Skip to content
anlyon.devby Anlyon

Submitator

com.submitator/mcpsubmitator.comstreamable-httpv0.1.0Scanned

Launch your clients' products on up to 100 directories each from Claude Code, Cursor or VS Code.

23 tools: 6 can delete or cancel things, 7 change things and 10 only read.

Tools: 6 delete, 0 irreversible, 7 write, 10 read.
  • Reads private data · 5
  • Reads text others write · 8
  • Can send data out · 3
  • No findings

Anlyon alternative

13 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

23 tools

Deletes or cancels 6Claude Code: deny
  • delete_draftDeletes a project that was never launched.No findings

    Why it is in this group

    • The name "delete_draft" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Deletes a project that was never launched. A launched project cannot be deleted.

    Annotations the server declares

    • title: Delete a draft project
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • launch_projectStarts submissions and spends one launch of the agency (a test launch with a sbm_test_ key).Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Starts submissions and spends one launch of the agency (a test launch with a sbm_test_ key). Call preview_launch with the same arguments first and get the user to agree; confirm_selected is the count they agreed to. With a live key, clients that can ask their user get a confirmation question too.

    Annotations the server declares

    • title: Launch a project
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • remove_imageRemoves the logo ("logo") or one screenshot (its img_ id).No findings

    Why it is in this group

    • The name "remove_image" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Removes the logo ("logo") or one screenshot (its img_ id). A launched project keeps at least its logo and one screenshot.

    Annotations the server declares

    • title: Remove the logo or a screenshot
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Changes things 7Claude Code: ask
  • add_directoriesSubmits a launched project to more directories from its free allowance (no launch is spent).Reads text others writeNo findings

    Why it is in this group

    • The name "add_directories" says "add": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Submits a launched project to more directories from its free allowance (no launch is spent). Call preview_launch with the same arguments first and get the user to agree. An include longer than the free allowance answers allowance_exhausted; a directory already listed answers invalid_directories.

    Annotations the server declares

    • title: Add directories to a launched project
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • add_screenshotAdds one screenshot to a project (5 at most), from a public URL or, with the npx package, a local file.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "add_screenshot" says "add": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Adds one screenshot to a project (5 at most), from a public URL or, with the npx package, a local file. Each call adds another one, so do not repeat a call that succeeded.

    Annotations the server declares

    • title: Add a screenshot
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • create_projectCreates a project for a client's product from its URL.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "create_project" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Creates a project for a client's product from its URL. Name, tagline and description are filled from the site in the background when left out. Costs nothing: a launch is spent only by launch_project.

    Annotations the server declares

    • title: Create a client project
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • create_reportBuilds a PDF or XLSX report of a project, branded for the agency.No findings

    Why it is in this group

    • The name "create_report" says "create": a word for a change.
    Description, as the server wrote it
    Builds a PDF or XLSX report of a project, branded for the agency. Building takes a moment: then call get_report.

    Annotations the server declares

    • title: Build a client report
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • project_directoriesEvery catalog directory as seen by one project: suggested (the auto pick), open, locked (with what unlocks it), excluded or listed.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Every catalog directory as seen by one project: suggested (the auto pick), open, locked (with what unlocks it), excluded or listed. Shows suggested, open and locked by default; the counts cover all.

    Annotations the server declares

    • title: A project's directory choices
    • readOnlyHint: true
    • openWorldHint: false
  • update_projectChanges project fields.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "update_project" says "update": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Changes project fields. Send only what changes; null clears a field, and a list replaces the whole list. contact_email cannot change after launch, and after launch an edit reaches only the listings not yet sent to their directory.

    Annotations the server declares

    • title: Update a project
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • verify_badgeChecks the client's site for the badge now.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Checks the client's site for the badge now. Up to 10 checks an hour per project, so check once after the client says it is installed.

    Annotations the server declares

    • title: Check the badge on the site
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 10Show 10 read-only tools
  • find_directoriesSearches the directories Submitator submits to, highest Domain Rating first, or reads one by id.Reads private dataNo findings

    Why it is in this group

    • The name "find_directories" says "find": a word for reading.

    What it can reach

    • private-dataThe name "find_directories" says "find" and "directory": it reads files.
    • private-dataThe description's first sentence says "search" and "directory": it reads files.
    • private-dataThe input names a directory (input.directory_id), and the tool reads: it reads files.
    Description, as the server wrote it
    Searches the directories Submitator submits to, highest Domain Rating first, or reads one by id. Before the agency first buys launches, only the top 20 are shown.

    Annotations the server declares

    • title: Search the directory catalog
    • readOnlyHint: true
    • openWorldHint: false
  • get_badgeThe agency-branded badge some directories require on the client's site: its status, a message to forward to the client, and install code for one platform.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_badge" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "directory": it reads files.
    • untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
    Description, as the server wrote it
    The agency-branded badge some directories require on the client's site: its status, a message to forward to the client, and install code for one platform. Call without platform to see the platforms.

    Annotations the server declares

    • title: Get the badge install kit
    • readOnlyHint: true
    • openWorldHint: false
  • get_projectOne project in full: status, what it waits for, progress counts, allowance, readiness, texts, images and the image candidates found on its site.No findings

    Why it is in this group

    • The name "get_project" says "get": a word for reading.
    Description, as the server wrote it
    One project in full: status, what it waits for, progress counts, allowance, readiness, texts, images and the image candidates found on its site.

    Annotations the server declares

    • title: Read a project
    • readOnlyHint: true
    • openWorldHint: false
  • get_reportWhether a report is ready, and how to get the file.Reads private dataNo findings

    Why it is in this group

    • The name "get_report" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    Description, as the server wrote it
    Whether a report is ready, and how to get the file.

    Annotations the server declares

    • title: Read a report
    • readOnlyHint: true
    • openWorldHint: false
  • list_eventsChanges to projects and listings.No findings

    Why it is in this group

    • The name "list_events" says "list": a word for reading.
    Description, as the server wrote it
    Changes to projects and listings. The feed keeps 90 days and reads oldest first, so one call scans up to 1,000 events from the cursor (or from the start) and returns the newest ones since `since` (7 days ago by default). Keep next_cursor and pass it next time to read only what came after. For the current state of a project, get_project and list_listings are cheaper.

    Annotations the server declares

    • title: What changed
    • readOnlyHint: true
    • openWorldHint: false
  • list_listingsA project's listings, one per directory, highest DR first, with status and the live link once published.Reads private dataNo findings

    Why it is in this group

    • The name "list_listings" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "directory": it reads files.
    • private-dataThe input names a directory (input.directory), and the tool reads: it reads files.
    Description, as the server wrote it
    A project's listings, one per directory, highest DR first, with status and the live link once published. Or one listing in full by its id.

    Annotations the server declares

    • title: List a project's listings
    • readOnlyHint: true
    • openWorldHint: false
  • list_projectsLists the agency projects, newest first.No findings

    Why it is in this group

    • The name "list_projects" says "list": a word for reading.
    Description, as the server wrote it
    Lists the agency projects, newest first. Find one by name or URL with q, or by your own external_id.

    Annotations the server declares

    • title: List client projects
    • readOnlyHint: true
    • openWorldHint: false
  • preview_launchFree dry run of launch_project (or of add_directories on a launched project) with the same arguments: how many directories it would submit to, top and median DR, what is missing, w…Reads private dataNo findings

    Why it is in this group

    • The name "preview_launch" says "preview": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "directory": it reads files.
    • private-dataThe input names a directory (input.directories), and the tool reads: it reads files.
    Description, as the server wrote it
    Free dry run of launch_project (or of add_directories on a launched project) with the same arguments: how many directories it would submit to, top and median DR, what is missing, what would unlock more, and what it costs. Show the numbers to the user before launching.

    Annotations the server declares

    • title: Preview a launch
    • readOnlyHint: true
    • openWorldHint: false
  • whoamiShows the agency and mode (live or test) behind the key, its permissions, launches left and the hourly request budget.No findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Shows the agency and mode (live or test) behind the key, its permissions, launches left and the hourly request budget. Call it first.

    Annotations the server declares

    • title: Check the API key
    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

120 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data5
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write8
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__submitator__add_screenshot",
      "mcp__submitator__create_project",
      "mcp__submitator__update_project"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http submitator https://mcp.submitator.com/mcp --header 'Authorization: <your-authorization>'
claude mcp add --transport http submitator https://mcp.submitator.com/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__submitator__whoami",
      "mcp__submitator__list_projects",
      "mcp__submitator__get_project",
      "mcp__submitator__preview_launch",
      "mcp__submitator__find_directories",
      "mcp__submitator__list_listings",
      "mcp__submitator__list_events",
      "mcp__submitator__get_badge",
      "mcp__submitator__get_report",
      "mcp__submitator__get_share_link"
    ],
    "ask": [
      "mcp__submitator__create_project",
      "mcp__submitator__update_project",
      "mcp__submitator__add_screenshot",
      "mcp__submitator__project_directories",
      "mcp__submitator__add_directories",
      "mcp__submitator__verify_badge",
      "mcp__submitator__create_report"
    ],
    "deny": [
      "mcp__submitator__delete_draft",
      "mcp__submitator__set_logo",
      "mcp__submitator__remove_image",
      "mcp__submitator__launch_project",
      "mcp__submitator__create_share_link",
      "mcp__submitator__delete_share_link"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as submitator. Review it before you use it.

Capability tags behind 12 rules
  • mcp__submitator__create_project untrusted-input, outbound
  • mcp__submitator__update_project untrusted-input, outbound
  • mcp__submitator__set_logo untrusted-input
  • mcp__submitator__add_screenshot untrusted-input, outbound
  • mcp__submitator__preview_launch private-data
  • mcp__submitator__find_directories private-data
  • mcp__submitator__launch_project untrusted-input
  • mcp__submitator__add_directories untrusted-input
  • mcp__submitator__list_listings private-data
  • mcp__submitator__get_badge private-data, untrusted-input
  • mcp__submitator__verify_badge untrusted-input
  • mcp__submitator__get_report private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.submitator/mcp/verify?hash=76e8c28576b07721fd8f905c72fbc181171473574271ee7e826c289e8b9c18e5" | jq -e '.changed == false'

Pinned hash 76e8c28576b0, from Oct 30, 2026, 20:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.submitator/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.submitator/mcp
[![anlyon.dev](https://anlyon.dev/badge/com.submitator/mcp.svg)](https://anlyon.dev/servers/com.submitator/mcp)

Source: MCP Registry · repository. Synced Oct 30, 2026, 20:17 UTC.