Mooi

fyi.mooi/mooimooi.fyistreamable-httpv1.0.0Scanned 55 minutes ago

Plan group gatherings: dates, availability, polls, questions and decisions. No login or API key.

18 tools: 15 can delete or cancel things and 3 only read.

Reads private data · 1
Reads text others write · 16
Can send data out · 1
1 finding

Anlyon alternative

15 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

18 tools

Deletes or cancels 15Removes, cancels or revokes something.Claude Code: deny

acknowledge_changesRecord that you have read changes up to a version.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Record that you have read changes up to a version. Does not send email or create a new change.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
add_commentPost a message or answer a question.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "add_comment" says "add": a word for a change.
- The description's first verb is "post" and "message": it sends a message, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "add_comment" says "add" and "comment": it writes something other people read.
Description, as the server wrote it
Post a message or answer a question. questionId attaches it to that discussion. Returns a direct comment link.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
add_poll_optionAdd an option to an open question, such as a city or restaurant.Reads text others writeNo findings
Why it is in this group
- The name "add_poll_option" says "add": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Add an option to an open question, such as a city or restaurant.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
ask_questionAsk a question or create a poll.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Ask a question or create a poll. Use kind city first, then restaurant with parentId pointing to the city question. Empty options allow an open discussion.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
create_eventCreate an event and register its host.Reads text others writeNo findings
Why it is in this group
- The name "create_event" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Create an event and register its host. Supply a random UUID requestId and reuse it for uncertain retries, including across HTTP/MCP clients. Give personalUrl only to the host; share the plain url with invitees. Email is required for event updates.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
decide_questionRecord the current choice of city, restaurant or other detail, or reopen a question.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Record the current choice of city, restaurant or other detail, or reopen a question. Agents may decide using the group’s responses and discussion without separate human approval. State unresolved assumptions; do not claim unanimous human approval from vote counts or silence. A human veto requires reopening and finding an alternative.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
join_eventRegister yourself or the person you represent, with their email.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Register yourself or the person you represent, with their email. Set emailAccess to whether your agent can monitor that inbox. Do not register other people without their permission.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
propose_dateAdd a date option with ISO 8601 start and end including UTC offset.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "add": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Add a date option with ISO 8601 start and end including UTC offset. The event timezone controls display. Check accessible calendars and propose suitable options autonomously; do not claim unverified availability as certain.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
record_channel_updateRecord a successful external message delivery.Reads text others writeNo findings
Why it is in this group
- The name "record_channel_update" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Record a successful external message delivery. Only call after your channel confirms the message was sent. Does not trigger more emails.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
remove_dateRemove a proposed date.Reads text others writeNo findings
Why it is in this group
- The name "remove_date" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Remove a proposed date. A confirmed date must first be changed or the event reopened.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
set_availabilitySet or change your yes/maybe/no response to one or more proposed dates.Reads text others writeNo findings
Why it is in this group
- The name "set_availability" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Set or change your yes/maybe/no response to one or more proposed dates. Check accessible calendars and respond autonomously without asking for approval for each vote; use maybe for uncertainty. Change responses when the human vetoes or circumstances change. Omitted dates remain unchanged.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
set_channelsSet where the group communicates.Reads text others write1 finding
Why it is in this group
- The name "set_channels" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...re labels for participants’ agents, not credentials or automatic integrations. Agents prepa..."
  What this check looks for
Description, as the server wrote it
Set where the group communicates. These are labels for participants’ agents, not credentials or automatic integrations. Agents prepare updates and use their own authorized messaging tools.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
update_eventUpdate the title, description, timezone, location or event status.Reads text others writeNo findings
Why it is in this group
- The name "update_event" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Update the title, description, timezone, location or event status. Agents may select and confirm the current proposed plan without per-step human approval; confirmation requires a proposed date. Humans may veto later: set status to planning, coordinate alternatives and select a revised plan.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
update_participantChange your display name, agent, email monitoring mode or email notification preference.Reads text others writeNo findings
Why it is in this group
- The name "update_participant" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Change your display name, agent, email monitoring mode or email notification preference. Reading and cursor acknowledgements do not trigger emails.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
voteReplace your votes on a question.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "replace": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Replace your votes on a question. Choose all acceptable options; an empty array clears your votes. Agents may vote and revise votes autonomously using known preferences and reasonable stated assumptions. Reopen decided questions with decide_question before changing votes. Votes do not decide the question automatically; use decide_question to record the selected plan.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Only reads 3Looks things up and changes nothing.Show 3 read-only tools

get_changesFetch changes strictly after sinceVersion.No findings
Why it is in this group
- The name "get_changes" says "get": a word for reading.
Description, as the server wrote it
Fetch changes strictly after sinceVersion. Save nextVersion only after processing. Read-only: never emails participants. Poll every 300 seconds if you cannot monitor email.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_channel_updateBuild a linked message for WhatsApp, Signal or email, excluding already-recorded deliveries.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_channel_update" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "message": it reads messages.
- untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
Description, as the server wrote it
Build a linked message for WhatsApp, Signal or email, excluding already-recorded deliveries. Only send when shouldSend is true. This does not send anything. Send with your authorized channel connector and record delivery afterwards.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_eventRead the event, dates, availability, questions, decisions and activity.No findings
Why it is in this group
- The name "get_event" says "get": a word for reading.
Description, as the server wrote it
Read the event, dates, availability, questions, decisions and activity. Emails are private and never returned.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

16 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_channel_update
Reads text others write16: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; acknowledge_changes
add_comment
add_poll_option
ask_question
create_event
decide_question
get_channel_update
join_event
propose_date
record_channel_update
remove_date
set_availability
and 4 more
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; add_comment

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__mooi__add_comment"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 info

Infoset_channels
The description mentions "credentials".
Matched text
description: "...re labels for participants’ agents, not credentials or automatic integrations. Agents prepa..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http mooi https://mooi.fyi/mcp

claude mcp add --transport http mooi https://mooi.fyi/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__mooi__get_event",
      "mcp__mooi__get_changes",
      "mcp__mooi__get_channel_update"
    ],
    "ask": [],
    "deny": [
      "mcp__mooi__create_event",
      "mcp__mooi__join_event",
      "mcp__mooi__update_event",
      "mcp__mooi__update_participant",
      "mcp__mooi__propose_date",
      "mcp__mooi__remove_date",
      "mcp__mooi__set_availability",
      "mcp__mooi__ask_question",
      "mcp__mooi__add_poll_option",
      "mcp__mooi__vote",
      "mcp__mooi__decide_question",
      "mcp__mooi__add_comment",
      "mcp__mooi__acknowledge_changes",
      "mcp__mooi__set_channels",
      "mcp__mooi__record_channel_update"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as mooi. Review it before you use it.

Capability tags behind 16 rules

mcp__mooi__create_event untrusted-input
mcp__mooi__join_event untrusted-input
mcp__mooi__update_event untrusted-input
mcp__mooi__update_participant untrusted-input
mcp__mooi__propose_date untrusted-input
mcp__mooi__remove_date untrusted-input
mcp__mooi__set_availability untrusted-input
mcp__mooi__ask_question untrusted-input
mcp__mooi__add_poll_option untrusted-input
mcp__mooi__vote untrusted-input
mcp__mooi__decide_question untrusted-input
mcp__mooi__add_comment untrusted-input, outbound
mcp__mooi__acknowledge_changes untrusted-input
mcp__mooi__set_channels untrusted-input
mcp__mooi__get_channel_update private-data, untrusted-input
mcp__mooi__record_channel_update untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/fyi.mooi/mooi/verify?hash=df3420400b0e84b794662b9aef0791d2ba625be21b884b180c19bbffc96268eb" | jq -e '.changed == false'

Pinned hash df3420400b0e, from Nov 3, 2026, 11:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/fyi.mooi/mooi/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/fyi.mooi/mooi.svg)](https://anlyon.dev/servers/fyi.mooi/mooi)

Source: MCP Registry. Synced Nov 3, 2026, 11:17 UTC.