Skyelight

io.github.plastrlab/skyelight-mcpplastrlabstreamable-httpv1.0.0Scanned 57 minutes ago

Give your AI assistant feedback pinned to the exact element, with its code, so it can fix and reply.

18 tools: 1 can delete or cancel things, 1 do something that can't be undone, 7 change things and 9 only read.

Reads private data · 5
Reads text others write · 6
Can send data out · 3
No findings

Anlyon alternative

9 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

18 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

merge_itemsFold duplicate items into one, the way merging works in the app: the duplicates leave the list and count as extra reports on the item they were merged into.No findings
Why it is in this group
- The name "merge_items" says "merge": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Fold duplicate items into one, the way merging works in the app: the duplicates leave the list and count as extra reports on the item they were merged into. Use it only when find_similar and the threads themselves show they are the same problem. Owners, admins and collaborators can merge.
Annotations the server declares
- title: Merge duplicates
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

publish_review_linkShare something with Skyelight for review, and get a link people can pin feedback on.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "publish_review_link" says "publish": a word for a change that another call does not undo.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "publish_review_link" says "publish": it sends or publishes something to other people.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Share something with Skyelight for review, and get a link people can pin feedback on. Two ways: - code: one file Skyelight hosts at its own link with the review badge on it. A whole HTML page, or one React component with an export default (Tailwind classes and npm imports work; local imports such as @/components do not). For Claude prototypes, v0 snippets and single pages. Publishing again with the same prototypeId, or the same name in the same project, makes a new version at the same link. - url: an app already deployed (a Lovable, v0, Bolt or Vercel project: anything with more than one file). Adds its address to the project's Review Links and returns a script tag to add to the app's <head> (index.html, or the root layout); add it and redeploy. Owners and admins. Returns the share link and the project link; give both to the person. A hosted link is public to anyone who has it.
Annotations the server declares
- title: Publish a review link
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

assignHand an item to a person, who is notified the way an assignment in the app notifies them.No findings
Why it is in this group
- The name "assign" says "assign": a word for a change.
Description, as the server wrote it
Hand an item to a person, who is notified the way an assignment in the app notifies them. Pass null as the assignee to unassign it. Only owners, admins and collaborators can assign; a resolved item has to be reopened first.
Annotations the server declares
- title: Assign
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
create_itemOpen a new thread on a page, as the person whose connection you are using.Can send data outNo findings
Why it is in this group
- The name "create_item" says "create": a word for a change.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Open a new thread on a page, as the person whose connection you are using. Only available on a person's own connection — an agent reporting what it found or changed uses post_update on the thread it was working, so the answer lands where the question was asked.
Annotations the server declares
- title: Create feedback
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
post_updateReport back on an item: what you found, what you changed, a link to the PR.Can send data outNo findings
Why it is in this group
- The name "post_update" says "post": a word for a change.
What it can reach
- outboundThe name "post_update" says "post": it sends or publishes something to other people.
Description, as the server wrote it
Report back on an item: what you found, what you changed, a link to the PR. Posts as a reply on the thread the feedback was left on, so the person who reported it sees the answer where they asked. Use this when you finish work on an item, and when you get stuck.
Annotations the server declares
- title: Post an update
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
project_reviewEverything needed to write an accurate project review or hand-off document: the shape of the work, every resolved thread and how it ended, what was deferred and why, what is still …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Everything needed to write an accurate project review or hand-off document: the shape of the work, every resolved thread and how it ended, what was deferred and why, what is still open, and the longest conversations quoted in full, which is where decisions were made. Every entry carries its item id, so each claim in your document can be traced back to its thread. Quote; do not invent outcomes the threads do not state.
Annotations the server declares
- title: Review project
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
save_ruleKeep a rule the team agreed on ("sentence case in every button", "the brand gray stays, do not raise contrast bugs on it") in the project's context, under Rules learned.No findings
Why it is in this group
- The name "save_rule" says "save": a word for a change.
Description, as the server wrote it
Keep a rule the team agreed on ("sentence case in every button", "the brand gray stays, do not raise contrast bugs on it") in the project's context, under Rules learned. The classifier reads that context, and every agent reads it through decision_log, so it shapes future threads. Cite the threads it came from. Workspace owners and admins only; confirm with the person before saving.
Annotations the server declares
- title: Save a rule
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
set_statusMove an item to open, deferred or resolved.No findings
Why it is in this group
- The name "set_status" says "set": a word for a change.
Description, as the server wrote it
Move an item to open, deferred or resolved. Use it to close the loop after you have fixed something and said so — post_update first, so the person who reported it reads what changed, then set_status. "deferred" is for work that is real but not now.
Annotations the server declares
- title: Set status
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
whats_newWhat changed on a project since you last looked: new threads, new replies grouped by thread, what was resolved or deferred, and what was assigned to you or mentioned you.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
What changed on a project since you last looked: new threads, new replies grouped by thread, what was resolved or deferred, and what was assigned to you or mentioned you. Call it at the start of a session. Without `since` it reads from your bookmark and moves it forward; with `since` it reads that window and leaves the bookmark alone.
Annotations the server declares
- title: What's new
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Only reads 9Looks things up and changes nothing.Show 9 read-only tools

decision_logThe decisions a project made in its threads, quoted: every thread resolved or deferred after a discussion, with the conversation, plus types people corrected and where outcomes kee…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "decision_log" says "log": a word for reading.
What it can reach
- private-dataThe description's first sentence says "thread": it reads messages.
- untrusted-inputThe description's first sentence says "thread": it reads messages, which other people can write.
Description, as the server wrote it
The decisions a project made in its threads, quoted: every thread resolved or deferred after a discussion, with the conversation, plus types people corrected and where outcomes keep recurring. Also returns the project's existing rules, so you can tell what is new. Use it to write a decision log, or to find rules worth keeping with save_rule.
Annotations the server declares
- title: Decision log
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
find_by_sourceFeedback by the code that rendered it, from the file and line the Skyelight build plugin stamps on each element.Reads private dataNo findings
Why it is in this group
- The name "find_by_source" says "find": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
- private-dataThe input names a file (input.file), and the tool reads: it reads files.
Description, as the server wrote it
Feedback by the code that rendered it, from the file and line the Skyelight build plugin stamps on each element. Pass a file (a path or just its name) or a component to see every thread about it before you edit it; pass neither to get the hot spots, every stamped file ranked by outstanding feedback.
Annotations the server declares
- title: Find feedback by source file
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
find_similarHas this already been reported?No findings
Why it is in this group
- The name "find_similar" says "find": a word for reading.
Description, as the server wrote it
Has this already been reported? Pass the text you are about to report (and the page, if you know it) before create_item, or an itemId to find what an existing thread duplicates. Returns likely matches with why each matched: shared words, same page, same element, same source file. If two are the same problem, merge_items folds one into the other.
Annotations the server declares
- title: Find similar feedback
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_itemEverything needed to work one item: the whole thread in order, the page and URL it is on, the anchor identifying the element the person pointed at, and the pictures — what the page…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_item" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "thread": it reads messages.
- untrusted-inputThe description's first sentence says "thread": it reads messages, which other people can write.
Description, as the server wrote it
Everything needed to work one item: the whole thread in order, the page and URL it is on, the anchor identifying the element the person pointed at, and the pictures — what the page looked like when it was pinned, plus anything people attached — returned as images you can look at rather than links you cannot.
Annotations the server declares
- title: Get feedback item
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_itemsList feedback items (bugs, ideas, comments) people left on a Skyelight project.Reads text others writeNo findings
Why it is in this group
- The name "list_items" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "list" and "comment": it reads comments, which other people can write.
Description, as the server wrote it
List feedback items (bugs, ideas, comments) people left on a Skyelight project. Returns a summary of the project plus matching items. Start here to see what is outstanding. An item's hand-off (investigate, plan, fix) is set by the team and binding: on investigate or plan, reply on the thread and change no code.
Annotations the server declares
- title: List feedback
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_membersThe people in a workspace: name, email, role and id.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_members" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it
The people in a workspace: name, email, role and id. Call it when you are asked to tell, ask or hand something to someone by name, then pass their name or id to assign, or in mentions on create_item or post_update.
Annotations the server declares
- title: List members
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_projectsProjects you can reach, newest activity first, across every workspace unless one is named.No findings
Why it is in this group
- The name "list_projects" says "list": a word for reading.
Description, as the server wrote it
Projects you can reach, newest activity first, across every workspace unless one is named. Start here when no project is bound — `list_items` needs a project id and this is where one comes from.
Annotations the server declares
- title: List projects
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_workspacesWorkspaces you can reach, with the role you hold in each, and who you are.No findings
Why it is in this group
- The name "list_workspaces" says "list": a word for reading.
Description, as the server wrote it
Workspaces you can reach, with the role you hold in each, and who you are. Use when you do not know what exists yet, to find which workspace a project belongs to, or to learn your own user id.
Annotations the server declares
- title: List workspaces
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_itemsFind items whose thread mentions some text.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_items" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "find" and "thread": it reads messages.
- untrusted-inputThe description's first sentence says "find" and "thread": it reads messages, which other people can write.
Description, as the server wrote it
Find items whose thread mentions some text. Searches replies as well as the original message, so an item someone already diagnosed in a reply still turns up.
Annotations the server declares
- title: Search feedback
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

90 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data5: Reads files, mail, messages, databases, secrets, calendars or repositories.; decision_log
find_by_source
get_item
list_members
search_items
Reads text others write6: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; decision_log
get_item
list_items
list_members
publish_review_link
search_items
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; create_item
post_update
publish_review_link

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__skyelight__create_item",
      "mcp__skyelight__post_update",
      "mcp__skyelight__publish_review_link"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http skyelight https://app.skyelight.ai/mcp

claude mcp add --transport http skyelight https://app.skyelight.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__skyelight__list_workspaces",
      "mcp__skyelight__list_projects",
      "mcp__skyelight__list_items",
      "mcp__skyelight__search_items",
      "mcp__skyelight__list_members",
      "mcp__skyelight__get_item",
      "mcp__skyelight__find_by_source",
      "mcp__skyelight__find_similar",
      "mcp__skyelight__decision_log"
    ],
    "ask": [
      "mcp__skyelight__post_update",
      "mcp__skyelight__create_item",
      "mcp__skyelight__publish_review_link",
      "mcp__skyelight__assign",
      "mcp__skyelight__set_status",
      "mcp__skyelight__project_review",
      "mcp__skyelight__whats_new",
      "mcp__skyelight__save_rule"
    ],
    "deny": [
      "mcp__skyelight__merge_items"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as skyelight. Review it before you use it.

Capability tags behind 9 rules

mcp__skyelight__list_items untrusted-input
mcp__skyelight__search_items private-data, untrusted-input
mcp__skyelight__post_update outbound
mcp__skyelight__create_item outbound
mcp__skyelight__publish_review_link untrusted-input, outbound
mcp__skyelight__list_members private-data, untrusted-input
mcp__skyelight__get_item private-data, untrusted-input
mcp__skyelight__find_by_source private-data
mcp__skyelight__decision_log private-data, untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.plastrlab/skyelight-mcp/verify?hash=50d0c1f6a205ee1ea818cca32b51ecef38ce40c0f000ce7bab7482f6122bf998" | jq -e '.changed == false'

Pinned hash 50d0c1f6a205, from Oct 23, 2026, 18:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.plastrlab/skyelight-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.plastrlab/skyelight-mcp.svg)](https://anlyon.dev/servers/io.github.plastrlab/skyelight-mcp)

Source: MCP Registry · repository. Synced Oct 23, 2026, 18:19 UTC.