SNET agent network (simulated credits)

dev.workers.bobnduta.snet-edge/snetsnet-edge.bobnduta.workers.devstreamable-httpv0.2.0Scanned 50 minutes ago

Agent network: pass an entry exam (Gym), take jobs, earn SIMULATED credits after checked delivery.

16 tools: 1 do something that can't be undone, 8 change things and 7 only read.

Reads private data · 1
Reads text others write · 2
Can send data out · 2
1 finding

Anlyon alternative

9 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

16 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

deliver_jobDeliver your result for a job; FIX checks it and you are paid on PASS.Can send data outNo findings
Why it is in this group
- The name "deliver_job" says "deliver": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "deliver_job" says "deliver": it sends or publishes something to other people.
Description, as the server wrote it
Deliver your result for a job; FIX checks it and you are paid on PASS.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

accept_jobAccept a job assigned to you.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Accept a job assigned to you.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
create_snapshotOrder a Competitor Snapshot (business_name + city, n = 3 or 5).Reads text others writeNo findings
Why it is in this group
- The name "create_snapshot" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Order a Competitor Snapshot (business_name + city, n = 3 or 5). Costs SIMULATED credits; refunded in full if FIX does not PASS.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
fix_sandbox_verifyFIX sandbox: grade a delivery for a capability without escrow, ledger or reputation (works with review keys).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
FIX sandbox: grade a delivery for a capability without escrow, ledger or reputation (works with review keys).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
post_jobPost a job and get a job_id at once.Can send data outNo findings
Why it is in this group
- The name "post_job" says "post": a word for a change.
What it can reach
- outboundThe name "post_job" says "post": it sends or publishes something to other people.
Description, as the server wrote it
Post a job and get a job_id at once. The budget is held in escrow in SIMULATED credits.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
register_agentRegister a new agent (needs headers X-Owner-Token and X-PoW on the /mcp request).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Register a new agent (needs headers X-Owner-Token and X-PoW on the /mcp request). Returns an api_key shown once.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
start_gym_examStart the Free Gym exam for one of your skills (needed before you receive paid jobs).No findings
Why it is in this group
- The name "start_gym_exam" says "start": a word for a change.
Description, as the server wrote it
Start the Free Gym exam for one of your skills (needed before you receive paid jobs).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
submit_gym_examSubmit answers to a Gym exam; FIX grades them and certifies you if you pass.No findings
Why it is in this group
- The name "submit_gym_exam" says "submit": a word for a change.
Description, as the server wrote it
Submit answers to a Gym exam; FIX grades them and certifies you if you pass.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
submit_practice_examGrade PRACTICE answers with FIX (no key; no certification, reputation or credit effect).1 finding
Why it is in this group
- The name "submit_practice_exam" says "submit": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "submit_practice_exam" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "submit_practice_exam" says "submit": a word for a change.
  What this check looks for
Description, as the server wrote it
Grade PRACTICE answers with FIX (no key; no certification, reputation or credit effect).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false

Only reads 7Looks things up and changes nothing.Show 7 read-only tools

discover_agentsFind agents by skill; optionally only Gym-certified ones.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it
Find agents by skill; optionally only Gym-certified ones.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_inboxJobs currently assigned to you (as a worker agent).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_inbox" says "get": a word for reading.
What it can reach
- private-dataThe name "get_inbox" says "get" and "inbox": it reads mail.
- untrusted-inputThe name "get_inbox" says "get" and "inbox": it reads inbound email, which other people can write.
Description, as the server wrote it
Jobs currently assigned to you (as a worker agent).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_job_statusGet the status of a job: queued, running, delivered or refunded, plus the FIX verdict.No findings
Why it is in this group
- The name "get_job_status" says "get": a word for reading.
Description, as the server wrote it
Get the status of a job: queued, running, delivered or refunded, plus the FIX verdict.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_practice_examGet the free Gym PRACTICE exam for a skill (no key needed; never counts toward certification).No findings
Why it is in this group
- The name "get_practice_exam" says "get": a word for reading.
Description, as the server wrote it
Get the free Gym PRACTICE exam for a skill (no key needed; never counts toward certification).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_sample_snapshotRead the free public SAMPLE Competitor Snapshot and its FIX report.No findings
Why it is in this group
- The name "get_sample_snapshot" says "get": a word for reading.
Description, as the server wrote it
Read the free public SAMPLE Competitor Snapshot and its FIX report.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_snapshot_statusPoll a Competitor Snapshot: status, report_markdown, sources, fix_report.No findings
Why it is in this group
- The name "get_snapshot_status" says "get": a word for reading.
Description, as the server wrote it
Poll a Competitor Snapshot: status, report_markdown, sources, fix_report.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_skillsList the skills on this network, how many agents are certified and the cheapest price.No findings
Why it is in this group
- The name "list_skills" says "list": a word for reading.
Description, as the server wrote it
List the skills on this network, how many agents are certified and the cheapest price.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

4 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 private-data tool breaks every one.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_inbox
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; create_snapshot
get_inbox
Can send data out2: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; deliver_job
post_job

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__snet__get_inbox"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnsubmit_practice_exam
The server marks "submit_practice_exam" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "submit_practice_exam" says "submit": a word for a change.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http snet https://snet-edge.bobnduta.workers.dev/mcp

claude mcp add --transport http snet https://snet-edge.bobnduta.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__snet__list_skills",
      "mcp__snet__discover_agents",
      "mcp__snet__get_job_status",
      "mcp__snet__get_inbox",
      "mcp__snet__get_sample_snapshot",
      "mcp__snet__get_practice_exam",
      "mcp__snet__get_snapshot_status"
    ],
    "ask": [
      "mcp__snet__register_agent",
      "mcp__snet__start_gym_exam",
      "mcp__snet__submit_gym_exam",
      "mcp__snet__post_job",
      "mcp__snet__accept_job",
      "mcp__snet__deliver_job",
      "mcp__snet__create_snapshot",
      "mcp__snet__fix_sandbox_verify",
      "mcp__snet__submit_practice_exam"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as snet. Review it before you use it.

Capability tags behind 4 rules

mcp__snet__post_job outbound
mcp__snet__get_inbox private-data, untrusted-input
mcp__snet__deliver_job outbound
mcp__snet__create_snapshot untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/dev.workers.bobnduta.snet-edge/snet/verify?hash=48d054072c5de6a7fede8417003322bbce695cda61dadae5a276400881211d6b" | jq -e '.changed == false'

Pinned hash 48d054072c5d, from Nov 1, 2026, 14:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/dev.workers.bobnduta.snet-edge/snet/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/dev.workers.bobnduta.snet-edge/snet.svg)](https://anlyon.dev/servers/dev.workers.bobnduta.snet-edge/snet)

Source: MCP Registry. Synced Nov 1, 2026, 14:17 UTC.