WebArm24

online.webarm24/webarm24webarm24.onlinestreamable-httpv1.0.0Scanned 1 hour ago

AI automation platform (n8n/Zapier alternative): build, schedule and run workflows from your agent.

61 tools: 6 can delete or cancel things, 1 do something that can't be undone, 37 change things and 17 only read.

Reads private data · 2
Reads text others write · 5
Can send data out · 3
No findings

Anlyon alternative

44 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

61 tools

Deletes or cancels 6Removes, cancels or revokes something.Claude Code: deny

browser_session_deleteDelete a saved login.No findings
Why it is in this group
- The name "browser_session_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it
Delete a saved login.
pipeline_deleteDelete a pipeline and its schedule (restorable later via pipeline_deleted_restore).No findings
Why it is in this group
- The name "pipeline_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it
Delete a pipeline and its schedule (restorable later via pipeline_deleted_restore).
pipeline_group_deleteDelete a group.No findings
Why it is in this group
- The name "pipeline_group_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it
Delete a group. Its pipelines are kept, just ungrouped.
schedule_deleteDelete an automation.No findings
Why it is in this group
- The name "schedule_delete" says "schedule": a word for a change.
- The description's first verb is "delete": a word for removing or ending something.
Description, as the server wrote it
Delete an automation.
storage_deleteDelete a store.No findings
Why it is in this group
- The name "storage_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it
Delete a store.
storage_file_deleteDelete a stored file.No findings
Why it is in this group
- The name "storage_file_delete" says "delete": a word for removing or ending something.
Description, as the server wrote it
Delete a stored file.

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

send_emailSend an email through the server SMTP (subject to server allowlists/limits).Can send data outNo findings
Why it is in this group
- The name "send_email" says "send": a word for sending, and what is sent cannot be taken back.
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe name "send_email" says "send": it sends or publishes something to other people.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it
Send an email through the server SMTP (subject to server allowlists/limits). Costs 1 mcp_call.

Changes things 37Creates or changes something that can be changed back.Claude Code: ask

account_meYour account incl.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Your account incl. credit balance.
agent_job_submitRun the browsing agent on a task (async; costs agent_job credits).Can send data outNo findings
Why it is in this group
- The name "agent_job_submit" says "submit": a word for a change.
What it can reach
- outboundThe input takes a URL (input.target_url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Run the browsing agent on a task (async; costs agent_job credits). Jobs are in-memory (lost on restart).
browser_clickClick an element by visible text, label or CSS selector.No findings
Why it is in this group
- The name "browser_click" says "click": a word for a change.
Description, as the server wrote it
Click an element by visible text, label or CSS selector. Costs 1 mcp_call.
browser_click_atClick at pixel coordinates of the (resized) viewport.No findings
Why it is in this group
- The name "browser_click_at" says "click": a word for a change.
Description, as the server wrote it
Click at pixel coordinates of the (resized) viewport. Costs 1 mcp_call.
browser_close_sessionClose your browser session (free).No findings
Why it is in this group
- The name "browser_close_session" says "close": a word for a change.
Description, as the server wrote it
Close your browser session (free). Idle sessions are closed after 30 minutes.
browser_extract_textExtract text from a described area of the page.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Extract text from a described area of the page. Costs 1 mcp_call.
browser_fillType a value into an input identified by label/placeholder/selector.No findings
Why it is in this group
- The name "browser_fill" says "fill": a word for a change.
Description, as the server wrote it
Type a value into an input identified by label/placeholder/selector. Costs 1 mcp_call.
browser_navigateOpen a URL in your private server-side browser session.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "browser_navigate" says "navigate": a word for a change.
What it can reach
- untrusted-inputThe name "browser_navigate" says "navigate" and "browser": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "open" and "url": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Open a URL in your private server-side browser session. `browser_session_label` loads a saved login (see browser_session_put) when the session is first created. Costs 1 mcp_call.
browser_scrollScroll 'up' or 'down'.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Scroll 'up' or 'down'. Costs 1 mcp_call.
browser_session_putSave a Playwright storageState (stored encrypted).No findings
Why it is in this group
- The name "browser_session_put" says "put": a word for a change.
Description, as the server wrote it
Save a Playwright storageState (stored encrypted).
credit_packsPurchasable credit packs.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Purchasable credit packs.
credits_checkout_urlCreate a Stripe Checkout URL for a pack; a human must open it to pay.No findings
Why it is in this group
- The name "credits_checkout_url" says "checkout": a word for a change.
Description, as the server wrote it
Create a Stripe Checkout URL for a pack; a human must open it to pay.
credits_historyBalance and last 100 ledger entries.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Balance and last 100 ledger entries.
pipeline_builder_chatAsk the built-in AI pipeline builder (costs builder_call credits).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Ask the built-in AI pipeline builder (costs builder_call credits). `messages`=[{role,content}], `pipeline`=current draft. Returns {text, pipeline}; the draft is NOT saved — pass it to pipeline_create/update.
pipeline_createCreate a pipeline.No findings
Why it is in this group
- The name "pipeline_create" says "create": a word for a change.
Description, as the server wrote it
Create a pipeline. See resource webarm://docs/pipeline-steps for the step schema. `extra` may carry webhook_url, webhook_secret, webhook_structured_data_only, inbound_trigger_only.
pipeline_debug_chatAsk the AI to analyse a finished run (costs builder_call credits).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Ask the AI to analyse a finished run (costs builder_call credits).
pipeline_deleted_restoreRe-create a deleted pipeline from its last snapshot (same id, starts disabled, new inbound trigger URL).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Re-create a deleted pipeline from its last snapshot (same id, starts disabled, new inbound trigger URL).
pipeline_group_assignMove a pipeline into a group; omit group_id (or pass null) to remove it from its group.No findings
Why it is in this group
- The name "pipeline_group_assign" says "assign": a word for a change.
Description, as the server wrote it
Move a pipeline into a group; omit group_id (or pass null) to remove it from its group.
pipeline_group_createCreate a sidebar group, optionally moving the given pipelines into it.No findings
Why it is in this group
- The name "pipeline_group_create" says "create": a word for a change.
Description, as the server wrote it
Create a sidebar group, optionally moving the given pipelines into it.
pipeline_group_updateRename a group and/or set whether it is collapsed in the sidebar.No findings
Why it is in this group
- The name "pipeline_group_update" says "update": a word for a change.
Description, as the server wrote it
Rename a group and/or set whether it is collapsed in the sidebar.
pipeline_history_restoreRestore a pipeline to the state of a revision (recorded as a new `restore` revision).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Restore a pipeline to the state of a revision (recorded as a new `restore` revision). Returns the pipeline.
pipeline_runStart a run (async; returns run_id).No findings
Why it is in this group
- The name "pipeline_run" says "run": a word for a change.
Description, as the server wrote it
Start a run (async; returns run_id). Costs the usual pipeline_run credits. Follow with pipeline_run_wait or pipeline_run_get.
pipeline_run_cancelRequest cancellation of an active run (takes effect between steps).No findings
Why it is in this group
- The name "pipeline_run_cancel" says "run": a word for a change.
Description, as the server wrote it
Request cancellation of an active run (takes effect between steps).
pipeline_run_getRun status (running|cancelling|ok|error|cancelled), current_step_index, per-step results, answer_preview.No findings
Why it is in this group
- The name "pipeline_run_get" says "run": a word for a change.
Description, as the server wrote it
Run status (running|cancelling|ok|error|cancelled), current_step_index, per-step results, answer_preview.
pipeline_run_waitBlock until the run finishes or timeout_sec (max 600) elapses; returns the latest run state (check `status` — still 'running' means timed out).No findings
Why it is in this group
- The name "pipeline_run_wait" says "run": a word for a change.
Description, as the server wrote it
Block until the run finishes or timeout_sec (max 600) elapses; returns the latest run state (check `status` — still 'running' means timed out).
pipeline_runs_listRecent runs of a pipeline (max 50).No findings
Why it is in this group
- The name "pipeline_runs_list" says "run": a word for a change.
Description, as the server wrote it
Recent runs of a pipeline (max 50).
pipeline_test_stepRun a single step in isolation.No findings
Why it is in this group
- The description's first verb is "run": a word for a change.
Description, as the server wrote it
Run a single step in isolation. `previous_outputs[i]` feeds {{step_{i+1}_output}}.
pipeline_updatePatch a pipeline.No findings
Why it is in this group
- The name "pipeline_update" says "update": a word for a change.
Description, as the server wrote it
Patch a pipeline. `fields` may contain any of: name, enabled, cron_expr, run_at (null clears), steps, task_variables, webhook_url, webhook_secret, clear_webhook_secret, webhook_structured_data_only, inbound_trigger_only, regenerate_trigger_token. `steps` replaces the whole step list.
schedule_createCreate an automation.No findings
Why it is in this group
- The name "schedule_create" says "schedule": a word for a change.
Description, as the server wrote it
Create an automation. `schedule` follows ScheduleCreate: mode (agent|replay), task_text, target_url, webhook_url, cron_expr, run_at, lang, output_json_schema, task_variables, ...
schedule_exportExport an automation as portable JSON.No findings
Why it is in this group
- The name "schedule_export" says "schedule": a word for a change.
Description, as the server wrote it
Export an automation as portable JSON.
schedule_getAutomation details plus recent runs.No findings
Why it is in this group
- The name "schedule_get" says "schedule": a word for a change.
Description, as the server wrote it
Automation details plus recent runs.
schedule_importImport an exported automation.No findings
Why it is in this group
- The name "schedule_import" says "schedule": a word for a change.
Description, as the server wrote it
Import an exported automation.
schedule_listList automations (single-task schedules).No findings
Why it is in this group
- The name "schedule_list" says "schedule": a word for a change.
Description, as the server wrote it
List automations (single-task schedules).
schedule_runRun an automation now (synchronous; costs schedule_run credits).No findings
Why it is in this group
- The name "schedule_run" says "schedule": a word for a change.
Description, as the server wrote it
Run an automation now (synchronous; costs schedule_run credits).
schedule_updatePatch an automation (ScheduleUpdate fields).No findings
Why it is in this group
- The name "schedule_update" says "schedule": a word for a change.
Description, as the server wrote it
Patch an automation (ScheduleUpdate fields).
storage_file_putUpload a file (base64 content).No findings
Why it is in this group
- The name "storage_file_put" says "put": a word for a change.
Description, as the server wrote it
Upload a file (base64 content). Size caps: USER_FILES_FILE_MAX_BYTES / per-user total.
storage_writeWrite a store (mode 'auto' keeps JSON, 'text' stores a string).No findings
Why it is in this group
- The name "storage_write" says "write": a word for a change.
Description, as the server wrote it
Write a store (mode 'auto' keeps JSON, 'text' stores a string).

Only reads 17Looks things up and changes nothing.Show 17 read-only tools

agent_job_getJob status/result (queued|running|completed|failed).No findings
Why it is in this group
- The name "agent_job_get" says "get": a word for reading.
Description, as the server wrote it
Job status/result (queued|running|completed|failed).
agent_job_listRecent agent jobs.No findings
Why it is in this group
- The name "agent_job_list" says "list": a word for reading.
Description, as the server wrote it
Recent agent jobs.
analyze_jsonInspect large JSON: mode summary|schema|value|preview, optional dotted path.No findings
Why it is in this group
- The name "analyze_json" says "analyze": a word for reading.
Description, as the server wrote it
Inspect large JSON: mode summary|schema|value|preview, optional dotted path. Costs 1 mcp_call.
browser_get_htmlReturn the current page HTML.Reads text others writeNo findings
Why it is in this group
- The name "browser_get_html" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "browser_get_html" says "get" and "browser": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "return" and "html": it reads web pages, which anyone can write.
Description, as the server wrote it
Return the current page HTML. Costs 1 mcp_call.
browser_screenshotScreenshot of the current page (JPEG).Reads text others writeNo findings
Why it is in this group
- The name "browser_screenshot" says "screenshot": a word for reading.
What it can reach
- untrusted-inputThe name "browser_screenshot" says "screenshot" and "browser": it reads web pages, which anyone can write.
Description, as the server wrote it
Screenshot of the current page (JPEG). Costs 1 mcp_call.
browser_session_getGet a saved storageState.Reads text others writeNo findings
Why it is in this group
- The name "browser_session_get" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "browser_session_get" says "get" and "browser": it reads web pages, which anyone can write.
Description, as the server wrote it
Get a saved storageState.
browser_session_listList saved logins (Playwright storageState slots).Reads text others writeNo findings
Why it is in this group
- The name "browser_session_list" says "list": a word for reading.
What it can reach
- untrusted-inputThe name "browser_session_list" says "list" and "browser": it reads web pages, which anyone can write.
Description, as the server wrote it
List saved logins (Playwright storageState slots).
pipeline_deleted_listDeleted pipelines that can be restored: [{pipeline_id, name, steps_count, deleted_at, source}].No findings
Why it is in this group
- The name "pipeline_deleted_list" says "list": a word for reading.
Description, as the server wrote it
Deleted pipelines that can be restored: [{pipeline_id, name, steps_count, deleted_at, source}].
pipeline_getGet one pipeline incl.No findings
Why it is in this group
- The name "pipeline_get" says "get": a word for reading.
Description, as the server wrote it
Get one pipeline incl. steps, schedule and inbound trigger URL.
pipeline_group_listList your sidebar pipeline groups, each with its pipeline_ids.No findings
Why it is in this group
- The name "pipeline_group_list" says "list": a word for reading.
Description, as the server wrote it
List your sidebar pipeline groups, each with its pipeline_ids. Ungrouped pipelines are in no group.
pipeline_history_getOne revision: {revision, snapshot (full pipeline state after that change), diff (vs previous revision)}.No findings
Why it is in this group
- The name "pipeline_history_get" says "get": a word for reading.
Description, as the server wrote it
One revision: {revision, snapshot (full pipeline state after that change), diff (vs previous revision)}.
pipeline_history_listChange history of a pipeline, newest first: [{id, seq, action (create|update|delete|restore), source (manual|assistant|mcp|api), source_detail, changed_fields, created_at, updated_…No findings
Why it is in this group
- The name "pipeline_history_list" says "list": a word for reading.
Description, as the server wrote it
Change history of a pipeline, newest first: [{id, seq, action (create|update|delete|restore), source (manual|assistant|mcp|api), source_detail, changed_fields, created_at, updated_at}]. Consecutive manual UI edits within a few minutes are merged into one revision. Page with `before_seq`.
pipeline_listList your pipelines.No findings
Why it is in this group
- The name "pipeline_list" says "list": a word for reading.
Description, as the server wrote it
List your pipelines.
storage_file_getDownload a file as base64 (limited to 8 MiB of base64).Reads private dataNo findings
Why it is in this group
- The name "storage_file_get" says "get": a word for reading.
What it can reach
- private-dataThe name "storage_file_get" says "get" and "file": it reads files.
- private-dataThe description's first sentence says "file": it reads files.
Description, as the server wrote it
Download a file as base64 (limited to 8 MiB of base64).
storage_files_listList stored files.Reads private dataNo findings
Why it is in this group
- The name "storage_files_list" says "list": a word for reading.
What it can reach
- private-dataThe name "storage_files_list" says "list" and "file": it reads files.
- private-dataThe description's first sentence says "list" and "file": it reads files.
Description, as the server wrote it
List stored files.
storage_listList your JSON/text stores.No findings
Why it is in this group
- The name "storage_list" says "list": a word for reading.
Description, as the server wrote it
List your JSON/text stores.
storage_readRead a store.No findings
Why it is in this group
- The name "storage_read" says "read": a word for reading.
Description, as the server wrote it
Read a store.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

30 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 private-data tools breaks every one.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; storage_file_get
storage_files_list
Reads text others write5: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; browser_get_html
browser_navigate
browser_screenshot
browser_session_get
browser_session_list
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; agent_job_submit
browser_navigate
send_email

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__webarm24__storage_file_get",
      "mcp__webarm24__storage_files_list"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http webarm24 https://webarm24.online/mcp --header 'Authorization: <your-authorization>'

claude mcp add --transport http webarm24 https://webarm24.online/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__webarm24__browser_screenshot",
      "mcp__webarm24__browser_get_html",
      "mcp__webarm24__analyze_json",
      "mcp__webarm24__pipeline_list",
      "mcp__webarm24__pipeline_get",
      "mcp__webarm24__pipeline_history_list",
      "mcp__webarm24__pipeline_history_get",
      "mcp__webarm24__pipeline_deleted_list",
      "mcp__webarm24__pipeline_group_list",
      "mcp__webarm24__agent_job_get",
      "mcp__webarm24__agent_job_list",
      "mcp__webarm24__storage_list",
      "mcp__webarm24__storage_read",
      "mcp__webarm24__storage_files_list",
      "mcp__webarm24__storage_file_get",
      "mcp__webarm24__browser_session_list",
      "mcp__webarm24__browser_session_get"
    ],
    "ask": [
      "mcp__webarm24__browser_navigate",
      "mcp__webarm24__browser_click",
      "mcp__webarm24__browser_click_at",
      "mcp__webarm24__browser_fill",
      "mcp__webarm24__browser_extract_text",
      "mcp__webarm24__browser_scroll",
      "mcp__webarm24__browser_close_session",
      "mcp__webarm24__send_email",
      "mcp__webarm24__pipeline_create",
      "mcp__webarm24__pipeline_update",
      "mcp__webarm24__pipeline_history_restore",
      "mcp__webarm24__pipeline_deleted_restore",
      "mcp__webarm24__pipeline_group_create",
      "mcp__webarm24__pipeline_group_update",
      "mcp__webarm24__pipeline_group_assign",
      "mcp__webarm24__pipeline_test_step",
      "mcp__webarm24__pipeline_run",
      "mcp__webarm24__pipeline_run_get",
      "mcp__webarm24__pipeline_run_wait",
      "mcp__webarm24__pipeline_runs_list",
      "mcp__webarm24__pipeline_run_cancel",
      "mcp__webarm24__pipeline_builder_chat",
      "mcp__webarm24__pipeline_debug_chat",
      "mcp__webarm24__agent_job_submit",
      "mcp__webarm24__schedule_list",
      "mcp__webarm24__schedule_get",
      "mcp__webarm24__schedule_create",
      "mcp__webarm24__schedule_update",
      "mcp__webarm24__schedule_run",
      "mcp__webarm24__schedule_export",
      "mcp__webarm24__schedule_import",
      "mcp__webarm24__storage_write",
      "mcp__webarm24__storage_file_put",
      "mcp__webarm24__browser_session_put",
      "mcp__webarm24__account_me",
      "mcp__webarm24__credits_history",
      "mcp__webarm24__credit_packs",
      "mcp__webarm24__credits_checkout_url"
    ],
    "deny": [
      "mcp__webarm24__pipeline_delete",
      "mcp__webarm24__pipeline_group_delete",
      "mcp__webarm24__schedule_delete",
      "mcp__webarm24__storage_delete",
      "mcp__webarm24__storage_file_delete",
      "mcp__webarm24__browser_session_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as webarm24. Review it before you use it.

Capability tags behind 9 rules

mcp__webarm24__browser_navigate untrusted-input, outbound
mcp__webarm24__browser_screenshot untrusted-input
mcp__webarm24__browser_get_html untrusted-input
mcp__webarm24__send_email outbound
mcp__webarm24__agent_job_submit outbound
mcp__webarm24__storage_files_list private-data
mcp__webarm24__storage_file_get private-data
mcp__webarm24__browser_session_list untrusted-input
mcp__webarm24__browser_session_get untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/online.webarm24/webarm24/verify?hash=f9d9d8f2e22f2fce2ae821224966dc19f57a86969947c5fb53f1b4575c602ebb" | jq -e '.changed == false'

Pinned hash f9d9d8f2e22f, from Nov 2, 2026, 18:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/online.webarm24/webarm24/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/online.webarm24/webarm24.svg)](https://anlyon.dev/servers/online.webarm24/webarm24)

Source: MCP Registry. Synced Nov 2, 2026, 18:18 UTC.