Skip to content

Pulore App Planner

com.pulore/app-plannerpulore.comstreamable-httpv1.0.0Scanned

Plan a software project, check website speed, find Pulore case studies, get a booking link.

5 tools: 1 can delete or cancel things, 2 change things and 2 only read.

Tools: 1 delete, 0 irreversible, 2 write, 2 read.
  • Reads private data · 0
  • Reads text others write · 2
  • Can send data out · 2
  • No findings

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

5 tools

Deletes or cancels 1Claude Code: deny
  • send_project_brief_to_puloreUse this only when the person has explicitly asked to contact Pulore or send Pulore their project.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "send_project_brief_to_pulore" says "send": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "send_project_brief_to_pulore" says "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Use this only when the person has explicitly asked to contact Pulore or send Pulore their project. Sends an external email through Resend to Pulore's fixed inbox, hello@pulore.com, so the team can reply to the person directly. This sends a message outside ChatGPT and cannot be recalled by this tool. First show them the recipient and every field you'll send, and call this only after they approve. The email contains only these fields, never the conversation. A brief identical to one sent in the last day isn't sent again, and each email address can send a few briefs a day.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
    • idempotentHint: false
Changes things 2Claude Code: ask
  • audit_website_speedUse this when someone wants to know how fast a public web page is, why it's slow, how it does on Core Web Vitals or Lighthouse, or what to fix to speed it up.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Use this when someone wants to know how fast a public web page is, why it's slow, how it does on Core Web Vitals or Lighthouse, or what to fix to speed it up. Runs Google PageSpeed Insights (Lighthouse) and returns performance, accessibility, best-practices and SEO scores, lab measurements, real-user Core Web Vitals when Google has them, and the fixes with the biggest estimated impact. The address is sent to Google, which loads the page. The tool does not edit the target website or submit forms. It only works on public pages, not local sites, pages behind a login or addresses that contain a password or token. An audit takes about 20 to 40 seconds, and the same page's result is reused for up to 12 hours. Don't use it to check whether a site is up, for security scans or for keyword research.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
  • scope_software_projectUse this when someone wants to know what it would take to build a software product, such as an app, website, SaaS, marketplace, internal tool, AI feature or MVP: how long it would …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when someone wants to know what it would take to build a software product, such as an app, website, SaaS, marketplace, internal tool, AI feature or MVP: how long it would take, what it would cost, what team or tech stack it needs, or a build plan or estimate for their idea. Returns a rough plan with effort ranges for each feature, the team, a timeline range, phases, a suggested stack and a budget (the hours priced at $100 to $150 an hour). The ranges reflect how Pulore builds today, with managed services such as Clerk and Stripe where they fit and AI-assisted development. The plan is calculated locally from fixed estimation tables; this tool does not save a project or call an external service. Map the idea to the closest features in the list and say in your reply what doesn't fit. Results are planning ranges, not a quote. Don't use it for projects that aren't software (like renovations, events or business plans), for task or project management, or to write code.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
Only reads 2Show 2 read-only tools
  • find_pulore_case_studiesUse this only when someone asks about Pulore's own work or experience, for example whether Pulore has built something like their idea.No findings

    Why it is in this group

    • The name "find_pulore_case_studies" says "find": a word for reading.
    Description, as the server wrote it
    Use this only when someone asks about Pulore's own work or experience, for example whether Pulore has built something like their idea. Finds published Pulore case studies related to a topic, matching industry, platform, services and technology tags, and returns each project's summary and link, with timeline, team size and results where the case study publishes them. Searches the case-study files bundled with this server; it does not browse or modify external sites. Returns nothing when no project matches. Don't use it to find examples of other companies' products.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out2
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http app-planner https://pulore.com/mcp
claude mcp add --transport http app-planner https://pulore.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__app-planner__find_pulore_case_studies",
      "mcp__app-planner__get_pulore_booking_link"
    ],
    "ask": [
      "mcp__app-planner__scope_software_project",
      "mcp__app-planner__audit_website_speed"
    ],
    "deny": [
      "mcp__app-planner__send_project_brief_to_pulore"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as app-planner. Review it before you use it.

Capability tags behind 2 rules
  • mcp__app-planner__audit_website_speed untrusted-input, outbound
  • mcp__app-planner__send_project_brief_to_pulore untrusted-input, outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.pulore/app-planner/verify?hash=faeff572d5cb35967f0299f1021de50b54329d59e0ae91a47ba396580ee8f4e2" | jq -e '.changed == false'

Pinned hash faeff572d5cb, from Nov 4, 2026, 12:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.pulore/app-planner/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.pulore/app-planner
[![anlyon.dev](https://anlyon.dev/badge/com.pulore/app-planner.svg)](https://anlyon.dev/servers/com.pulore/app-planner)

Source: MCP Registry. Synced Nov 4, 2026, 13:17 UTC.