LMGram

by saezbaldo · remote · no sign-in to list tools · v0.1.2 · published by GitHub user saezbaldo

Consent-based human matchmaking for peer advice, collaboration, and practical help.

Deletes · 1Final · 3Changes · 8

Compare Registry entry

17 tools: 1 can delete or cancel things, 3 do something that can't be undone, 8 change things and 5 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone3Claude Code: ask: see these tools
Changes things8Claude Code: ask: see these tools
Only reads5Claude Code: allow: see these tools

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http lmgram https://api.lmgram.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn2 info

Warnopen_lmgram_panel
The server marks "open_lmgram_panel" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "open_lmgram_panel" says "open": a word for a change.
What this check looks for
Inforequest_human_match
The description mentions "credentials".
Matched text
description: "...tic matchmaking. Never include secrets, credentials, API keys, raw transcripts, customer da..."
What this check looks for
Inforequest_human_match
The input schema at properties.summary.description mentions "credentials".
Matched text
inputSchema.properties.summary.description: "...-sensitive summary. Never send secrets, credentials, API keys, raw transcripts, customer da..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

17 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

panel_dismiss_suggestionDecline an unopened match suggestion.No findings
Why it is in this group
- The name "panel_dismiss_suggestion" says "dismiss": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Decline an unopened match suggestion.
Annotations the server declares
- title: Dismiss suggestion
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: true
- idempotentHint: true

Can't be undone 3Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

panel_create_intentPublish only the minimized intent explicitly reviewed and submitted by the user in this conversation panel.No findings
Why it is in this group
- The name "panel_create_intent" says "create": a word for a change.
- The description's first verb is "publish": a word for a change that another call does not undo.
Description, as the server wrote it
Publish only the minimized intent explicitly reviewed and submitted by the user in this conversation panel. Do not include secrets, private transcripts, or dating requests.
Annotations the server declares
- title: Publish approved intent
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: false
panel_send_messageSend a client-encrypted text message after the user presses Send.No findings
Why it is in this group
- The name "panel_send_message" says "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it
Send a client-encrypted text message after the user presses Send. Retry only the identical payload and clientMessageId.
Annotations the server declares
- title: Send encrypted message
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: true
send_messageSends a message into a LMGram chat.No findings
Why it is in this group
- The name "send_message" says "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it
Sends a message into a LMGram chat.
Annotations the server declares
- title: Send a chat message
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: false

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

open_lmgram_panelOpen LMGram chats, groups and suggestions for the current ChatGPT conversation.1 finding
Why it is in this group
- The name "open_lmgram_panel" says "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "open_lmgram_panel" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "open_lmgram_panel" says "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Open LMGram chats, groups and suggestions for the current ChatGPT conversation. Each conversation has a separate context; never copy a transcript or private documents. This does not publish an intent or send a message.
Annotations the server declares
- title: Open LMGram conversation panel
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
panel_join_groupAccept an existing group invitation related to this context.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Accept an existing group invitation related to this context.
Annotations the server declares
- title: Join group
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: true
panel_mark_readMark the displayed chat as read.No findings
Why it is in this group
- The name "panel_mark_read" says "mark": a word for a change.
Description, as the server wrote it
Mark the displayed chat as read.
Annotations the server declares
- title: Mark chat read
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: true
panel_register_deviceRegister only a public encryption key for this user's panel.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Register only a public encryption key for this user's panel.
Annotations the server declares
- title: Register encryption device
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: true
panel_start_chatRequest a chat with a suggestion in this context, without sending a plaintext introduction.No findings
Why it is in this group
- The name "panel_start_chat" says "start": a word for a change.
Description, as the server wrote it
Request a chat with a suggestion in this context, without sending a plaintext introduction.
Annotations the server declares
- title: Request conversation
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: true
panel_sync_device_keysShare client-encrypted message keys only with this account's registered devices.No findings
Why it is in this group
- The name "panel_sync_device_keys" says "sync": a word for a change.
Description, as the server wrote it
Share client-encrypted message keys only with this account's registered devices. Does not send messages, plaintext or private keys.
Annotations the server declares
- title: Sync own encryption devices
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: true
request_human_matchCreates an opt-in LMGram human match request only after the user explicitly asks to use LMGram to find a collaborator, peer, mentor, or helper.2 findings
Why it is in this group
- The name "request_human_match" says "request": a word for a change.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...tic matchmaking. Never include secrets, credentials, API keys, raw transcripts, customer da..."
  What this check looks for
- Info
  The input schema at properties.summary.description mentions "credentials".
  Matched text
  inputSchema.properties.summary.description: "...-sensitive summary. Never send secrets, credentials, API keys, raw transcripts, customer da..."
  What this check looks for
Description, as the server wrote it
Creates an opt-in LMGram human match request only after the user explicitly asks to use LMGram to find a collaborator, peer, mentor, or helper. Never invoke for general advice, dating or romantic matchmaking. Never include secrets, credentials, API keys, raw transcripts, customer data, or private documents; ask for a minimized non-sensitive summary first.
Annotations the server declares
- title: Request a human match
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: false
start_chatStarts a LMGram chat for a match request, or records that this side wants to chat.No findings
Why it is in this group
- The name "start_chat" says "start": a word for a change.
Description, as the server wrote it
Starts a LMGram chat for a match request, or records that this side wants to chat.
Annotations the server declares
- title: Start or request a chat
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
- idempotentHint: false

Only reads 5Looks things up and changes nothing.Claude Code: allow

get_current_userReturns the LMGram profile linked to the connected account.No findings
Why it is in this group
- The name "get_current_user" says "get": a word for reading.
Description, as the server wrote it
Returns the LMGram profile linked to the connected account.
Annotations the server declares
- title: Get current LMGram profile
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
list_match_requestsLists recent match requests for the current LMGram user, optionally filtered by role and status.No findings
Why it is in this group
- The name "list_match_requests" says "list": a word for reading.
Description, as the server wrote it
Lists recent match requests for the current LMGram user, optionally filtered by role and status.
Annotations the server declares
- title: List LMGram match requests
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
list_messagesLists messages in a LMGram chat.No findings
Why it is in this group
- The name "list_messages" says "list": a word for reading.
Description, as the server wrote it
Lists messages in a LMGram chat. End-to-end encrypted payloads are never exposed as ciphertext; they are represented by a safe placeholder.
Annotations the server declares
- title: List chat messages
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
panel_chatRetrieve authorized chat data for client-side decryption, not model context.No findings
Why it is in this group
- The description's first verb is "retrieve": a word for reading.
Description, as the server wrote it
Retrieve authorized chat data for client-side decryption, not model context.
Annotations the server declares
- title: Read private chat
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
panel_snapshotRefresh this conversation's private panel data.No findings
Why it is in this group
- The name "panel_snapshot" says "snapshot": a word for reading.
Description, as the server wrote it
Refresh this conversation's private panel data.
Annotations the server declares
- title: Refresh conversation
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http lmgram https://api.lmgram.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__lmgram__get_current_user",
      "mcp__lmgram__list_match_requests",
      "mcp__lmgram__list_messages",
      "mcp__lmgram__panel_snapshot",
      "mcp__lmgram__panel_chat"
    ],
    "ask": [
      "mcp__lmgram__request_human_match",
      "mcp__lmgram__start_chat",
      "mcp__lmgram__send_message",
      "mcp__lmgram__open_lmgram_panel",
      "mcp__lmgram__panel_register_device",
      "mcp__lmgram__panel_mark_read",
      "mcp__lmgram__panel_sync_device_keys",
      "mcp__lmgram__panel_send_message",
      "mcp__lmgram__panel_start_chat",
      "mcp__lmgram__panel_join_group",
      "mcp__lmgram__panel_create_intent"
    ],
    "deny": [
      "mcp__lmgram__panel_dismiss_suggestion"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as lmgram. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.saezbaldo/lmgram/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

12 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:48 UTC.

For agents: Markdown · JSON · report this listing