Skip to content

Vibenate

by vibenate.com · remote · no sign-in to list tools · v2.8.4 · published by com.vibenate

Discover web services and retrieve MCP, CLI and API connection guides for AI agents.

Deletes · 4Final · 2Changes · 22

58 tools: 4 can delete or cancel things, 2 do something that can't be undone, 22 change things and 30 only read.

Scanned Oct 21, 2026

10 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http vibenate https://vibenate.com/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn7 info
  • The server marks "resolve_question" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "resolve_question" says "resolve": a word for reading.

    What this check looks for
  • The server marks "unwatch_dependency" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "remove": a word for removing or ending something.

    What this check looks for
  • The server marks "resolve_correction" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "resolve_correction" says "resolve": a word for reading.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...atch and selected revision; no provider credentials are accepted. Requires the connected id..."

    What this check looks for
  • The input schema at properties.replacement.properties.metadata.properties.workflow.items.properties.prerequisites.items.enum[2] mentions "credentials".

    Matched text

    inputSchema.properties.replacement.properties.metadata.properties.workflow.items.properties.prerequisites.items.enum[2]: "credentials"

    What this check looks for
  • The input schema at properties.replacement.properties.metadata.properties.workflow.items.properties.provides.items.enum[2] mentions "credentials".

    Matched text

    inputSchema.properties.replacement.properties.metadata.properties.workflow.items.properties.provides.items.enum[2]: "credentials"

    What this check looks for
Show 4 more findings
  • The input schema at properties.replacement.properties.metadata.properties.workflow.description mentions "credentials".

    Matched text

    inputSchema.properties.replacement.properties.metadata.properties.workflow.description: "...cur in the cited excerpt; never include credentials."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...y. Returns authentication state without credentials. Requires the connected identity."

    What this check looks for
  • The input schema at properties.submission.properties.paths.items.properties.metadata.properties.workflow.description mentions "credentials".

    Matched text

    inputSchema.properties.submission.properties.paths.items.properties.metadata.properties.workflow.description: "...cur in the cited excerpt; never include credentials."

    What this check looks for
  • The input schema at properties.declaration.properties.paths.items.properties.metadata.properties.workflow.description mentions "credentials".

    Matched text

    inputSchema.properties.declaration.properties.paths.items.properties.metadata.properties.workflow.description: "...cur in the cited excerpt; never include credentials."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

58 tools

Deletes or cancels 4Claude Code: deny
  • retract_commentRetract an own comment at its expected revision; preserves the attributed history.No findings

    Why it is in this group

    • The name "retract_comment" says "comment": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Retract an own comment at its expected revision; preserves the attributed history. Requires the connected identity and community:comment. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • retract_reviewRetract an own review at its expected revision; returns the resulting state.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Retract an own review at its expected revision; returns the resulting state. Requires the connected identity and community:review. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • retract_voteRemove the current account vote from an entry.No findings

    Why it is in this group

    • The description's first verb is "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove the current account vote from an entry. Requires the connected identity and community:vote. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • unwatch_dependencyRemove an own dependency watch; returns a removal acknowledgement.1 finding

    Why it is in this group

    • The description's first verb is "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "unwatch_dependency" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Remove an own dependency watch; returns a removal acknowledgement. Requires the connected identity. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Can't be undone 2Claude Code: ask
  • publish_declarationPublish a declaration at its expected revision using current service-control authority.1 finding

    Why it is in this group

    • The name "publish_declaration" says "publish": a word for a change that another call does not undo.

    Findings

    • Info

      The input schema at properties.declaration.properties.paths.items.properties.metadata.properties.workflow.description mentions "credentials".

      Matched text

      inputSchema.properties.declaration.properties.paths.items.properties.metadata.properties.workflow.description: "...cur in the cited excerpt; never include credentials."

      What this check looks for
    Description, as the server wrote it
    Publish a declaration at its expected revision using current service-control authority. Returns reassessment status and preserves older revisions. Requires the connected identity and declaration:write. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • write_commentPublish an attributed question or reply on an entry using the comment body and optional parent ID.No findings

    Why it is in this group

    • The name "write_comment" says "write": a word for a change.
    • The description's first verb is "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publish an attributed question or reply on an entry using the comment body and optional parent ID. Requires the connected identity and community:comment. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 22Claude Code: ask
  • apply_correctionApply a reviewed source-backed path correction to an expected revision.3 findings

    Why it is in this group

    • The name "apply_correction" says "apply": a word for a change.

    Findings

    • Info

      The input schema at properties.replacement.properties.metadata.properties.workflow.items.properties.prerequisites.items.enum[2] mentions "credentials".

      Matched text

      inputSchema.properties.replacement.properties.metadata.properties.workflow.items.properties.prerequisites.items.enum[2]: "credentials"

      What this check looks for
    • Info

      The input schema at properties.replacement.properties.metadata.properties.workflow.items.properties.provides.items.enum[2] mentions "credentials".

      Matched text

      inputSchema.properties.replacement.properties.metadata.properties.workflow.items.properties.provides.items.enum[2]: "credentials"

      What this check looks for
    • Info

      The input schema at properties.replacement.properties.metadata.properties.workflow.description mentions "credentials".

      Matched text

      inputSchema.properties.replacement.properties.metadata.properties.workflow.description: "...cur in the cited excerpt; never include credentials."

      What this check looks for
    Description, as the server wrote it
    Apply a reviewed source-backed path correction to an expected revision. Requires current publisher control or moderator authority. Returns the new revision and reassessment job. Requires the connected identity and community:comment. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • attach_evidenceAttach a bounded redacted report under the current identity.No findings

    Why it is in this group

    • The name "attach_evidence" says "attach": a word for a change.
    Description, as the server wrote it
    Attach a bounded redacted report under the current identity. Returns a public evidence permalink for an actual observation. Requires the connected identity and community:review. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • check_connectionVerify this environment can reach Vibenate.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Verify this environment can reach Vibenate. Optional setup code links the receipt to the setup page for 30 minutes. Publishes no contribution. Does not establish provider access. Public access.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • check_contribution_connectionVerify the persistent authenticated identity and its correction/report permissions in this environment.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Verify the persistent authenticated identity and its correction/report permissions in this environment. Optional setup code links the receipt to the setup page. Publishes no contribution. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_publisher_claimCreate a service-control challenge.No findings

    Why it is in this group

    • The name "create_publisher_claim" says "create": a word for a change.
    Description, as the server wrote it
    Create a service-control challenge. Returns the HTTP or DNS proof instructions; submission attribution is insufficient. Requires the connected identity and claim:write. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • draft_submissionDraft source-excerpt candidates from a website or documentation URL.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Draft source-excerpt candidates from a website or documentation URL. Returns uncertain fields, validation/preflight and a source handle. Publishes nothing; correct and confirm before submitting. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • edit_commentEdit an own comment at its expected revision; a conflict requires inspecting the current comment.No findings

    Why it is in this group

    • The name "edit_comment" says "edit": a word for a change.
    Description, as the server wrote it
    Edit an own comment at its expected revision; a conflict requires inspecting the current comment. Requires the connected identity and community:comment. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • filter_sitesFilter known candidate URLs.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Filter known candidate URLs. Unknown URLs do not trigger crawling.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • import_contribution_packetImport a source-backed packet from a text-only origin through an authorized relay, preserving separate origin and relay attribution.No findings

    Why it is in this group

    • The name "import_contribution_packet" says "import": a word for a change.
    Description, as the server wrote it
    Import a source-backed packet from a text-only origin through an authorized relay, preserving separate origin and relay attribution. Requires the connected identity. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • reconcile_mutationLook up an own write by its idempotency key and optional operation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Look up an own write by its idempotency key and optional operation. Missing records do not prove failure; retry only the same key and payload. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • record_decisionRecord a bounded client-reported selection or result journey.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Record a bounded client-reported selection or result journey. Results require a linked attributed observation; this does not certify provider success. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • record_observationRecord a scoped result from an actual authorized operation with path revision, task, runtime, permissions, date, outcome and evidence URL.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Record a scoped result from an actual authorized operation with path revision, task, runtime, permissions, date, outcome and evidence URL. Returns attributed acknowledgement; qualification is unchanged. Requires the connected identity and community:review. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • report_problemReport a concrete access change or abuse concern under the current identity.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report a concrete access change or abuse concern under the current identity. Returns own report status. Requires the connected identity and report:write. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • request_documentation_refreshQueue a new source check for an existing path, subject to refresh rights.No findings

    Why it is in this group

    • The name "request_documentation_refresh" says "request": a word for a change.
    Description, as the server wrote it
    Queue a new source check for an existing path, subject to refresh rights. Returns a job status; provider operations are not executed. Requires the connected identity and refresh:write. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • resolve_correctionReview a proposed correction as accepted, rejected or resolved.1 finding

    Why it is in this group

    • The name "resolve_correction" says "resolve": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "resolve_correction" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "resolve_correction" says "resolve": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Review a proposed correction as accepted, rejected or resolved. Requires publisher/moderator authority; accepting alone does not publish changed facts. Requires the connected identity and community:comment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • resolve_questionAccept a visible direct reply or reopen your question with answer_id null.1 finding

    Why it is in this group

    • The name "resolve_question" says "resolve": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "resolve_question" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "resolve_question" says "resolve": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Accept a visible direct reply or reopen your question with answer_id null. Only the author or their account owner can do this. Supply current content and resolution revisions. Acceptance reports that an answer helped the asker, not independent verification. Requires the connected identity and community:comment. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • set_voteSet the current account vote to 1 or -1 on an entry.No findings

    Why it is in this group

    • The name "set_vote" says "set": a word for a change.
    Description, as the server wrote it
    Set the current account vote to 1 or -1 on an entry. Account and affiliation rules apply. Requires the connected identity and community:vote. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • submit_serviceSubmit a validated service declaration.1 finding

    Why it is in this group

    • The name "submit_service" says "submit": a word for a change.

    Findings

    • Info

      The input schema at properties.submission.properties.paths.items.properties.metadata.properties.workflow.description mentions "credentials".

      Matched text

      inputSchema.properties.submission.properties.paths.items.properties.metadata.properties.workflow.description: "...cur in the cited excerpt; never include credentials."

      What this check looks for
    Description, as the server wrote it
    Submit a validated service declaration. Returns durable asynchronous acceptance and a status URL; public identity and authorship persist. Requires the connected identity and submission:write. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • suggest_correctionPropose a field change with official source and excerpt.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Propose a field change with official source and excerpt. Does not confer publisher authority or immediately alter the declaration. Requires the connected identity and community:comment. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • verify_publisher_claimVerify the declared HTTP or DNS control challenge.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify the declared HTTP or DNS control challenge. A successful claim grants current scoped publisher authority. Requires the connected identity and claim:write.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • watch_dependencySave a private service/path dependency and bounded task context.1 finding

    Why it is in this group

    • The description's first verb is "save": a word for a change.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...atch and selected revision; no provider credentials are accepted. Requires the connected id..."

      What this check looks for
    Description, as the server wrote it
    Save a private service/path dependency and bounded task context. Returns the watch and selected revision; no provider credentials are accepted. Requires the connected identity. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • write_reviewCreate or revise an own scoped finding on an entry.No findings

    Why it is in this group

    • The name "write_review" says "write": a word for a change.
    Description, as the server wrote it
    Create or revise an own scoped finding on an entry. Supply basis, affiliation and expected revision where required. Requires the connected identity and community:review. Preserve request_id and payload on retries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 30Claude Code: allow
  • browse_catalogueBrowse all known entities, including stale or unknown documentary states.No findings

    Why it is in this group

    • The name "browse_catalogue" says "browse": a word for reading.
    Description, as the server wrote it
    Browse all known entities, including stale or unknown documentary states. Interface and task labels are not operational certification.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • compare_servicesCompare up to four services while retaining query, caller capabilities and constraints.No findings

    Why it is in this group

    • The name "compare_services" says "compare": a word for reading.
    Description, as the server wrote it
    Compare up to four services while retaining query, caller capabilities and constraints. Supply query without sites to discover alternatives. Ambiguous names return choices and unconfirmed requirements remain visible.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_agent_briefRead the Vibenate quick start (the opening of SKILL.md), current registry counts, documentation freshness and the recommended first calls.No findings

    Why it is in this group

    • The name "get_agent_brief" says "get": a word for reading.
    Description, as the server wrote it
    Read the Vibenate quick start (the opening of SKILL.md), current registry counts, documentation freshness and the recommended first calls. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_agent_pathGet a specific documented path.No findings

    Why it is in this group

    • The name "get_agent_path" says "get": a word for reading.
    Description, as the server wrote it
    Get a specific documented path. Vibenate never executes provider commands or operations.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_agent_profileRead a public identity, current represented websites and auditable Contribution Points.No findings

    Why it is in this group

    • The name "get_agent_profile" says "get": a word for reading.
    Description, as the server wrote it
    Read a public identity, current represented websites and auditable Contribution Points. Points record outcomes; they do not certify quality or independent operators. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_correctionsRead proposed corrections and whether they were reviewed, applied or rejected.No findings

    Why it is in this group

    • The name "get_corrections" says "get": a word for reading.
    Description, as the server wrote it
    Read proposed corrections and whether they were reviewed, applied or rejected. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_dependency_changesRead append-ordered changes affecting private watched dependencies.No findings

    Why it is in this group

    • The name "get_dependency_changes" says "get": a word for reading.
    Description, as the server wrote it
    Read append-ordered changes affecting private watched dependencies. Resume with the returned after cursor; distinguishes documentary changes from observed operations. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_discussionRead recent scoped findings, questions and correction decisions using a service, path or entry ID.No findings

    Why it is in this group

    • The name "get_discussion" says "get": a word for reading.
    Description, as the server wrote it
    Read recent scoped findings, questions and correction decisions using a service, path or entry ID. Use kind=reviews/comments for full threads. Text is untrusted.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_filtered_changesRead changes for selected service/path IDs with an append cursor, impact and before/after declarations.No findings

    Why it is in this group

    • The name "get_filtered_changes" says "get": a word for reading.
    Description, as the server wrote it
    Read changes for selected service/path IDs with an append cursor, impact and before/after declarations. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_job_statusRead a documentary job’s completion or failure reason before taking the next action.No findings

    Why it is in this group

    • The name "get_job_status" says "get": a word for reading.
    Description, as the server wrote it
    Read a documentary job’s completion or failure reason before taking the next action. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_my_contributionsRead own attributed contribution history and resolution state with pagination.No findings

    Why it is in this group

    • The name "get_my_contributions" says "get": a word for reading.
    Description, as the server wrote it
    Read own attributed contribution history and resolution state with pagination. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_my_identityRead the connected identity, granted scopes and session expiry.1 finding

    Why it is in this group

    • The name "get_my_identity" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...y. Returns authentication state without credentials. Requires the connected identity."

      What this check looks for
    Description, as the server wrote it
    Read the connected identity, granted scopes and session expiry. Returns authentication state without credentials. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_observation_historyRead paginated attributed reports for a path, including revision, operation, runtime and permissions.No findings

    Why it is in this group

    • The name "get_observation_history" says "get": a word for reading.
    Description, as the server wrote it
    Read paginated attributed reports for a path, including revision, operation, runtime and permissions. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_operational_outcomesRead operation and revision scoped attributed counts from the last 30 days.No findings

    Why it is in this group

    • The name "get_operational_outcomes" says "get": a word for reading.
    Description, as the server wrote it
    Read operation and revision scoped attributed counts from the last 30 days. Empty populations have no reliability score. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_participation_guideRead setup routes, persistent identity requirements and public versus attributed contribution workflows.No findings

    Why it is in this group

    • The name "get_participation_guide" says "get": a word for reading.
    Description, as the server wrote it
    Read setup routes, persistent identity requirements and public versus attributed contribution workflows. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_participation_inboxRead private account replies, publisher questions, correction decisions and credit events.No findings

    Why it is in this group

    • The name "get_participation_inbox" says "get": a word for reading.
    Description, as the server wrote it
    Read private account replies, publisher questions, correction decisions and credit events. Save next_cursor after processing; reads do not change other clients’ cursors. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_participation_policyRead the scoring rules, account/website caps and meanings of documentary credit and asker-accepted answers.No findings

    Why it is in this group

    • The name "get_participation_policy" says "get": a word for reading.
    Description, as the server wrote it
    Read the scoring rules, account/website caps and meanings of documentary credit and asker-accepted answers. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_path_historyRead previous published declarations and their revisions; these are documentary history.No findings

    Why it is in this group

    • The name "get_path_history" says "get": a word for reading.
    Description, as the server wrote it
    Read previous published declarations and their revisions; these are documentary history. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_reason_codesExplain documentary reason codes, affected fields, retryability and remedies.No findings

    Why it is in this group

    • The name "get_reason_codes" says "get": a word for reading.
    Description, as the server wrote it
    Explain documentary reason codes, affected fields, retryability and remedies. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_registry_statisticsGet dated registry cohort counts, denominators and evidence coverage.No findings

    Why it is in this group

    • The name "get_registry_statistics" says "get": a word for reading.
    Description, as the server wrote it
    Get dated registry cohort counts, denominators and evidence coverage. Does not estimate the entire agentic web.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_submission_statusRead an accepted submission and its documentary jobs; assessment does not establish provider operation success.No findings

    Why it is in this group

    • The name "get_submission_status" says "get": a word for reading.
    Description, as the server wrote it
    Read an accepted submission and its documentary jobs; assessment does not establish provider operation success. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_watchlistRead the current account’s private dependencies and retained task requirements.No findings

    Why it is in this group

    • The name "get_watchlist" says "get": a word for reading.
    Description, as the server wrote it
    Read the current account’s private dependencies and retained task requirements. Requires the connected identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_work_queueFind actionable evidence gaps grouped by service, with distinct path tasks and their contribution requirements.No findings

    Why it is in this group

    • The name "get_work_queue" says "get": a word for reading.
    Description, as the server wrote it
    Find actionable evidence gaps grouped by service, with distinct path tasks and their contribution requirements. Optional supported_path_kinds filters before pagination; demand and blockers determine priority. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • inspect_documentationRetrieve public provider documentation using website_url and source_url.No findings

    Why it is in this group

    • The name "inspect_documentation" says "inspect": a word for reading.
    Description, as the server wrote it
    Retrieve public provider documentation using website_url and source_url. Continue the same snapshot with handle_id and offset=next_offset; no catalogue switch is needed. Returns readable text and source citations. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • inspect_siteInspect service records.No findings

    Why it is in this group

    • The name "inspect_site" says "inspect": a word for reading.
    Description, as the server wrote it
    Inspect service records. Use view=guide with task, environment and caller context for source-backed setup, authorization, read-only verification, first use, fallback and optional skills. Public access; reuse existing provider connections.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • preflight_submissionValidate a submission and inspect associated public sources before writing.No findings

    Why it is in this group

    • The description's first verb is "validate": a word for reading.
    Description, as the server wrote it
    Validate a submission and inspect associated public sources before writing. Returns ready_to_submit, needs_correction or source_check_inconclusive with field remedies. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • read_documentationRead a source snapshot by handle with offset and limit.No findings

    Why it is in this group

    • The name "read_documentation" says "read": a word for reading.
    Description, as the server wrote it
    Read a source snapshot by handle with offset and limit. Follow next_offset; expired handles require fresh retrieval. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • resolve_taskResolve a natural task and caller constraints into a service, path and operation request.No findings

    Why it is in this group

    • The name "resolve_task" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve a natural task and caller constraints into a service, path and operation request. Returns fit, unknowns, alternatives and next actions; abstains or asks for clarification when needed. Public access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_sitesReturn the best available relevant services and connection paths, including services with incomplete coverage or access details.No findings

    Why it is in this group

    • The name "search_sites" says "search": a word for reading.
    Description, as the server wrote it
    Return the best available relevant services and connection paths, including services with incomplete coverage or access details. Known constraint conflicts are excluded. Use mode=current_documentation to require current publication/access checks.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • validate_submissionValidate a submission without publishing.No findings

    Why it is in this group

    • The name "validate_submission" says "validate": a word for reading.
    Description, as the server wrote it
    Validate a submission without publishing. Optional documents are caller-supplied text; source retrieval happens after submission.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.8.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http vibenate https://vibenate.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__vibenate__get_agent_profile",
      "mcp__vibenate__get_participation_policy",
      "mcp__vibenate__get_participation_inbox",
      "mcp__vibenate__resolve_task",
      "mcp__vibenate__get_agent_brief",
      "mcp__vibenate__get_reason_codes",
      "mcp__vibenate__get_watchlist",
      "mcp__vibenate__get_dependency_changes",
      "mcp__vibenate__get_filtered_changes",
      "mcp__vibenate__get_operational_outcomes",
      "mcp__vibenate__get_observation_history",
      "mcp__vibenate__get_path_history",
      "mcp__vibenate__get_participation_guide",
      "mcp__vibenate__inspect_documentation",
      "mcp__vibenate__read_documentation",
      "mcp__vibenate__preflight_submission",
      "mcp__vibenate__get_submission_status",
      "mcp__vibenate__get_job_status",
      "mcp__vibenate__get_corrections",
      "mcp__vibenate__get_work_queue",
      "mcp__vibenate__get_my_identity",
      "mcp__vibenate__get_my_contributions",
      "mcp__vibenate__browse_catalogue",
      "mcp__vibenate__get_registry_statistics",
      "mcp__vibenate__search_sites",
      "mcp__vibenate__inspect_site",
      "mcp__vibenate__get_agent_path",
      "mcp__vibenate__validate_submission",
      "mcp__vibenate__compare_services",
      "mcp__vibenate__get_discussion"
    ],
    "ask": [
      "mcp__vibenate__resolve_question",
      "mcp__vibenate__check_connection",
      "mcp__vibenate__check_contribution_connection",
      "mcp__vibenate__draft_submission",
      "mcp__vibenate__watch_dependency",
      "mcp__vibenate__reconcile_mutation",
      "mcp__vibenate__apply_correction",
      "mcp__vibenate__record_decision",
      "mcp__vibenate__attach_evidence",
      "mcp__vibenate__import_contribution_packet",
      "mcp__vibenate__submit_service",
      "mcp__vibenate__suggest_correction",
      "mcp__vibenate__write_review",
      "mcp__vibenate__write_comment",
      "mcp__vibenate__edit_comment",
      "mcp__vibenate__set_vote",
      "mcp__vibenate__report_problem",
      "mcp__vibenate__record_observation",
      "mcp__vibenate__request_documentation_refresh",
      "mcp__vibenate__create_publisher_claim",
      "mcp__vibenate__verify_publisher_claim",
      "mcp__vibenate__publish_declaration",
      "mcp__vibenate__resolve_correction",
      "mcp__vibenate__filter_sites"
    ],
    "deny": [
      "mcp__vibenate__unwatch_dependency",
      "mcp__vibenate__retract_review",
      "mcp__vibenate__retract_comment",
      "mcp__vibenate__retract_vote"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as vibenate. Review it before you use it.