grokbot.tools

by grokbot.tools · remote · no sign-in to list tools · v1.0.0 · published by tools.grokbot

Search Grok Bot connectors, install methods, test status, and the connector wishlist.

Changes · 1

Compare Registry entry

6 tools: 1 change things and 5 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things1Claude Code: ask: see these tools
Only reads5Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http connectors https://mcp.grokbot.tools/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnhow_to_add_connector
The server marks "how_to_add_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "how_to_add_connector" says "add": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

how_to_add_connectorExplains how an app gets into Grok Bot: built-in plugins (Connect apps in the sidebar), custom MCP servers (you ask the Bot in chat to add a URL; must be public HTTPS using streama…1 finding
Why it is in this group
- The name "how_to_add_connector" says "add": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "how_to_add_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "how_to_add_connector" says "add": a word for a change.
  What this check looks for
Description, as the server wrote it
Explains how an app gets into Grok Bot: built-in plugins (Connect apps in the sidebar), custom MCP servers (you ask the Bot in chat to add a URL; must be public HTTPS using streamable HTTP or SSE), and the browser-only route when neither exists. Includes this server's own URL as a worked example. Takes no input and reads nothing from the database.
Annotations the server declares
- title: How to add a connector to Grok Bot
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 5Looks things up and changes nothing.Claude Code: allow

get_connectorGet the full public record for one published connector by its slug (the last part of https://grokbot.tools/connectors/{slug}): summary, install method with step-by-step instruction…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_connector" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "doc": it reads documents.
- untrusted-inputThe description's first sentence says "get" and "http": it reads web pages, which anyone can write.
Description, as the server wrote it
Get the full public record for one published connector by its slug (the last part of https://grokbot.tools/connectors/{slug}): summary, install method with step-by-step instructions and sources, MCP URL (null for built-in plugins), auth type, docs link, Grok Bot test status with the last test date, notes, related wishlist requests, and the page URL. Status is never 'Verified' unless it was verified inside Grok Bot with a dated test. Read-only.
Annotations the server declares
- title: Get one Grok Bot connector
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_requestGet one wishlist request by slug (the last part of https://grokbot.tools/requests/{slug}): status, on-site votes, the labeled seed signal, description, public sources (links to the…Reads text others writeNo findings
Why it is in this group
- The name "get_request" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "get" and "http": it reads web pages, which anyone can write.
Description, as the server wrote it
Get one wishlist request by slug (the last part of https://grokbot.tools/requests/{slug}): status, on-site votes, the labeled seed signal, description, public sources (links to the posts it came from), the linked connector if one exists, the builder if it has been claimed, and a matching setup guide when there is one. Slugs of requests that were merged resolve to the surviving request. Read-only.
Annotations the server declares
- title: Get one wishlist request
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_connectorsPage through every published connector in the grokbot.tools directory, alphabetically, with the same optional filters as search_connectors.Reads private dataNo findings
Why it is in this group
- The name "list_connectors" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "directory": it reads files.
Description, as the server wrote it
Page through every published connector in the grokbot.tools directory, alphabetically, with the same optional filters as search_connectors. Returns compact summaries plus the total, the categories in use (first page), and a next_cursor to pass back for the next page. Use this when you want the whole directory; use search_connectors when you know what you are looking for. Read-only.
Annotations the server declares
- title: List Grok Bot connectors
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_requestsList the grokbot.tools wishlist: apps people want connected to Grok Bot, sorted by on-site votes or by newest.No findings
Why it is in this group
- The name "list_requests" says "list": a word for reading.
Description, as the server wrote it
List the grokbot.tools wishlist: apps people want connected to Grok Bot, sorted by on-site votes or by newest. Each item has its status (requested, claimed, live), on-site vote count, the labeled seed signal ('X buzz (seed)', mentions elsewhere that are never counted as votes), a linked connector if one exists, and its page URL. Votes are only votes made on grokbot.tools and start at 0. Read-only.
Annotations the server declares
- title: List the connector wishlist
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_connectorsSearch the grokbot.tools directory of MCP connectors and plugins for Grok Bot by name, service or category, with optional filters (Grok Bot test status, install method, auth type).Reads private dataNo findings
Why it is in this group
- The name "search_connectors" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "directory": it reads files.
Description, as the server wrote it
Search the grokbot.tools directory of MCP connectors and plugins for Grok Bot by name, service or category, with optional filters (Grok Bot test status, install method, auth type). Returns compact summaries with the install method, auth type, honest test-status label and the grokbot.tools page URL; use get_connector for install steps and the MCP URL. Only published directory entries are returned. Read-only; independent fan project, not affiliated with xAI.
Annotations the server declares
- title: Search Grok Bot connectors
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data3: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_connector
list_connectors
search_connectors
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_connector
get_request
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 15:14 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 1
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: none
Authorization servers: none
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

WarnThe whole server
The endpoint served tools/list without credentials, and the list has 1 tool that changes things (1 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://mcp.grokbot.tools/mcp: tools/list returned 6 tools to an anonymous client, including how_to_add_connector (write)
What this check looks for

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http connectors https://mcp.grokbot.tools/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__connectors__search_connectors",
      "mcp__connectors__get_connector",
      "mcp__connectors__list_connectors",
      "mcp__connectors__list_requests",
      "mcp__connectors__get_request"
    ],
    "ask": [
      "mcp__connectors__how_to_add_connector"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as connectors. Review it before you use it.

Capability tags behind 4 rules

mcp__connectors__search_connectors private-data
mcp__connectors__get_connector private-data, untrusted-input
mcp__connectors__list_connectors private-data
mcp__connectors__get_request untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/tools.grokbot/connectors/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

1 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:55 UTC.

For agents: Markdown · JSON · report this listing