Agent Preflight
by preflight.lorensaisolutions.com · remote · no sign-in to list tools · v1.1.0 · published by com.lorensaisolutions.preflight
Six paid URL-intelligence tools for autonomous agents and agent swarms.
7 tools: 7 change things.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things7Claude Code: ask: see these tools
- Only reads0Claude Code: allow
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http agent-preflight https://preflight.lorensaisolutions.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnchange_check
The server marks "change_check" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
- Warnbatch_preflight
The server marks "batch_preflight" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "run": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Changes things 7Claude Code: ask
access_checkLoss-leader URL access, login, and CAPTCHA check.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Loss-leader URL access, login, and CAPTCHA check. Price: $0.05 USDC. Example: GET /v1/access-check?url=https://example.com
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
api_discoveryDiscover OpenAPI, Swagger, GraphQL, MCP, and API documentation signals.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Discover OpenAPI, Swagger, GraphQL, MCP, and API documentation signals. Price: $0.10 USDC. Example: GET /v1/api-discovery?url=https://example.com
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
batch_preflightRun standard preflight against as many as 10 URLs in one paid request.1 finding
Why it is in this group
- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "batch_preflight" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "run": a word for a change.
Description, as the server wrote it Run standard preflight against as many as 10 URLs in one paid request. Price: $0.35 USDC. Example: POST /v1/batch-preflight
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
change_checkFetch a URL and compare its content fingerprint with the prior KV observation.1 finding
Why it is in this group
- The description's first verb is "fetch": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "change_check" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
Description, as the server wrote it Fetch a URL and compare its content fingerprint with the prior KV observation. Price: $0.10 USDC. Example: POST /v1/change-check
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
preflightSingle-fetch URL intelligence, access checks, commerce signals, and risk.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Single-fetch URL intelligence, access checks, commerce signals, and risk. Price: $0.15 USDC. Example: GET /v1/preflight?url=https://example.com&intent=research
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
product_intelExtract product price, availability, add-to-cart, and commerce risk signals.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Extract product price, availability, add-to-cart, and commerce risk signals. Price: $0.15 USDC. Example: GET /v1/product-intel?url=https://example.com
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http agent-preflight https://preflight.lorensaisolutions.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [],
"ask": [
"mcp__agent-preflight__access_check",
"mcp__agent-preflight__api_discovery",
"mcp__agent-preflight__change_check",
"mcp__agent-preflight__preflight",
"mcp__agent-preflight__product_intel",
"mcp__agent-preflight__batch_preflight",
"mcp__agent-preflight__premium_preflight"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-preflight. Review it before you use it.