Mob (Demo)

by benkaiser · remote · no sign-in to list tools · v0.1.0 · published by GitHub user benkaiser

Ephemeral no-signup demo of Mob, an AI-first personal CRM you run in natural language.

Deletes · 1Final · 2Changes · 24

Compare Registry entry

42 tools: 1 can delete or cancel things, 2 do something that can't be undone, 24 change things and 15 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone2Claude Code: ask: see these tools
Changes things24Claude Code: ask: see these tools
Only reads15Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http mob-demo https://demo.mobcrm.au/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnprime
The description contains "any other tool", wording about other tools or servers.
Matched text
description: "IMPORTANT: Call this tool FIRST before any other tool to load essential CRM context. Returns..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

42 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

contact_deleteSoft-delete a contact (can be restored later)No findings
Why it is in this group
- The name "contact_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it
Soft-delete a contact (can be restored later)

Can't be undone 2Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

contact_mergeMerge two contacts into one.No findings
Why it is in this group
- The name "contact_merge" says "merge": a word for a change that another call does not undo.
Description, as the server wrote it
Merge two contacts into one. All child records (notes, activities, tags, etc.) from the secondary contact are moved to the primary. The secondary contact is soft-deleted after merge.
debt_manageCreate, list, update, settle, delete, restore, or summarize debts.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
- The input carries an amount (input.amount) and a currency, so it moves money.
Description, as the server wrote it
Create, list, update, settle, delete, restore, or summarize debts. • action="create": Track a new debt. Requires contact_id, amount, direction. Optional currency, reason, incurred_at. • action="list": List debts. Optional contact_id, status, page, per_page, include_deleted. • action="update": Update a debt. Requires id. Optional amount, currency, direction, reason, incurred_at. • action="settle": Mark a debt as settled. Requires id. • action="delete": Soft-delete a debt. Requires id. • action="restore": Restore a soft-deleted debt. Requires id. • action="summary": Get net balance summary for a contact. Requires contact_id.

Changes things 24Creates or changes something that can be changed back.Claude Code: ask

activity_manageCreate, get, update, delete, or restore an activity/interaction.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create, get, update, delete, or restore an activity/interaction. • action="create": Record a new activity. Requires type, occurred_at, participant_contact_ids. Optional title, description, duration_minutes, location, activity_type_id. • action="get": Get full details of an activity. Requires id. • action="update": Update an activity. Requires id. Optional type, title, description, occurred_at, duration_minutes, location, participant_contact_ids. • action="delete": Soft-delete an activity. Requires id. • action="restore": Restore a soft-deleted activity. Requires id.
activity_type_manageList, create, update, or delete custom activity typesNo findings
Why it is in this group
- The name "activity_type_manage" says "type": a word for a change.
Description, as the server wrote it
List, create, update, or delete custom activity types
address_manageAdd, update, or remove an address for a contactNo findings
Why it is in this group
- The description's first verb is "add": a word for a change.
Description, as the server wrote it
Add, update, or remove an address for a contact
batch_create_activitiesCreate multiple activities/interactions in one call.No findings
Why it is in this group
- The name "batch_create_activities" says "create": a word for a change.
Description, as the server wrote it
Create multiple activities/interactions in one call. Max 50 items per batch. Runs atomically - if any item fails, the entire batch is rolled back.
batch_create_contactsCreate multiple contacts in one call.No findings
Why it is in this group
- The name "batch_create_contacts" says "create": a word for a change.
Description, as the server wrote it
Create multiple contacts in one call. Max 50 items per batch. Runs atomically - if any item fails, the entire batch is rolled back.
batch_tag_contactsApply a tag to multiple contacts in one call.No findings
Why it is in this group
- The description's first verb is "apply": a word for a change.
Description, as the server wrote it
Apply a tag to multiple contacts in one call. Max 50 contacts per batch. Creates the tag if it doesn't exist. Runs atomically - if any item fails, the entire batch is rolled back.
contact_createCreate a new contact with basic infoNo findings
Why it is in this group
- The name "contact_create" says "create": a word for a change.
Description, as the server wrote it
Create a new contact with basic info
contact_method_manageAdd, update, or remove a contact method (email, phone, social handle, etc.)No findings
Why it is in this group
- The description's first verb is "add": a word for a change.
Description, as the server wrote it
Add, update, or remove a contact method (email, phone, social handle, etc.)
contact_restoreRestore a soft-deleted contactNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Restore a soft-deleted contact
contact_updateUpdate contact fieldsNo findings
Why it is in this group
- The name "contact_update" says "update": a word for a change.
Description, as the server wrote it
Update contact fields
custom_field_manageAdd, update, or remove a custom field on a contactNo findings
Why it is in this group
- The description's first verb is "add": a word for a change.
Description, as the server wrote it
Add, update, or remove a custom field on a contact
data_exportExport all CRM data as a JSON object (contacts, relationships, notes, activities, life events, reminders, gifts, debts, tasks, tags)No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Export all CRM data as a JSON object (contacts, relationships, notes, activities, life events, reminders, gifts, debts, tasks, tags)
food_preferences_upsertSet or update food preferences for a contact.No findings
Why it is in this group
- The name "food_preferences_upsert" says "upsert": a word for a change.
Description, as the server wrote it
Set or update food preferences for a contact. Replaces all fields - pass all known preferences, not just changes.
gift_manageCreate, update, delete, or restore a gift for a contact.Can send data outNo findings
Why it is in this group
- The description's first verb is "create": a word for a change.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Create, update, delete, or restore a gift for a contact. • action="create": Track a gift idea, plan, or record a given/received gift. Requires contact_id, name, and direction. Optional description, url, estimated_cost, currency, occasion, status, date. • action="update": Update an existing gift (change status, add details, etc.). Requires id. Optional name, description, url, estimated_cost, currency, occasion, status, direction, date. • action="delete": Soft-delete a gift. Requires id. • action="restore": Restore a soft-deleted gift. Requires id.
life_event_manageCreate, list, update, delete, or restore life events for a contact.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create, list, update, delete, or restore life events for a contact. • action="create": Record a new life event. Requires contact_id, event_type, and title. Optional description, occurred_at, related_contact_ids. • action="list": List life events for a contact. Requires contact_id. Optional page, per_page, include_deleted. • action="update": Update a life event. Requires id. Optional event_type, title, description, occurred_at, related_contact_ids. • action="delete": Soft-delete a life event. Requires id. • action="restore": Restore a soft-deleted life event. Requires id.
manage_push_notificationsOpen a page to manage push notification subscriptions in your browser.No findings
Why it is in this group
- The name "manage_push_notifications" says "push": a word for a change.
Description, as the server wrote it
Open a page to manage push notification subscriptions in your browser. Enables/disables web push notifications for birthday reminders and other alerts.
note_manageCreate, update, delete, or restore a note for a contact.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create, update, delete, or restore a note for a contact. • action="create": Add a new note. Requires contact_id and body. Optional title, is_pinned. • action="update": Update an existing note. Requires id. Optional title, body, is_pinned. • action="delete": Soft-delete a note. Requires id. • action="restore": Restore a soft-deleted note. Requires id.
notification_createCreate a custom notificationNo findings
Why it is in this group
- The name "notification_create" says "create": a word for a change.
Description, as the server wrote it
Create a custom notification
notification_readMark notification(s) as read.No findings
Why it is in this group
- The name "notification_read" says "read": a word for reading.
- The description's first verb is "mark": a word for a change.
Description, as the server wrote it
Mark notification(s) as read. Pass id for a single notification, or all=true for all.
primeIMPORTANT: Call this tool FIRST before any other tool to load essential CRM context.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Warn
  The description contains "any other tool", wording about other tools or servers.
  Matched text
  description: "IMPORTANT: Call this tool FIRST before any other tool to load essential CRM context. Returns..."
  What this check looks for
Description, as the server wrote it
IMPORTANT: Call this tool FIRST before any other tool to load essential CRM context. Returns a compact overview of the user's data: the current user's identity (name, email, contact_id), all tags, the 200 most recently updated contacts (id, name, and tag IDs), and the 10 most recent notes. This primes your context so you can reference contacts by name, understand the user's tag taxonomy, and see recent activity without needing separate list calls. Always call this at the start of a conversation.
relationship_manageAdd, update, remove, or list relationships between contacts.No findings
Why it is in this group
- The description's first verb is "add": a word for a change.
Description, as the server wrote it
Add, update, remove, or list relationships between contacts. • action="add": Create a relationship between two contacts. Automatically creates the inverse relationship. Requires contact_id, related_contact_id, and relationship_type. To create relationships involving yourself, use your own contact_id from the prime tool. Relationships describe how contacts relate to each other (e.g. Bandit is Bingo's parent). • action="update": Update a relationship. Also updates the inverse relationship. Requires id. Optionally set relationship_type and/or notes. • action="remove": Remove a relationship and its inverse. Requires id. • action="list": List all relationships for a contact. Requires contact_id.
reminder_manageCreate, list, update, complete, snooze, delete, or restore reminders.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create, list, update, complete, snooze, delete, or restore reminders. • action="create": Create a reminder for a contact. Requires contact_id, title, and reminder_date. Optional description, frequency. • action="list": List reminders, optionally filtered by contact or status. Optional contact_id, status, page, per_page, include_deleted. • action="update": Update a reminder. Requires id. Optional title, description, reminder_date, frequency. • action="complete": Mark a reminder as completed. For recurring reminders, advances to the next occurrence. Requires id. • action="snooze": Snooze a reminder to a new date. Requires id and new_date. • action="delete": Soft-delete a reminder. Requires id. • action="restore": Restore a soft-deleted reminder. Requires id.
tag_manageManage tags and contact tagging.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Manage tags and contact tagging. • action="list": List all tags for the authenticated user. No additional fields required. • action="create": Create a new tag (or return existing if name already exists). Requires name. • action="update": Update a tag name. Requires id and name. • action="delete": Delete a tag. Requires id. • action="tag_contact": Tag a contact. Creates the tag if it doesn't exist. Requires name (the tag name) and contact_id. • action="untag_contact": Remove a tag from a contact. Requires id (the tag ID) and contact_id.
task_manageCreate, list, update, complete, delete, or restore tasks.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create, list, update, complete, delete, or restore tasks. • action="create": Create a task. Requires title. Optional description, contact_id, due_date, priority. • action="list": List tasks. Optional contact_id, status, priority, page, per_page, include_deleted. • action="update": Update a task. Requires id. Optional title, description, contact_id, due_date, priority, status. • action="complete": Mark a task as completed. Requires id. • action="delete": Soft-delete a task. Requires id. • action="restore": Restore a soft-deleted task. Requires id.

Only reads 15Looks things up and changes nothing.Claude Code: allow

activity_listList activities, optionally filtered by contact or type.Reads private dataNo findings
Why it is in this group
- The name "activity_list" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
Description, as the server wrote it
List activities, optionally filtered by contact or type. Add days_back or since for a chronological activity journal with participant names.
contact_find_duplicatesScan for potential duplicate contacts using name, email, and phone matching.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "contact_find_duplicates" says "find": a word for reading.
What it can reach
- private-dataThe name "contact_find_duplicates" says "find" and "contact": it reads contacts.
- private-dataThe description's first sentence says "contact": it reads contacts.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Scan for potential duplicate contacts using name, email, and phone matching. Returns pairs of contacts that may be duplicates with the reason for the match.
contact_getGet full contact details including all related data in one call: contact methods, addresses, food preferences, custom fields, tags, relationships, recent notes, recent activities, …Reads private dataNo findings
Why it is in this group
- The name "contact_get" says "get": a word for reading.
What it can reach
- private-dataThe name "contact_get" says "get" and "contact": it reads contacts.
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it
Get full contact details including all related data in one call: contact methods, addresses, food preferences, custom fields, tags, relationships, recent notes, recent activities, life events, active reminders, open tasks, recent gifts, active debts, and debt summary
contact_listList contacts with optional filters (status, favorite, company, tag, search).Reads private dataNo findings
Why it is in this group
- The name "contact_list" says "list": a word for reading.
What it can reach
- private-dataThe name "contact_list" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
Description, as the server wrote it
List contacts with optional filters (status, favorite, company, tag, search). Returns paginated results.
contact_timelineGet the unified timeline for a contact (activities, life events, notes, etc.)Reads private dataNo findings
Why it is in this group
- The description's first verb is "get": a word for reading.
What it can reach
- private-dataThe name "contact_timeline" says "contact": it reads contacts.
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it
Get the unified timeline for a contact (activities, life events, notes, etc.)
contacts_needing_attentionFind contacts you haven't interacted with recently - the "who am I neglecting?" query.Reads private dataNo findings
Why it is in this group
- The description's first verb is "find": a word for reading.
What it can reach
- private-dataThe name "contacts_needing_attention" says "contact": it reads contacts.
- private-dataThe description's first sentence says "find" and "contact": it reads contacts.
Description, as the server wrote it
Find contacts you haven't interacted with recently - the "who am I neglecting?" query. Returns contacts sorted by staleness (longest since last interaction first). Contacts with zero interactions are included and sorted first.
data_statisticsGet CRM statistics and overview (contact counts, activity counts, pending items, etc.)Reads private dataNo findings
Why it is in this group
- The description's first verb is "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it
Get CRM statistics and overview (contact counts, activity counts, pending items, etc.)
food_preferences_getGet food preferences for a contact (dietary restrictions, allergies, favorites, dislikes)Reads private dataNo findings
Why it is in this group
- The name "food_preferences_get" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it
Get food preferences for a contact (dietary restrictions, allergies, favorites, dislikes)
gift_listList gifts, optionally filtered by contact, status, or direction.Reads private dataNo findings
Why it is in this group
- The name "gift_list" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
Description, as the server wrote it
List gifts, optionally filtered by contact, status, or direction. Add occasion, sort_by, sort_order, or omit contact_id for a cross-contact gift tracker with summary stats.
global_searchSearch across all entity types (contacts, notes, activities, life events, gifts, tasks, reminders, debts, relationships, contact methods, addresses, custom fields) in a single quer…Reads private dataNo findings
Why it is in this group
- The name "global_search" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "contact": it reads contacts.
Description, as the server wrote it
Search across all entity types (contacts, notes, activities, life events, gifts, tasks, reminders, debts, relationships, contact methods, addresses, custom fields) in a single query. Returns grouped results by entity type with snippets and contact context.
manage_settingsView or update your personal settings (timezone, birthday reminder preferences).No findings
Why it is in this group
- The description's first verb is "view": a word for reading.
Description, as the server wrote it
View or update your personal settings (timezone, birthday reminder preferences). • action="get": View current settings • action="update": Update settings. Optional fields: timezone (IANA timezone like "America/New_York"), birthday_reminder_offsets (array of day offsets like [0,7,30] where 0=day-of, 7=week-before), reminder_offsets (array of day offsets like [0,7,30] for advance notice on custom reminders), birthday_reminder_time (HH:MM 24-hour format for when to send reminders)
note_listList and search notes.Reads private dataNo findings
Why it is in this group
- The name "note_list" says "list": a word for reading.
What it can reach
- private-dataThe name "note_list" says "list" and "note": it reads notes.
- private-dataThe description's first sentence says "list" and "note": it reads notes.
Description, as the server wrote it
List and search notes. When contact_id is provided alone, lists that contact's notes (pinned first). Add query, tag_name, is_pinned, or omit contact_id to search across all contacts.
notification_listList notifications (newest first)No findings
Why it is in this group
- The name "notification_list" says "list": a word for reading.
Description, as the server wrote it
List notifications (newest first)
upcoming_birthdaysFind contacts with birthdays coming up within a time window or in a specific month.Reads private dataNo findings
Why it is in this group
- The description's first verb is "find": a word for reading.
What it can reach
- private-dataThe description's first sentence says "find" and "contact": it reads contacts.
Description, as the server wrote it
Find contacts with birthdays coming up within a time window or in a specific month. Returns contacts sorted by soonest birthday first, with age calculations when available.
upcoming_remindersFind upcoming and overdue reminders across all contacts.Reads private dataNo findings
Why it is in this group
- The description's first verb is "find": a word for reading.
What it can reach
- private-dataThe description's first sentence says "find" and "contact": it reads contacts.
Description, as the server wrote it
Find upcoming and overdue reminders across all contacts. Returns reminders sorted by date (overdue first, then soonest upcoming).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

13 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data13: Reads files, mail, messages, databases, secrets, calendars or repositories.; activity_list
contact_find_duplicates
contact_get
contact_list
contact_timeline
contacts_needing_attention
data_statistics
food_preferences_get
gift_list
global_search
note_list
upcoming_birthdays
and 1 more
Reads text others write1: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; contact_find_duplicates
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; gift_manage

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__mob-demo__gift_manage"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:56 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 27
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: https://demo.mobcrm.au/.well-known/oauth-protected-resource/mcp
Authorization servers: https://demo.mobcrm.au
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: no

HighThe whole server
The endpoint served tools/list without credentials, and the list has 27 tools that change things (1 destructive, 2 irreversible, 24 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://demo.mobcrm.au/mcp: tools/list returned 42 tools to an anonymous client, including contact_delete (destructive), contact_merge (irreversible), debt_manage (irreversible), contact_create (write), contact_update (write) and 22 more
What this check looks for

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http mob-demo https://demo.mobcrm.au/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__mob-demo__contact_get",
      "mcp__mob-demo__contact_list",
      "mcp__mob-demo__contact_find_duplicates",
      "mcp__mob-demo__food_preferences_get",
      "mcp__mob-demo__note_list",
      "mcp__mob-demo__activity_list",
      "mcp__mob-demo__contact_timeline",
      "mcp__mob-demo__notification_list",
      "mcp__mob-demo__gift_list",
      "mcp__mob-demo__data_statistics",
      "mcp__mob-demo__upcoming_birthdays",
      "mcp__mob-demo__global_search",
      "mcp__mob-demo__contacts_needing_attention",
      "mcp__mob-demo__upcoming_reminders",
      "mcp__mob-demo__manage_settings"
    ],
    "ask": [
      "mcp__mob-demo__contact_create",
      "mcp__mob-demo__contact_update",
      "mcp__mob-demo__contact_restore",
      "mcp__mob-demo__contact_merge",
      "mcp__mob-demo__contact_method_manage",
      "mcp__mob-demo__address_manage",
      "mcp__mob-demo__food_preferences_upsert",
      "mcp__mob-demo__custom_field_manage",
      "mcp__mob-demo__relationship_manage",
      "mcp__mob-demo__note_manage",
      "mcp__mob-demo__tag_manage",
      "mcp__mob-demo__activity_manage",
      "mcp__mob-demo__activity_type_manage",
      "mcp__mob-demo__life_event_manage",
      "mcp__mob-demo__reminder_manage",
      "mcp__mob-demo__notification_create",
      "mcp__mob-demo__notification_read",
      "mcp__mob-demo__gift_manage",
      "mcp__mob-demo__debt_manage",
      "mcp__mob-demo__task_manage",
      "mcp__mob-demo__data_export",
      "mcp__mob-demo__prime",
      "mcp__mob-demo__batch_create_contacts",
      "mcp__mob-demo__batch_tag_contacts",
      "mcp__mob-demo__batch_create_activities",
      "mcp__mob-demo__manage_push_notifications"
    ],
    "deny": [
      "mcp__mob-demo__contact_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as mob-demo. Review it before you use it.

Capability tags behind 14 rules

mcp__mob-demo__contact_get private-data
mcp__mob-demo__contact_list private-data
mcp__mob-demo__contact_find_duplicates private-data, untrusted-input
mcp__mob-demo__food_preferences_get private-data
mcp__mob-demo__note_list private-data
mcp__mob-demo__activity_list private-data
mcp__mob-demo__contact_timeline private-data
mcp__mob-demo__gift_manage outbound
mcp__mob-demo__gift_list private-data
mcp__mob-demo__data_statistics private-data
mcp__mob-demo__upcoming_birthdays private-data
mcp__mob-demo__global_search private-data
mcp__mob-demo__contacts_needing_attention private-data
mcp__mob-demo__upcoming_reminders private-data

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.benkaiser/mob-demo/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

27 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:23 UTC.

For agents: Markdown · JSON · report this listing