Skip to content

OnceAsk

by rsb6061 · remote · no sign-in to list tools · v1.0.0 · published by GitHub user rsb6061

MCP server for OnceAsk, the AI-native current-address layer for people and agents.

Deletes · 2Changes · 1
CompareRegistry entry

4 tools: 2 can delete or cancel things, 1 change things and 1 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http onceask https://onceask.com/_api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnresolve_delivery

    The server marks "resolve_delivery" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "resolve_delivery" says "resolve": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

4 tools

Deletes or cancels 2Claude Code: deny
  • request_delivery_permissionAfter the user explicitly confirms they want the recipient contacted, ask OnceAsk to request a current delivery address/permission.No findings

    Why it is in this group

    • The name "request_delivery_permission" says "request": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    After the user explicitly confirms they want the recipient contacted, ask OnceAsk to request a current delivery address/permission. Accepts either a recipientId from resolve_delivery or a person's name/email. OnceAsk searches its contacts and connected Google/Gmail-derived people, then emails the secure request when possible without revealing the recipient email or street address to the agent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • send_handwritten_cardFulfill a handwritten card using a delivery token returned by resolve_delivery.No findings

    Why it is in this group

    • The name "send_handwritten_card" says "send": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Fulfill a handwritten card using a delivery token returned by resolve_delivery. OnceAsk sends the recipient address directly to the fulfillment provider; the agent does not receive it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
Changes things 1Claude Code: ask
  • resolve_deliveryPreferred privacy-preserving way to send something to a person.1 finding

    Why it is in this group

    • The name "resolve_delivery" says "resolve": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "resolve_delivery" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "resolve_delivery" says "resolve": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Preferred privacy-preserving way to send something to a person. Searches OnceAsk first and, when connected, can discover a missing person from Google Contacts or Gmail interactions. Resolves to a short-lived one-time delivery token when recipient permission and a current address exist. Does not return the street address.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
Only reads 1Claude Code: allow
  • list_handwritten_cardsList available Handwrytten card designs and handwriting styles for privacy-preserving fulfillment.No findings

    Why it is in this group

    • The name "list_handwritten_cards" says "list": a word for reading.
    Description, as the server wrote it
    List available Handwrytten card designs and handwriting styles for privacy-preserving fulfillment. Does not expose recipient address data.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http onceask https://onceask.com/_api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__onceask__list_handwritten_cards"
    ],
    "ask": [
      "mcp__onceask__resolve_delivery"
    ],
    "deny": [
      "mcp__onceask__request_delivery_permission",
      "mcp__onceask__send_handwritten_card"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as onceask. Review it before you use it.