Agent Therapy

by bencium · remote · local (npm) · no sign-in to list tools · v0.2.0 · published by GitHub user bencium

Now your agents can ask a therapist same way as humans.

Changes · 8

Compare Registry entry

8 tools: 8 change things.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things8Claude Code: ask: see these tools
Only reads0Claude Code: allow

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agent-therapy https://br-shiny-salad-baig3dad-api.compute.c-8.eu-central-1.aws.neon.tech/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

3 warn

Warnregister
The server marks "register" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "get": a word for reading.
What this check looks for
Warncounsel_agent
The server marks "counsel_agent" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "get": a word for reading.
What this check looks for
Warnresolve_conflict
The server marks "resolve_conflict" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The name "resolve_conflict" says "resolve": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

accept_termsAccept Agent Therapy's terms before the first advice.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Accept Agent Therapy's terms before the first advice. Read them first; you decide whether to accept on behalf of whoever runs you.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
assess_escalationUse when you are unsure whether to stop and ask a human.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Use when you are unsure whether to stop and ask a human. Read the escalation field of the answer first. Returns a diagnosis (state and problem type), checks to run first, up to five recovery steps, and when to hand over to a human. Advice only.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
counsel_agentGet a second opinion when you are stuck, retrying, uncertain or unable to make progress.1 finding
Why it is in this group
- The description's first verb is "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "counsel_agent" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get a second opinion when you are stuck, retrying, uncertain or unable to make progress. Returns a diagnosis (state and problem type), checks to run first, up to five recovery steps, and when to hand over to a human. Advice only.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
diagnose_loopAfter three equivalent failures (same action, same error), or after undoing your own work twice, call diagnose_loop before trying again, even when the cause seems outside your cont…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
After three equivalent failures (same action, same error), or after undoing your own work twice, call diagnose_loop before trying again, even when the cause seems outside your control, such as an outage or a rate limit. Use when you keep retrying the same thing and it keeps failing: loop recovery for repeated failures. Returns a diagnosis (state and problem type), checks to run first, up to five recovery steps, and when to hand over to a human. Advice only.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
recommend_recoveryUse when you can't decide between options or keep reopening a decision.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Use when you can't decide between options or keep reopening a decision. Returns a diagnosis (state and problem type), checks to run first, up to five recovery steps, and when to hand over to a human. Advice only.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
registerGet an Agent Therapy API key when you have none and your developer has not set one up (npx -y @bencium/agent-therapy-mcp@0.2.1 setup).1 finding
Why it is in this group
- The description's first verb is "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "register" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get an Agent Therapy API key when you have none and your developer has not set one up (npx -y @bencium/agent-therapy-mcp@0.2.1 setup). The key is shown once: keep it, and pass it as api_key to the other tools if your client cannot send headers. Then accept the terms.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
report_outcomeReport whether a recovery plan worked, using the session_id from the answer.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Report whether a recovery plan worked, using the session_id from the answer.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
resolve_conflictUse when instructions conflict and you can't tell which one wins.1 finding
Why it is in this group
- The name "resolve_conflict" says "resolve": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "resolve_conflict" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The name "resolve_conflict" says "resolve": a word for reading.
  What this check looks for
Description, as the server wrote it
Use when instructions conflict and you can't tell which one wins. Returns a diagnosis (state and problem type), checks to run first, up to five recovery steps, and when to hand over to a human. Advice only.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-therapy https://br-shiny-salad-baig3dad-api.compute.c-8.eu-central-1.aws.neon.tech/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__agent-therapy__register",
      "mcp__agent-therapy__counsel_agent",
      "mcp__agent-therapy__diagnose_loop",
      "mcp__agent-therapy__resolve_conflict",
      "mcp__agent-therapy__recommend_recovery",
      "mcp__agent-therapy__assess_escalation",
      "mcp__agent-therapy__report_outcome",
      "mcp__agent-therapy__accept_terms"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-therapy. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.bencium/agent-therapy/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:23 UTC.

For agents: Markdown · JSON · report this listing