TeamMeet

io.github.theguysaccount/teammeettheguysaccountstreamable-httpv1.0.0Scanned 48 minutes ago

Start meetings and work with meeting transcripts, notes, recordings and follow-up tasks.

18 tools: 4 do something that can't be undone, 8 change things and 6 only read.

Reads private data · 4
Reads text others write · 2
Can send data out · 4
No findings

Anlyon alternative

12 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

18 tools

Can't be undone 4Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

hand_offHand a task to another person's agent, from the call you are in — they see it in the call and send it to their Claude with one press.Can send data outNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it
Hand a task to another person's agent, from the call you are in — they see it in the call and send it to their Claude with one press. Name the person as they appear in the call.
send_feedbackFile something you noticed about Team Meet — a bug, a confusing moment, an idea.Can send data outNo findings
Why it is in this group
- The name "send_feedback" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_feedback" says "send": it sends or publishes something to other people.
Description, as the server wrote it
File something you noticed about Team Meet — a bug, a confusing moment, an idea. It goes on the list the product is built from; repeats are counted and move the item up. Be specific: the page, what you expected, what happened. Set fix=true when the person wants the platform itself changed: it becomes a fix request, an AI engineer turns it into a pull request, and a person reviews it before it ships. The reply carries a link to follow it.
send_messagePost a message into the meeting chat, from this agent, under its own name.Can send data outNo findings
Why it is in this group
- The name "send_message" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_message" says "send": it sends or publishes something to other people.
Description, as the server wrote it
Post a message into the meeting chat, from this agent, under its own name. Everyone in the room sees it.
send_notetakerSend the TeamMeet notetaker to a Zoom, Google Meet, Microsoft Teams or Webex meeting you did not host.Can send data outNo findings
Why it is in this group
- The name "send_notetaker" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_notetaker" says "send": it sends or publishes something to other people.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Send the TeamMeet notetaker to a Zoom, Google Meet, Microsoft Teams or Webex meeting you did not host. It joins as a participant, records, and when the call ends the transcript, recap and action items land in the dashboard of the account this key was minted by. Needs a key minted while signed in. Metered in minutes per month by plan.

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

drawGenerate a picture from a description and put it in the meeting for everyone to see.No findings
Why it is in this group
- The description's first verb is "generate": a word for a change.
Description, as the server wrote it
Generate a picture from a description and put it in the meeting for everyone to see.
import_transcriptBring a meeting transcript or a chat log from another tool into the dashboard of the account this key was minted by — .vtt/.srt captions (Zoom, Google Meet, Teams, Fireflies, Grain…No findings
Why it is in this group
- The name "import_transcript" says "import": a word for a change.
Description, as the server wrote it
Bring a meeting transcript or a chat log from another tool into the dashboard of the account this key was minted by — .vtt/.srt captions (Zoom, Google Meet, Teams, Fireflies, Grain), Otter-style text, Read AI JSON, any JSON list of turns with names and times, or the chats: Google Meet's chat log, Zoom's meeting_saved_chat.txt, a WhatsApp export. Speaker labels are kept exactly as written; a chat is filed as a chat. Returns the meeting id and link.
join_meetingJoin a TeamMeet call you are in, as your own agent — "<your name>'s Claude" appears in the call, announced in its chat, and anyone in it can remove you.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Join a TeamMeet call you are in, as your own agent — "<your name>'s Claude" appears in the call, announced in its chat, and anyone in it can remove you. Then call listen to hear it. You can only join a call the person this connector belongs to is in (signed in) or started.
my_tasksWhat your calls have handed to you — the person this TeamMeet connector belongs to — to do: who asked, what they asked for, which call, and where each one has got to.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
What your calls have handed to you — the person this TeamMeet connector belongs to — to do: who asked, what they asked for, which call, and where each one has got to. Open ones first. Use get_task for the whole of one.
speakSay something out loud in the meeting.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Say something out loud in the meeting. It is spoken through the room's speakers and joins the transcript, so it is on the record like anything else that was said. Use sparingly — this interrupts people.
start_meetingStart a new meeting and get its code and link.No findings
Why it is in this group
- The name "start_meeting" says "start": a word for a change.
Description, as the server wrote it
Start a new meeting and get its code and link. The link works in any browser with no account and no download. Nobody can join a meeting that was not started this way.
submit_fixOpen a pull request against Team Meet: a unified diff (`git diff` output) you wrote against its source, for a fix request.No findings
Why it is in this group
- The name "submit_fix" says "submit": a word for a change.
Description, as the server wrote it
Open a pull request against Team Meet: a unified diff (`git diff` output) you wrote against its source, for a fix request. Give feedback_id to attach it to an existing request (see send_feedback, or GET /api/fixes for the open ones), or give text to file the request and attach the fix in one step. Nothing is applied automatically — a person reviews and merges. Run the tests your change touches first (AGENTS.md says which) and report them.
update_taskSay where a task has got to.No findings
Why it is in this group
- The name "update_task" says "update": a word for a change.
Description, as the server wrote it
Say where a task has got to. The call it came from sees it in its chat: "working" when you start, "done" with a short note and the link to what you made (a pull request, a document), or "blocked" with what you need from a person.

Only reads 6Looks things up and changes nothing.Show 6 read-only tools

get_notesWhat the room has read out of the conversation so far — decisions, open questions, actions and live disagreements.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_notes" says "get": a word for reading.
What it can reach
- private-dataThe name "get_notes" says "get" and "note": it reads notes.
- private-dataThe description's first sentence says "conversation": it reads messages.
- untrusted-inputThe description's first sentence says "conversation": it reads messages, which other people can write.
Description, as the server wrote it
What the room has read out of the conversation so far — decisions, open questions, actions and live disagreements. Every item carries a verbatim quote from the transcript; anything that failed that check is marked unverified rather than presented as fact.
get_taskOne task handed to you from a call, in full: the words the person asked in, who they are, the lines of the call just before (each with the microphone it came in on), and any TeamMe…No findings
Why it is in this group
- The name "get_task" says "get": a word for reading.
Description, as the server wrote it
One task handed to you from a call, in full: the words the person asked in, who they are, the lines of the call just before (each with the microphone it came in on), and any TeamMeet fix request it is about.
get_transcriptThe full transcript of a meeting, with who said each line.Reads private dataNo findings
Why it is in this group
- The name "get_transcript" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "meeting": it reads calendars.
Description, as the server wrote it
The full transcript of a meeting, with who said each line. Speaker attribution here is not a guess from a mixed audio stream — each microphone is transcribed separately, so the name on a line is the connection the words arrived on.
list_meetingsList the meetings this key started that are still running, with how many people are in each.Reads private dataNo findings
Why it is in this group
- The name "list_meetings" says "list": a word for reading.
What it can reach
- private-dataThe name "list_meetings" says "list" and "meeting": it reads calendars.
- private-dataThe description's first sentence says "list" and "meeting": it reads calendars.
Description, as the server wrote it
List the meetings this key started that are still running, with how many people are in each.
list_recordingsRecordings this key can see, newest first, with their share links.No findings
Why it is in this group
- The name "list_recordings" says "list": a word for reading.
Description, as the server wrote it
Recordings this key can see, newest first, with their share links.
listenWait for what happens next in a call you joined: new transcript lines with who said each (ground truth — every microphone is transcribed on its own), new chat messages, and tasks h…Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "wait": a word for reading.
What it can reach
- private-dataThe description's first sentence says "wait" and "chat": it reads messages.
- untrusted-inputThe description's first sentence says "wait" and "chat": it reads messages, which other people can write.
Description, as the server wrote it
Wait for what happens next in a call you joined: new transcript lines with who said each (ground truth — every microphone is transcribed on its own), new chat messages, and tasks handed to you. Returns as soon as there is something, or after wait_seconds. Pass back the "next" value as since. Keep calling it to stay in the call; you leave after 90 seconds without one.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

32 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 untrusted-input tools breaks every one.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_notes
get_transcript
list_meetings
listen
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_notes
listen
Can send data out4: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; hand_off
send_feedback
send_message
send_notetaker

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__teammeet__get_notes",
      "mcp__teammeet__listen"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http teammeet https://teammeet.ai/mcp --header 'Authorization: <your-authorization>'

claude mcp add --transport http teammeet https://teammeet.ai/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__teammeet__list_meetings",
      "mcp__teammeet__get_transcript",
      "mcp__teammeet__get_notes",
      "mcp__teammeet__list_recordings",
      "mcp__teammeet__get_task",
      "mcp__teammeet__listen"
    ],
    "ask": [
      "mcp__teammeet__start_meeting",
      "mcp__teammeet__send_message",
      "mcp__teammeet__speak",
      "mcp__teammeet__draw",
      "mcp__teammeet__send_feedback",
      "mcp__teammeet__submit_fix",
      "mcp__teammeet__import_transcript",
      "mcp__teammeet__send_notetaker",
      "mcp__teammeet__my_tasks",
      "mcp__teammeet__update_task",
      "mcp__teammeet__join_meeting",
      "mcp__teammeet__hand_off"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as teammeet. Review it before you use it.

Capability tags behind 8 rules

mcp__teammeet__list_meetings private-data
mcp__teammeet__get_transcript private-data
mcp__teammeet__get_notes private-data, untrusted-input
mcp__teammeet__send_message outbound
mcp__teammeet__send_feedback outbound
mcp__teammeet__send_notetaker outbound
mcp__teammeet__listen private-data, untrusted-input
mcp__teammeet__hand_off outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.theguysaccount/teammeet/verify?hash=518ca239510ac7ae6014e205254c749992b63b8d43c1074642db11275f4b53ec" | jq -e '.changed == false'

Pinned hash 518ca239510a, from Oct 31, 2026, 07:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.theguysaccount/teammeet/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.theguysaccount/teammeet.svg)](https://anlyon.dev/servers/io.github.theguysaccount/teammeet)

Source: MCP Registry · repository. Synced Oct 31, 2026, 07:17 UTC.