Skip to content

NAIF Gravity

by naief9961-tech · remote · no sign-in to list tools · v1.7.1 · published by GitHub user naief9961-tech

Free MCP/API diagnostics. Micro Tools V2: free preview, $1 JSON check, $2 API shape, $3 normalize.

Changes · 5

5 tools: 5 change things.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http naif-fixgraph https://naifgravity.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 info
  • The input schema at properties.problem.description mentions "credentials".

    Matched text

    inputSchema.properties.problem.description: "...le error/status. Never include secrets, credentials, private keys or PII."

    What this check looks for
  • The input schema at properties.description.description mentions "credentials".

    Matched text

    inputSchema.properties.description.description: "...d micro-service; never include secrets, credentials or private keys."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

5 tools

Changes things 5Claude Code: ask
  • diagnose_issueStart here.1 finding

    Why it is in this group

    • The description's first verb is "start": a word for a change.

    Findings

    • Info

      The input schema at properties.problem.description mentions "credentials".

      Matched text

      inputSchema.properties.problem.description: "...le error/status. Never include secrets, credentials, private keys or PII."

      What this check looks for
    Description, as the server wrote it
    Start here. Diagnose one sanitized MCP, API, webhook, agent or integration failure for free. Returns bounded evidence plus a suggested repair service, then use quote_repair only if a priced repair is wanted. It never creates a quote, checkout, payment or repair job. It may record bounded operational attribution/telemetry, so readOnlyHint is false; it does not modify the caller system or commercial state.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • prepare_repairUse ONLY for the normal repair flow after quote_repair has already returned a quoteId and the caller explicitly chooses that existing quote.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Use ONLY for the normal repair flow after quote_repair has already returned a quoteId and the caller explicitly chooses that existing quote. This tool does not create a quote: with confirm=true it records acceptance of that quote and creates checkout instructions on exactly one rail offered by it. Do NOT use this tool for owner/platform-preauthorized autonomous purchasing where the agent is allowed to choose one of the four capped micro-services and create its own quote; use request_delegated_purchase for that separate flow. APPLE_PAY returns a human handoff URL for buyer authorization; BASE_USDC and TRON_USDT return payer transfer instructions. It never sends funds, charges the caller, verifies payment or directly starts repair execution. After the buyer completes the required payment action, use verify_repair with the returned checkoutId and the same rail.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quote_repairUse only after diagnose_issue when the caller wants a priced bounded repair.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Use only after diagnose_issue when the caller wants a priced bounded repair. Creates a new non-binding quote for the selected or automatically matched public service. Repeating the call may create a different quoteId, so it is intentionally non-idempotent. It does not accept the quote, create checkout, send payment or start execution. If the quote is accepted by the caller, pass its quoteId and one offered payment rail to prepare_repair.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • request_delegated_purchaseUse ONLY for an owner/platform-preauthorized autonomous purchase of one of four supported micro-services under an explicit spending cap.1 finding

    Why it is in this group

    • The name "request_delegated_purchase" says "request": a word for a change.

    Findings

    • Info

      The input schema at properties.description.description mentions "credentials".

      Matched text

      inputSchema.properties.description.description: "...d micro-service; never include secrets, credentials or private keys."

      What this check looks for
    Description, as the server wrote it
    Use ONLY for an owner/platform-preauthorized autonomous purchase of one of four supported micro-services under an explicit spending cap. Unlike prepare_repair, this tool does not consume an existing quoteId: it creates its own quote, accepts it, and creates checkout within the delegation. Repeating the call may create a new quote/checkout, so it is intentionally non-idempotent. Do NOT use it when quote_repair already produced a quoteId or for general repair services outside the four listed micro-services; use prepare_repair for an existing repair quote. Supports wallet rails and APPLE_PAY_AUTO. APPLE_PAY_AUTO requires one human Apple Pay approval first; when Tap returns an ACTIVE saved-card payment agreement, later purchases may be charged only within the stored cap. If provider support or authorization is missing, the flow fails closed.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • verify_repairUse after the buyer completes the payment action for a checkout created by prepare_repair.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Use after the buyer completes the payment action for a checkout created by prepare_repair. APPLE_PAY verifies the existing Tap charge by checkoutId; BASE_USDC and TRON_USDT require the payer-provided txHash. A confirmed payment returns verified=true, while an already-confirmed Apple Pay checkout may return alreadyVerified=true; an unconfirmed or rejected payment returns error and/or reason without fabricating success. Verification may also return the job attached by the existing payment-completion workflow. This tool never creates or sends a transaction and never charges the buyer.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.7.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http naif-fixgraph https://naifgravity.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__naif-fixgraph__diagnose_issue",
      "mcp__naif-fixgraph__quote_repair",
      "mcp__naif-fixgraph__prepare_repair",
      "mcp__naif-fixgraph__request_delegated_purchase",
      "mcp__naif-fixgraph__verify_repair"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as naif-fixgraph. Review it before you use it.