Skip to content

SCRIPTMASTERLABS — SqueezeOS MCP

by scriptmasterlabs.com · remote · no sign-in to list tools · v1.1.0 · published by com.scriptmasterlabs

SqueezeOS MCP for live machine discovery and x402-paid USDC APIs on Base.

Deletes · 2Final · 4Changes · 5

22 tools: 2 can delete or cancel things, 4 do something that can't be undone, 5 change things and 11 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http squeezeos https://squeezeos-api.onrender.com/mcp?registry=scriptmasterlabs

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • The server marks "commit_discover_effects" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "commit_discover_effects" says "commit": a word for a change.

    What this check looks for
  • The server marks "commit_read_terms" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "commit_read_terms" says "commit": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

22 tools

Deletes or cancels 2Claude Code: deny
  • execute_capabilityExecute one public SqueezeOS REST path with POST after confirm_write=true.No findings

    Why it is in this group

    • The name "execute_capability" says "execute": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Execute one public SqueezeOS REST path with POST after confirm_write=true. Returns the target result or its x402 challenge. A caller-signed payment_signature may authorize the published SML service fee; the server does not sign wallets. May create records or settle an authorized fee. Operator routes and off-host URLs are denied. API schemas: https://squeezeos-api.onrender.com/.well-known/openapi.json.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Execute Capability
  • purchase_capability_readRetrieve one paid SqueezeOS REST path with GET using caller-signed authorization for that exact resource's fresh x402 challenge.No findings

    Why it is in this group

    • The name "purchase_capability_read" says "purchase": a word that usually means money moves, which cannot be taken back.
    • The description says "irreversible".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Retrieve one paid SqueezeOS REST path with GET using caller-signed authorization for that exact resource's fresh x402 challenge. May settle an irreversible published SML service fee; returns delivery and payment-response evidence. Cannot change the HTTP method or send a request body. The server never creates wallet signatures. Operator routes and off-host URLs are denied. API schemas: https://squeezeos-api.onrender.com/.well-known/openapi.json.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Purchase Capability Read
Can't be undone 4Claude Code: ask
  • aftersearch_acceptGet accepted delivery for one immutable job with caller-supplied x402 authorization.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    • The description says "irreversible".
    Description, as the server wrote it
    Get accepted delivery for one immutable job with caller-supplied x402 authorization. Use this when an agent holds fresh PAYMENT-REQUIRED terms and the caller approves the spend; the caller payment_response is forwarded as the PAYMENT-SIGNATURE and SML never signs or spends. Returns the Evidence Pack plus the PAYMENT-RESPONSE receipt; on missing authorization returns a fresh 402 challenge, on a bad job_id a structured error. With valid caller authorization, settles an irreversible USDC payment and persists a receipt; the stored job remains immutable. For example, accepting a quoted job delivers the full Evidence Pack with settlement proof.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Aftersearch Accept
  • agent_web_accessFetch LLM-ready Markdown from any public HTTPS URL through the SML Clean Web Reader.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    • The description says "irreversible".
    Description, as the server wrote it
    Fetch LLM-ready Markdown from any public HTTPS URL through the SML Clean Web Reader. Use this when an agent needs a web page's content as compact Markdown, for example to ground a research answer, without a separate SML account or API key. Returns the converted Markdown up to max_chars. An unsigned call returns the live x402 PAYMENT-REQUIRED challenge and never auto-spends; retry only with a challenge-specific payment_signature. Unsigned calls are read-only and idempotent with no side effects; a supplied signature authorizes one paid, irreversible x402 settlement in USDC on Base. On error, returns a structured error. For example, fetch a documentation page before summarizing it.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Agent Web Access
  • gamma_sonarGet the dealer gamma-exposure (GEX) and pin-risk map for one US ticker from live Tradier option chains: long/short gamma regime, zero-gamma flip line, call and put walls, max open-…No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    • The description says "irreversible".
    Description, as the server wrote it
    Get the dealer gamma-exposure (GEX) and pin-risk map for one US ticker from live Tradier option chains: long/short gamma regime, zero-gamma flip line, call and put walls, max open-interest pin strike, and the full per-strike GEX ladder. Use this when an agent needs to know where options dealers are forced to hedge, for example before judging whether a move is likely to be dampened or amplified. An unsigned call returns the live x402 PAYMENT-REQUIRED challenge (USDC on Base; the challenge states the exact price) and never auto-spends; retry only with a challenge-specific payment_signature. If no chain, spot price, or open interest exists, it returns an honest not-available result and nothing is charged. A supplied signature authorizes one paid, irreversible x402 settlement. Informational market structure, not investment advice. For example, check SPY's zero-gamma line before the open.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Gamma Sonar
  • ticker_dossierGet a one-call intelligence profile for one US ticker: live quote, dealer gamma regime/walls/pin, unusual options flow, squeeze score, SEC fails-to-deliver plus Reg SHO threshold-l…No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    • The description says "irreversible".
    Description, as the server wrote it
    Get a one-call intelligence profile for one US ticker: live quote, dealer gamma regime/walls/pin, unusual options flow, squeeze score, SEC fails-to-deliver plus Reg SHO threshold-list status, and the Oracle directive. Use this when an agent needs a full picture of a stock in a single paid call instead of stitching several sources together. Sections that are unavailable are labeled with a reason, never filled in, and a coverage field lists which are live. An unsigned call returns the live x402 PAYMENT-REQUIRED challenge (USDC on Base; the challenge states the exact price) and never auto-spends; retry only with a challenge-specific payment_signature. Without a live price it returns an honest not-available result and nothing is charged. A supplied signature authorizes one paid, irreversible x402 settlement. Not investment advice. For example, profile GME before writing a research note.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Ticker Dossier
Changes things 5Claude Code: ask
  • aftersearch_resolveConvert a natural-language query into machine intent, a bounded Evidence Pack, and one immutable x402 job with a fresh quote pointer.No findings

    Why it is in this group

    • The name "aftersearch_resolve" says "resolve": a word for reading.
    • The description's first verb is "convert": a word for a change.
    Description, as the server wrote it
    Convert a natural-language query into machine intent, a bounded Evidence Pack, and one immutable x402 job with a fresh quote pointer. Use this when an agent needs to turn a what-would-I-Google question into a priced, quotable evidence job before any payment. Returns the immutable job_id plus the public job summary; on invalid input returns a structured input_rejected error instead of a job. Creates one server-side job record per call (a side effect) but never spends or moves funds. For example, asking whether a token contract is safe becomes an intent-scored Evidence Pack with fresh PAYMENT-REQUIRED terms.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Aftersearch Resolve
  • aftersearch_verify_serpVerify pasted SERP or AI-answer text, or one caller-provided public URL, against retrieved sources.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify pasted SERP or AI-answer text, or one caller-provided public URL, against retrieved sources. Use this when an agent needs a confirm, contradict, or missing verdict with cited sources before quoting or paying for evidence. Returns the verdict plus sources with URLs, retrieval timestamps, and content hashes; on unreachable sources returns a structured error (source_unavailable) instead of a verdict. Creates one immutable job record per call (a side effect); may fetch the single caller-provided URL and never spends. For example, paste an AI answer claiming a token launch date to check it against live sources.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Aftersearch Verify Serp
  • commit_discover_effectsList the SML Commit effect atlas: every registered action, target system, owner, and cap a commit check can authorize.1 finding

    Why it is in this group

    • The name "commit_discover_effects" says "commit": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "commit_discover_effects" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "commit_discover_effects" says "commit": a word for a change.

      What this check looks for
    Description, as the server wrote it
    List the SML Commit effect atlas: every registered action, target system, owner, and cap a commit check can authorize. Use this when an agent needs to quote or validate a commit check and must cite the exact registered effect terms. Returns the live atlas. Read-only and idempotent; no side effects. This tool never calls the paid check itself (POST /v1/commit, $0.001 USDC). On error, returns a structured error. For example, list effects before asking whether a cron change is committable.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Commit Discover Effects
  • commit_read_termsRead the live SML Commit terms: price, decision outcomes, and rules.1 finding

    Why it is in this group

    • The name "commit_read_terms" says "commit": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "commit_read_terms" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "commit_read_terms" says "commit": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Read the live SML Commit terms: price, decision outcomes, and rules. Use this when an agent needs the exact commit-check terms to quote to a caller before any payment. Returns the terms document. Read-only and idempotent; no side effects. On error, returns a structured error. For example, read terms to confirm the $0.001 USDC price before quoting a commit check.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Commit Read Terms
  • x402_readinessCheck the live x402 payment-rail readiness surface.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check the live x402 payment-rail readiness surface. Call this when an agent is about to attempt a paid call and wants to confirm the rail is up before building a payment signature. Returns the current readiness status of the canonical SqueezeOS payment rail. Read-only and idempotent; no side effects. On error, returns a structured error. For example, check readiness before a batch of paid URL-to-Markdown calls.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: X402 Readiness
Only reads 11Claude Code: allow
  • aftersearch_quoteReturn fresh x402 PAYMENT-REQUIRED terms for one immutable job.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return fresh x402 PAYMENT-REQUIRED terms for one immutable job. Call this when an agent holds a job_id and needs the current USDC price and payment instructions before deciding to pay; a 402 challenge is a quote, never payment. Returns the price in USDC, the pay_to address, network, and asset for that exact job; on an unknown job_id returns a structured job_not_found error. Read-only and idempotent; no side effects. For example, quoting a job_id returned by aftersearch_resolve yields its exact USDC terms for this job only.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Aftersearch Quote
  • capability_manifestRead the canonical machine capability manifest generated from the live Flask route table.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the canonical machine capability manifest generated from the live Flask route table. Use this when an agent needs the authoritative full inventory of SqueezeOS products, schemas, and payment metadata in one document instead of querying tools one by one. Returns the manifest JSON; this is the canonical product-inventory authority for MCP discovery. Read-only and idempotent; no side effects. On error, returns a structured error. For example, fetch it once at session start to cache the product catalog.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Capability Manifest
  • compare_capabilitiesCompare 2-5 live SqueezeOS capabilities side by side using real metadata.No findings

    Why it is in this group

    • The name "compare_capabilities" says "compare": a word for reading.
    Description, as the server wrote it
    Compare 2-5 live SqueezeOS capabilities side by side using real metadata. Use this when an agent must choose between similar APIs, for example weighing price against coverage. Returns the same real endpoint and payment fields inspect_capability returns for each candidate; no fabricated composite score is produced. Read-only and idempotent; no side effects. On error, returns a structured error. For example, compare two web-reader capabilities before routing a research task.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Compare Capabilities
  • discover_capabilitiesSearch the live SqueezeOS capability inventory by keyword.No findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.
    Description, as the server wrote it
    Search the live SqueezeOS capability inventory by keyword. Use this when an agent needs to find which SML APIs exist for a task before calling anything. Returns a ranked list of matching capabilities with endpoint and payment metadata; lexical mode is always available and unified mode may add evidence-backed semantic context without fabricating scores. Read-only and idempotent; no side effects. On error, returns a structured error instead of results. For example, query 'stock quotes' to discover the quote endpoints and their x402 prices.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Discover Capabilities
  • inspect_capabilityInspect one live SqueezeOS capability by its sml_id.No findings

    Why it is in this group

    • The name "inspect_capability" says "inspect": a word for reading.
    Description, as the server wrote it
    Inspect one live SqueezeOS capability by its sml_id. Use this when an agent has a candidate capability and needs its exact endpoint, parameters, and x402 payment terms before calling. Returns real endpoint and payment metadata plus, when safe, a real liveness probe rather than an invented reliability score. Read-only and idempotent; no side effects. On error, returns a structured error. For example, inspect 'url-to-markdown' to confirm its price and required payment-signature header.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Inspect Capability
  • list_playbooksFilter the public ScriptMasterLabs Google Play book catalog for the job a reader is working on, for example 'x402 payments' or 'options trading'.No findings

    Why it is in this group

    • The name "list_playbooks" says "list": a word for reading.
    Description, as the server wrote it
    Filter the public ScriptMasterLabs Google Play book catalog for the job a reader is working on, for example 'x402 payments' or 'options trading'. Returns up to 10 matching titles with each book's GGKEY, Google Play URL, and Google Play list price. Free, read-only and idempotent; no side effects. Prices are Google's list prices from the 2026-10-09 catalog export - not a quote you can pay here. This tool does not sell the book, does not return the PDF, and will not accept USDC for it. If the human wants the file, give them the google_play_url. For example, list playbooks for 'MCP server security' and hand the human the Play URLs.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: List Playbooks
  • read_capabilityRead one public SqueezeOS REST path with GET.No findings

    Why it is in this group

    • The name "read_capability" says "read": a word for reading.
    Description, as the server wrote it
    Read one public SqueezeOS REST path with GET. Cannot accept payment authorization, a request body, or another HTTP method. Returns data or the unchanged unpaid x402 challenge with no-spend alternatives. Never signs or settles a payment. Operator routes and off-host URLs are denied. API schemas: https://squeezeos-api.onrender.com/.well-known/openapi.json.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Read Capability
  • recommend_capabilityReturn the best-matching SqueezeOS capabilities for a natural-language need.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return the best-matching SqueezeOS capabilities for a natural-language need. Call this when an agent knows the goal, for example 'convert a URL to Markdown', but not which SML API serves it. Returns ranked capabilities with live endpoint and x402 payment metadata plus suggested next actions. Read-only and idempotent; no side effects. On error, returns a structured error. For example, ask 'which API verifies a fact' to get the fact-verification endpoint and its price.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Recommend Capability
  • system_statusRead the live SqueezeOS status endpoint.No findings

    Why it is in this group

    • The name "system_status" says "status": a word for reading.
    Description, as the server wrote it
    Read the live SqueezeOS status endpoint. Use this when an agent needs a quick health check of the API host before starting paid work. Returns the live status payload; the MCP server never synthesizes cluster-health or synchronization claims. Read-only and idempotent; no side effects. On error, returns a structured error. For example, check status first if paid calls start timing out.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: System Status
  • x402_contractRead the canonical SqueezeOS x402 v2 discovery contract.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the canonical SqueezeOS x402 v2 discovery contract. Use this when an agent needs the payment protocol's rules, for example challenge and response header names, before attempting any paid call. Returns the contract document; exact spend terms remain authoritative only in the target resource's fresh PAYMENT-REQUIRED challenge. Read-only and idempotent; no side effects. On error, returns a structured error. For example, read it once per session to learn the PAYMENT-SIGNATURE header name.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: X402 Contract
  • x402_evidenceRead real settlement evidence recorded by the canonical x402 rail.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read real settlement evidence recorded by the canonical x402 rail. Use this when an agent or auditor needs proof that a past payment actually settled in USDC on Base; a challenge or signature alone is never treated as revenue or settlement proof. Returns recorded settlement receipts. Read-only and idempotent; no side effects. On error, returns a structured error. For example, pull evidence for a disputed charge before deciding a refund.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: X402 Evidence

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http squeezeos https://squeezeos-api.onrender.com/mcp?registry=scriptmasterlabs

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__squeezeos__discover_capabilities",
      "mcp__squeezeos__recommend_capability",
      "mcp__squeezeos__list_playbooks",
      "mcp__squeezeos__inspect_capability",
      "mcp__squeezeos__compare_capabilities",
      "mcp__squeezeos__capability_manifest",
      "mcp__squeezeos__x402_contract",
      "mcp__squeezeos__x402_evidence",
      "mcp__squeezeos__system_status",
      "mcp__squeezeos__read_capability",
      "mcp__squeezeos__aftersearch_quote"
    ],
    "ask": [
      "mcp__squeezeos__x402_readiness",
      "mcp__squeezeos__agent_web_access",
      "mcp__squeezeos__gamma_sonar",
      "mcp__squeezeos__ticker_dossier",
      "mcp__squeezeos__commit_discover_effects",
      "mcp__squeezeos__commit_read_terms",
      "mcp__squeezeos__aftersearch_resolve",
      "mcp__squeezeos__aftersearch_verify_serp",
      "mcp__squeezeos__aftersearch_accept"
    ],
    "deny": [
      "mcp__squeezeos__execute_capability",
      "mcp__squeezeos__purchase_capability_read"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as squeezeos. Review it before you use it.