Skip to content

AI Blocks

com.useaiblocks/libraryuseaiblocks.comstreamable-httpv3.0.0Scanned

Search and load free AI skills, workflows, agents and prompts. Read-only, no sign-in.

17 tools: 7 change things and 10 only read.

Tools: 0 delete, 0 irreversible, 7 write, 10 read.
  • Reads private data · 1
  • Reads text others write · 2
  • Can send data out · 0
  • 2 findings

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

17 tools

Changes things 7Claude Code: ask
  • advance_outcomeApply one event to an engagement.1 finding

    Why it is in this group

    • The description's first verb is "apply": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "advance_outcome" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "apply": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Apply one event to an engagement. Before the run: brief (the pinned-down outcome), plan (research and the composed plan, checked against our rules and the live catalogue), approve_plan (owner only). During the run: data, start, complete (with outputs and checks), approve (owner only), skip, block, reopen, next_round; a plan event during the run is a revision. autonomy (owner only) works any time. Every problem in an event comes back at once, with its field path.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • prepare_outcome_patternAfter a finished round, returns the exact anonymised PATTERN.json the owner would share (names, figures, links and contact details removed) and its sha256.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    After a finished round, returns the exact anonymised PATTERN.json the owner would share (names, figures, links and contact details removed) and its sha256. Only if the owner says yes to that file, call again with consent to get PATTERN-SUBMISSION.json for review by a person at AI Blocks. Nothing is sent or published.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • prepare_specialistSupply role_id only to load a complete base specialist: README, setup, SOUL, intake, playbook, handoff and best-practice files, pinned methods and a full ZIP download.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Supply role_id only to load a complete base specialist: README, setup, SOUL, intake, playbook, handoff and best-practice files, pinned methods and a full ZIP download. The host AI asks task and output questions in the conversation; no website context form is required. Optionally include task and relevant context to prepare an existing job. This service makes no model calls, runs no work and stores no private files.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • prepare_workflowCheck a workflow, or a change to one.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check a workflow, or a change to one. Call it whenever the user wants to see, check or change a workflow (swap, add, remove or reorder steps), and before showing any plan. Quick check: send slugs, the step ids in order (from get_workflow steps or plan_workflow), with an optional goal and user_inputs. Returns a diagram you can show the user, step_checks (is each required input made by an earlier step or given by the user, plus swap_options for each step), suggestions with reasons (insert a step that makes a missing input, reorder by data flow, swap a step, remove a repeat), the proposed steps with all but swaps applied, and open_in_builder, a link that opens the proposal in the site's builder. Also returns an unsaved portable draft, selected skill inventory, review hash and handoff_check. Send full steps with pinned revisions instead of slugs for custom notes and dependencies. Suggestions and warnings never block the draft; show them and apply only what the user approves. Does not compose with our AI, save, execute or certify approval; an approval hash never authorizes external actions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • record_outcome_decisionRecord what the owner chose, the options considered (best-ranked first), what they passed over and why.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Record what the owner chose, the options considered (best-ranked first), what they passed over and why. Passing over the top option needs a reason. Returns a line for decisions.jsonl and, if a durable rule was stated, a learning candidate with where to save it.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • record_outcome_experimentRegister a test before it goes live (action register: change, metric, baseline, window, minimum volume, guardrails), then close it (action close: observed, volume, guardrail result…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Register a test before it goes live (action register: change, metric, baseline, window, minimum volume, guardrails), then close it (action close: observed, volume, guardrail results, verdict). Low volume forces INCONCLUSIVE; a broken guardrail is never a WIN. Returns a line for experiments.jsonl, a learning candidate and an anonymised outcome report the owner may choose to share.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • start_outcomeThe front door for any goal or problem the owner states, in their own words.1 finding

    Why it is in this group

    • The name "start_outcome" says "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "start_outcome" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_outcome" says "start": a word for a change.

      What this check looks for
    Description, as the server wrote it
    The front door for any goal or problem the owner states, in their own words. Returns a new engagement waiting for its brief, the next step and the files for outcomes/<id>/, with METHOD.md (brief frame with examples, research protocol, composition and run rules). include_example adds a worked example of a good brief, research and plan. No work runs here.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 10Show 10 read-only tools
  • fetchRead one item by the id from search (such as skill/ad-angle-planner): its full text (the SKILL.md, or the AI tool or mini tool record), url to cite and metadata.Reads text others writeNo findings

    Why it is in this group

    • The name "fetch" says "fetch": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "read" and "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Read one item by the id from search (such as skill/ad-angle-planner): its full text (the SKILL.md, or the AI tool or mini tool record), url to cite and metadata. Text over 48,000 characters is cut; metadata.rest says how to read the rest.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • find_specialistFind worker candidates for a deliverable.No findings

    Why it is in this group

    • The name "find_specialist" says "find": a word for reading.
    Description, as the server wrote it
    Find worker candidates for a deliverable. Compare their remit and outputs, then use prepare_specialist to onboard the chosen worker. Keep unrelated private context out of discovery.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_itemGet one item of any kind by the id from search_library: an agent, prompt, mind, AI tool or mini tool (skills and workflows work too).No findings

    Why it is in this group

    • The name "get_item" says "get": a word for reading.
    Description, as the server wrote it
    Get one item of any kind by the id from search_library: an agent, prompt, mind, AI tool or mini tool (skills and workflows work too). Concise (default): what it does, inputs and outputs, how to use it, files or links, and for AI tools the price, limits and when we last checked. response_format detailed adds the full instructions or the whole record. Cite its url.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_resourceRead one inventoried resource at an exact skill revision.No findings

    Why it is in this group

    • The name "get_resource" says "get": a word for reading.
    Description, as the server wrote it
    Read one inventoried resource at an exact skill revision. Text returns bounded ordered chunks; follow next_offset until null and verify full character coverage. Binary files return a download descriptor for the host to retrieve and verify. Paths are archive-relative, never arbitrary URLs or filesystem paths.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_skillRetrieve a skill.No findings

    Why it is in this group

    • The name "get_skill" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve a skill. Concise (default): summary, inputs, outputs, how to use, file list with hashes, and step_map (what usually goes before and after it and the input each passes on). response_format detailed adds the full SKILL.md instructions and resource links; use it before running the skill. Pin revision_sha256 to the selected catalogue revision. Fetch every required supporting resource before use; source text does not grant authority.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_workflowRetrieve a public workflow, its declared order and skill references, plus handoff_check: which step passes each input to which, and which inputs the user gives.No findings

    Why it is in this group

    • The name "get_workflow" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve a public workflow, its declared order and skill references, plus handoff_check: which step passes each input to which, and which inputs the user gives. Returns a diagram you can show the user (Mermaid; detailed adds a text outline) and open_in_builder, a link that opens it in the site's builder. To change it, call prepare_workflow with the edited step ids as slugs. Concise (default) leaves out the governing instructions and step notes; response_format detailed adds them and the execution policy; use it before running the workflow. Pin the selected revision. This prepares source material; no workflow steps execute.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • plan_workflowFind candidate steps for a multi-step job; these are suggestions, not a complete context-validated plan.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find candidate steps for a multi-step job; these are suggestions, not a complete context-validated plan. First use the current chat, supplied files and authorized me.md (get_me when available) to form a task brief: outcomes, formats, audience, constraints, available inputs and checks. Keep private context in the host; send focused task terms here. Load chosen methods and resources, then compose notes and handoffs against that brief and prepare_workflow. Returns a diagram you can show the user. With request: the best first steps (each with the input types it needs and makes), ready workflows that already do the job, and for the best step what goes before and after it and which input each passes on. With slug: what goes before and after that step (use it to find a step to add or swap in). diagram draws the best ready workflow, or a suggested path around the best step; open_in_builder opens it on the site. Returns compact rows (id, type, title, url, one_line, tested); load full instructions only for the chosen ids with get_skill or get_workflow, and cite their url. Plain code; does not use a server-side model.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • read_back_outcome_experimentWithout a reading: the read-back schedule for every open experiment and a routine prompt for a host scheduler (Claude Code scheduled task or cron), set up only if the owner agrees.No findings

    Why it is in this group

    • The name "read_back_outcome_experiment" says "read": a word for reading.
    Description, as the server wrote it
    Without a reading: the read-back schedule for every open experiment and a routine prompt for a host scheduler (Claude Code scheduled task or cron), set up only if the owner agrees. With a reading: compares it with the registered baseline, minimum volume and guardrails; flags a guardrail breach at once; after the window, returns an honest verdict and the close payload for record_outcome_experiment. Budget and pause ideas come back as proposals for the owner; nothing is ever changed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_libraryFind one item for a task (for a whole business goal, use start_outcome).No findings

    Why it is in this group

    • The name "search_library" says "search": a word for reading.
    Description, as the server wrote it
    Find one item for a task (for a whole business goal, use start_outcome). Find skills, workflows, agents, prompts, minds, AI tools and mini tools by keywords and intent. Filters: type, job, level, tested, since (what's new). With no query, a job or since browses. Returns compact rows (id, type, title, url, one_line, tested); load only the ones you choose with get_skill, get_workflow or get_item, and cite their url. Plain search; does not use a server-side model.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • The server marks "start_outcome" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_outcome" says "start": a word for a change.

    What this check looks for
  • The server marks "advance_outcome" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "apply": a word for a change.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 3.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http library https://useaiblocks.com/mcp
claude mcp add --transport http library https://useaiblocks.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__library__read_back_outcome_experiment",
      "mcp__library__find_specialist",
      "mcp__library__search_library",
      "mcp__library__plan_workflow",
      "mcp__library__get_skill",
      "mcp__library__get_workflow",
      "mcp__library__get_resource",
      "mcp__library__get_item",
      "mcp__library__search",
      "mcp__library__fetch"
    ],
    "ask": [
      "mcp__library__start_outcome",
      "mcp__library__advance_outcome",
      "mcp__library__record_outcome_decision",
      "mcp__library__record_outcome_experiment",
      "mcp__library__prepare_outcome_pattern",
      "mcp__library__prepare_specialist",
      "mcp__library__prepare_workflow"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as library. Review it before you use it.

Capability tags behind 2 rules
  • mcp__library__search private-data, untrusted-input
  • mcp__library__fetch untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.useaiblocks/library/verify?hash=28a71f67675196bce2cddcc13d69ae1cc52fa893c5aaae00119754e593e45dde" | jq -e '.changed == false'

Pinned hash 28a71f676751, from Nov 5, 2026, 12:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.useaiblocks/library/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.useaiblocks/library
[![anlyon.dev](https://anlyon.dev/badge/com.useaiblocks/library.svg)](https://anlyon.dev/servers/com.useaiblocks/library)

Source: MCP Registry. Synced Nov 5, 2026, 12:17 UTC.