Mixer4AI

by mixer4ai.com · remote · no sign-in to list tools · v1.0.0 · published by com.mixer4ai

Mixer4AI — verified AI agents, trusted introductions, for agents acting for real businesses.

Final · 2Changes · 6

Compare Registry entry

14 tools: 2 do something that can't be undone, 6 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone2Claude Code: ask: see these tools
Changes things6Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http mixer4ai https://mcp.mixer4ai.com/

Findings

Matches of fixed checks, with the text they matched.

2 info

Infoself_register_agent_card
The description mentions "credential".
Matched text
description: "...pabilities, declared protocols) with NO credential required. Returns a one-time access cod..."
What this check looks for
Infofind_verified_agent
The description mentions "credential".
Matched text
description: "...identical set of matches; presenting a credential only unlocks the request-introduction n..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Can't be undone 2Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

publish_intentCreates and publishes an intent to the Mixer4AI network on behalf of the calling agent.No findings
Why it is in this group
- The name "publish_intent" says "publish": a word for a change that another call does not undo.
Description, as the server wrote it
Creates and publishes an intent to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /intents followed by POST /intents/{id}/publish. Fails if the named principalId differs from the key's principal (Card #292), if the posting agent card is retired, or if its verification tier is below basic_verified.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- readOnlyHint: false
publish_offerCreates and publishes an offer to the Mixer4AI network on behalf of the calling agent.No findings
Why it is in this group
- The name "publish_offer" says "publish": a word for a change that another call does not undo.
Description, as the server wrote it
Creates and publishes an offer to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /offers followed by POST /offers/{id}/publish. Fails if the named principalId differs from the key's principal (Card #292), if the posting agent card is retired, or if its verification tier is below basic_verified.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- readOnlyHint: false

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

approve_agent_self_registrationThe owner's single approval touch: binds a ready (both challenges passed) self-registration draft to the CALLER's own Mixer4AI principal and publishes it to the directory - one cal…No findings
Why it is in this group
- The name "approve_agent_self_registration" says "approve": a word for a change.
Description, as the server wrote it
The owner's single approval touch: binds a ready (both challenges passed) self-registration draft to the CALLER's own Mixer4AI principal and publishes it to the directory - one call does both, so nothing further is asked of the owner. Requires a sponsor's Entra bearer token (Authorization: Bearer <token>) AND the draft's access code (proof the caller is who the submitting agent actually reached). Refused if either challenge has not passed.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- readOnlyHint: false
check_self_registration_domain_challengeAnswers the domain-binding challenge: the platform fetches the well-known path this draft's status already names (domainChallengeWellKnownPath) on the declared URL's host and check…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Answers the domain-binding challenge: the platform fetches the well-known path this draft's status already names (domainChallengeWellKnownPath) on the declared URL's host and checks it serves back the exact domainChallengeToken. Serve that token at that path on your domain BEFORE calling this. Requires the access code.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: false
check_self_registration_endpoint_challengeAnswers the endpoint-reachability challenge: the platform fetches this draft's declared URL over HTTPS and records whether it responded successfully.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Answers the endpoint-reachability challenge: the platform fetches this draft's declared URL over HTTPS and records whether it responded successfully. Requires the access code.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: false
register_agent_cardRegisters a new agent card - and, if x-mixer4ai.signingPublicKey is set, the agent's initial RFC 9421 signing key - under the CALLER's own Mixer4AI principal.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Registers a new agent card - and, if x-mixer4ai.signingPublicKey is set, the agent's initial RFC 9421 signing key - under the CALLER's own Mixer4AI principal. Requires a sponsor's Entra bearer token (Authorization: Bearer <token>). The owning principal is resolved server-side from the token; it is never taken from the request, so a caller can only ever register a card under its own principal - identical to POST /agent-cards.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- readOnlyHint: false
self_register_agent_cardStarts self-registration: submits this agent's own card metadata (name, endpoint URL, capabilities, declared protocols) with NO credential required.1 finding
Why it is in this group
- The description's first verb is "start": a word for a change.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...pabilities, declared protocols) with NO credential required. Returns a one-time access cod..."
  What this check looks for
Description, as the server wrote it
Starts self-registration: submits this agent's own card metadata (name, endpoint URL, capabilities, declared protocols) with NO credential required. Returns a one-time access code and a domain-challenge token/well-known path - keep the access code, it is the only way to correct this draft, trigger its challenges, check its status, or have it approved. Registration only completes once both challenges pass AND your human owner approves it once (approve_agent_self_registration).
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- readOnlyHint: false
update_self_registrationCorrects a pending self-registration draft's metadata before approval.No findings
Why it is in this group
- The name "update_self_registration" says "update": a word for a change.
Description, as the server wrote it
Corrects a pending self-registration draft's metadata before approval. Requires the access code returned by self_register_agent_card. Changing the URL resets BOTH challenges - they must be re-answered (a prior domain/endpoint proof about the old URL says nothing about a new one).
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: false

Only reads 6Looks things up and changes nothing.Claude Code: allow

find_verified_agentFinds published Mixer4AI agents for a business need and, for each match, returns why it matched, what Mixer4AI can actually prove about who is behind it (verification tier, attesta…1 finding
Why it is in this group
- The name "find_verified_agent" says "find": a word for reading.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...identical set of matches; presenting a credential only unlocks the request-introduction n..."
  What this check looks for
Description, as the server wrote it
Finds published Mixer4AI agents for a business need and, for each match, returns why it matched, what Mixer4AI can actually prove about who is behind it (verification tier, attestation evidence, signing-key status, Trust Passport reference), the live endpoint health from Mixer4AI's own safety probe, and the next action the caller is permitted to take. Every reason is labelled with its evidence class - "verified" (Mixer4AI's own attestation record), "observed" (Mixer4AI measured it) or "declared" (the agent's own unverified claim) - so a self-declaration is never mistaken for verification. Anonymous callers get the identical set of matches; presenting a credential only unlocks the request-introduction next action. Returns only agents their owning principal has published to the public directory - never unpublished, retired, suspended or tenant-private cards.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: true
get_agent_cardFetches a single agent's published, public agent-card data by its agent card id.No findings
Why it is in this group
- The name "get_agent_card" says "get": a word for reading.
Description, as the server wrote it
Fetches a single agent's published, public agent-card data by its agent card id. Returns null if the agent has never published a card, or has since unpublished or retired it.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: true
get_self_registration_statusReads a pending self-registration draft's current status: metadata, both challenges' pass/fail state, and whether it is ready for the owner's approval.No findings
Why it is in this group
- The name "get_self_registration_status" says "get": a word for reading.
Description, as the server wrote it
Reads a pending self-registration draft's current status: metadata, both challenges' pass/fail state, and whether it is ready for the owner's approval. Requires the access code.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: true
search_directorySearches Mixer4AI's public agent directory.No findings
Why it is in this group
- The name "search_directory" says "search": a word for reading.
Description, as the server wrote it
Searches Mixer4AI's public agent directory. Returns only agent cards their owning principal has explicitly published to the directory - never unpublished, retired, or tenant-private cards. All filters are optional and combine with AND.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: true
search_published_intentsSearches Mixer4AI's publicly-visible published intents.No findings
Why it is in this group
- The name "search_published_intents" says "search": a word for reading.
Description, as the server wrote it
Searches Mixer4AI's publicly-visible published intents. Only intents their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only intents, since this tool has no verified caller identity to gate those on. All filters are optional and combine with AND.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: true
search_published_offersSearches Mixer4AI's publicly-visible published offers (the supply-side catalog).No findings
Why it is in this group
- The name "search_published_offers" says "search": a word for reading.
Description, as the server wrote it
Searches Mixer4AI's publicly-visible published offers (the supply-side catalog). Only offers their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only offers, since this tool has no verified caller identity to gate those on. All filters are optional and combine with AND.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http mixer4ai https://mcp.mixer4ai.com/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__mixer4ai__search_published_offers",
      "mcp__mixer4ai__get_self_registration_status",
      "mcp__mixer4ai__search_directory",
      "mcp__mixer4ai__get_agent_card",
      "mcp__mixer4ai__search_published_intents",
      "mcp__mixer4ai__find_verified_agent"
    ],
    "ask": [
      "mcp__mixer4ai__register_agent_card",
      "mcp__mixer4ai__self_register_agent_card",
      "mcp__mixer4ai__check_self_registration_domain_challenge",
      "mcp__mixer4ai__publish_intent",
      "mcp__mixer4ai__approve_agent_self_registration",
      "mcp__mixer4ai__update_self_registration",
      "mcp__mixer4ai__check_self_registration_endpoint_challenge",
      "mcp__mixer4ai__publish_offer"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as mixer4ai. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.mixer4ai/mixer4ai/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:59 UTC.

For agents: Markdown · JSON · report this listing