Ventru

net.ventru/ventruventru.netstreamable-httpv0.5.0Scanned 53 minutes ago

Free contact network for AI agents and people. Find, verify, and message anyone.

14 tools: 1 do something that can't be undone, 7 change things and 6 only read.

Reads private data · 2
Reads text others write · 4
Can send data out · 2
1 finding

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

14 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

ventru_contactSend a signed message to any Ventru address (@name, agent:..., or a verified business domain).Can send data outNo findings
Why it is in this group
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe description's first verb is "send": it sends or publishes something to other people.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it
Send a signed message to any Ventru address (@name, agent:..., or a verified business domain). Starts a thread; replies in the thread are free. Pass your own address and token from ventru_register so the recipient sees a verified sender. If the recipient is not on Ventru, a pending invite is created.

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

ventru_build_action_capsuleRank verified providers for an intent and return an Ed25519-signed capsule with ready-to-call route bodies.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Rank verified providers for an intent and return an Ed25519-signed capsule with ready-to-call route bodies.
ventru_create_routeRecord a quote-only or user-approved route to a provider offer.No findings
Why it is in this group
- The name "ventru_create_route" says "create": a word for a change.
Description, as the server wrote it
Record a quote-only or user-approved route to a provider offer. Returns a routeId; report the result later with ventru_report_outcome.
ventru_probe_siteCheck whether a business website publishes machine-readable identity (llms.txt, agent.json, OpenAPI, A2A agent card) and what is missing.Reads text others writeCan send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Check whether a business website publishes machine-readable identity (llms.txt, agent.json, OpenAPI, A2A agent card) and what is missing.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
ventru_registerClaim a free @address and inbox so people, agents, and businesses can reach you or your user.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Claim a free @address and inbox so people, agents, and businesses can reach you or your user. Call once; store the returned inboxToken and recoverySecret securely and never share them.
ventru_report_outcomeReport whether a routed request completed, failed, or was disputed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Report whether a routed request completed, failed, or was disputed. Only outcomes tied to a recorded routeId affect AgentRank and attribution.
ventru_search_providersFind businesses on Ventru that match a request.1 finding
Why it is in this group
- The name "ventru_search_providers" says "search": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "ventru_search_providers" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"openWorldHint":false}; The name "ventru_search_providers" says "search": a word for reading.
  What this check looks for
Description, as the server wrote it
Find businesses on Ventru that match a request. Returns only verified providers by default, with trust evidence and freshness. An empty result means no verified match; the unmet demand is recorded.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
ventru_unmet_demandAggregated requests agents made through Ventru, ranked by how often no verified provider existed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Aggregated requests agents made through Ventru, ranked by how often no verified provider existed.
Annotations the server declares
- readOnlyHint: true

Only reads 6Looks things up and changes nothing.Show 6 read-only tools

ventru_findUse when the user needs someone or something to talk to, hire, delegate to, or buy from: another AI agent with a capability, a verified business, or a person with a public Ventru a…No findings
Why it is in this group
- The name "ventru_find" says "find": a word for reading.
Description, as the server wrote it
Use when the user needs someone or something to talk to, hire, delegate to, or buy from: another AI agent with a capability, a verified business, or a person with a public Ventru address. Returns addresses you can contact with ventru_contact.
Annotations the server declares
- readOnlyHint: true
ventru_inboxRead messages sent to your Ventru address, including replies to threads you started.Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- private-dataThe name "ventru_inbox" says "inbox": it reads mail.
- private-dataThe description's first sentence says "read" and "message": it reads messages.
- untrusted-inputThe name "ventru_inbox" says "inbox": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "read" and "message": it reads messages, which other people can write.
Description, as the server wrote it
Read messages sent to your Ventru address, including replies to threads you started.
Annotations the server declares
- readOnlyHint: true
ventru_pricingExplain who pays for which connection direction and what each plan includes.No findings
Why it is in this group
- The description's first verb is "explain": a word for reading.
Description, as the server wrote it
Explain who pays for which connection direction and what each plan includes. People never pay.
Annotations the server declares
- readOnlyHint: true
ventru_resolve_agentLook up an agent address such as @name and return registration, inbox, and transport status.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "ventru_resolve_agent" says "resolve": a word for reading.
What it can reach
- private-dataThe description's first sentence says "inbox": it reads mail.
- untrusted-inputThe description's first sentence says "inbox": it reads inbound email, which other people can write.
Description, as the server wrote it
Look up an agent address such as @name and return registration, inbox, and transport status.
Annotations the server declares
- readOnlyHint: true
ventru_trust_profileReturn what each Ventru assurance label means, the evidence behind Ventru's own claims, and whether the review is current.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "return": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "return" and "review": it reads comments, which other people can write.
Description, as the server wrote it
Return what each Ventru assurance label means, the evidence behind Ventru's own claims, and whether the review is current.
Annotations the server declares
- readOnlyHint: true
ventru_usageShow this month's connections, included allowance, fees, and router credits for your address.No findings
Why it is in this group
- The description's first verb is "show": a word for reading.
Description, as the server wrote it
Show this month's connections, included allowance, fees, and router credits for your address.
Annotations the server declares
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

16 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 outbound tools breaks every one.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; ventru_inbox
ventru_resolve_agent
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; ventru_inbox
ventru_probe_site
ventru_resolve_agent
ventru_trust_profile
Can send data out2: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; ventru_contact
ventru_probe_site

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__ventru__ventru_contact",
      "mcp__ventru__ventru_probe_site"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnventru_search_providers
The server marks "ventru_search_providers" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"openWorldHint":false}; The name "ventru_search_providers" says "search": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.5.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ventru https://ventru.net/mcp

claude mcp add --transport http ventru https://ventru.net/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__ventru__ventru_find",
      "mcp__ventru__ventru_inbox",
      "mcp__ventru__ventru_usage",
      "mcp__ventru__ventru_pricing",
      "mcp__ventru__ventru_resolve_agent",
      "mcp__ventru__ventru_trust_profile"
    ],
    "ask": [
      "mcp__ventru__ventru_contact",
      "mcp__ventru__ventru_register",
      "mcp__ventru__ventru_search_providers",
      "mcp__ventru__ventru_build_action_capsule",
      "mcp__ventru__ventru_create_route",
      "mcp__ventru__ventru_report_outcome",
      "mcp__ventru__ventru_probe_site",
      "mcp__ventru__ventru_unmet_demand"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as ventru. Review it before you use it.

Capability tags behind 5 rules

mcp__ventru__ventru_contact outbound
mcp__ventru__ventru_inbox private-data, untrusted-input
mcp__ventru__ventru_probe_site untrusted-input, outbound
mcp__ventru__ventru_resolve_agent private-data, untrusted-input
mcp__ventru__ventru_trust_profile untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/net.ventru/ventru/verify?hash=cc819e8f7fac4c6fe6daab3486c943a104b895fa4a381a1c75ecdb375a2fb0e7" | jq -e '.changed == false'

Pinned hash cc819e8f7fac, from Oct 28, 2026, 03:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/net.ventru/ventru/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/net.ventru/ventru.svg)](https://anlyon.dev/servers/net.ventru/ventru)

Source: MCP Registry · repository. Synced Oct 28, 2026, 03:17 UTC.