Formquote
by Keith-CY · remote · no sign-in to list tools · v1.0.0 · published by GitHub user Keith-CY
Published prices and licence fit for email verification, sound effect packs and font licences.
4 tools: 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things0Claude Code: ask
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http formquote https://formquote-mcp.chen-yu-d1.workers.dev/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
4 tools
Only reads 4Claude Code: allow
compare_email_verification_pricesCompare what it costs to verify (clean, validate) a list of email addresses with MillionVerifier, Reoon, DeBounce and Emailable, from their published credit packs and monthly plans…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "compare_email_verification_prices" says "compare": a word for reading.
What it can reach
- private-dataThe name "compare_email_verification_prices" says "compare" and "email": it reads mail.
- private-dataThe description's first sentence says "compare" and "email": it reads mail.
- untrusted-inputThe name "compare_email_verification_prices" says "compare" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "compare" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Compare what it costs to verify (clean, validate) a list of email addresses with MillionVerifier, Reoon, DeBounce and Emailable, from their published credit packs and monthly plans. Use this when the user asks how much it costs to verify a number of emails, which email verification service is cheapest for their list size, or how many credit packs to buy. Give only the number of emails, never the addresses. Credits the user already holds with a supplier can be counted. Returns the packs ranked within comparable groups (one-time packs vs monthly plans, per currency), the price for this request, the cost allocated to this job, what is unconfirmed, the date each price was checked and the seller’s page. These are published list prices, not live checkout quotes; it does not verify emails or buy anything.
Annotations the server declares
- title: Compare email verification prices
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
compare_font_licensesCheck which licence a use needs, and what it costs, for a small, hand-checked set of fonts: Pangram Pangram’s Font Starter Packs, Fontwerk Push, Grilli Type GT Cinetype and Fontfab…No findings
Why it is in this group
- The name "compare_font_licenses" says "compare": a word for reading.
Description, as the server wrote it Check which licence a use needs, and what it costs, for a small, hand-checked set of fonts: Pangram Pangram’s Font Starter Packs, Fontwerk Push, Grilli Type GT Cinetype and Fontfabric Nexa (6 offers). Use this when the user asks whether one of these fonts can be used on a website, on desktop, in print, in an app or game, in a logo or in paid ads, and what licence and price that needs: users, websites, monthly pageviews or unique visitors per site, years of use. Returns each offer’s published price where one applies, which requirements fail or are unconfirmed (for example pageview caps, PV versus UV, styles chosen at the foundry) and the foundry’s page. Other typefaces are not covered; say so instead of guessing. Published prices; nothing is bought.
Annotations the server declares
- title: Compare font licences
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
compare_sound_effects_licensesCheck prices and licence fit for a small, hand-checked set of sound effect packs: UI clicks and snaps, motion-graphics sounds, desert wind and train ambiences, and a kettle whistle…No findings
Why it is in this group
- The name "compare_sound_effects_licenses" says "compare": a word for reading.
Description, as the server wrote it Check prices and licence fit for a small, hand-checked set of sound effect packs: UI clicks and snaps, motion-graphics sounds, desert wind and train ambiences, and a kettle whistle, from SoundMorph, HISSandaROAR and Thomas Rex Beverly Audio (8 packs). Use this when the user wants sound effects for an app, game, video or interface and asks what a pack costs or whether its licence allows their use: commercial work, number of seats, AI training or generation, reselling the sounds, or a product where the sounds are a large share. Returns each pack’s price, whether it fits (eligible, conditional or not eligible) and which licence points still need the seller’s confirmation. It covers only these packs, not whole sound libraries; say so if none fits. Published prices; nothing is bought.
Annotations the server declares
- title: Compare sound effect pack licences
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_formquote_catalogList everything Formquote has price evidence for: email verification credit packs and plans (MillionVerifier, Reoon, DeBounce, Emailable), sound effect packs (SoundMorph, HISSandaR…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_formquote_catalog" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it List everything Formquote has price evidence for: email verification credit packs and plans (MillionVerifier, Reoon, DeBounce, Emailable), sound effect packs (SoundMorph, HISSandaROAR, Thomas Rex Beverly Audio) and font licences (Pangram Pangram, Fontwerk, Grilli Type, Fontfabric), with each listed price, billing period, the date it was checked and the seller’s page. Use this to see what is covered, or when the user asks for one of these suppliers’ listed prices. To price a specific need, use the compare_* tools instead.
Annotations the server declares
- title: List the Formquote catalogue
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data2
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write2
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http formquote https://formquote-mcp.chen-yu-d1.workers.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__formquote__compare_email_verification_prices",
"mcp__formquote__compare_sound_effects_licenses",
"mcp__formquote__compare_font_licenses",
"mcp__formquote__list_formquote_catalog"
],
"ask": [],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as formquote. Review it before you use it.
Capability tags behind 2 rules
- mcp__formquote__compare_email_verification_prices private-data, untrusted-input
- mcp__formquote__list_formquote_catalog private-data, untrusted-input
