Is the Mind Upload MCP server safe?

No scan can promise that. What its definitions show: 8 tools, 6 of which can change, send or delete something, and 0 findings from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.

Can the Mind Upload MCP server delete data?

Yes. 2 tools can delete, cancel or revoke something: review_pending_memory and disconnect.

Can the Mind Upload MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the Mind Upload MCP server have?

8 tools: 2 destructive, 4 write, 2 read. review_pending_memory, disconnect, consult_mind, review_work, share_evidence, remember, list_pending_memories and connection_status.

Does the Mind Upload MCP server send data to outside services?

None of its tools sends, posts or publishes, or takes a recipient, channel or URL.

Has the Mind Upload MCP server changed its tools?

Yes, once since anlyon.dev started tracking it, most recently on Nov 5, 2026. Every change is on this page and in its Atom feed.

Mind Upload MCP server

io.github.Voidborn-Industries/minduploadVoidborn-Industriesstreamable-httpv1.15.34Scanned 2 hours ago

AI meta harness for Codex, Claude Code, Cursor and VS Code: direction and completed-work review.

8 tools: 2 can delete or cancel things, 4 change things and 2 only read.

Reads private data · 0
Reads text others write · 8
Can send data out · 0
No findings

With Anlyon

2 tools here can delete or cancel things. Govern them.

Anlyon lists the tools and adopts none.
Each tool you adopt gets approvals and receipts.
Your agent never holds the key.

Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

What the Mind Upload MCP server can do

The Mind Upload MCP server is published by the GitHub account Voidborn-Industries. It has 8 tools. It can delete or cancel things (2 tools: review_pending_memory and disconnect) and create or change data (4 tools: consult_mind, review_work, share_evidence and remember). 2 tools only read.

8 tools bring in text other people can write (consult_mind, review_work, share_evidence and 5 more).

None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.

Its tools changed once since anlyon.dev first saw them.

Last scanned Nov 5, 2026, version 1.15.34.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

8 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

disconnectEnd this Mind Upload connection and the owner approval behind it.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
End this Mind Upload connection and the owner approval behind it. Only when the owner asks to disconnect.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
review_pending_memoryApprove, reject or rewrite one pending memory, only as the owner decides.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "approve": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Approve, reject or rewrite one pending memory, only as the owner decides. Needs the "review pending memories" permission.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

consult_mindAsk the owner's consciousness to direct intent, plans and important decisions.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Ask the owner's consciousness to direct intent, plans and important decisions.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
rememberSave a note, decision or fact into the owner's consciousness, when the owner asks.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "save": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Save a note, decision or fact into the owner's consciousness, when the owner asks. It waits for their review unless they auto-keep. Needs the "save memories" permission.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
review_workAsk the owner's consciousness to scrutinize functional results and personal fit.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Ask the owner's consciousness to scrutinize functional results and personal fit.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
share_evidenceShare a screenshot, recording or audio clip of the work privately with the owner's consciousness.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Share a screenshot, recording or audio clip of the work privately with the owner's consciousness. Returns an evidence_id and an upload URL: upload the file's bytes with your shell, then pass evidence_ids to review_work or consult_mind. Analyzed for that task only, never kept as a memory.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Only reads 2Looks things up and changes nothing.Show 2 read-only tools

connection_statusShow which Mind Upload account approval and consciousnesses this connection uses, its status, and how to disconnect or revoke it.Reads text others writeNo findings
Why it is in this group
- The name "connection_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Show which Mind Upload account approval and consciousnesses this connection uses, its status, and how to disconnect or revoke it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_pending_memoriesList memories waiting for the owner's review, so the owner can go through them with you.Reads text others writeNo findings
Why it is in this group
- The name "list_pending_memories" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "review": it reads comments, which other people can write.
Description, as the server wrote it
List memories waiting for the owner's review, so the owner can go through them with you. Needs the "review pending memories" permission.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write8: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; connection_status
consult_mind
disconnect
list_pending_memories
remember
review_pending_memory
review_work
share_evidence
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

Nov 5, 2026Tools4 added, 2 changed.+4 added~2 changedView diff
- Added:list_pending_memoriesOnly reads
- Added:rememberChanges things
- Added:review_pending_memoryDeletes or cancels
- Added:share_evidenceChanges things
- Changed:consult_mindChanges thingsinputSchema
- Changed:review_workChanges thingsinputSchema

All changes to this server

Install

Pinned to version 1.15.34. Values in angle brackets are yours to fill in.

claude mcp add --transport http mindupload https://mcp.mindupload.app/mcp

claude mcp add --transport http mindupload https://mcp.mindupload.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__mindupload__list_pending_memories",
      "mcp__mindupload__connection_status"
    ],
    "ask": [
      "mcp__mindupload__consult_mind",
      "mcp__mindupload__review_work",
      "mcp__mindupload__share_evidence",
      "mcp__mindupload__remember"
    ],
    "deny": [
      "mcp__mindupload__review_pending_memory",
      "mcp__mindupload__disconnect"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as mindupload. Review it before you use it.

Capability tags behind 8 rules

mcp__mindupload__consult_mind untrusted-input
mcp__mindupload__review_work untrusted-input
mcp__mindupload__share_evidence untrusted-input
mcp__mindupload__remember untrusted-input
mcp__mindupload__list_pending_memories untrusted-input
mcp__mindupload__review_pending_memory untrusted-input
mcp__mindupload__connection_status untrusted-input
mcp__mindupload__disconnect untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.Voidborn-Industries/mindupload/verify?hash=e376c8c2fd497329d3b76e49abbb30efebe954f93f3fcdf829df08557530e2ae" | jq -e '.changed == false'

Pinned hash e376c8c2fd49, from Nov 5, 2026, 17:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.Voidborn-Industries/mindupload/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.Voidborn-Industries/mindupload.svg)](https://anlyon.dev/servers/io.github.Voidborn-Industries/mindupload)

Source: MCP Registry · repository. Synced Nov 5, 2026, 17:17 UTC.