# `io.github.THE-KIPDEV/specpack` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.THE-KIPDEV/specpack
- JSON: https://anlyon.dev/api/v1/servers/io.github.THE-KIPDEV/specpack
- Version: 0.1.0 (active)
- Publisher: io.github.THE-KIPDEV (GitHub account)
- Runs: remote (streamable-http), local (npm)
- Sign-in to list tools: none
- Repository: https://github.com/THE-KIPDEV/specpack
- Metadata from the official MCP Registry, synced 2026-10-21T18:21:38.805Z

Title and description, as the publisher wrote them:

```untrusted-server-text
specpack
Audit and write CLAUDE.md / AGENTS.md / Cursor rules; generate full build specs for new projects.
```

Scanned 2026-10-21T19:05:06.776Z over streamable-http.

**5 tools: 2 change things and 3 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 3 | allow |

## Findings

- **high** References to secrets on disk in `generate_spec` ([sensitive-path](https://anlyon.dev/methodology#sensitive-path))

```untrusted-server-text
The input schema at properties.files.items.enum[3] refers to ".cursor/rules/project.mdc".

inputSchema.properties.files.items.enum[3]: ".cursor/rules/project.mdc"
```


## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `draft_answers`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Asks the server's AI (Claude) to fill the whole questionnaire from a plain-language project description; returns the project type, the answers and the assumptions it made. Takes 10-40 s and consumes one AI draft (3 free without an API key). Prefer answering get_questionnaire yourself when you already know the project; use this when you only have a one-line idea. Review the assumptions with the user before calling generate_spec.
```

### `generate_spec`

- The name "generate_spec" says "generate": a word for a change.
- Findings: high sensitive-path

Description, as the server wrote it:

```untrusted-server-text
Turns questionnaire answers into a complete build specification (stack, database schema, auth flows, pages, design system, SEO, security, legal, deployment, file structure) and the matching agent files. Deterministic: the same answers always give the same bytes. Values: select/radio = one option value, multiselect = array of option values, boolean = true/false, number = number. Returns the requested files; by default AGENTS.md (full spec + working agreement) and CLAUDE.md (imports AGENTS.md) — write them at the repository root. Uses one spec from the quota (2 free without an API key).
```

## Only reads (3)

Looks things up and changes nothing. Claude Code: allow.

### `get_questionnaire`

- The name "get_questionnaire" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
The questions for one project type: universal questions first, then type-specific ones. Each has an id, a type (text, textarea, select, radio, multiselect, boolean, number), options where relevant, and sometimes a condition (ask it only when another answer matches). Answer from what you know of the project, then pass the answers to generate_spec. Only project_name and project_description are required; skipped questions fall back to defaults.
```

### `get_usage`

- The name "get_usage" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Current plan and quota usage (specs and AI drafts) for the API key, or for this address when no key is set.
```

### `list_project_types`

- The name "list_project_types" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
The project types the spec generator knows (saas, ecommerce, business, marketplace, blog, webapp, landing), with what each covers.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `specpack`:

```json
{
  "permissions": {
    "allow": [
      "mcp__specpack__list_project_types",
      "mcp__specpack__get_questionnaire",
      "mcp__specpack__get_usage"
    ],
    "ask": [
      "mcp__specpack__generate_spec",
      "mcp__specpack__draft_answers"
    ],
    "deny": []
  }
}
```