Device Magic MCP by usefulapi

io.usefulapi/device-magicusefulapi.iostreamable-httpv1.0.0Scanned 60 minutes ago

Read Device Magic forms, submissions, devices and groups; send and revoke dispatches.

17 tools: 2 can delete or cancel things, 1 change things and 14 only read.

Reads private data · 4
Reads text others write · 17
Can send data out · 1
1 finding

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

17 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

devicemagic_revoke_dispatchWRITE: withdraws one outstanding dispatch from a device (the form disappears from the device).Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_revoke_dispatch" says "revoke": a word for removing or ending something.
- The description says "cannot be undone".
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: withdraws one outstanding dispatch from a device (the form disappears from the device). It cannot be undone, but the dispatch can be sent again. DELETE /api/v2/devices/{identifier}/dispatches/{id}.json.
Annotations the server declares
- title: Revoke a dispatch
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
devicemagic_send_dispatchWRITE: pushes a form, optionally prefilled, to one device where its user will see it (like assigning a job).Reads text others writeCan send data outNo findings
Why it is in this group
- The name "devicemagic_send_dispatch" says "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "devicemagic_send_dispatch" says "send": it sends or publishes something to other people.
Description, as the server wrote it
WRITE: pushes a form, optionally prefilled, to one device where its user will see it (like assigning a job). Not idempotent: calling it twice sends two dispatches. Needs the Enterprise plan. The form is named by its namespace (list_forms); `payload` maps question identifiers (get_form) to prefilled values (subforms = nested objects, repeat groups = arrays). POST /api/v2/devices/{identifier}/dispatches.json.
Annotations the server declares
- title: Send a form to a device (dispatch)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

devicemagic_approve_deviceWRITE: approves a device that is waiting for approval (pending_approval is true) so it can receive forms.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_approve_device" says "approve": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: approves a device that is waiting for approval (pending_approval is true) so it can receive forms. Approving an approved device has no effect. POST /organizations/{org}/devices/{id}/approve.
Annotations the server declares
- title: Approve a pending device
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 14Looks things up and changes nothing.Show 14 read-only tools

devicemagic_describe_resourceMetadata of one resource: status, version and, for spreadsheets, its tables and columns.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "devicemagic_describe_resource" says "describe": a word for reading.
What it can reach
- private-dataThe description's first sentence says "table": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Metadata of one resource: status, version and, for spreadsheets, its tables and columns. The file content itself is not downloaded. GET /api/resources/{id}/describe.json.
Annotations the server declares
- title: Describe resource
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_get_destinationOne destination of a form.Reads text others write1 finding
Why it is in this group
- The name "devicemagic_get_destination" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Info
  The description mentions "Credentials".
  Matched text
  description: "One destination of a form. Credentials and tokens of the destination are never..."
  What this check looks for
Description, as the server wrote it
One destination of a form. Credentials and tokens of the destination are never returned. GET /api/forms/{form_id}/destinations/{id}.json.
Annotations the server declares
- title: Get form destination
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_get_deviceOne device: id, identifier, owner, description, pending_approval, groups and custom attributes.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_get_device" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One device: id, identifier, owner, description, pending_approval, groups and custom attributes. GET /organizations/{org}/devices/{id}.json.
Annotations the server declares
- title: Get device
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_get_dispatchOne dispatch of a device including the values it was prefilled with.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_get_dispatch" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One dispatch of a device including the values it was prefilled with. GET /api/v3/devices/{identifier}/dispatches/{id}.json?include_inputs=true.
Annotations the server declares
- title: Get dispatch with prefilled values
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_get_formOne form's definition: title and its questions/pages with identifiers and types (the identifiers are the keys inside submissions and dispatch payloads).Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_get_form" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One form's definition: title and its questions/pages with identifiers and types (the identifiers are the keys inside submissions and dispatch payloads). Optionally a specific version. GET /organizations/{org}/forms/{id}.json.
Annotations the server declares
- title: Get form definition
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_destinationsList where one form's submissions are sent (e-mail, Dropbox, database, ...): id, active flag, format and transport types, timestamps.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_destinations" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "mail": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "mail": it reads inbound email, which other people can write.
Description, as the server wrote it
List where one form's submissions are sent (e-mail, Dropbox, database, ...): id, active flag, format and transport types, timestamps. GET /api/forms/{id}/destinations.json.
Annotations the server declares
- title: List form destinations
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_device_dispatchesOutstanding dispatches of one device.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_device_dispatches" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Outstanding dispatches of one device. GET /api/v2/devices/{identifier}/dispatches.json.
Annotations the server declares
- title: List a device's outstanding dispatches
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_devicesList the organization's devices (phones, tablets, web-form users): id, identifier, owner, description, group and whether approval is pending.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_devices" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "web": it reads web pages, which anyone can write.
Description, as the server wrote it
List the organization's devices (phones, tablets, web-form users): id, identifier, owner, description, group and whether approval is pending. GET /organizations/{org}/devices.json.
Annotations the server declares
- title: List devices
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_dispatch_recipientsDevices and web-forms users a dispatch can be sent to (first 100 by default; use items and page for more).Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_dispatch_recipients" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
Description, as the server wrote it
Devices and web-forms users a dispatch can be sent to (first 100 by default; use items and page for more). GET /api/v3/dispatch_authors.json.
Annotations the server declares
- title: List dispatch recipients
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_dispatchesOutstanding dispatches (prefilled forms pushed to devices and not yet completed) of the whole organization: id, form name and namespace, device, scheduled time.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_dispatches" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Outstanding dispatches (prefilled forms pushed to devices and not yet completed) of the whole organization: id, form name and namespace, device, scheduled time. Dispatch is an Enterprise-plan feature. GET /api/v2/organizations/{org}/dispatches.json.
Annotations the server declares
- title: List outstanding dispatches
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_formsList the organization's forms: id, namespace (the form's unique id used for dispatching), version, description and group.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_forms" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the organization's forms: id, namespace (the form's unique id used for dispatching), version, description and group. GET /organizations/{org}/forms.json.
Annotations the server declares
- title: List forms
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_groupsList the organization's groups (which devices see which forms), optionally narrowed by a name filter or by tags.Reads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_groups" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the organization's groups (which devices see which forms), optionally narrowed by a name filter or by tags. GET /api/v2/organizations/{org}/groups.json.
Annotations the server declares
- title: List groups
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_resourcesList the organization's resources (lookup tables and files used by forms): id, original filename, version, description.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_resources" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "table": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the organization's resources (lookup tables and files used by forms): id, original filename, version, description. GET /api/resources.json.
Annotations the server declares
- title: List resources
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
devicemagic_list_submissionsSubmitted data of one form, newest data as stored in the form's Device Magic Database destination (it must be active on that form).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "devicemagic_list_submissions" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "database": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Submitted data of one form, newest data as stored in the form's Device Magic Database destination (it must be active on that form). Each record has form info, metadata (device, user, submitted_at, received_at, submission_id) and the answers. The reply says current_page, total_pages and total_count. Filter by from_date/to_date (yyyy-mm-dd). GET /api/forms/{id}/device_magic_database.json.
Annotations the server declares
- title: List form submissions
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

68 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; devicemagic_describe_resource
devicemagic_list_destinations
devicemagic_list_resources
devicemagic_list_submissions
Reads text others write17: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; devicemagic_approve_device
devicemagic_describe_resource
devicemagic_get_destination
devicemagic_get_device
devicemagic_get_dispatch
devicemagic_get_form
devicemagic_list_destinations
devicemagic_list_device_dispatches
devicemagic_list_devices
devicemagic_list_dispatch_recipients
devicemagic_list_dispatches
devicemagic_list_forms
and 5 more
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; devicemagic_send_dispatch

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__device-magic__devicemagic_send_dispatch"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 info

Infodevicemagic_get_destination
The description mentions "Credentials".
Matched text
description: "One destination of a form. Credentials and tokens of the destination are never..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http device-magic https://device-magic.usefulapi.io/mcp

claude mcp add --transport http device-magic https://device-magic.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__device-magic__devicemagic_list_forms",
      "mcp__device-magic__devicemagic_get_form",
      "mcp__device-magic__devicemagic_list_submissions",
      "mcp__device-magic__devicemagic_list_devices",
      "mcp__device-magic__devicemagic_get_device",
      "mcp__device-magic__devicemagic_list_groups",
      "mcp__device-magic__devicemagic_list_resources",
      "mcp__device-magic__devicemagic_describe_resource",
      "mcp__device-magic__devicemagic_list_destinations",
      "mcp__device-magic__devicemagic_get_destination",
      "mcp__device-magic__devicemagic_list_dispatches",
      "mcp__device-magic__devicemagic_list_device_dispatches",
      "mcp__device-magic__devicemagic_get_dispatch",
      "mcp__device-magic__devicemagic_list_dispatch_recipients"
    ],
    "ask": [
      "mcp__device-magic__devicemagic_approve_device"
    ],
    "deny": [
      "mcp__device-magic__devicemagic_send_dispatch",
      "mcp__device-magic__devicemagic_revoke_dispatch"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as device-magic. Review it before you use it.

Capability tags behind 17 rules

mcp__device-magic__devicemagic_list_forms untrusted-input
mcp__device-magic__devicemagic_get_form untrusted-input
mcp__device-magic__devicemagic_list_submissions private-data, untrusted-input
mcp__device-magic__devicemagic_list_devices untrusted-input
mcp__device-magic__devicemagic_get_device untrusted-input
mcp__device-magic__devicemagic_list_groups untrusted-input
mcp__device-magic__devicemagic_list_resources private-data, untrusted-input
mcp__device-magic__devicemagic_describe_resource private-data, untrusted-input
mcp__device-magic__devicemagic_list_destinations private-data, untrusted-input
mcp__device-magic__devicemagic_get_destination untrusted-input
mcp__device-magic__devicemagic_list_dispatches untrusted-input
mcp__device-magic__devicemagic_list_device_dispatches untrusted-input
mcp__device-magic__devicemagic_get_dispatch untrusted-input
mcp__device-magic__devicemagic_list_dispatch_recipients untrusted-input
mcp__device-magic__devicemagic_send_dispatch untrusted-input, outbound
mcp__device-magic__devicemagic_revoke_dispatch untrusted-input
mcp__device-magic__devicemagic_approve_device untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/device-magic/verify?hash=da87d24326a12960349f8a186d68589e078275d5720e517fc495108baa45642e" | jq -e '.changed == false'

Pinned hash da87d24326a1, from Oct 24, 2026, 16:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/device-magic/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/device-magic.svg)](https://anlyon.dev/servers/io.usefulapi/device-magic)

Source: MCP Registry · repository. Synced Oct 24, 2026, 17:17 UTC.