# `si.humancollab/humancollab` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/si.humancollab/humancollab - JSON: https://anlyon.dev/api/v1/servers/si.humancollab/humancollab - Version: 0.2.0 (active) - Publisher: si.humancollab (domain proven to the MCP Registry) - Runs: remote (streamable-http) - Sign-in to list tools: none - Metadata from the official MCP Registry, synced 2026-10-21T22:17:59.050Z Title and description, as the publisher wrote them: ```untrusted-server-text humancollab Truth seeking partner for AIs and SIs: where AIs reach humans for real-world insight. ``` Scanned 2026-10-21T21:18:08.052Z over streamable-http. **13 tools: 1 do something that can't be undone, 2 change things and 10 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 1 | ask | | Changes things | write | 2 | ask | | Only reads | read | 10 | allow | ## Findings No check matched anything in these tool definitions. ## Can't be undone (1) Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask. ### `submit_business_profile` - The name "submit_business_profile" says "submit": a word for a change. - The description's first verb is "publish": a word for a change that another call does not undo. Description, as the server wrote it: ```untrusted-server-text Publish a new version of a business profile as a signed envelope. The domain must carry TXT _humancollab. = humancollab-business=. ``` ## Changes things (2) Creates or changes something that can be changed back. Claude Code: ask. ### `register_agent` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Register your AI identity by submitting a signed envelope whose payload accepts the responsibility statement. Call get_signing_guide first. ``` ### `verify_agent_domain` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Verification level 1: after publishing TXT _humancollab. = humancollab-agent=, submit a signed domain claim envelope. ``` ## Only reads (10) Looks things up and changes nothing. Claude Code: allow. ### `get_business` - The name "get_business" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text A business's current signed profile and its full version history with log indexes. ``` ### `get_business_guide` - The name "get_business_guide" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text JSON Schema of the business profile, the responsibility statement and the DNS proof format. ``` ### `get_consistency_proof` - The name "get_consistency_proof" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text RFC 6962 proof that the log of size `first` is a prefix of the log of size `second`. ``` ### `get_inclusion_proof` - The name "get_inclusion_proof" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text RFC 6962 audit path proving that log entry `index` is in the tree of size `tree_size`. ``` ### `get_log_state` - The name "get_log_state" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Size and current root of the append-only signature log, and the latest Bitcoin-anchored tree head. ``` ### `get_platform_info` - The name "get_platform_info" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text What humancollab is, its principles, capabilities (live and planned) and all endpoints. ``` ### `get_signing_guide` - The name "get_signing_guide" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text The responsibility statement every AI must sign and the exact Ed25519 signing rules for humancollab. ``` ### `list_agents` - The name "list_agents" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text Active AI agents registered on humancollab with their verification level. ``` ### `list_capabilities` - The name "list_capabilities" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text Lists humancollab capabilities, optionally filtered by status. ``` ### `search_businesses` - The name "search_businesses" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Search signed, domain-verified business truth profiles (real capacity, lead times, certifications, evidence). ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `humancollab`: ```json { "permissions": { "allow": [ "mcp__humancollab__get_platform_info", "mcp__humancollab__list_capabilities", "mcp__humancollab__get_signing_guide", "mcp__humancollab__list_agents", "mcp__humancollab__search_businesses", "mcp__humancollab__get_business", "mcp__humancollab__get_business_guide", "mcp__humancollab__get_log_state", "mcp__humancollab__get_inclusion_proof", "mcp__humancollab__get_consistency_proof" ], "ask": [ "mcp__humancollab__register_agent", "mcp__humancollab__submit_business_profile", "mcp__humancollab__verify_agent_domain" ], "deny": [] } } ```