Nukafever Photography
by nukafever-lab · remote · no sign-in to list tools · v2.0.0 · published by GitHub user nukafever-lab
Search, quote, buy and download licensed documentary photos. No account, fixed prices.
7 tools: 2 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http nukafever https://nukafever.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "get_download_link" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "get_download_link" says "get": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Changes things 2Claude Code: ask
create_orderCreates an order from a valid quote and returns a payment URL (hosted payment page, tax handled) and the secret order_token.No findings
Why it is in this group
- The name "create_order" says "create": a word for a change.
Description, as the server wrote it Creates an order from a valid quote and returns a payment URL (hosted payment page, tax handled) and the secret order_token. Nothing is charged by this call: the buyer pays on the returned URL. Calling again with the same idempotency_key and quote returns the same order. Both accept_terms and immediate_delivery_waiver must be true, only after the buyer agreed.
Annotations the server declares
- title: Create an order
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_download_linkSigned link (valid 5 minutes) to download the full-resolution original of a paid order.1 finding
Why it is in this group
- The name "get_download_link" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_download_link" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "get_download_link" says "get": a word for reading.
Description, as the server wrote it Signed link (valid 5 minutes) to download the full-resolution original of a paid order. At most 10 links per order.
Annotations the server declares
- title: Get the download link
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Only reads 5Claude Code: allow
get_licenseLicence of a paid order as JSON, or as a PDF certificate (format=pdf).No findings
Why it is in this group
- The name "get_license" says "get": a word for reading.
Description, as the server wrote it Licence of a paid order as JSON, or as a PDF certificate (format=pdf).
Annotations the server declares
- title: Get the licence
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_order_statusState of an order: pending (waiting for payment), paid, expired or failed.No findings
Why it is in this group
- The name "get_order_status" says "get": a word for reading.
Description, as the server wrote it State of an order: pending (waiting for payment), paid, expired or failed. Poll every few seconds after the buyer pays.
Annotations the server declares
- title: Order status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_photoOne photograph with its metadata, fixed price and machine-readable licence terms.No findings
Why it is in this group
- The name "get_photo" says "get": a word for reading.
Description, as the server wrote it One photograph with its metadata, fixed price and machine-readable licence terms.
Annotations the server declares
- title: Photo details
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_quoteFixed price (tax included, EUR) and licence terms for one photograph.No findings
Why it is in this group
- The name "get_quote" says "get": a word for reading.
Description, as the server wrote it Fixed price (tax included, EUR) and licence terms for one photograph. The quote is signed and valid 15 minutes. Prices are not negotiable.
Annotations the server declares
- title: Get a quote
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_photosSearch the catalogue (English or French, synonyms and typos tolerated).No findings
Why it is in this group
- The name "search_photos" says "search": a word for reading.
Description, as the server wrote it Search the catalogue (English or French, synonyms and typos tolerated). Returns watermarked previews, metadata and fixed prices. Never returns originals.
Annotations the server declares
- title: Search photographs
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 2.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http nukafever https://nukafever.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__nukafever__search_photos",
"mcp__nukafever__get_photo",
"mcp__nukafever__get_quote",
"mcp__nukafever__get_order_status",
"mcp__nukafever__get_license"
],
"ask": [
"mcp__nukafever__create_order",
"mcp__nukafever__get_download_link"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as nukafever. Review it before you use it.
