# `io.github.click2ann/talespinner` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.github.click2ann/talespinner - JSON: https://anlyon.dev/api/v1/servers/io.github.click2ann/talespinner - Version: 1.0.1 (active) - Publisher: io.github.click2ann (GitHub account) - Runs: remote (streamable-http) - Sign-in to list tools: none - Repository: https://github.com/click2ann/TaleSpinner - Metadata from the official MCP Registry, synced 2026-10-21T18:27:21.735Z Title and description, as the publisher wrote them: ```untrusted-server-text TaleSpinner Create personalized stories, gifts, memoirs, tributes, classroom books, and printed keepsakes. ``` Scanned 2026-10-21T19:07:13.366Z over streamable-http. **24 tools: 6 can delete or cancel things, 1 do something that can't be undone, 6 change things and 11 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 6 | deny | | Can't be undone | irreversible | 1 | ask | | Changes things | write | 6 | ask | | Only reads | read | 11 | allow | ## Findings No check matched anything in these tool definitions. ## Deletes or cancels (6) Removes, cancels or revokes something. Claude Code: deny. ### `close_life_project_contributions` - The name "close_life_project_contributions" says "close": a word for a change. - The server marks it destructive (destructiveHint: true). Description, as the server wrote it: ```untrusted-server-text Close a life-story project to new contributor submissions. Existing contributions remain available. ``` ### `delete_life_project` - The name "delete_life_project" says "delete": a word for removing or ending something. - The description says "Permanently delete". - The server marks it destructive (destructiveHint: true). Description, as the server wrote it: ```untrusted-server-text Permanently delete a life-story project and its answers, contributors, generations, and project orders. ``` ### `delete_story` - The name "delete_story" says "delete": a word for removing or ending something. - The description says "Permanently delete". - The server marks it destructive (destructiveHint: true). Description, as the server wrote it: ```untrusted-server-text Permanently delete a story owned by the connected account. This cannot be undone. ``` ### `remove_story_from_world` - The name "remove_story_from_world" says "remove": a word for removing or ending something. - The server marks it destructive (destructiveHint: true). Description, as the server wrote it: ```untrusted-server-text Remove a story owned by the connected account from the public Story World library. The story remains in the owner's private library. ``` ### `replace_story_page_text` - The name "replace_story_page_text" says "replace": a word for a change. - The server marks it destructive (destructiveHint: true). Description, as the server wrote it: ```untrusted-server-text Replace the text on one story page. This also permanently clears that page's existing narration audio so it can be regenerated from the new text. ``` ### `revoke_story_share_link` - The name "revoke_story_share_link" says "revoke": a word for removing or ending something. - The server marks it destructive (destructiveHint: true). Description, as the server wrote it: ```untrusted-server-text Revoke one public story share link. Anyone using that link will immediately lose access. ``` ## Can't be undone (1) Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask. ### `publish_story_to_world` - The name "publish_story_to_world" says "publish": a word for a change that another call does not undo. Description, as the server wrote it: ```untrusted-server-text Publish a story owned by the connected account to the public Story World library. ``` ## Changes things (6) Creates or changes something that can be changed back. Claude Code: ask. ### `create_life_project` - The name "create_life_project" says "create": a word for a change. Description, as the server wrote it: ```untrusted-server-text Create a memoir, family legacy, celebration, tribute, or life-series project. ``` ### `create_story` - The name "create_story" says "create": a word for a change. Description, as the server wrote it: ```untrusted-server-text Create a personalized story and spend the connected account's credits. Call only after the user explicitly approves the credit spend. ``` ### `create_story_share_link` - The name "create_story_share_link" says "create": a word for a change. Description, as the server wrote it: ```untrusted-server-text Create or return the active public share link for a story owned by the connected account. ``` ### `record_life_project_activity` - The description's first verb is "update": a word for a change. Description, as the server wrote it: ```untrusted-server-text Update the last-activity time for a life-story project owned by the connected account. ``` ### `rename_story` - The name "rename_story" says "rename": a word for a change. Description, as the server wrote it: ```untrusted-server-text Change the title of a story owned by the connected account. ``` ### `start_checkout` - The name "start_checkout" says "start": a word for a change. Description, as the server wrote it: ```untrusted-server-text Create a secure handoff URL where the connected user can review and purchase a physical printed book in TaleSpinner. ``` ## Only reads (11) Looks things up and changes nothing. Claude Code: allow. ### `get_account` - The name "get_account" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get credit balances and subscription status for the connected TaleSpinner account. ``` ### `get_life_project` - The name "get_life_project" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get a life-story project's details and latest generation status. ``` ### `get_profile` - The name "get_profile" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get the connected TaleSpinner account and current credit balances. ``` ### `get_started` - The name "get_started" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Help a new customer create a TaleSpinner account before connecting it to the assistant. ``` ### `get_story` - The name "get_story" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Read a story owned by the connected TaleSpinner account. ``` ### `get_story_status` - The name "get_story_status" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Check whether a story's pages and illustrations are ready. ``` ### `list_life_projects` - The name "list_life_projects" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List life-story and keepsake projects owned by the connected account. ``` ### `list_orders` - The name "list_orders" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List print orders belonging to the connected TaleSpinner account. ``` ### `list_products` - The name "list_products" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List TaleSpinner story, keepsake, classroom, and printing offerings with links to current details. ``` ### `list_stories` - The name "list_stories" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List stories owned by the connected TaleSpinner account. ``` ### `list_story_share_links` - The name "list_story_share_links" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List active and revoked share links for a story owned by the connected account. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `talespinner`: ```json { "permissions": { "allow": [ "mcp__talespinner__list_products", "mcp__talespinner__get_started", "mcp__talespinner__get_profile", "mcp__talespinner__get_account", "mcp__talespinner__list_stories", "mcp__talespinner__get_story", "mcp__talespinner__get_story_status", "mcp__talespinner__list_story_share_links", "mcp__talespinner__list_life_projects", "mcp__talespinner__get_life_project", "mcp__talespinner__list_orders" ], "ask": [ "mcp__talespinner__rename_story", "mcp__talespinner__create_story_share_link", "mcp__talespinner__publish_story_to_world", "mcp__talespinner__create_story", "mcp__talespinner__create_life_project", "mcp__talespinner__record_life_project_activity", "mcp__talespinner__start_checkout" ], "deny": [ "mcp__talespinner__replace_story_page_text", "mcp__talespinner__delete_story", "mcp__talespinner__revoke_story_share_link", "mcp__talespinner__remove_story_from_world", "mcp__talespinner__close_life_project_contributions", "mcp__talespinner__delete_life_project" ] } } ```