Skip to content

house.device/device-house

by device.house · remote · no sign-in to list tools · v1.0.0 · published by house.device

device.house — words become circuits. Design devices: BoM, enclosure, firmware, routed PCB.

Deletes · 1Changes · 9
CompareRegistry entry

21 tools: 1 can delete or cancel things, 9 change things and 11 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http device-house https://device-house-mcp.fly.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

21 tools

Deletes or cancels 1Claude Code: deny
  • parts_removeパーツを削除(組み込みはtombstoneで非表示化・再追加で復活)No findings

    Why it is in this group

    • The name "parts_remove" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    パーツを削除(組み込みはtombstoneで非表示化・再追加で復活)
Changes things 9Claude Code: ask
  • autoroute2層オートルータで実配線し、配線率/ビア数のサマリを返す(盛らない=未配線はfailed)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    2層オートルータで実配線し、配線率/ビア数のサマリを返す(盛らない=未配線はfailed)
  • compliance_check言葉から設計したデバイスの規制適合(技適/PSE/CE/FCC/RoHS+発注先+部品調達)を機械チェック。設計で制御可能な指標は判定、実世界の試験/申請は要対応で正直表示(盛らない)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    言葉から設計したデバイスの規制適合(技適/PSE/CE/FCC/RoHS+発注先+部品調達)を機械チェック。設計で制御可能な指標は判定、実世界の試験/申請は要対応で正直表示(盛らない)
  • eval_device言葉から設計したデバイスの生成品質を5軸(意図/部品/作れる/完成/正直)で採点No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    言葉から設計したデバイスの生成品質を5軸(意図/部品/作れる/完成/正直)で採点
  • fab_order_package発注パッケージ概要(配線済みGerber+BOM+CPL+手順一式)。JLCPCBにアップロード→支払いで発注。盛らない=実支払いは人間ゲートNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    発注パッケージ概要(配線済みGerber+BOM+CPL+手順一式)。JLCPCBにアップロード→支払いで発注。盛らない=実支払いは人間ゲート
  • generate_device言葉(用途)からデバイスを設計し、BoM/筐体/価格/全軸スコアを返すNo findings

    Why it is in this group

    • The name "generate_device" says "generate": a word for a change.
    Description, as the server wrote it
    言葉(用途)からデバイスを設計し、BoM/筐体/価格/全軸スコアを返す
  • manufacturing_readiness製造レディネス(正直な実体評価): 実フットプリント/LCSC/DRC/fits/配線。発注して動く基板にできるかNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    製造レディネス(正直な実体評価): 実フットプリント/LCSC/DRC/fits/配線。発注して動く基板にできるか
  • parts_addパーツを追加(ユーザーカタログに永続)。idは省略可(型番からslug生成)No findings

    Why it is in this group

    • The name "parts_add" says "add": a word for a change.
    Description, as the server wrote it
    パーツを追加(ユーザーカタログに永続)。idは省略可(型番からslug生成)
  • parts_statsパーツ・カタログの概観(総数/分類別)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    パーツ・カタログの概観(総数/分類別)
  • parts_update既存パーツを更新(組み込み部品の価格/調達先などの上書きも可)No findings

    Why it is in this group

    • The name "parts_update" says "update": a word for a change.
    Description, as the server wrote it
    既存パーツを更新(組み込み部品の価格/調達先などの上書きも可)
Only reads 11Claude Code: allow
  • get_bom_csvJLCPCB形式のBOM CSV(Comment,Designator,Footprint,LCSC)を返す。LCSC番号は未検証のため空欄Reads text others writeNo findings

    Why it is in this group

    • The name "get_bom_csv" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "comment": it reads comments, which other people can write.
    Description, as the server wrote it
    JLCPCB形式のBOM CSV(Comment,Designator,Footprint,LCSC)を返す。LCSC番号は未検証のため空欄
  • get_firmware言葉から設計したデバイスのArduinoファーム雛形(.ino)を返すNo findings

    Why it is in this group

    • The name "get_firmware" says "get": a word for reading.
    Description, as the server wrote it
    言葉から設計したデバイスのArduinoファーム雛形(.ino)を返す
  • get_kicad_netlistKiCadネットリスト(.net)を出力。KiCadに取り込んで検証済みフットプリント割当・配線・DRC=量産正規ルートNo findings

    Why it is in this group

    • The name "get_kicad_netlist" says "get": a word for reading.
    Description, as the server wrote it
    KiCadネットリスト(.net)を出力。KiCadに取り込んで検証済みフットプリント割当・配線・DRC=量産正規ルート
  • get_netlist配線ネットリスト(autorouteの入力)を返すNo findings

    Why it is in this group

    • The name "get_netlist" says "get": a word for reading.
    Description, as the server wrote it
    配線ネットリスト(autorouteの入力)を返す
  • get_pcb_svg配線済みPCBの2層プレビュー(SVG・赤=表/青=裏/金=パッド/点線=未配線)を返すNo findings

    Why it is in this group

    • The name "get_pcb_svg" says "get": a word for reading.
    Description, as the server wrote it
    配線済みPCBの2層プレビュー(SVG・赤=表/青=裏/金=パッド/点線=未配線)を返す
  • get_placementJLCPCB部品配置(CPL CSV)を返すNo findings

    Why it is in this group

    • The name "get_placement" says "get": a word for reading.
    Description, as the server wrote it
    JLCPCB部品配置(CPL CSV)を返す
  • list_archetypesdevice.houseが言葉から設計できるデバイス種別の一覧No findings

    Why it is in this group

    • The name "list_archetypes" says "list": a word for reading.
    Description, as the server wrote it
    device.houseが言葉から設計できるデバイス種別の一覧
  • list_catalog選べるデバイス・カタログ(bim.house等が家の部屋に置く用)。価格/寸法/推奨部屋/ディープリンク付きNo findings

    Why it is in this group

    • The name "list_catalog" says "list": a word for reading.
    Description, as the server wrote it
    選べるデバイス・カタログ(bim.house等が家の部屋に置く用)。価格/寸法/推奨部屋/ディープリンク付き
  • parts_getid でパーツ1件取得No findings

    Why it is in this group

    • The name "parts_get" says "get": a word for reading.
    Description, as the server wrote it
    id でパーツ1件取得
  • parts_listパーツ一覧(分類/インターフェイスでフィルタ可)No findings

    Why it is in this group

    • The name "parts_list" says "list": a word for reading.
    Description, as the server wrote it
    パーツ一覧(分類/インターフェイスでフィルタ可)

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:48 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
10
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
none
RFC 9728 protected resource metadata
none
Authorization servers
none
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 10 tools that change things (1 destructive, 9 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://device-house-mcp.fly.dev/mcp: tools/list returned 21 tools to an anonymous client, including parts_remove (destructive), generate_device (write), eval_device (write), compliance_check (write), autoroute (write) and 5 more

    What this check looks for

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http device-house https://device-house-mcp.fly.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__device-house__list_archetypes",
      "mcp__device-house__list_catalog",
      "mcp__device-house__get_firmware",
      "mcp__device-house__get_netlist",
      "mcp__device-house__get_placement",
      "mcp__device-house__get_pcb_svg",
      "mcp__device-house__get_kicad_netlist",
      "mcp__device-house__get_bom_csv",
      "mcp__device-house__parts_list",
      "mcp__device-house__parts_search",
      "mcp__device-house__parts_get"
    ],
    "ask": [
      "mcp__device-house__generate_device",
      "mcp__device-house__eval_device",
      "mcp__device-house__compliance_check",
      "mcp__device-house__autoroute",
      "mcp__device-house__fab_order_package",
      "mcp__device-house__manufacturing_readiness",
      "mcp__device-house__parts_stats",
      "mcp__device-house__parts_add",
      "mcp__device-house__parts_update"
    ],
    "deny": [
      "mcp__device-house__parts_remove"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as device-house. Review it before you use it.

Capability tags behind 1 rule
  • mcp__device-house__get_bom_csv untrusted-input