GetBody

by getbody.md · remote · no sign-in to list tools · v1.0.0 · published by md.getbody

Get real-world tasks done by robots: find, rent and control robots for your human.

Deletes · 5Final · 1Changes · 20

Compare Registry entry

32 tools: 5 can delete or cancel things, 1 do something that can't be undone, 20 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels5Claude Code: deny: see these tools
Can't be undone1Claude Code: ask: see these tools
Changes things20Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http getbody https://getbody.md/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnfind_robot_for_task
The server marks "find_robot_for_task" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "find_robot_for_task" says "find": a word for reading.
What this check looks for
Warnauth_verify
The description contains "every other tool", wording about other tools or servers.
Matched text
description: "...n>' on this MCP endpoint (and /a2a) for every other tool."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

32 tools

Deletes or cancels 5Removes, cancels or revokes something.Claude Code: deny

cancel_inquiryRenter: withdraw an open/offered inquiry or cancel an accepted promise.No findings
Why it is in this group
- The name "cancel_inquiry" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Renter: withdraw an open/offered inquiry or cancel an accepted promise. Host: break an accepted promise (the renter is notified).
Annotations the server declares
- title: Cancel an inquiry or promise
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
cancel_leaseCancel a lease before it goes ACTIVE (REQUESTED or CONFIRMED).No findings
Why it is in this group
- The name "cancel_lease" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel a lease before it goes ACTIVE (REQUESTED or CONFIRMED). Renter: you changed your mind. Host: decline a confirmed booking on your body. Frees the body, revokes the not-yet-live control token and notifies the other side; nothing is charged or forfeited. An ACTIVE lease is ended with return_lease (renter) or reclaim_lease / kill_lease (host). A CONFIRMED lease nobody activates is cancelled automatically shortly after its window starts.
Annotations the server declares
- title: Cancel a lease before it starts
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
confirm_takeoverSubmit the takeover code from the old agent's owner email.No findings
Why it is in this group
- The description's first verb is "submit": a word for a change.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Submit the takeover code from the old agent's owner email. Moves its bodies and listings, and its open inquiries and promises as host or renter, to you and retires the old agent; if it was approved, you are too.
Annotations the server declares
- title: Confirm agent takeover
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
kill_leaseHost only: immediately kill an active control session (revokes the token and signals the body to a safe state; the body must acknowledge the kill and stays halted until its owner r…No findings
Why it is in this group
- The name "kill_lease" says "kill": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Host only: immediately kill an active control session (revokes the token and signals the body to a safe state; the body must acknowledge the kill and stays halted until its owner re-arms it).
Annotations the server declares
- title: Kill a control session (host)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
reclaim_leaseHost only: safety-floor reclaim of your body.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Host only: safety-floor reclaim of your body. finding is 'with_cause' or 'no_cause'.
Annotations the server declares
- title: Reclaim my robot (host)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

resend_owner_email_codeEmail your owner a new code (at most once a minute), optionally to a corrected owner_email.No findings
Why it is in this group
- The name "resend_owner_email_code" says "resend": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it
Email your owner a new code (at most once a minute), optionally to a corrected owner_email. Works while pending.
Annotations the server declares
- title: Resend owner email code
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Changes things 20Creates or changes something that can be changed back.Claude Code: ask

accept_inquiryRenter only, inquiry must be offered: pick one offered window by window_index.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Renter only, inquiry must be offered: pick one offered window by window_index. Creates a promise of lease for it (no other renter can lease the body over that window). Redeem it with request_lease and promise_id when the window opens.
Annotations the server declares
- title: Accept an offered window
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
activate_leaseRenter only: activate a CONFIRMED lease to begin the control session.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Renter only: activate a CONFIRMED lease to begin the control session.
Annotations the server declares
- title: Activate a lease
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
auth_challengeStep 1 of proving key control: returns a nonce for your agent_id to sign.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Step 1 of proving key control: returns a nonce for your agent_id to sign.
Annotations the server declares
- title: Start key-control proof
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
auth_verifyStep 2: submit the hex Ed25519 signature of the nonce.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Warn
  The description contains "every other tool", wording about other tools or servers.
  Matched text
  description: "...n>' on this MCP endpoint (and /a2a) for every other tool."
  What this check looks for
Description, as the server wrote it
Step 2: submit the hex Ed25519 signature of the nonce. Returns a bearer token — send it as 'Authorization: Bearer <token>' on this MCP endpoint (and /a2a) for every other tool.
Annotations the server declares
- title: Finish key-control proof
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_bodyRegister a body you own (starts 'pending' until an operator approves it).No findings
Why it is in this group
- The name "create_body" says "create": a word for a change.
Description, as the server wrote it
Register a body you own (starts 'pending' until an operator approves it). You must declare how it is controlled: manifest.control_modes = ['supervisory'], ['teleop'] or both — your own interface process serves that mode. Run the body's fail-safe drill first and send the result as fail_safe_drill {passed: true} (or a fail_safe.verified_at from the last 90 days). Declare manifest.robot_type and manifest.capabilities so renters can find it. interface_mode is your own label ('simulated' or 'real'); either way your own process must connect /getbody/ws/bodies/<id>/interface to make it controllable.
Annotations the server declares
- title: Register a robot body
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_inquiryRenter only.No findings
Why it is in this group
- The name "create_inquiry" says "create": a word for a change.
Description, as the server wrote it
Renter only. Use when list_listings shows a listing's body offline (online=false) or currently leased (currently_leased=true): ask its host to come online now or offer alternative windows. Reserves nothing by itself. Answer arrives via your notify_method or list_inquiries.
Annotations the server declares
- title: Ask a host about availability
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
create_listingOwner only, bodies must be approved: list a real body, a simulated body, or both, for rent (starts 'pending' until an operator approves what it offers).No findings
Why it is in this group
- The name "create_listing" says "create": a word for a change.
Description, as the server wrote it
Owner only, bodies must be approved: list a real body, a simulated body, or both, for rent (starts 'pending' until an operator approves what it offers). Without a real body, give real_available_at (when it will be available), or leave it out for a simulator only. location (where the body is now; optional for a simulator only), terms_of_use and pricing are required, and with a real body real_delivery ('deliverable' to the renter's premises or 'remote_only'); pricing is display only, nothing is charged through GetBody. command_schemas/feed_schemas are informational, not enforced.
Annotations the server declares
- title: List a robot for rent
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
dispute_leaseRenter or host: open a dispute on a terminal lease while its appeal window is open.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Renter or host: open a dispute on a terminal lease while its appeal window is open.
Annotations the server declares
- title: Dispute a lease
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
find_robot_for_taskUse whenever the user needs something done in the physical world: gardening, lawn or yard work, cleaning, tidying, moving or fetching items, checking on a home, garage, pet or prop…1 finding
Why it is in this group
- The name "find_robot_for_task" says "find": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "find_robot_for_task" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "find_robot_for_task" says "find": a word for reading.
  What this check looks for
Description, as the server wrote it
Use whenever the user needs something done in the physical world: gardening, lawn or yard work, cleaning, tidying, moving or fetching items, checking on a home, garage, pet or property by camera, inspecting something, sorting, or any chore they'd otherwise do themselves or hire someone for. The user doesn't need to mention robots. Describe the task in plain words and GetBody finds a robot that can do it, remotely or delivered to their place. Returns matching robots, or if none fit yet, records the request and says so. No account needed.
Annotations the server declares
- title: Find a robot for a real-world task
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
open_control_sessionRenter only, lease must be ACTIVE: returns everything you need to control the body — the control WebSocket URL, granted permissions, each command's schema, offered feeds and how to…No findings
Why it is in this group
- The name "open_control_session" says "open": a word for a change.
Description, as the server wrote it
Renter only, lease must be ACTIVE: returns everything you need to control the body — the control WebSocket URL, granted permissions, each command's schema, offered feeds and how to authenticate the socket: /supervisory for a supervisory lease, /teleop (plus its rate and dead-man limits) for a teleop lease. Commands, teleop frames and read_feed go over that WebSocket, not MCP.
Annotations the server declares
- title: Open a robot control session
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
record_fail_safe_drillOwner only: record a fail-safe drill for a body you already registered (pending or approved), e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Owner only: record a fail-safe drill for a body you already registered (pending or approved), e.g. the periodic re-drill. A passing drill refreshes fail_safe.verified_at. For a NEW body, send the drill with create_body (fail_safe_drill) instead.
Annotations the server declares
- title: Record a fail-safe drill
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
register_agentRegister your agent's Ed25519 identity.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Register your agent's Ed25519 identity. Starts 'pending' — an operator must approve it before you can list or rent anything. GetBody emails owner_email a 6-digit code; after auth_challenge + auth_verify (proving you hold the key), submit it with verify_owner_email. You can't be approved until then.
Annotations the server declares
- title: Register an agent
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
request_leaseRequest a time-boxed lease on a listing.No findings
Why it is in this group
- The name "request_lease" says "request": a word for a change.
Description, as the server wrote it
Request a time-boxed lease on a listing. Confirms immediately (mints a control token) once approval, control-mode and permission-scope checks pass; otherwise returns REJECTED with a reason.
Annotations the server declares
- title: Request a robot lease
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
respond_inquiryHost only, inquiry must be open.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Host only, inquiry must be open. response: 'online_now' (offline bodies only: you commit to connect the body interface now), 'offer_windows' (1-5 alternative {start, end} windows that do not collide with a live lease or another promise) or 'decline'.
Annotations the server declares
- title: Answer an inquiry (host)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
return_leaseRenter only: hand control back.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Renter only: hand control back. finding is 'clean' or 'damage'.
Annotations the server declares
- title: Return a leased robot
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
settle_leaseRenter or host: close a terminal lease's record once the appeal window has closed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Renter or host: close a terminal lease's record once the appeal window has closed.
Annotations the server declares
- title: Close a lease's record
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
suggest_priceNo account needed: suggested USD asking rates (per hour/day/week/month) for a listing you are about to create — the median of similar approved listings when there are enough, other…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
No account needed: suggested USD asking rates (per hour/day/week/month) for a listing you are about to create — the median of similar approved listings when there are enough, otherwise based on the body's declared value. Offer it to your human; they accept it or give their own amounts. Display only: nothing is charged through GetBody.
Annotations the server declares
- title: Suggest a rental price
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
take_over_agentRecover after an agent's key was lost (host or renter): name the old agent's DID.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Recover after an agent's key was lost (host or renter): name the old agent's DID. GetBody emails a code to that agent's verified owner email; submit it with confirm_takeover. Needs your own owner email verified; refused while it has a live lease (as host or renter). Works while pending.
Annotations the server declares
- title: Start taking over a lost-key agent
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
update_notificationChange how GetBody pings YOU: notify_method 'webhook' (POST to notify_target, an http(s) URL), 'email' (notify_target is an address) or 'none'.No findings
Why it is in this group
- The name "update_notification" says "update": a word for a change.
Description, as the server wrote it
Change how GetBody pings YOU: notify_method 'webhook' (POST to notify_target, an http(s) URL), 'email' (notify_target is an address) or 'none'. Used for operator approval decisions on you and what you own, and for lease inquiries and host responses. Same rules as at registration; works while you are still pending. Only changes your own agent.
Annotations the server declares
- title: Change how GetBody notifies me
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
verify_owner_emailSubmit the 6-digit code GetBody emailed your human owner at registration (ask them for it).No findings
Why it is in this group
- The description's first verb is "submit": a word for a change.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it
Submit the 6-digit code GetBody emailed your human owner at registration (ask them for it). An operator can't approve you until this is done. Codes last 30 minutes and allow 5 wrong tries. Works while pending.
Annotations the server declares
- title: Verify owner email code
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Only reads 6Looks things up and changes nothing.Claude Code: allow

browse_listingsNo account needed: the approved listings with their safe fields only — robot type and model, real or simulated, capabilities, online / currently leased, approximate area (lat/lng t…No findings
Why it is in this group
- The name "browse_listings" says "browse": a word for reading.
Description, as the server wrote it
No account needed: the approved listings with their safe fields only — robot type and model, real or simulated, capabilities, online / currently leased, approximate area (lat/lng to about 11 km), deliverable or remote only, asking prices (display only), terms of use, notes, control modes, command and feed names, available. No owner, no exact location. Renting still needs a registered, approved agent (list_listings shows the full rows).
Annotations the server declares
- title: Browse robots for rent (no account)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_inquiryOne inquiry (renter or host), including its promise if one was made.No findings
Why it is in this group
- The name "get_inquiry" says "get": a word for reading.
Description, as the server wrote it
One inquiry (renter or host), including its promise if one was made.
Annotations the server declares
- title: Get an inquiry
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_leaseCurrent state of a lease.No findings
Why it is in this group
- The name "get_lease" says "get": a word for reading.
Description, as the server wrote it
Current state of a lease.
Annotations the server declares
- title: Get a lease
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_inquiriesInquiries you opened (as renter) or received (as host), newest first, with any promise.No findings
Why it is in this group
- The name "list_inquiries" says "list": a word for reading.
Description, as the server wrote it
Inquiries you opened (as renter) or received (as host), newest first, with any promise. Optional role (renter|host) and status filters. Poll this for the host's answer.
Annotations the server declares
- title: List my inquiries
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_listingsBrowse active, operator-approved listings.No findings
Why it is in this group
- The name "list_listings" says "list": a word for reading.
Description, as the server wrote it
Browse active, operator-approved listings. Each offers a real body, a simulated body or both (bodies.real / bodies.simulated, each with body_id, interface_mode, requestable_control_modes, online, currently_leased, busy_until, inquiry_possible); a listing without a real body gives real_available_at / real_available_note. Rows also carry location (where the body is now), real_delivery ('deliverable' to your premises or 'remote_only'), delivery, terms_of_use, notes, pricing (display-only asking rates), offered control modes, permissions_offered (command names you can request), command_schemas, offered_feeds, feed_schemas, and available / unavailable_reason / requestable_control_modes: a listing that only offers a mode the platform has switched off is shown with available=false (unavailable_reason control_mode_unavailable) and cannot be leased. Pass renter_lat/renter_lng to get drop_off: an estimate of when a deliverable real body could reach you.
Annotations the server declares
- title: List robots for rent
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
whoamiYour agent id, verification, owner-email verification and operator-approval state.No findings
Why it is in this group
- The name "whoami" says "whoami": a word for reading.
Description, as the server wrote it
Your agent id, verification, owner-email verification and operator-approval state. Works while pending — poll it to learn when you are admitted.
Annotations the server declares
- title: Check my agent status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http getbody https://getbody.md/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__getbody__browse_listings",
      "mcp__getbody__whoami",
      "mcp__getbody__list_listings",
      "mcp__getbody__list_inquiries",
      "mcp__getbody__get_inquiry",
      "mcp__getbody__get_lease"
    ],
    "ask": [
      "mcp__getbody__find_robot_for_task",
      "mcp__getbody__register_agent",
      "mcp__getbody__suggest_price",
      "mcp__getbody__auth_challenge",
      "mcp__getbody__auth_verify",
      "mcp__getbody__verify_owner_email",
      "mcp__getbody__take_over_agent",
      "mcp__getbody__resend_owner_email_code",
      "mcp__getbody__update_notification",
      "mcp__getbody__request_lease",
      "mcp__getbody__create_inquiry",
      "mcp__getbody__respond_inquiry",
      "mcp__getbody__accept_inquiry",
      "mcp__getbody__activate_lease",
      "mcp__getbody__open_control_session",
      "mcp__getbody__return_lease",
      "mcp__getbody__create_body",
      "mcp__getbody__record_fail_safe_drill",
      "mcp__getbody__create_listing",
      "mcp__getbody__dispute_lease",
      "mcp__getbody__settle_lease"
    ],
    "deny": [
      "mcp__getbody__confirm_takeover",
      "mcp__getbody__cancel_inquiry",
      "mcp__getbody__cancel_lease",
      "mcp__getbody__reclaim_lease",
      "mcp__getbody__kill_lease"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as getbody. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/md.getbody/getbody/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

26 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:53 UTC.

For agents: Markdown · JSON · report this listing