# `io.github.tenpace-app/review-router` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.tenpace-app/review-router
- JSON: https://anlyon.dev/api/v1/servers/io.github.tenpace-app/review-router
- Version: 1.1.3 (active)
- Publisher: io.github.tenpace-app (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/tenpace-app/review-router-setup
- Metadata from the official MCP Registry, synced 2026-10-21T18:50:15.566Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Tenpace Review Router
Human-authenticated setup for routing GitHub pull requests into the right Slack channel.
```

Scanned 2026-10-21T19:28:00.478Z over streamable-http.

**5 tools: 1 do something that can't be undone, 2 change things and 2 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 1 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 2 | allow |

## Findings

No check matched anything in these tool definitions.


## Can't be undone (1)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `send_review_router_test`

- The name "send_review_router_test" says "send": a word for sending, and what is sent cannot be taken back.

Description, as the server wrote it:

```untrusted-server-text
After route application, idempotently send one real Slack setup message through the production delivery path.
```

## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `apply_review_router_setup`

- The name "apply_review_router_setup" says "apply": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Idempotently create or reconcile the route after the person completing setup signed in, claimed the current intent, and connected both providers.
```

### `start_review_router_setup`

- The name "start_review_router_setup" says "start": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Create an inert GitHub-to-Slack setup plan and return one browser sign-in URL for the person completing setup.
```

## Only reads (2)

Looks things up and changes nothing. Claude Code: allow.

### `get_review_router_setup_status`

- The name "get_review_router_setup_status" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read structured progress and the next required human action.
```

### `preview_review_router_setup`

- The name "preview_review_router_setup" says "preview": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read the exact current intent version and locked setup plan before asking a human to continue.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `review-router`:

```json
{
  "permissions": {
    "allow": [
      "mcp__review-router__get_review_router_setup_status",
      "mcp__review-router__preview_review_router_setup"
    ],
    "ask": [
      "mcp__review-router__start_review_router_setup",
      "mcp__review-router__apply_review_router_setup",
      "mcp__review-router__send_review_router_test"
    ],
    "deny": []
  }
}
```