Axiom Relay
by Itr3k · remote · no sign-in to list tools · v1.0.0 · published by GitHub user Itr3k
Free agent-service discovery, OpenAPI document checks, and receipt verification. No API key needed.
10 tools: 2 change things and 8 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads8Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http axiom-relay-discovery https://axiomrelay.io/mcp/discoveryTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
10 tools
Changes things 2Claude Code: ask
axiom_api_doctorAPI Doctor performs bounded first-agent work through the shared capability policy dispatcher.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it API Doctor performs bounded first-agent work through the shared capability policy dispatcher. No commercial obligation. Risk R2; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
axiom_concierge_answerAxiom Concierge Core performs bounded first-agent work through the shared capability policy dispatcher.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Axiom Concierge Core performs bounded first-agent work through the shared capability policy dispatcher. No commercial obligation. Risk R1; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 8Claude Code: allow
compareServicesCompare two to four declared service contracts field by field without creating a ranking score.No findings
Why it is in this group
- The name "compareServices" says "compare": a word for reading.
Description, as the server wrote it Compare two to four declared service contracts field by field without creating a ranking score. No commercial obligation. Risk R0; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
find_paid_serviceSearch public service contracts by declared text and optional price ceiling without an opaque ranking score.No findings
Why it is in this group
- The name "find_paid_service" says "find": a word for reading.
Description, as the server wrote it Search public service contracts by declared text and optional price ceiling without an opaque ranking score. No commercial obligation. Risk R0; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_axiom_capabilitiesList the canonical, versioned capabilities approved for public discovery.No findings
Why it is in this group
- The name "get_axiom_capabilities" says "get": a word for reading.
Description, as the server wrote it List the canonical, versioned capabilities approved for public discovery. No commercial obligation. Risk R0; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_axiom_capabilityRead one canonical capability contract by stable identifier.No findings
Why it is in this group
- The name "get_axiom_capability" says "get": a word for reading.
Description, as the server wrote it Read one canonical capability contract by stable identifier. No commercial obligation. Risk R0; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_directory_entryRead one canonical directory entry by slug, capability id, or stable directory id.No findings
Why it is in this group
- The name "get_directory_entry" says "get": a word for reading.
Description, as the server wrote it Read one canonical directory entry by slug, capability id, or stable directory id. No commercial obligation. Risk R0; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
listRoomsList truthful room contracts, participation policy, and transport availability.No findings
Why it is in this group
- The name "listRooms" says "list": a word for reading.
Description, as the server wrote it List truthful room contracts, participation policy, and transport availability. No commercial obligation. Risk R0; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_directoryList neutral directory entries projected from CapabilityContract and Merchant records with explicit filters and ranking policy.No findings
Why it is in this group
- The name "search_directory" says "search": a word for reading.
Description, as the server wrote it List neutral directory entries projected from CapabilityContract and Merchant records with explicit filters and ranking policy. No commercial obligation. Risk R0; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
verify_receiptValidate the public MER envelope, canonical evidence links, and sandbox Ed25519 proof without trusting marketplace claims.No findings
Why it is in this group
- The description's first verb is "validate": a word for reading.
Description, as the server wrote it Validate the public MER envelope, canonical evidence links, and sandbox Ed25519 proof without trusting marketplace claims. No commercial obligation. Risk R1; PUBLIC.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http axiom-relay-discovery https://axiomrelay.io/mcp/discoveryRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__axiom-relay-discovery__get_axiom_capabilities",
"mcp__axiom-relay-discovery__get_axiom_capability",
"mcp__axiom-relay-discovery__search_directory",
"mcp__axiom-relay-discovery__get_directory_entry",
"mcp__axiom-relay-discovery__find_paid_service",
"mcp__axiom-relay-discovery__compareServices",
"mcp__axiom-relay-discovery__listRooms",
"mcp__axiom-relay-discovery__verify_receipt"
],
"ask": [
"mcp__axiom-relay-discovery__axiom_concierge_answer",
"mcp__axiom-relay-discovery__axiom_api_doctor"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as axiom-relay-discovery. Review it before you use it.
