Ultimate Business Machines (no account)

com.ultimatebusinessmachines/ubm-publicultimatebusinessmachines.comstreamable-httpv0.2.0Scanned 2 hours ago

Learn what Ultimate Business Machines does, tailor a plan to a business, price it and sign up.

12 tools: 1 do something that can't be undone, 6 change things and 5 only read.

Reads private data · 0
Reads text others write · 2
Can send data out · 1
1 finding

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

12 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

ubm_request_planSend a business's plan and contact details to UBM's team so they get in touch -- the Solutions guide's own 'send me this plan' form.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "ubm_request_plan" says "request": a word for a change.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Send a business's plan and contact details to UBM's team so they get in touch -- the Solutions guide's own 'send me this plan' form. Only call this when the person has asked to be contacted, with the details they gave you: their name and an email or phone number. UBM doesn't email the person automatically; the team replies. Limited to a few per day per network.
Annotations the server declares
- title: Send a plan to UBM's team
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

ubm_aboutWhat Ultimate Business Machines (UBM) is, who it's for, how it works, the money-back promise and how to reach the team, with links to the website's main pages.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
What Ultimate Business Machines (UBM) is, who it's for, how it works, the money-back promise and how to reach the team, with links to the website's main pages. Start here when someone asks what UBM is or does.
Annotations the server declares
- title: What UBM is
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_connect_agentHow a business connects its own AI agent to its UBM account: the server address, signing in with OAuth (Claude, ChatGPT and other apps open a sign-in page), or a personal token fro…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
How a business connects its own AI agent to its UBM account: the server address, signing in with OAuth (Claude, ChatGPT and other apps open a sign-in page), or a personal token from Settings > AI agents for tools that take a key (Claude Code, Cursor, scripts).
Annotations the server declares
- title: Connect an agent to an account
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_quote_planThe monthly and yearly price of a set of UBM services for a team size, exactly as the Solutions guide and billing price it (the best of one by one, a package plus extras, or Everyt…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The monthly and yearly price of a set of UBM services for a team size, exactly as the Solutions guide and billing price it (the best of one by one, a package plus extras, or Everything). Team size is the guide's answer: solo (just me), small (2-5), mid (6-20), large (21-100) or enterprise (more than 100, quoted in person).
Annotations the server declares
- title: What a plan costs
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_recommend_planThe services UBM recommends for a business, from the Solutions guide's own advisor: grouped as where to start and what to add later, each with the reasons (quoting the answers) and…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The services UBM recommends for a business, from the Solutions guide's own advisor: grouped as where to start and what to add later, each with the reasons (quoting the answers) and how it helps. Pass the business type id and the answers (question id -> answer id, or a list of ids for 'many' questions). Then price it with ubm_quote_plan.
Annotations the server declares
- title: Recommend a plan
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_see_demoThe demo businesses anyone can try: each industry's demo website and the shared demo login for the app (company ID, email, password) so the person can click around UBM themselves.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The demo businesses anyone can try: each industry's demo website and the shared demo login for the app (company ID, email, password) so the person can click around UBM themselves. The demo is shared and resets; messages from it never reach real customers.
Annotations the server declares
- title: Try the demo
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_start_signupA sign-up link with the chosen services (or a package) and team size already filled in.1 finding
Why it is in this group
- The name "ubm_start_signup" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ubm_start_signup" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "ubm_start_signup" says "start": a word for a change.
  What this check looks for
Description, as the server wrote it
A sign-up link with the chosen services (or a package) and team size already filled in. The person opens it, enters their company name, email and password, and agrees to the terms themselves -- an agent never makes the account. Paying to start and the money-back guarantee are shown there too.
Annotations the server declares
- title: Start signing up
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false

Only reads 5Looks things up and changes nothing.Show 5 read-only tools

ubm_get_guide_questionsThe questions the Solutions guide asks about a business, with the answer ids each one accepts.No findings
Why it is in this group
- The name "ubm_get_guide_questions" says "get": a word for reading.
Description, as the server wrote it
The questions the Solutions guide asks about a business, with the answer ids each one accepts. Step 2: ask the person these (only the required ones are a must), then pass their answers to ubm_recommend_plan. Questions of kind 'one' take one answer id, 'many' take a list of ids, 'text' take free text.
Annotations the server declares
- title: The Solutions guide's questions
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_get_serviceOne UBM service in detail: what it does, which packages include it, and anything it needs alongside it (Accounting works from Invoicing & Payments or the Customer Portal, for examp…No findings
Why it is in this group
- The name "ubm_get_service" says "get": a word for reading.
Description, as the server wrote it
One UBM service in detail: what it does, which packages include it, and anything it needs alongside it (Accounting works from Invoicing & Payments or the Customer Portal, for example). Pass the service id from ubm_list_services.
Annotations the server declares
- title: One service in detail
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_list_business_typesThe kinds of business the Solutions guide plans for (home & field services, contractors, appointments, walk-in, professional, automotive, transportation, other), each with examples…No findings
Why it is in this group
- The name "ubm_list_business_types" says "list": a word for reading.
Description, as the server wrote it
The kinds of business the Solutions guide plans for (home & field services, contractors, appointments, walk-in, professional, automotive, transportation, other), each with examples and how UBM helps that kind of business. Step 1 of tailoring a plan: pick the type that fits, then call ubm_get_guide_questions.
Annotations the server declares
- title: Kinds of business (Solutions guide)
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_list_packagesUBM's ready-made packages (Appointments, Walk-in, Professional services, Home & field services): who each is for, what it does, and which services it holds.No findings
Why it is in this group
- The name "ubm_list_packages" says "list": a word for reading.
Description, as the server wrote it
UBM's ready-made packages (Appointments, Walk-in, Professional services, Home & field services): who each is for, what it does, and which services it holds. No prices here; a tailored plan from the Solutions guide is priced with ubm_quote_plan.
Annotations the server declares
- title: UBM's packages
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
ubm_list_servicesEvery service UBM offers (CRM, Lead Management, Scheduling, Invoicing & Payments, Website Machine and the rest), each with a one-line summary and its page.Reads text others writeNo findings
Why it is in this group
- The name "ubm_list_services" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
Description, as the server wrote it
Every service UBM offers (CRM, Lead Management, Scheduling, Invoicing & Payments, Website Machine and the rest), each with a one-line summary and its page. No prices: use the Solutions guide tools for what a plan costs.
Annotations the server declares
- title: List UBM's services
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; ubm_list_services
ubm_request_plan
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; ubm_request_plan

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnubm_start_signup
The server marks "ubm_start_signup" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "ubm_start_signup" says "start": a word for a change.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ubm-public https://ultimatebusinessmachines.com/mcp/public

claude mcp add --transport http ubm-public https://ultimatebusinessmachines.com/mcp/public

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__ubm-public__ubm_list_services",
      "mcp__ubm-public__ubm_get_service",
      "mcp__ubm-public__ubm_list_packages",
      "mcp__ubm-public__ubm_list_business_types",
      "mcp__ubm-public__ubm_get_guide_questions"
    ],
    "ask": [
      "mcp__ubm-public__ubm_about",
      "mcp__ubm-public__ubm_recommend_plan",
      "mcp__ubm-public__ubm_quote_plan",
      "mcp__ubm-public__ubm_request_plan",
      "mcp__ubm-public__ubm_see_demo",
      "mcp__ubm-public__ubm_start_signup",
      "mcp__ubm-public__ubm_connect_agent"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as ubm-public. Review it before you use it.

Capability tags behind 2 rules

mcp__ubm-public__ubm_list_services untrusted-input
mcp__ubm-public__ubm_request_plan untrusted-input, outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.ultimatebusinessmachines/ubm-public/verify?hash=b5d580819dc6fa8cf79cbbc9bfa318792c95622b9a0d1a8f050ff6d60a361fdc" | jq -e '.changed == false'

Pinned hash b5d580819dc6, from Oct 28, 2026, 01:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.ultimatebusinessmachines/ubm-public/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.ultimatebusinessmachines/ubm-public.svg)](https://anlyon.dev/servers/com.ultimatebusinessmachines/ubm-public)

Source: MCP Registry. Synced Oct 28, 2026, 01:17 UTC.