Autopia

by MaydayTrey · remote · no sign-in to list tools · v0.3.1 · published by GitHub user MaydayTrey

Verified, reproduced behavior of public HTTP APIs: spec gaps, errors, pagination, auth.

Changes · 1

Compare Registry entry

9 tools: 1 change things and 8 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things1Claude Code: ask: see these tools
Only reads8Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http autopia https://autopia-mcp.onrender.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Inforequest_target
The description mentions "credential".
Matched text
description: "Queues a public, read-only, credential-free API for probing, from a target obj..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

request_targetQueues a public, read-only, credential-free API for probing, from a target object { name, spec_url (OpenAPI 3 document), category?, include_paths?, baseline?1 finding
Why it is in this group
- The name "request_target" says "request": a word for a change.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "Queues a public, read-only, credential-free API for probing, from a target obj..."
  What this check looks for
Description, as the server wrote it
Queues a public, read-only, credential-free API for probing, from a target object { name, spec_url (OpenAPI 3 document), category?, include_paths?, baseline? (valid values for required params per path), optional_values?, server? }. The spec is fetched and parsed and the battery planned immediately; probing runs rules-only on the worker's next pass. Requires a per-user key; quota 3 requests per key per day. Returns a request id for get_request_status.
Annotations the server declares
- title: Request a target
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Only reads 8Looks things up and changes nothing.Claude Code: allow

get_divergencesWhere the live API contradicts its own OpenAPI spec: documented limits not enforced, types not validated, required parameters not required, enums accepting other values.No findings
Why it is in this group
- The name "get_divergences" says "get": a word for reading.
Description, as the server wrote it
Where the live API contradicts its own OpenAPI spec: documented limits not enforced, types not validated, required parameters not required, enums accepting other values. Compact evidence; verbose=true adds response previews.
Annotations the server declares
- title: Get divergences
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_request_statusStatus of a target request (pending, running, done or failed), with the run id and summary once processed.No findings
Why it is in this group
- The name "get_request_status" says "get": a word for reading.
Description, as the server wrote it
Status of a target request (pending, running, done or failed), with the run id and summary once processed.
Annotations the server declares
- title: Get request status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_tool_docsThe verified behavior sheet for an API: Markdown built only from verified claims, with spec contradictions first, then sibling differences, undocumented rules, and per-endpoint beh…No findings
Why it is in this group
- The name "get_tool_docs" says "get": a word for reading.
Description, as the server wrote it
The verified behavior sheet for an API: Markdown built only from verified claims, with spec contradictions first, then sibling differences, undocumented rules, and per-endpoint behavior (error shapes, pagination, validation, auth), every line citing trial ids. Accepts a tool name, a host, or the full URL about to be called; a URL or path scopes the sheet to that endpoint plus a one-line index of the others. Brief by default (what would change the request); full=true adds per-parameter validation, response shapes and all evidence ids.
Annotations the server declares
- title: Get tool docs
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_tool_knowledgeEvery verified claim about an API as structured records (latest version by default): paginated, filterable by kind, spec divergences flagged, each with compact evidence (trial id, …No findings
Why it is in this group
- The name "get_tool_knowledge" says "get": a word for reading.
Description, as the server wrote it
Every verified claim about an API as structured records (latest version by default): paginated, filterable by kind, spec divergences flagged, each with compact evidence (trial id, probe, status, request line). verbose=true adds response previews.
Annotations the server declares
- title: Get tool knowledge
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_version_diffWhat changed in verified behavior between two spec versions of an API (changed, added and removed claims), as opposed to what changed in the spec text.No findings
Why it is in this group
- The name "get_version_diff" says "get": a word for reading.
Description, as the server wrote it
What changed in verified behavior between two spec versions of an API (changed, added and removed claims), as opposed to what changed in the spec text.
Annotations the server declares
- title: Get version diff
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_toolsThe APIs the compendium covers: each with the hosts its trials hit, trust tier, version count, and counts of verified claims and spec divergences.No findings
Why it is in this group
- The name "list_tools" says "list": a word for reading.
Description, as the server wrote it
The APIs the compendium covers: each with the hosts its trials hit, trust tier, version count, and counts of verified claims and spec divergences.
Annotations the server declares
- title: List tools
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_versionsThe spec versions recorded for one API, newest first, each fingerprinted by its spec hash.No findings
Why it is in this group
- The name "list_versions" says "list": a word for reading.
Description, as the server wrote it
The spec versions recorded for one API, newest first, each fingerprinted by its spec hash. The ids identify versions for get_version_diff.
Annotations the server declares
- title: List versions
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_claimsFull-text search over verified claims by host and symptom, e.g.No findings
Why it is in this group
- The name "search_claims" says "search": a word for reading.
Description, as the server wrote it
Full-text search over verified claims by host and symptom, e.g. "github per_page 500", "npm search size 0", "is latitude required on /v1/forecast": the lookup for an unexpected 4xx/5xx, a parameter that seems ignored, an odd page, or wrong filter results. Optionally restricted to one API (name, host or URL). Compact evidence unless verbose=true.
Annotations the server declares
- title: Search claims
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http autopia https://autopia-mcp.onrender.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__autopia__list_tools",
      "mcp__autopia__list_versions",
      "mcp__autopia__get_tool_knowledge",
      "mcp__autopia__get_divergences",
      "mcp__autopia__search_claims",
      "mcp__autopia__get_tool_docs",
      "mcp__autopia__get_version_diff",
      "mcp__autopia__get_request_status"
    ],
    "ask": [
      "mcp__autopia__request_target"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as autopia. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.MaydayTrey/autopia/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

1 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:17 UTC.

For agents: Markdown · JSON · report this listing