Skip to content

humanMCP — kapoost

by kapoost · remote · no sign-in to list tools · v0.3.0 · published by GitHub user kapoost

Personal MCP server for humans who create. Proof of authorship, license control.

Deletes · 1Final · 1Changes · 18
CompareRegistry entry

43 tools: 1 can delete or cancel things, 1 do something that can't be undone, 18 change things and 23 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http humanmcp https://kapoost.humanmcp.net/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

43 tools

Deletes or cancels 1Claude Code: deny
  • delete_skillDelete a skill by slug.No findings

    Why it is in this group

    • The name "delete_skill" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a skill by slug. Owner-only: requires Authorization: Bearer <token>.
Can't be undone 1Claude Code: ask
  • leave_messageSend kapoost a longer message.No findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send kapoost a longer message. context REQUIRED (why you're writing / which piece / which task). contact optional — without it no reply is possible.
Changes things 18Claude Code: ask
  • about_humanmcpSelf-description of this humanMCP server.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Self-description of this humanMCP server. Deterministic, no bootstrap required — call this first to decide whether the rest of the API is relevant.
  • ask_humanSubmit an async question to kapoost.No findings

    Why it is in this group

    • The description's first verb is "submit": a word for a change.
    Description, as the server wrote it
    Submit an async question to kapoost. Returns an ID. Rate-limited 5/hr/IP. Poll fetch_answer later — kapoost answers on his own schedule (minutes, hours, or days). ALWAYS set `from` to a stable name for yourself: with it, sending the same question again returns the answer instead of creating a duplicate, which is the reliable path when your runtime cannot keep the ID between sessions.
  • bootstrap_sessionValidate the Polish poetry session code, then emit the full team briefing (guardian + style + personas + skills + persist block).No findings

    Why it is in this group

    • The description's first verb is "validate": a word for reading.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Validate the Polish poetry session code, then emit the full team briefing (guardian + style + personas + skills + persist block). Rate-limited 5/min/IP.
  • leave_commentAttach a short comment (≤280 chars) to a piece kapoost has published.No findings

    Why it is in this group

    • The name "leave_comment" says "comment": a word for a change.
    Description, as the server wrote it
    Attach a short comment (≤280 chars) to a piece kapoost has published. Truncated silently past the limit.
  • load_skill_groupBulk-fetch every skill tagged with the given group name.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Bulk-fetch every skill tagged with the given group name. Respects the bootstrap gate per-skill: -public suffix bypasses, everything else needs session.
  • mysloodsiewnia_writeIngest a new document into kapoost's vault (wave 2).No findings

    Why it is in this group

    • The name "mysloodsiewnia_write" says "write": a word for a change.
    Description, as the server wrote it
    Ingest a new document into kapoost's vault (wave 2). OWNER-ONLY — friend tokens receive {status:write_denied,reason:owner_only}. Args: {doc_type (required), title (required), body (required, ≤100 KiB), source_path?, meta?}. Requires Authorization: Bearer <owner token>. On Unauthorized: obtain the token by either (a) calling bootstrap_session(code=<owner poet fragment>) and reading SESSION_TOKEN from the response briefing (1h TTL, preferred for agents that already know the code), or (b) if you have shell access on kapoost's Mac, running `security find-generic-password -s humanmcp-edit-token -w` to fetch the persistent EDIT_TOKEN. Server-side vault auto-tags via:humanmcp-bridge; op_id is dedup key (idempotent retries safe). Delete is permanently unavailable. Envelopes: {status:online, op_id, result:{slug, created_at}}, {status:invalid_args}, {status:payload_too_large, limit, got}, {status:offline}, {status:vault_timeout}, {status:vault_error, error}.
  • prepare_naradaOffline narada: returns the panel plus each persona's ready-to-run SYSTEM/USER prompts so YOU run them as your own subagents, instead of the server generating voices.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Offline narada: returns the panel plus each persona's ready-to-run SYSTEM/USER prompts so YOU run them as your own subagents, instead of the server generating voices. No LLM cost, no rate limit, nothing recorded — no narada ID and no journal feedback. Prefer this over run_narada when your subagents can read material the server cannot (a repository, local files) or when the server has no API key. Session-gated.
  • recallList memories saved under the given code, optionally substring-filtered by query.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    List memories saved under the given code, optionally substring-filtered by query. Session-gated for symmetry with remember.
  • record_persona_reflectionAsk a persona to write a lesson-for-self after a rolled-back narada recommendation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Ask a persona to write a lesson-for-self after a rolled-back narada recommendation. Appends to the persona's journal via Sonnet/Haiku. Owner-only.
  • rememberPersist a note under the given session code.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Persist a note under the given session code. Session-gated — bootstrap_session first. Callers sharing the code share the memory.
  • request_accessGet the gate details for a locked piece: challenge question, manual-review flow, time-lock countdown, payment terms, or trade rules.No findings

    Why it is in this group

    • The name "request_access" says "request": a word for a change.
    Description, as the server wrote it
    Get the gate details for a locked piece: challenge question, manual-review flow, time-lock countdown, payment terms, or trade rules.
  • request_licenseDeclare intended use of a piece, get licensing terms + audit-log entry.No findings

    Why it is in this group

    • The name "request_license" says "request": a word for a change.
    Description, as the server wrote it
    Declare intended use of a piece, get licensing terms + audit-log entry. caller_id is REQUIRED (whitespace-only rejected — storyboard-pinned).
  • run_naradaCreate an async narada job: server routes context to 3-5 personas via keyword manifest, then generates each voice via Sonnet 4.6 (Haiku 4.5 for journal recaps).No findings

    Why it is in this group

    • The name "run_narada" says "run": a word for a change.
    Description, as the server wrote it
    Create an async narada job: server routes context to 3-5 personas via keyword manifest, then generates each voice via Sonnet 4.6 (Haiku 4.5 for journal recaps). Returns job ID for polling. Pass `personas` to pick the voices yourself and skip the router entirely — the router matches keywords only and cannot read a request to include or exclude someone written in the context.
  • submit_answerSubmit an answer to a challenge-gated piece.No findings

    Why it is in this group

    • The name "submit_answer" says "submit": a word for a change.
    Description, as the server wrote it
    Submit an answer to a challenge-gated piece. Correct answer unlocks and returns the full body.
  • suggest_skillsDeterministic manifest→tag mapping.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deterministic manifest→tag mapping. Given files + languages + git_origin, returns up to 8 skill slugs and up to 5 personas, each with the reason it fired. No LLM classification.
  • synthesise_persona_patternsForce-run Sonnet synthesis over a persona's raw journal, replacing the previous pattern set.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Force-run Sonnet synthesis over a persona's raw journal, replacing the previous pattern set. Owner-only — paid + writes internal state.
  • upsert_skillCreate or replace a skill by slug.No findings

    Why it is in this group

    • The name "upsert_skill" says "upsert": a word for a change.
    Description, as the server wrote it
    Create or replace a skill by slug. Owner-only: requires Authorization: Bearer <token>. Writes JSON to content/skills/<slug>.json.
  • verify_contentVerify a piece's Ed25519 signature against the server's owner public key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a piece's Ed25519 signature against the server's owner public key.
Only reads 23Claude Code: allow
  • fetch_answerPoll for an answer to an ask_human question.No findings

    Why it is in this group

    • The name "fetch_answer" says "fetch": a word for reading.
    Description, as the server wrote it
    Poll for an answer to an ask_human question. Marks the question as fetched the first time an answer is returned. Rate-limited 30/hr/IP.
  • fetch_narada_resultPoll a narada job by ID.No findings

    Why it is in this group

    • The name "fetch_narada_result" says "fetch": a word for reading.
    Description, as the server wrote it
    Poll a narada job by ID. Statuses: pending, running, done, failed. When done, returns all persona voices.
  • get_author_profileAuthor identity, bio, and a browsing cheatsheet.No findings

    Why it is in this group

    • The name "get_author_profile" says "get": a word for reading.
    Description, as the server wrote it
    Author identity, bio, and a browsing cheatsheet. Records a profile-view event.
  • get_certificateReturn a formatted copyright/authenticity certificate for a piece.No findings

    Why it is in this group

    • The name "get_certificate" says "get": a word for reading.
    Description, as the server wrote it
    Return a formatted copyright/authenticity certificate for a piece.
  • get_personaReturn one persona's full prompt by slug.No findings

    Why it is in this group

    • The name "get_persona" says "get": a word for reading.
    Description, as the server wrote it
    Return one persona's full prompt by slug. Session-gated except for Hodor (guardian rules must always apply). Pass session_token if your client cannot set an Authorization header.
  • get_persona_journalRead a persona's raw reflection journal.No findings

    Why it is in this group

    • The name "get_persona_journal" says "get": a word for reading.
    Description, as the server wrote it
    Read a persona's raw reflection journal. Owner-only — the journal is a private feedback loop, not for external callers.
  • get_skillReturn one skill's full body by slug.No findings

    Why it is in this group

    • The name "get_skill" says "get": a word for reading.
    Description, as the server wrote it
    Return one skill's full body by slug. Session-gated except for -public suffixed skills (guardian bypass). Pass session_token if your client cannot set an Authorization header.
  • list_blobsList typed data artifacts (images, contact, vectors, documents, datasets, capsules).No findings

    Why it is in this group

    • The name "list_blobs" says "list": a word for reading.
    Description, as the server wrote it
    List typed data artifacts (images, contact, vectors, documents, datasets, capsules). Filter by blob_type. Readable-column reflects caller_kind + caller_id vs audience.
  • list_collectionList works kapoost owns but did NOT create.No findings

    Why it is in this group

    • The name "list_collection" says "list": a word for reading.
    Description, as the server wrote it
    List works kapoost owns but did NOT create. Public items always; members-only surface only after session activation.
  • list_contentList published pieces (slug, title, type, access, tags).No findings

    Why it is in this group

    • The name "list_content" says "list": a word for reading.
    Description, as the server wrote it
    List published pieces (slug, title, type, access, tags). Optional type/tag filters.
  • list_personasList every persona (slug, title, role).No findings

    Why it is in this group

    • The name "list_personas" says "list": a word for reading.
    Description, as the server wrote it
    List every persona (slug, title, role). Full prompts unlock after bootstrap_session.
  • list_provenanceList provenance items (chain of custody, certificates, invoices) for an artwork slug.No findings

    Why it is in this group

    • The name "list_provenance" says "list": a word for reading.
    Description, as the server wrote it
    List provenance items (chain of custody, certificates, invoices) for an artwork slug. Tries piece then collection.
  • list_skill_groupsIndex of every skill tag in use, with slugs per group.No findings

    Why it is in this group

    • The name "list_skill_groups" says "list": a word for reading.
    Description, as the server wrote it
    Index of every skill tag in use, with slugs per group. Public — no bootstrap required.
  • list_skillsList skills (slug, category, title, tags).No findings

    Why it is in this group

    • The name "list_skills" says "list": a word for reading.
    Description, as the server wrote it
    List skills (slug, category, title, tags). Optional category / tag filters.
  • mysloodsiewnia_getFetch one document from kapoost's vault by slug.No findings

    Why it is in this group

    • The name "mysloodsiewnia_get" says "get": a word for reading.
    Description, as the server wrote it
    Fetch one document from kapoost's vault by slug. Requires Authorization: Bearer <edit token or friend token>. Friend tokens: vault-side filter enforces scope + access:private invisibility — an out-of-scope or private slug returns not_found. Vault offline ⇒ {status:offline}.
  • mysloodsiewnia_listEnumerate vault documents without FTS — for browsing by type or paginating.No findings

    Why it is in this group

    • The name "mysloodsiewnia_list" says "list": a word for reading.
    Description, as the server wrote it
    Enumerate vault documents without FTS — for browsing by type or paginating. Requires Authorization: Bearer <edit token or friend token>. Friend tokens see only their scoped doc_types; access:private is invisible. Args: {doc_type?: string filter (note/pdf/literatura/calendar_event/...), limit?: int 1-200 default 50, offset?: int default 0}. Returns [{slug, title, doc_type, created_at, chunk_count}]. Vault offline ⇒ {status:offline}.
  • mysloodsiewnia_statusRead-only liveness probe on kapoost's local vault (mysłoodsiewnia).No findings

    Why it is in this group

    • The name "mysloodsiewnia_status" says "status": a word for reading.
    Description, as the server wrote it
    Read-only liveness probe on kapoost's local vault (mysłoodsiewnia). Returns {status: online|degraded|offline, last_seen, commit_sha, personas_updated_at, skills_updated_at}. Offline is a stable state — retry later, don't escalate. Requires Authorization: Bearer <edit token or friend token>.
  • read_blobRead one blob by slug.No findings

    Why it is in this group

    • The name "read_blob" says "read": a word for reading.
    Description, as the server wrote it
    Read one blob by slug. Returns text or base64-encoded data. Access-gated by audience unless blob is public.
  • read_collection_itemFull record for one collection item + dossier count.No findings

    Why it is in this group

    • The name "read_collection_item" says "read": a word for reading.
    Description, as the server wrote it
    Full record for one collection item + dossier count. Access-gated: private is never visible, members needs session.
  • read_contentRead a public piece by slug.No findings

    Why it is in this group

    • The name "read_content" says "read": a word for reading.
    Description, as the server wrote it
    Read a public piece by slug. Locked pieces return a hint pointing at request_access.
  • read_provenanceReturn one provenance item with resolvable file URLs.No findings

    Why it is in this group

    • The name "read_provenance" says "read": a word for reading.
    Description, as the server wrote it
    Return one provenance item with resolvable file URLs. slug + id required.
  • search_contentSearch kapoost's pieces by words in title, tags, description and body.No findings

    Why it is in this group

    • The name "search_content" says "search": a word for reading.
    Description, as the server wrote it
    Search kapoost's pieces by words in title, tags, description and body. Every word must match (AND). Polish diacritics are folded, so "czlowieczenstwa" finds "człowieczeństwa". Use this BEFORE ask_human — most questions about which piece is which are answered here instantly, while ask_human waits for a human. Locked pieces are matched by title and tags only; their body is never searched or quoted.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http humanmcp https://kapoost.humanmcp.net/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__humanmcp__fetch_answer",
      "mcp__humanmcp__fetch_narada_result",
      "mcp__humanmcp__get_author_profile",
      "mcp__humanmcp__get_certificate",
      "mcp__humanmcp__get_persona",
      "mcp__humanmcp__get_persona_journal",
      "mcp__humanmcp__get_skill",
      "mcp__humanmcp__list_blobs",
      "mcp__humanmcp__list_collection",
      "mcp__humanmcp__list_content",
      "mcp__humanmcp__list_personas",
      "mcp__humanmcp__list_provenance",
      "mcp__humanmcp__list_skill_groups",
      "mcp__humanmcp__list_skills",
      "mcp__humanmcp__mysloodsiewnia_get",
      "mcp__humanmcp__mysloodsiewnia_list",
      "mcp__humanmcp__mysloodsiewnia_search",
      "mcp__humanmcp__mysloodsiewnia_status",
      "mcp__humanmcp__read_blob",
      "mcp__humanmcp__read_collection_item",
      "mcp__humanmcp__read_content",
      "mcp__humanmcp__read_provenance",
      "mcp__humanmcp__search_content"
    ],
    "ask": [
      "mcp__humanmcp__about_humanmcp",
      "mcp__humanmcp__ask_human",
      "mcp__humanmcp__bootstrap_session",
      "mcp__humanmcp__leave_comment",
      "mcp__humanmcp__leave_message",
      "mcp__humanmcp__load_skill_group",
      "mcp__humanmcp__mysloodsiewnia_write",
      "mcp__humanmcp__prepare_narada",
      "mcp__humanmcp__recall",
      "mcp__humanmcp__record_persona_reflection",
      "mcp__humanmcp__remember",
      "mcp__humanmcp__request_access",
      "mcp__humanmcp__request_license",
      "mcp__humanmcp__run_narada",
      "mcp__humanmcp__submit_answer",
      "mcp__humanmcp__suggest_skills",
      "mcp__humanmcp__synthesise_persona_patterns",
      "mcp__humanmcp__upsert_skill",
      "mcp__humanmcp__verify_content"
    ],
    "deny": [
      "mcp__humanmcp__delete_skill"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as humanmcp. Review it before you use it.