit_job"
    ],
    "deny": [
      "mcp__hydracept__hydracept_cancel_job"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hydracept. Review it before you use it.