io. github. jdhart81/ subscriptions
by jdhart81 · remote · no sign-in to list tools · v0.1.1 · published by GitHub user jdhart81
Verified monthly-seat catalog, account attribution, quota, overage, and MRR infrastructure.
10 tools: 4 change things and 6 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things4Claude Code: ask: see these tools
- Only reads6Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http subscriptions https://mcp.viridisconservation.com/subscriptions/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
10 tools
Changes things 4Claude Code: ask
create_accountCreate a free account for bearer attribution.No findings
Why it is in this group
- The name "create_account" says "create": a word for a change.
Description, as the server wrote it Create a free account for bearer attribution. The full account key is returned once; only its SHA-256 and last four characters are retained.
create_checkout_linkPrepare a Stripe-hosted subscription Checkout URL.No findings
Why it is in this group
- The name "create_checkout_link" says "create": a word for a change.
Description, as the server wrote it Prepare a Stripe-hosted subscription Checkout URL. It never charges a card. Draft plans, missing owner approval, unavailable covered agents, or missing recurring Price IDs fail closed without creating a session.
customer_portal_linkReturn a bearer-owned Stripe-hosted billing-portal URL.No findings
Why it is in this group
- The name "customer_portal_link" says "link": a word for a change.
Description, as the server wrote it Return a bearer-owned Stripe-hosted billing-portal URL. The human manages or cancels there; this tool never moves money.
record_subscriptionPull-verify a Stripe session/subscription and idempotently activate its exact subscription period.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Pull-verify a Stripe session/subscription and idempotently activate its exact subscription period. A newly created account receives its key once.
Only reads 6Claude Code: allow
describe_agentReturn the fleet-standard version, catalog digest, security posture, lifecycle policy, and capabilities.No findings
Why it is in this group
- The name "describe_agent" says "describe": a word for reading.
Description, as the server wrote it Return the fleet-standard version, catalog digest, security posture, lifecycle policy, and capabilities.
get_planGet one exact monthly plan and its versioned catalog lineage.No findings
Why it is in this group
- The name "get_plan" says "get": a word for reading.
Description, as the server wrote it Get one exact monthly plan and its versioned catalog lineage.
list_plansList the versioned monthly-seat catalog, exact prices/coverage, catalog SHA-256, readiness flags, and pending owner-confirmation notice.No findings
Why it is in this group
- The name "list_plans" says "list": a word for reading.
Description, as the server wrote it List the versioned monthly-seat catalog, exact prices/coverage, catalog SHA-256, readiness flags, and pending owner-confirmation notice.
mrr_summaryReturn aggregate active live-mode subscription count, MRR minor units, and plan mix.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Return aggregate active live-mode subscription count, MRR minor units, and plan mix. No account or Stripe identifiers are exposed.
subscription_statusReturn bearer-owned subscription lifecycle and current-period quota.No findings
Why it is in this group
- The name "subscription_status" says "status": a word for reading.
Description, as the server wrote it Return bearer-owned subscription lifecycle and current-period quota. The account key is always masked in output.
usage_summaryReturn bearer-owned, period-resolved included and overage usage with exact catalog lineage and conservation totals.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Return bearer-owned, period-resolved included and overage usage with exact catalog lineage and conservation totals.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.1.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http subscriptions https://mcp.viridisconservation.com/subscriptions/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__subscriptions__list_plans",
"mcp__subscriptions__get_plan",
"mcp__subscriptions__subscription_status",
"mcp__subscriptions__usage_summary",
"mcp__subscriptions__mrr_summary",
"mcp__subscriptions__describe_agent"
],
"ask": [
"mcp__subscriptions__create_account",
"mcp__subscriptions__create_checkout_link",
"mcp__subscriptions__record_subscription",
"mcp__subscriptions__customer_portal_link"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as subscriptions. Review it before you use it.
