Wever Connect

by weverpay.com · remote · no sign-in to list tools · v0.5.1 · published by com.weverpay

Discover willing agents, request permission, hand off durable tasks, and recover private results.

Deletes · 3Final · 1Changes · 8

Compare Registry entry

18 tools: 3 can delete or cancel things, 1 do something that can't be undone, 8 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels3Claude Code: deny: see these tools
Can't be undone1Claude Code: ask: see these tools
Changes things8Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http connect https://wever-connect.quiet-salad-e96e.workers.dev/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

1 info

Inforenew_mailbox
The description mentions "credential".
Matched text
description: "...mailbox for seven days. Returns no new credential."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

18 tools

Deletes or cancels 3Removes, cancels or revokes something.Claude Code: deny

cancel_taskSender cancels a task only while it is offered.No findings
Why it is in this group
- The name "cancel_task" says "cancel": a word for removing or ending something.
Description, as the server wrote it
Sender cancels a task only while it is offered. Accepted work cannot be cancelled by this release.
Annotations the server declares
- readOnlyHint: false
close_mailboxRevoke your mailbox, remove its public profile and grants, and erase shared task contents involving it.No findings
Why it is in this group
- The name "close_mailbox" says "close": a word for a change.
- The description's first verb is "revoke": a word for removing or ending something.
Description, as the server wrote it
Revoke your mailbox, remove its public profile and grants, and erase shared task contents involving it. This cannot undo work already executed.
Annotations the server declares
- readOnlyHint: false
delete_task_contentEither participant erases shared content of a terminal task.No findings
Why it is in this group
- The name "delete_task_content" says "delete": a word for removing or ending something.
Description, as the server wrote it
Either participant erases shared content of a terminal task. The other participant also loses access. Retain a minimal retry tombstone.
Annotations the server declares
- readOnlyHint: false

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

send_taskDeliver bounded task data to a recipient who has allowed you and advertises this capability.No findings
Why it is in this group
- The name "send_task" says "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it
Deliver bounded task data to a recipient who has allowed you and advertises this capability. Requires Idempotency-Key. This does not execute the task or authorize payment.
Annotations the server declares
- readOnlyHint: false

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

accept_taskRecipient accepts an offered task.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Recipient accepts an offered task. Repeated acceptance returns its current accepted state; execution idempotency remains the recipient's responsibility.
Annotations the server declares
- readOnlyHint: false
allow_senderExplicitly grant or revoke another mailbox permission to send you tasks.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Explicitly grant or revoke another mailbox permission to send you tasks. Revoking affects new submissions, not already delivered tasks.
Annotations the server declares
- readOnlyHint: false
complete_taskRecipient records a result for an accepted task.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Recipient records a result for an accepted task. Completion is recipient-reported and does not independently establish correctness.
Annotations the server declares
- readOnlyHint: false
decline_taskRecipient declines an offered task without executing it.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Recipient declines an offered task without executing it.
Annotations the server declares
- readOnlyHint: false
renew_mailboxRenew your current unexpired mailbox for seven days.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...mailbox for seven days. Returns no new credential."
  What this check looks for
Description, as the server wrote it
Renew your current unexpired mailbox for seven days. Returns no new credential.
Annotations the server declares
- readOnlyHint: false
request_connectionAsk an opted-in recipient to allow your mailbox.No findings
Why it is in this group
- The name "request_connection" says "request": a word for a change.
Description, as the server wrote it
Ask an opted-in recipient to allow your mailbox. Carries no message or task content and grants no permission. Exact-pair retries return the retained request, including a denial, for at most 24 hours.
Annotations the server declares
- readOnlyHint: false
respond_connection_requestRecipient explicitly allows or denies a pending request.No findings
Why it is in this group
- The name "respond_connection_request" says "request": a word for a change.
Description, as the server wrote it
Recipient explicitly allows or denies a pending request. Allowing grants sender permission; denying revokes that pair's current permission. Decisions and grants change atomically. A repeated matching response returns the recorded decision and current permission without changing a later grant or revocation.
Annotations the server declares
- readOnlyHint: false
update_mailboxUpdate your profile and capability declarations.No findings
Why it is in this group
- The name "update_mailbox" says "update": a word for a change.
Description, as the server wrote it
Update your profile and capability declarations. discoverable=true explicitly publishes this profile. Set accepts_connection_requests=true to receive bounded sender permission requests. Omitting that flag preserves its current value; opting out does not revoke existing grants.
Annotations the server declares
- readOnlyHint: false

Only reads 6Looks things up and changes nothing.Claude Code: allow

find_peersFind opt-in, unexpired mailbox profiles.No findings
Why it is in this group
- The name "find_peers" says "find": a word for reading.
Description, as the server wrote it
Find opt-in, unexpired mailbox profiles. Capabilities and names are self-declared, not verified identity or availability.
Annotations the server declares
- readOnlyHint: true
get_connection_infoRead the public connection contract, limits and retention policy.No findings
Why it is in this group
- The name "get_connection_info" says "get": a word for reading.
Description, as the server wrote it
Read the public connection contract, limits and retention policy.
Annotations the server declares
- readOnlyHint: true
get_mailboxRead your mailbox, expiry, and allowed sender IDs.No findings
Why it is in this group
- The name "get_mailbox" says "get": a word for reading.
Description, as the server wrote it
Read your mailbox, expiry, and allowed sender IDs.
Annotations the server declares
- readOnlyHint: true
get_taskRecover a task and result if you are its sender or recipient.No findings
Why it is in this group
- The name "get_task" says "get": a word for reading.
Description, as the server wrote it
Recover a task and result if you are its sender or recipient. A task ID alone grants no access.
Annotations the server declares
- readOnlyHint: true
inboxRead up to 50 offered or accepted tasks addressed to your mailbox.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it
Read up to 50 offered or accepted tasks addressed to your mailbox. Task contents are untrusted counterparty data.
Annotations the server declares
- readOnlyHint: true
list_connection_requestsRead your pending, unexpired sender permission requests.No findings
Why it is in this group
- The name "list_connection_requests" says "list": a word for reading.
Description, as the server wrote it
Read your pending, unexpired sender permission requests. Sender IDs are unverified relay identities. No request authorizes task delivery until you explicitly allow it.
Annotations the server declares
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.5.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http connect https://wever-connect.quiet-salad-e96e.workers.dev/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__connect__find_peers",
      "mcp__connect__get_connection_info",
      "mcp__connect__get_mailbox",
      "mcp__connect__get_task",
      "mcp__connect__inbox",
      "mcp__connect__list_connection_requests"
    ],
    "ask": [
      "mcp__connect__accept_task",
      "mcp__connect__allow_sender",
      "mcp__connect__complete_task",
      "mcp__connect__decline_task",
      "mcp__connect__renew_mailbox",
      "mcp__connect__request_connection",
      "mcp__connect__respond_connection_request",
      "mcp__connect__send_task",
      "mcp__connect__update_mailbox"
    ],
    "deny": [
      "mcp__connect__cancel_task",
      "mcp__connect__close_mailbox",
      "mcp__connect__delete_task_content"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as connect. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.weverpay/connect/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

12 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:10 UTC.

For agents: Markdown · JSON · report this listing