HeyClaude — Claude & AI workflow directory

by JSONbored · remote · local (npm) · no sign-in to list tools · v0.4.0 · published by GitHub user JSONbored

Search the HeyClaude directory of Claude Code agents, MCP servers, skills, and tools.

Changes · 11

Compare Registry entry

28 tools: 11 change things and 17 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things11Claude Code: ask: see these tools
Only reads17Claude Code: allow: see these tools

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http heyclaude https://heyclau.de/api/mcp

Findings

Matches of fixed checks, with the text they matched.

5 warn

Warnregistry.updates
The server marks "registry.updates" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "registry.updates" says "update": a word for a change.
What this check looks for
Warninstall.setup
The server marks "install.setup" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.setup" says "install": a word for a change.
What this check looks for
Warninstall.compatibility
The server marks "install.compatibility" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.compatibility" says "install": a word for a change.
What this check looks for
Warninstall.guidance
The server marks "install.guidance" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.guidance" says "install": a word for a change.
What this check looks for
Warninstall.adapter
The server marks "install.adapter" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.adapter" says "install": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

28 tools

Changes things 11Creates or changes something that can be changed back.Claude Code: ask

entry.safetyReview 1-5 HeyClaude entries for source, package, safety, and privacy metadata fit before install or recommendation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Review 1-5 HeyClaude entries for source, package, safety, and privacy metadata fit before install or recommendation. This is a metadata review only and does not provide malware scanning, automatic safety guarantees, or installation approval.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
install.adapterFetch generated read-only platform adapter content, currently Cursor rule adapters for skill packages.1 finding
Why it is in this group
- The name "install.adapter" says "install": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "install.adapter" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.adapter" says "install": a word for a change.
  What this check looks for
Description, as the server wrote it
Fetch generated read-only platform adapter content, currently Cursor rule adapters for skill packages.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
install.compatibilityFetch platform compatibility metadata for a HeyClaude skill entry.1 finding
Why it is in this group
- The name "install.compatibility" says "install": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "install.compatibility" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.compatibility" says "install": a word for a change.
  What this check looks for
Description, as the server wrote it
Fetch platform compatibility metadata for a HeyClaude skill entry.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
install.guidanceFetch read-only install, config, usage, and package guidance for a HeyClaude entry.1 finding
Why it is in this group
- The name "install.guidance" says "install": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "install.guidance" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.guidance" says "install": a word for a change.
  What this check looks for
Description, as the server wrote it
Fetch read-only install, config, usage, and package guidance for a HeyClaude entry.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
install.setupFetch read-only MCP client setup snippets for Codex, Claude Desktop, Cursor, Windsurf, or remote HTTP clients.1 finding
Why it is in this group
- The name "install.setup" says "install": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "install.setup" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "install.setup" says "install": a word for a change.
  What this check looks for
Description, as the server wrote it
Fetch read-only MCP client setup snippets for Codex, Claude Desktop, Cursor, Windsurf, or remote HTTP clients.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.planPlan a read-only Claude or Codex workflow toolbox from ranked HeyClaude registry entries.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Plan a read-only Claude or Codex workflow toolbox from ranked HeyClaude registry entries. Each entry includes an inline install block (install command, config snippet, download URL) and the recommended stack is summarized as a copy-pasteable installPlan, alongside trust and follow-up guidance.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.recommendAnswer 'what should I use to do X' in one call.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Answer 'what should I use to do X' in one call. Given a plain-language task (and optional platform/category), returns the best-match HeyClaude entries ranked by fit — each with why it fits, trust summary, disclosed safety/privacy notes, and an inline install block — plus a topPick and a consolidated installPlan. Unlike workflow.plan it does not force category diversity; it returns the genuinely best matches. Collapses the search → compare → detail → asset loop into a single answer-shaped response.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.updatesList recently added or upstream-updated HeyClaude entries from generated registry metadata.1 finding
Why it is in this group
- The name "registry.updates" says "update": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "registry.updates" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "registry.updates" says "update": a word for a change.
  What this check looks for
Description, as the server wrote it
List recently added or upstream-updated HeyClaude entries from generated registry metadata.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.prepareBuild a read-only maintainer-reviewed HeyClaude submission draft with canonical PR text and URLs.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Build a read-only maintainer-reviewed HeyClaude submission draft with canonical PR text and URLs.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.reviewReview a HeyClaude submission draft locally for schema errors, duplicate risk, and maintainer checklist items without writing to GitHub.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Review a HeyClaude submission draft locally for schema errors, duplicate risk, and maintainer checklist items without writing to GitHub.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.urlsBuild prefilled HeyClaude submit and review URLs for a validated PR-first submission draft without making write calls.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Build prefilled HeyClaude submit and review URLs for a validated PR-first submission draft without making write calls.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 17Looks things up and changes nothing.Claude Code: allow

entry.assetFetch the category-aware copy/install asset for a HeyClaude entry without writing local files.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch the category-aware copy/install asset for a HeyClaude entry without writing local files. Pass assetType (e.g. 'install_command', 'config_snippet') to return only that asset and avoid the full_content/script payloads when you do not need them.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
entry.compareCompare 2-5 read-only HeyClaude entries by fit, category, platforms, source metadata, and install complexity.No findings
Why it is in this group
- The name "entry.compare" says "compare": a word for reading.
Description, as the server wrote it
Compare 2-5 read-only HeyClaude entries by fit, category, platforms, source metadata, and install complexity.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
entry.coverageCompare 2-5 HeyClaude entries side by side by how much trust metadata they disclose (source, package, safety, privacy, and review provenance) and rank them by deterministic signal …No findings
Why it is in this group
- The description's first verb is "compare": a word for reading.
Description, as the server wrote it
Compare 2-5 HeyClaude entries side by side by how much trust metadata they disclose (source, package, safety, privacy, and review provenance) and rank them by deterministic signal coverage. This measures disclosed-metadata completeness only; it is not a malware scan, a safety verdict, or installation approval, and a higher score does not mean an entry is safe.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
entry.detailFetch a read-only HeyClaude registry entry detail payload by category and slug.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch a read-only HeyClaude registry entry detail payload by category and slug. By default (bodyMode='excerpt') the body markdown is trimmed to a short lead and large copyable fields are omitted to conserve context, with bodyChars/bodyTruncated/omittedFields describing what was dropped; pass bodyMode='full' for the complete content or 'none' to drop the body entirely. Use entry.asset to retrieve omitted install/script content.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
entry.relatedFetch read-only related HeyClaude entries based on category, tags, platforms, keywords, and source metadata.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch read-only related HeyClaude entries based on category, tags, platforms, keywords, and source metadata.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
entry.trustExplain deterministic trust, source, package, safety, privacy, and review metadata signals for one HeyClaude entry.No findings
Why it is in this group
- The description's first verb is "explain": a word for reading.
Description, as the server wrote it
Explain deterministic trust, source, package, safety, privacy, and review metadata signals for one HeyClaude entry. This is a metadata review only and does not provide malware scanning, automatic safety guarantees, or installation approval.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.feedsList read-only HeyClaude registry feeds, category feeds, platform feeds, and artifact locations.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it
List read-only HeyClaude registry feeds, category feeds, platform feeds, and artifact locations.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.infoFetch read-only HeyClaude MCP package, registry, tool, and public rate-limit metadata.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch read-only HeyClaude MCP package, registry, tool, and public rate-limit metadata.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.listList read-only HeyClaude entries with bounded pagination and optional category, platform, tag, and query filters.No findings
Why it is in this group
- The name "registry.list" says "list": a word for reading.
Description, as the server wrote it
List read-only HeyClaude entries with bounded pagination and optional category, platform, tag, and query filters.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.searchSearch read-only HeyClaude registry entries by query, category, exact tag, and skill platform compatibility.No findings
Why it is in this group
- The name "registry.search" says "search": a word for reading.
Description, as the server wrote it
Search read-only HeyClaude registry entries by query, category, exact tag, and skill platform compatibility.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
registry.statsFetch aggregate read-only registry stats, freshness, category counts, and real source-signal coverage.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch aggregate read-only registry stats, freshness, category counts, and real source-signal coverage.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.duplicatesSearch generated registry artifacts for likely duplicate entries before a user opens a submission PR.No findings
Why it is in this group
- The description's first verb is "search": a word for reading.
Description, as the server wrote it
Search generated registry artifacts for likely duplicate entries before a user opens a submission PR.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.examplesFetch read-only category examples and templates for faster, more accurate HeyClaude submissions.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch read-only category examples and templates for faster, more accurate HeyClaude submissions.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.guidanceFetch category-specific HeyClaude contribution guidance, required fields, and review expectations.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch category-specific HeyClaude contribution guidance, required fields, and review expectations.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.policyFetch HeyClaude's read-only submission, artifact, import, and maintainer-review policy for contributors and agents.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch HeyClaude's read-only submission, artifact, import, and maintainer-review policy for contributors and agents.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.schemaFetch read-only HeyClaude submission schemas for PR-first intake by category.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch read-only HeyClaude submission schemas for PR-first intake by category.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submission.validateValidate a HeyClaude content submission draft locally without creating GitHub issues, pull requests, or publishing content.No findings
Why it is in this group
- The name "submission.validate" says "validate": a word for reading.
Description, as the server wrote it
Validate a HeyClaude content submission draft locally without creating GitHub issues, pull requests, or publishing content.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http heyclaude https://heyclau.de/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__heyclaude__registry_search",
      "mcp__heyclaude__registry_info",
      "mcp__heyclaude__registry_list",
      "mcp__heyclaude__entry_related",
      "mcp__heyclaude__entry_detail",
      "mcp__heyclaude__entry_asset",
      "mcp__heyclaude__entry_compare",
      "mcp__heyclaude__registry_stats",
      "mcp__heyclaude__registry_feeds",
      "mcp__heyclaude__submission_schema",
      "mcp__heyclaude__submission_validate",
      "mcp__heyclaude__submission_duplicates",
      "mcp__heyclaude__submission_guidance",
      "mcp__heyclaude__submission_examples",
      "mcp__heyclaude__submission_policy",
      "mcp__heyclaude__entry_trust",
      "mcp__heyclaude__entry_coverage"
    ],
    "ask": [
      "mcp__heyclaude__registry_plan",
      "mcp__heyclaude__registry_recommend",
      "mcp__heyclaude__registry_updates",
      "mcp__heyclaude__install_setup",
      "mcp__heyclaude__install_compatibility",
      "mcp__heyclaude__install_guidance",
      "mcp__heyclaude__install_adapter",
      "mcp__heyclaude__submission_urls",
      "mcp__heyclaude__submission_prepare",
      "mcp__heyclaude__submission_review",
      "mcp__heyclaude__entry_safety"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as heyclaude. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.JSONbored/heyclaude/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:16 UTC.

For agents: Markdown · JSON · report this listing