ModelsLab Agent Control Plane
by ModelsLab · remote · no sign-in to list tools · v1.0.0 · published by GitHub user ModelsLab
Account, billing, team, API key and model discovery tools for agents that use ModelsLab.
10 tools: 8 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things8Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http modelslab-agents https://modelslab.com/mcp/agents --header 'Authorization: <your-authorization>'Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
10 tools
Changes things 8Claude Code: ask
agent-api-keysManage API keys for the authenticated user.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage API keys for the authenticated user. Actions: list, create, get, update, delete. API keys are used for generation endpoints (/api/v6, /api/v7, /api/v8). All actions require authentication.
Annotations the server declares
- openWorldHint: true
agent-authManage authentication for the ModelsLab agent control plane.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage authentication for the ModelsLab agent control plane. Actions: signup, login, logout, logout-all, forgot-password, reset-password, resend-verification, verify. Login returns a bearer token for subsequent authenticated requests. Signup, login, forgot-password, reset-password, resend-verification, and verify do not require authentication.
Annotations the server declares
- openWorldHint: true
agent-billingManage billing for the authenticated user.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage billing for the authenticated user. Actions: stripe-config (get Stripe publishable key for headless card tokenization), create-setup-intent (create SetupIntent for 3DS-safe card saving), create-payment-link (generate Stripe-hosted payment URL to forward to human — supports card, Google Pay, Amazon Pay, Link, etc.), overview, payment-methods, add-payment-method, set-default-payment-method, remove-payment-method, billing-info, update-billing-info, invoices, invoice-detail, invoice-pdf. Three payment paths: (1) Headless: stripe-config → tokenize → payment_method_id, (2) Human-assisted: create-payment-link → forward URL → poll confirm-checkout, (3) SetupIntent: create-setup-intent → confirm via Stripe → reuse payment method. All actions require authentication.
Annotations the server declares
- openWorldHint: true
agent-profileManage the authenticated user's profile.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage the authenticated user's profile. Actions: get (view profile), update (update name/username/about), update-password, update-socials, update-preferences. All actions require authentication.
Annotations the server declares
- openWorldHint: true
agent-subscriptionsManage subscriptions for the authenticated user.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage subscriptions for the authenticated user. Actions: list-plans (view available subscription plans + pay-as-you-go options), list, create (headless with payment_method_id, or checkout URL without it), confirm-checkout (confirm Stripe checkout session), status (check subscription status), update (change plan), pause, resume, reset-cycle, charge-amount (set paid model charge amount), fix-payment. Headless flow: get publishable key via agent-billing stripe-config → tokenize card via Stripe API → pass payment_method_id to create. All actions require authentication.
Annotations the server declares
- openWorldHint: true
agent-teamsManage teams for the authenticated user.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage teams for the authenticated user. Actions: list (view team members and pending invites), create (invite by email), get (view a team member), update (modify member role/permissions), delete (remove member), resend-invite, accept-invite. All actions require authentication.
Annotations the server declares
- openWorldHint: true
agent-tokensManage Sanctum access tokens for the authenticated user.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage Sanctum access tokens for the authenticated user. Actions: list (view all tokens), revoke (revoke a specific token by ID), revoke-others (revoke all tokens except current), switch-account (get a token for a team account). All actions require authentication.
Annotations the server declares
- openWorldHint: true
agent-walletManage the wallet for the authenticated user.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Manage the wallet for the authenticated user. Actions: balance (view wallet balance), fund (add funds via Stripe payment), confirm-checkout (confirm a Stripe checkout session), payment-status (check payment intent status), auto-funding (configure auto-recharge), disable-auto-funding, withdraw (reseller only), validate-coupon, redeem-coupon. Fund with payment_method_id charges immediately; without it creates a Stripe checkout session. All actions require authentication.
Annotations the server declares
- openWorldHint: true
Only reads 2Claude Code: allow
agent-modelsSearch and discover AI models available on ModelsLab.No findings
Why it is in this group
- The description's first verb is "search": a word for reading.
Description, as the server wrote it Search and discover AI models available on ModelsLab. Actions: search (browse/filter models), filters (available filter options), tags (model tags), providers (model providers), detail (get model details by ID). The detail action returns endpoint configurations with a `parameters` JSON Schema object describing each endpoint's accepted parameters (types, constraints, defaults) alongside the raw UI `config` array. Requires authentication.
Annotations the server declares
- readOnlyHint: true
agent-usageView API usage analytics for the authenticated user.No findings
Why it is in this group
- The description's first verb is "view": a word for reading.
Description, as the server wrote it View API usage analytics for the authenticated user. Actions: summary (usage overview with plan limits), products (per-product usage breakdown), history (recent generation request timeline with optional date filters). All actions require authentication.
Annotations the server declares
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http modelslab-agents https://modelslab.com/mcp/agents --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__modelslab-agents__agent-usage",
"mcp__modelslab-agents__agent-models"
],
"ask": [
"mcp__modelslab-agents__agent-auth",
"mcp__modelslab-agents__agent-tokens",
"mcp__modelslab-agents__agent-profile",
"mcp__modelslab-agents__agent-api-keys",
"mcp__modelslab-agents__agent-billing",
"mcp__modelslab-agents__agent-wallet",
"mcp__modelslab-agents__agent-subscriptions",
"mcp__modelslab-agents__agent-teams"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as modelslab-agents. Review it before you use it.
