Website Feedback Tool
by websitefeedback.tools · remote · no sign-in to list tools · v0.1.2 · published by tools.websitefeedback
Read visual design reviews from live web pages: comments, CSS selectors, styles, console errors.
5 tools: 1 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things1Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http website-feedback-tool https://dfozgzaflbudvthtlhvn.supabase.co/functions/v1/mcp --header 'Authorization: <your-authorization>'Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
5 tools
Changes things 1Claude Code: ask
open_review_linkOpen a design review from a share link somebody sent you (a /r/<id>?t=… URL) and get its feedback as Markdown.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "open_review_link" says "open": a word for a change.
What it can reach
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it Open a design review from a share link somebody sent you (a /r/<id>?t=… URL) and get its feedback as Markdown. Use this when the user pastes a review link rather than asking for their own reviews — the link carries its own access, so the review does not need to have been pushed from this machine. It stays out of list_reviews: to open it again later, use the link again.
Only reads 4Claude Code: allow, ask for 1 outbound
get_latest_reviewGet the most recent design review as Markdown feedback (comments, selectors, computed styles, console/network errors, screenshot URLs).Reads text others writeNo findings
Why it is in this group
- The name "get_latest_review" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "get_latest_review" says "get" and "review": it reads comments, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "review": it reads comments, which other people can write.
Description, as the server wrote it Get the most recent design review as Markdown feedback (comments, selectors, computed styles, console/network errors, screenshot URLs).
get_reviewGet one design review by id as Markdown feedback.Reads text others writeNo findings
Why it is in this group
- The name "get_review" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "get_review" says "get" and "review": it reads comments, which other people can write.
- untrusted-inputThe description's first sentence says "get" and "review": it reads comments, which other people can write.
Description, as the server wrote it Get one design review by id as Markdown feedback. Obtain the id from list_reviews.
get_screenshotView a comment's screenshot inline (clients don't fetch image URLs themselves).Reads text others writeCan send data outNo findings
Why it is in this group
- The name "get_screenshot" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "view" and "comment": it reads comments, which other people can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it View a comment's screenshot inline (clients don't fetch image URLs themselves). Pass the reviewId and the comment id shown next to the screenshot in get_review.
list_reviewsList your recent design reviews pushed from the Design Review browser extension (newest first): website, title, time, comment count and the reviewId to pass to get_review.Reads text others writeNo findings
Why it is in this group
- The name "list_reviews" says "list": a word for reading.
What it can reach
- untrusted-inputThe name "list_reviews" says "list" and "review": it reads comments, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "review": it reads comments, which other people can write.
Description, as the server wrote it List your recent design reviews pushed from the Design Review browser extension (newest first): website, title, time, comment count and the reviewId to pass to get_review. Use this to pick which review to apply.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write5
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out2
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Install
Pinned to version 0.1.2. Values in angle brackets are yours to fill in.
claude mcp add --transport http website-feedback-tool https://dfozgzaflbudvthtlhvn.supabase.co/functions/v1/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__website-feedback-tool__list_reviews",
"mcp__website-feedback-tool__get_latest_review",
"mcp__website-feedback-tool__get_review"
],
"ask": [
"mcp__website-feedback-tool__open_review_link",
"mcp__website-feedback-tool__get_screenshot"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as website-feedback-tool. Review it before you use it.
Capability tags behind 5 rules
- mcp__website-feedback-tool__list_reviews untrusted-input
- mcp__website-feedback-tool__get_latest_review untrusted-input
- mcp__website-feedback-tool__get_review untrusted-input
- mcp__website-feedback-tool__open_review_link untrusted-input, outbound
- mcp__website-feedback-tool__get_screenshot untrusted-input, outbound