Skip to content

dev.redirx/redirx

by redirx.dev · remote · no sign-in to list tools · v0.2.0 · published by dev.redirx

Map old site URLs to new ones during a migration, review proposals and export approved redirects.

Changes · 7

9 tools: 7 change things and 2 only read.

Scanned Oct 21, 2026

11 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http redirx https://redirx-mcp-server.onrender.com/mcp

Findings

Matches of fixed checks, with the text they matched.

11 info
  • The input schema at properties.old_site.description mentions "credentials".

    Matched text

    inputSchema.properties.old_site.description: "...ample; no page path, query, fragment or credentials."

    What this check looks for
  • The input schema at properties.new_site.description mentions "credentials".

    Matched text

    inputSchema.properties.new_site.description: "...ample; no page path, query, fragment or credentials."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
Show 5 more findings
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Changes things 7Claude Code: ask
  • export_redirectsCreate an immutable artifact from explicitly approved decisions.1 finding

    Why it is in this group

    • The description's first verb is "create": a word for a change.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Create an immutable artifact from explicitly approved decisions. Use data.selection_revision from the latest review response as revision. allow_partial requires explicit agreement to exclusions. Export does not install redirects. Large downloads are returned only as backend-authorized artifact resources; this gateway never follows arbitrary URLs.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
  • import_inventoryImport explicit HTTP(S) URL strings into an owned immutable old or new inventory.1 finding

    Why it is in this group

    • The name "import_inventory" says "import": a word for a change.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Import explicit HTTP(S) URL strings into an owned immutable old or new inventory. No crawl or page scraping. Use data.inventory.id only when data.inventory.status is complete for run_migration; partial imports need corrected input and a new key. The free trial allows 500 old / 2000 new URLs and 2 MiB total URL text. When paid billing is enabled, paid runs allow 15000 old / 20000 new URLs and 16 MiB total. Importing never authorizes a charge.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • openWorldHint: false
  • plan_migrationCreate an owned old-site/new-site plan.3 findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.

    Findings

    • Info

      The input schema at properties.old_site.description mentions "credentials".

      Matched text

      inputSchema.properties.old_site.description: "...ample; no page path, query, fragment or credentials."

      What this check looks for
    • Info

      The input schema at properties.new_site.description mentions "credentials".

      Matched text

      inputSchema.properties.new_site.description: "...ample; no page path, query, fragment or credentials."

      What this check looks for
    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Create an owned old-site/new-site plan. Next call import_inventory for the old and new URL lists; planning does not crawl or run the model.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • openWorldHint: true
  • refine_matchesResume a paused matching pass, or improve unresolved URL mappings with explicitly confirmed examples.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Resume a paused matching pass, or improve unresolved URL mappings with explicitly confirmed examples. Up to three total passes; does not consume another free migration. Read data.jev.seed_revision from get_migration first. If paused, honor retry_after_seconds and resolve the reported pause reason before resuming.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • openWorldHint: true
  • resolve_matchesApply audited, optimistic-concurrency decisions.1 finding

    Why it is in this group

    • The name "resolve_matches" says "resolve": a word for reading.
    • The description's first verb is "apply": a word for a change.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Apply audited, optimistic-concurrency decisions. To confirm a model-proposed target, use set_target with target_url, mapping_id and expected_revision after explicit user approval. Inspect every returned outcome: a batch can partially fail. On revision conflicts, reread matches and reassess the decision. Model predictions are never automatically verified examples.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
  • run_migrationRun URL matching from immutable inventories.1 finding

    Why it is in this group

    • The name "run_migration" says "run": a word for a change.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Run URL matching from immutable inventories. When current billing is enabled, the separate free trial allows 500 old URLs; paid purchases or monthly allowances support 15000 old / 20000 new URLs. Payment-required responses provide a browser billing link. Only a human completes checkout. Pass its verified checkout_id for a one-time purchase or select a subscription_id. Never approve extra URLs without explicit user consent to max_extra_amount_cents, the TOTAL extra-usage charge for this month after this run, not an incremental charge. Included retries and refinements do not buy URLs again. confirmed_pairs must be explicitly verified examples, never guesses.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • openWorldHint: true
  • verify_redirectsStart or resume an owned artifact HTTP check.1 finding

    Why it is in this group

    • The description's first verb is "start": a word for a change.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Start or resume an owned artifact HTTP check. Supply an existing deployment_id, or explicitly confirm installation with live_origin and origin_rewrites ({} preserves artifact destinations). This does not install rules or establish Google indexing, page canonicals, robots permissions, or sitemap correctness. Inspect incomplete and unchecked results before claiming success.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 2Claude Code: allow
  • get_migrationRead an owned migration summary and its next recoverable action.1 finding

    Why it is in this group

    • The name "get_migration" says "get": a word for reading.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Read an owned migration summary and its next recoverable action. Retain migration_id and run_id across reconnects. Poll only after retry_after_seconds; a completed run still requires explicit review before export.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
  • list_matchesRead owned match exceptions in stable traffic order.1 finding

    Why it is in this group

    • The name "list_matches" says "list": a word for reading.

    Findings

    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...R include sensitive information such as credentials, passwords, or personal data. Example (..."

      What this check looks for
    Description, as the server wrote it
    Read owned match exceptions in stable traffic order. Follow data.next_cursor until null using the same run and filter; one page is not the whole run. Retain each mapping revision and data.selection_revision for review/export. Traffic absence is distinct from observed zero. Confidence is an uncalibrated model estimate, never approval.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http redirx https://redirx-mcp-server.onrender.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__redirx__get_migration",
      "mcp__redirx__list_matches"
    ],
    "ask": [
      "mcp__redirx__plan_migration",
      "mcp__redirx__import_inventory",
      "mcp__redirx__run_migration",
      "mcp__redirx__refine_matches",
      "mcp__redirx__resolve_matches",
      "mcp__redirx__export_redirects",
      "mcp__redirx__verify_redirects"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as redirx. Review it before you use it.