Skip to content

Banquish

space.banquish/banquishbanquish.spacestreamable-httpv0.2.0Scanned

Answer with the live web: compose live parts of real pages into a Workspace in the Banquish Mac app.

19 tools: 5 can delete or cancel things, 8 change things and 6 only read.

Tools: 5 delete, 0 irreversible, 8 write, 6 read.
  • Reads private data · 0
  • Reads text others write · 8
  • Can send data out · 1
  • 3 findings

Anlyon alternative

13 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

19 tools

Deletes or cancels 5Claude Code: deny
  • remove_noteRemove a Note from its Workspace.No findings

    Why it is in this group

    • The name "remove_note" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a Note from its Workspace. The user can undo it with the rest of your Working stretch. Returns the Fit report: at the user's window, which Tiles are scaled below their Panel's minimum width, scroll inside, fell back to crop, are broken or ambiguous, or leave their Tile's width unused, and any gaps between Tiles; and, not as an issue, which Panels are shorter than the h of their Tile, so show centred in it. A Tile whose page hasn't laid it out at its width yet (one not on screen, say) is settling: a later report says how it fits. While a settling Tile's minimum width isn't known, whether the Workspace shows as one column isn't either: oneColumn is left out, and the summary says so.

    Annotations the server declares

    • title: Remove a Note
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • remove_panelRemove a Panel from its Workspace (a hidden Tile can't be removed).No findings

    Why it is in this group

    • The name "remove_panel" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a Panel from its Workspace (a hidden Tile can't be removed). The user can undo it with the rest of your Working stretch. Returns the Fit report: at the user's window, which Tiles are scaled below their Panel's minimum width, scroll inside, fell back to crop, are broken or ambiguous, or leave their Tile's width unused, and any gaps between Tiles; and, not as an issue, which Panels are shorter than the h of their Tile, so show centred in it. A Tile whose page hasn't laid it out at its width yet (one not on screen, say) is settling: a later report says how it fits. While a settling Tile's minimum width isn't known, whether the Workspace shows as one column isn't either: oneColumn is left out, and the summary says so.

    Annotations the server declares

    • title: Remove a Panel
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • rename_workspaceRename a Workspace, plainly.No findings

    Why it is in this group

    • The name "rename_workspace" says "rename": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Rename a Workspace, plainly. The user can undo it with the rest of your Working stretch.

    Annotations the server declares

    • title: Rename a Workspace
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • update_noteRewrite a Note's text, in the same formatted text as add_note.No findings

    Why it is in this group

    • The name "update_note" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Rewrite a Note's text, in the same formatted text as add_note. It keeps its id and placement; place it with arrange. The user can undo it with the rest of your Working stretch. Returns the Fit report: at the user's window, which Tiles are scaled below their Panel's minimum width, scroll inside, fell back to crop, are broken or ambiguous, or leave their Tile's width unused, and any gaps between Tiles; and, not as an issue, which Panels are shorter than the h of their Tile, so show centred in it. A Tile whose page hasn't laid it out at its width yet (one not on screen, say) is settling: a later report says how it fits. While a settling Tile's minimum width isn't known, whether the Workspace shows as one column isn't either: oneColumn is left out, and the summary says so.

    Annotations the server declares

    • title: Update a Note
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • update_panelChange a Panel: re-propose its content, change what it leaves out, or switch it between Item and Spot mode, in any combination.Reads text others writeNo findings

    Why it is in this group

    • The name "update_panel" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Change a Panel: re-propose its content, change what it leaves out, or switch it between Item and Spot mode, in any combination. Re-proposing is how you resolve an ambiguous or broken Panel: resolve those you meet on a Workspace you're working on as part of your task, and any the user points you at. For an ambiguous Panel, give candidates from the ids read_workspace offers for it. Otherwise open its Source page (or another) with open_page and give that page with candidate ids from it. The page is used as add_panel uses it: the first Panel from it takes it over as its own, and it stays open to you for more Panels; from a page a Panel has taken, the Panel gets a fresh copy where Banquish replays your reveals and finds the parts again (refused if they aren't found, and the Panel gets its old content back). Several ids make a Composite Panel. exclude takes ids of candidates inside the chosen parts that the Panel leaves out. Given without candidates, exclude changes what the Panel leaves out of its parts, with ids from the page you made it from while that page is still open to you; [] brings everything back. mode is "item" (follow this specific thing) or "spot" (whatever occupies this place): from then on the Panel finds its content that way: at once, and again whenever its page loads. It answers within about 45 s: a change whose page is still loading then gives the Panel with "loading"; a later Fit report or read_workspace shows it settled. The Panel keeps its id and placement; place it with arrange.

    Annotations the server declares

    • title: Update a Panel
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Changes things 8Claude Code: ask
  • add_noteAdd a Note to a Workspace: a few words of your own beside its Panels.No findings

    Why it is in this group

    • The name "add_note" says "add": a word for a change.
    Description, as the server wrote it
    Add a Note to a Workspace: a few words of your own beside its Panels. Formatted text only, shown in Banquish's own style: "# Heading" (or "## Smaller heading"), paragraphs, "- " or "1. " list items, and [links](https://…); anything else, HTML included, shows as the text it is. No bold or italic: write plain words (** is dropped). At most 2000 characters. Placement is where its Tile goes on the grid, as in arrange; without one it goes full width below the last Tile. With h, a Note's Tile is that tall, even taller than its text. The user can undo it with the rest of your Working stretch. Returns the Fit report: at the user's window, which Tiles are scaled below their Panel's minimum width, scroll inside, fell back to crop, are broken or ambiguous, or leave their Tile's width unused, and any gaps between Tiles; and, not as an issue, which Panels are shorter than the h of their Tile, so show centred in it. A Tile whose page hasn't laid it out at its width yet (one not on screen, say) is settling: a later report says how it fits. While a settling Tile's minimum width isn't known, whether the Workspace shows as one column isn't either: oneColumn is left out, and the summary says so.

    Annotations the server declares

    • title: Add a Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • add_panelPropose a Panel from candidate ids of an open page.Reads text others write1 finding

    Why it is in this group

    • The name "add_panel" says "add": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description is 2,293 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...shows as one column isn't either: oneColumn is left out, and the summary says so."

      What this check looks for
    Description, as the server wrote it
    Propose a Panel from candidate ids of an open page. Banquish confirms it on the page, which the first Panel from it takes over as its own. The page stays open to you for more Panels: its ids stay valid for expand, find, add_panel and update_panel, and each further Panel gets a fresh copy of the page, where Banquish replays your reveals and finds the parts again, which takes a few seconds (refused if they aren't found). It answers within about 45 s: a Panel whose page is still loading then gives its id with "loading"; a later Fit report or read_workspace shows it settled. reveal and screenshot need the page opened again once a Panel has taken it. Each id is one part: take the smallest part that answers. Several ids make one Composite Panel, for parts of the page that act on each other (a player and its transcript, a chart and its time picker): they show together in one tile and stay live together. exclude takes ids of candidates inside the chosen parts that the Panel leaves out (the site's buttons and menus, an ad, a reply box, the rest of a container whose text you want); any other id is refused with the reason. Mode is "item" (follow this specific thing, the default) or "spot" (whatever occupies this place). Placement is where its Tile goes on the Workspace's grid, as in arrange; without one it goes full width below the last Tile. A width below a Panel's minimum width is taken, and its Panel shows scaled down to as little as 85% of that minimum on the user's screen; below 85% of it, the whole Workspace shows as one column. With h, a Panel's Tile is that tall: a taller Panel scrolls inside it, and a shorter one shows centred in it, which the Fit report mentions. Returns the Fit report: at the user's window, which Tiles are scaled below their Panel's minimum width, scroll inside, fell back to crop, are broken or ambiguous, or leave their Tile's width unused, and any gaps between Tiles; and, not as an issue, which Panels are shorter than the h of their Tile, so show centred in it. A Tile whose page hasn't laid it out at its width yet (one not on screen, say) is settling: a later report says how it fits. While a settling Tile's minimum width isn't known, whether the Workspace shows as one column isn't either: oneColumn is left out, and the summary says so.

    Annotations the server declares

    • title: Add a Panel
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • arrangePlace any number of Tiles (Panels and Notes, by id) on a Workspace's grid in one call: x and w in 12 columns, y and h in rows of 8 px at the user's laptop window (1512 px wide; gap…1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description is 2,200 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...shows as one column isn't either: oneColumn is left out, and the summary says so."

      What this check looks for
    Description, as the server wrote it
    Place any number of Tiles (Panels and Notes, by id) on a Workspace's grid in one call: x and w in 12 columns, y and h in rows of 8 px at the user's laptop window (1512 px wide; gaps 16 px, margins 24 px). No h means the Tile is as tall as its Panel or Note, at most about two-thirds of the user's window height (a taller Panel scrolls inside it). With h, a Panel's Tile is that tall: a taller Panel scrolls inside it, and a shorter one shows centred in it, which the Fit report mentions. With h, a Note's Tile is that tall, even taller than its text. To give a row one height, give its Tiles one h. Only the listed Tiles move. Tiles float up: y orders them, and each sits right under whatever is above it in its columns; a Tile placed on others pushes them, and those under them, down, hidden Tiles too. y is a row in the placements as the last call returned them (this one or read_workspace), so reuse those values, not ones you sent earlier: a Tile given the y of another lands on it. add_panel and add_note return only their own Tile's placement, and one placed on others pushes them down, so call read_workspace before reusing the other Tiles' y. Tiles given the same y in the same columns stack in the order you list them, the first on top. x + w over 12, or a negative or zero value, is refused with the reason, and then nothing moves; so is a Tile you can't see. A width below a Panel's minimum width is taken, and its Panel shows scaled down to as little as 85% of that minimum on the user's screen; below 85% of it, the whole Workspace shows as one column. Returns every Tile's placement. Returns the Fit report: at the user's window, which Tiles are scaled below their Panel's minimum width, scroll inside, fell back to crop, are broken or ambiguous, or leave their Tile's width unused, and any gaps between Tiles; and, not as an issue, which Panels are shorter than the h of their Tile, so show centred in it. A Tile whose page hasn't laid it out at its width yet (one not on screen, say) is settling: a later report says how it fits. While a settling Tile's minimum width isn't known, whether the Workspace shows as one column isn't either: oneColumn is left out, and the summary says so.

    Annotations the server declares

    • title: Arrange Tiles
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_workspaceCreate a Workspace, named plainly after the task.No findings

    Why it is in this group

    • The name "create_workspace" says "create": a word for a change.
    Description, as the server wrote it
    Create a Workspace, named plainly after the task. By default use one per answer. The prompt is the user's request, in their words (at most 1,000 characters). Banquish shows it only on a Share of this Workspace.

    Annotations the server declares

    • title: Create a Workspace
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • finish_workSignal that you've finished working: the working mark clears, Staging pages no Panel came from are discarded, your changes become one step the user can undo, and the user is told y…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Signal that you've finished working: the working mark clears, Staging pages no Panel came from are discarded, your changes become one step the user can undo, and the user is told your answer is ready on the Workspaces you changed. No Fit report is sent after it. It returns each Workspace you changed: its name, its link, and what it holds (each Panel's parts and site, each Note's first line). Tell the user what you built from this, with its link. Never quote values.

    Annotations the server declares

    • title: Finish work
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • open_pageOpen a URL as a hidden Staging page with the user's profile: a page you may take Panels from, or one your own tools can't read properly.Reads text others writeCan send data out1 finding

    Why it is in this group

    • The name "open_page" says "open": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "open" and "url": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Findings

    • Warn

      The server marks "open_page" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "open_page" says "open": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Open a URL as a hidden Staging page with the user's profile: a page you may take Panels from, or one your own tools can't read properly. Find which pages to open with your own search; Banquish has no search. It waits for the page to load and settle, and you get the outline of its Candidate tree: the meaningful parts of the page, largest sections opened first, in at most 40 lines. The result holds the page id and the lines, each one string per candidate: `[id] ^parent kinds tag#htmlId.classes[role=…][aria="label"] @x,y wxh | counts | h:"heading" | "text" | +k`. ^parent is the candidate it sits in (^- for none); kinds are list:N (N items), item, ctl (a control), scrolls:H, fixed, or range a-b of n (a slice of a long level); @x,y wxh is its box on the page in CSS px; counts are the images, media, buttons, inputs and links inside it, left out when none; h: is its heading, left out when the text starts with it, and "text" the start of its text; +k counts candidates inside it not shown. The result says if the page still shows a loading screen, and names the HTTP status when the page answered with an error (400 or above). It answers within about 45 s: a page still loading then gives its page id and "still loading; expand and find wait for it". Use expand and find to see more, as the page is then; ids stay valid while their candidates are on the page. Only your few most recently used pages keep running: one you leave behind (or unused for a few minutes) is unloaded to save memory and opened again when you next use it, keeping the ids of what's still in the same place. Pages on the user's Private sites are refused.

    Annotations the server declares

    • title: Open a page
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • revealReveal content hidden behind a control on an open page (a tab, an expand toggle, a disclosure, a "more" button): Banquish clicks the candidate for you (or the one button or link in…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Reveal content hidden behind a control on an open page (a tab, an expand toggle, a disclosure, a "more" button): Banquish clicks the candidate for you (or the one button or link inside it, when it holds just one), stopping any request that could write, any navigation and any new window meanwhile, and checks that new content appeared. Returns the updated tree in lines like open_page's: the new candidates, then the outline. Ids you had stay valid; new content gets new ids. A Panel made from the page afterwards comes back in the revealed view after a reload. If the click tries to navigate or open a window, moves the page to another path, or shows nothing new, the reveal is refused with the reason: use content reachable by URL instead. Never on the user's Private sites. Reveals on different pages may run in parallel. After about 45 s it answers "still opening; call reveal again" while its page is still opening, or "still working; call reveal again" while its work goes on.

    Annotations the server declares

    • title: Reveal hidden content
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • workspace_imageA JPEG of a Workspace as the user's window shows it now (the part in view).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    A JPEG of a Workspace as the user's window shows it now (the part in view). With width (CSS pixels), a preview of the whole Workspace at that window width instead: the placement adapted to that width, each Tile's last frame rescaled, so it's approximate. A Workspace not on the user's screen is previewed at the user's window width. Tiles you can't see (Private sites') are plain boxes labelled "Private site".

    Annotations the server declares

    • title: Picture a Workspace
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
Only reads 6Show 6 read-only tools
  • expandShow a candidate's children on an open page as it is now, in at most 40 lines like open_page's, opening the largest first.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "show": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Show a candidate's children on an open page as it is now, in at most 40 lines like open_page's, opening the largest first. A candidate with more than 40 children is paged: pass pageNo for the next pages. Says how many candidates the page gained since you last looked (+N new), with new ids. If the page can't be read again, it is closed: open it again with open_page. After about 45 s it answers "still opening; call expand again" while its page is still opening, or "still working; call expand again" while its work goes on.

    Annotations the server declares

    • title: Expand a part
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • findFind the smallest candidates on an open page, as it is now, whose text, heading, label, id or classes contain every word, in at most 40 lines like open_page's.Reads text others writeNo findings

    Why it is in this group

    • The name "find" says "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Find the smallest candidates on an open page, as it is now, whose text, heading, label, id or classes contain every word, in at most 40 lines like open_page's. Says how many candidates the page gained since you last looked (+N new). If the page can't be read again, it is closed: open it again with open_page. After about 45 s it answers "still opening; call find again" while its page is still opening, or "still working; call find again" while its work goes on.

    Annotations the server declares

    • title: Find on a page
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • list_workspacesList the user's Workspaces, most recently viewed first: id, name, Panel count, when the user last viewed it, whether it is archived, and its link.No findings

    Why it is in this group

    • The name "list_workspaces" says "list": a word for reading.
    Description, as the server wrote it
    List the user's Workspaces, most recently viewed first: id, name, Panel count, when the user last viewed it, whether it is archived, and its link. With a query, only Workspaces whose name contains every word.

    Annotations the server declares

    • title: List Workspaces
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • read_panelRead a Panel's current identity and values, kept apart (identity: what it is, e.g.Reads text others writeNo findings

    Why it is in this group

    • The name "read_panel" says "read": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Read a Panel's current identity and values, kept apart (identity: what it is, e.g. heading, label, link; values: prices, counts, times), with its state and how fresh the read is. Banquish reloads an unloaded page if needed. To protect sites, values read under a minute ago are served as they are, and an unloaded page is reloaded at most every 5 minutes: reads in between get the last values, stale since they were read. A not-responding Panel's page isn't reloaded for a read: it waits for the user to reload it. A read still going after about 45 s gives the last values, stale, and "still reading; call again".

    Annotations the server declares

    • title: Read a Panel
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • read_workspaceRead a Workspace: every Tile in one list, in reading order (top to bottom, then left to right), and the user's current window size.No findings

    Why it is in this group

    • The name "read_workspace" says "read": a word for reading.
    Description, as the server wrote it
    Read a Workspace: every Tile in one list, in reading order (top to bottom, then left to right), and the user's current window size. Each Tile has its kind and placement on the grid: x and w in 12 columns, y and h in rows of 8 px at the user's laptop window (1512 px wide; gaps 16 px, margins 24 px), each y being where the Tile floats up to. No h means the Tile is as tall as its Panel or Note, at most about two-thirds of the user's window height (a taller Panel scrolls inside it). With h, a Panel's Tile is that tall: a taller Panel scrolls inside it, and a shorter one shows centred in it, which the Fit report mentions. With h, a Note's Tile is that tall, even taller than its text. A Panel has its id, Source page, mode, state (live while it shows its content; restoring, unloaded, broken, ambiguous, needs-peek or not-responding otherwise) and Fit status at the user's window, as the Fit report gives it. tier says how its content was last found: exact, healed (found by similarity after a reload), ambiguous (with the candidate ids on its running page that might be it) or not-found; moved means an item-mode Panel found its content somewhere else on the page; foundByPlace means it found its content by its place and size, as what it is no longer clearly matched. A Note has its id, text and when it was last written. A hidden Tile is a Panel from one of the user's Private sites: only its placement, which you can't move or remove. On a Panel or Note, userChanged means the user moved or resized it since you last placed Tiles on this Workspace (with arrange, or add_panel or add_note with a placement). A broken or ambiguous Panel you meet on a Workspace you're working on is yours to resolve with update_panel as part of your task.

    Annotations the server declares

    • title: Read a Workspace
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • screenshotAn image of one candidate of an open page, and nothing else, for content text can't describe (a canvas chart, an image).Reads text others writeNo findings

    Why it is in this group

    • The name "screenshot" says "screenshot": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    An image of one candidate of an open page, and nothing else, for content text can't describe (a canvas chart, an image). Use it sparingly: the Candidate tree usually says enough. After about 45 s it answers "still opening; call screenshot again" while its page is still opening, or "still working; call screenshot again" while its work goes on.

    Annotations the server declares

    • title: Screenshot a part
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write8
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn2 info
  • The server marks "open_page" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "open_page" says "open": a word for a change.

    What this check looks for
  • The description is 2,293 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...shows as one column isn't either: oneColumn is left out, and the summary says so."

    What this check looks for
  • The description is 2,200 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...shows as one column isn't either: oneColumn is left out, and the summary says so."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http banquish https://mcp.banquish.space/mcp
claude mcp add --transport http banquish https://mcp.banquish.space/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__banquish__list_workspaces",
      "mcp__banquish__expand",
      "mcp__banquish__find",
      "mcp__banquish__read_workspace",
      "mcp__banquish__read_panel",
      "mcp__banquish__screenshot"
    ],
    "ask": [
      "mcp__banquish__create_workspace",
      "mcp__banquish__open_page",
      "mcp__banquish__reveal",
      "mcp__banquish__add_panel",
      "mcp__banquish__arrange",
      "mcp__banquish__add_note",
      "mcp__banquish__workspace_image",
      "mcp__banquish__finish_work"
    ],
    "deny": [
      "mcp__banquish__rename_workspace",
      "mcp__banquish__update_note",
      "mcp__banquish__remove_note",
      "mcp__banquish__update_panel",
      "mcp__banquish__remove_panel"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as banquish. Review it before you use it.

Capability tags behind 8 rules
  • mcp__banquish__open_page untrusted-input, outbound
  • mcp__banquish__expand untrusted-input
  • mcp__banquish__find untrusted-input
  • mcp__banquish__reveal untrusted-input
  • mcp__banquish__add_panel untrusted-input
  • mcp__banquish__update_panel untrusted-input
  • mcp__banquish__read_panel untrusted-input
  • mcp__banquish__screenshot untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/space.banquish/banquish/verify?hash=31723ae361e6c4c6a860707ac153d1452fe8a717fade214f13972ddb1ecb755f" | jq -e '.changed == false'

Pinned hash 31723ae361e6, from Oct 31, 2026, 06:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/space.banquish/banquish/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for space.banquish/banquish
[![anlyon.dev](https://anlyon.dev/badge/space.banquish/banquish.svg)](https://anlyon.dev/servers/space.banquish/banquish)

Source: MCP Registry · repository. Synced Oct 31, 2026, 06:17 UTC.