Loading…
Read and act on your Dynamite Circle membership data via the official DC Member API.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The dc-member-api MCP server exposes 85 tools, focused primarily on communication and developer capabilities. Its published description reads: "Read and act on your Dynamite Circle membership data via the official DC Member API". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates dc-member-api F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check dc-member-api's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add dc-member-api to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://api.dynamitecircle.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
GET /alerts — List your alerts Returns the user's alerts, ordered by creation date (newest first). Maximum 50 results.
POST /alerts — Create an alert Create a new alert. The system will search for matching content and deliver digests on the configured frequency. Maximum 10 active alerts per user. ⚠️ WRITE operation: t
PATCH /alerts/:alertID — Update an alert Update one or more fields on an existing alert. Only provide the fields you want to change. ⚠️ WRITE operation: this mutates your DC account data.
DELETE /alerts/:alertID — Deactivate an alert Soft-delete an alert by setting `active: false`. The alert's history is preserved for past digests. Use `PATCH /alerts/:alertID` with `active: true` to re
GET /announcements — List recent announcements Returns the most recent announcements from DC's broadcast channels — official updates from the DC team and chapter staff (DC, DCBKK, DCMEX, DC BLACK, etc
GET /announcements/latest — Latest announcement per channel (quick overview) Returns the **single most recent announcement from each visible channel** — a one-shot overview rather than a paged feed. U
GET /trips — List your trips Returns your upcoming trips by default. Add `?past=true` to include past trips. **For "who should I meet on this trip?"** fetch `GET /trips/:tripID` (or the discovery-only
POST /trips — Create a trip Create a new trip. Provide exactly one of `placeID` or `eventID` — the server resolves the location (city, country, country code) automatically. Use `GET /places/search` to
PATCH /trips/:tripID — Update a trip Update one or more fields on an existing trip. Only include the fields you want to change. To change destination, provide either `placeID` or `eventID` and the ful
DELETE /trips/:tripID — Delete a trip Permanently delete one of your trips. Removes the trip doc and its linked chat room (`trip.roomID`). The destination chapter's upcoming-trip count is recomputed i
GET /trips/overlaps — Find overlapping trips Find other members whose trips overlap with yours by city + date range. **This is a narrow date-window match, NOT the AI-ranked discovery pool.** For the f
GET /trips/:tripID — Get a single trip Single-trip read with the full payload. **This is the canonical endpoint for "who should I meet on this trip?"** — the response embeds a complete `discovery` blo
POST /trips/:tripID/refresh — Trigger a trip refresh Owner-only sync trigger. Enqueues a deduped background job that recomputes the trip's discovery (overlapping people, events, AI blurbs). Spammy rel
GET /trips/:tripID/discovery — Get the discovery block for a trip Discovery-only read for a trip. Returns the same `discovery` block as `GET /trips/:tripID` (people, fullPool, whyToMeet, events, overl
GET /chapters — List chapters List all DC chapters (city-based community hubs), sorted by member count. Each chapter has a Google Place ID — pass it to `POST /trips` to create a trip to that chapter's
GET /chapters/:cityID — Get a single chapter Get full details for a single chapter, including up to 100 home-chapter members and the list of DCers currently visiting via active trips. - `members` — DC
GET /events — List upcoming events Returns upcoming DC events, sorted by date. Add `?past=true` to include past events. **See also:** For events by name or topic (`q='productivity'`, `q='DCBKK 2026'`)
GET /events/:eventID — Get event details Returns full details for a specific event, including your ticket status.
GET /events/:eventID/attendees — List event attendees List the confirmed attendees of an event — DCers holding a `valid` paid ticket OR a `valid`/`maybe` RSVP status. Refunded/canceled tickets are exc
POST /events/:eventID/rsvp — RSVP to a free event RSVP to an event that uses free RSVP (not ticketed). Only works for events with rsvpEnabled: true. ⚠️ WRITE operation: this mutates your DC account da
GET /events/:eventID/schedule — Get event schedule Returns the full schedule (sessions) for an event, sorted chronologically. **Access:** any active DCer who can see the event can view its public sche
GET /events/:eventID/agenda — Get your personal agenda for an event Returns the sessions and meetups **YOU** have on your personal agenda for an event: - Sessions you bookmarked from the schedule. - M
GET /events/:eventID/agenda/:userID — Get another attendee's agenda for an event Returns another attendee's personal agenda for an event — the sessions they bookmarked + meetups they RSVPd to. Use thi
GET /events/:eventID/schedule/:sessionID/attendees — List session attendees (people who bookmarked it) Returns the list of attendees who have **bookmarked** a specific session into their agenda. Same
GET /events/:eventID/meetups — List event meetups Returns the approved member-organized meetups for an event, sorted chronologically. Only approved meetups are returned. **Access:** any active DCer wh
GET /events/:eventID/meetups/:meetupID/attendees — List meetup attendees Returns the list of attendees who have RSVPd to a specific meetup. Same profile shape as `/events/:eventID/attendees`. **Access
GET /events/:eventID/sponsors — List event sponsors Returns the sponsors for an event, ordered by tier (primary → supporting) then display order. Deleted sponsors are filtered out. **Access:** any act
POST /events/:eventID/schedule/:sessionID/bookmark — Bookmark / unbookmark a session Add or remove a session from your personal agenda — this is the API equivalent of the bookmark/star icon on a sessi
POST /events/:eventID/meetups/:meetupID/rsvp — RSVP to / leave a meetup Join or leave a meetup. Requires a valid ticket for the event. The meetup's `rsvpCount` is updated atomically and idempotently.
GET /events/:eventID/agendas — Get multiple attendees' agendas in one call Returns the agendas (bookmarked sessions + meetup RSVPs) for **multiple** attendees in a single call. Use when an AI agent ne
POST /events/:eventID/free-slots — Find shared free time slots across attendees Computes shared **free slots** across a set of event attendees — the time windows where they're NOT in a bookmarked sess
GET /follows/profiles — List followed DCers List the DCers you are currently following. Returns the same mini-profile shape used by every other list endpoint, so each entry roundtrips cleanly with `GE
POST /follows/profiles/:userID — Follow a DCer Follow a DCer. Idempotent — calling it twice with the same userID is safe (no-op the second time). Target must exist and be publicly visible (hidden + gu
DELETE /follows/profiles/:userID — Unfollow a DCer Unfollow a DCer. Idempotent — unfollowing someone you weren't following is a no-op (still returns 200 with the updated `count`). Use it whenever you
GET /follows/chapters — List followed chapters List the DC chapters (city hubs) you are currently following. Each entry is a mini-chapter with the chapter's Google Place ID — useful for creating trips
POST /follows/chapters/:cityID — Follow a chapter Follow a DC chapter (city hub). Idempotent. Target must exist in the chapters list (discover via `GET /chapters`). Cap 50 — hitting it returns `409 fo
DELETE /follows/chapters/:cityID — Unfollow a chapter Unfollow a DC chapter. Idempotent — unfollowing a chapter you weren't following is a no-op. ⚠️ WRITE operation: this mutates your DC account data.
GET /inbox/unread — Get unread counts Returns your total unread message count and per-room breakdown. Only includes rooms you are subscribed to or are a member of.
GET /interests — Get your interests config Returns the user's interests configuration — the set of tags they have subscribed or unsubscribed from. Returns an empty `{ tags: {}, createdAt: null, update
POST /interests — Subscribe or unsubscribe from interests Subscribe or unsubscribe from interest tags in a single call. Pass a `updates` map of `{ slug: { subscribed: boolean } }` with up to 20 entrie
GET /invites — List your invites List the referral invites credited to you. Two source types appear: - **`manual`** — invites you sent via `POST /invites` (the explicit email-an-invitee flow). - **`pe
POST /invites — Send an invite Send a referral invite to someone. The server queues a templated email (delivered via a background task) that points the invitee at the apply flow with you pre-credited
GET /invites/permacode — Get your permacode Returns your permanent referral code. Share this link to let people apply with your referral.
GET /calendar — Get your iCalendar feed URL + settings Returns your iCalendar feed URLs and the toggles that control which event categories the feed includes. **Three URLs are returned:** - `httpsURL`
PATCH /calendar — Update calendar feed settings Update any subset of your calendar feed toggles. Send only the toggles you want to change — omitted fields are left untouched. Returns `{ updated: true
GET /limits — Get your effective rate limits + current usage Returns the effective per-minute and per-day rate limits for your API key, **plus current usage** (how many calls you have already made in
GET /locator/digest — Get locator digest Returns your weekly locator digest — the same data that powers the Friday locator email. Use this to surface trip/event activity around the people and cities a
GET /locator/settings — Get your Friday locator email settings Returns the four toggles that control the Friday locator email digest. The digest is a weekly outbound email surfacing new events, ticket
PATCH /locator/settings — Update your Friday locator email settings Update any subset of the Friday locator email toggles. Send only the fields you want to change. ⚠️ WRITE operation: this mutates you
GET /membership — Get your membership state Returns your full membership state: role, lifecycle dates, trial status, billing/subscription details, and a link to the Stripe Customer Portal where you ca
GET /membership/invoices — List your Stripe invoices Returns your Stripe invoices, newest first. Each entry includes a hosted-invoice URL and a PDF link, both safe to share — perfect for self-serve re
GET /notifications — Get your notification preferences Returns your push + email preferences per notification category. Defaults are applied for any preference you have never explicitly set. Email is
PATCH /notifications — Update your notification preferences Update any subset of your notification preferences. Send only the categories/channels you want to change — the rest stay as-is. Email is rej
GET /places/search — Search Google Places Search for places by name. Use this to look up a Google Place ID before creating a trip or referencing a venue. Results include a `type` field that classifies
GET /places/:placeID — Get place details Fetch full details for one Google Place ID. Useful for verifying a placeID before sending it to `POST /trips` (which only accepts `type: "city"` placeIDs and r
POST /profile-match — Match DCers from a description (or recommend if omitted) **AI-powered profile matchmaker.** Match DCers against a natural-language description, or — when `query` is omitted — rec
GET /profile — Get your own profile Returns your own full profile — every field the in-app profile editor surfaces to you, plus tier-derived state. Same shape regardless of tier (DC and DC BLACK membe
PATCH /profile — Update profile fields Update allowed profile fields. Only the fields you include will be changed. Location, photo, and gender cannot be updated via API. ⚠️ WRITE operation: this mutat
POST /report-issue — Report an issue or feedback Submit a bug report, feedback, or question to the DC team. Optionally include a base64-encoded screenshot (PNG, JPEG, or WebP, up to 4 MB raw). **Priva
GET /rooms — List your subscribed rooms Returns every room you are subscribed to (DMs, group DMs, channels you follow, discussions, activities, event rooms), sorted by `lastActivityAt` descending. Cur
GET /rooms/inbox/:type — List your rooms by type Returns your subscribed rooms filtered to a single type. Same shape as `GET /rooms` but scoped — e.g. `/rooms/inbox/dm` returns DMs only, `/rooms/inbox
GET /rooms/browse/:type — Browse public channels by type Browse publicly-joinable rooms of a given type that you are NOT yet subscribed to. The same surface the in-app Browse Channels modal shows. DC
GET /rooms/:roomID — Get a single room Get a single room's metadata + its latest daily AND weekly AI summaries (when they exist). **Access:** members and subscribers of the room, plus any DCer for bro
GET /rooms/:roomID/summary/:type — Get the latest daily or weekly summary Get the latest single summary of a given type for a room. **Type is required** — daily and weekly summaries cover different wi
GET /rooms/:roomID/summaries/:type — List past daily or weekly summaries List past summaries of a given type for a room, newest first. Cursor-paginated — pass `cursor` from the previous response to fe
GET /rooms/:roomID/messages — List messages in a room List messages in a room you are a member of. **Read-only — no write side effects, no unread-state mutation, no reactions/posts/edits.** Cursor-pag
POST /rooms/:roomID/subscribe — Subscribe to a room Subscribe to a public channel, discussion, quick-question room, or event room. The caller is added to the room's `seen` subcollection with `flags.is
POST /rooms/:roomID/unsubscribe — Unsubscribe from a room Unsubscribe from a public channel, discussion, quick-question, or event room. The caller's `seen` doc is updated to `flags.isSubscribed: false
POST /rooms/:roomID/mute — Mute a room Mute notifications for a room. Sets `mutedUntilAt` to a far-future timestamp (no expiry) — the room stays muted until explicitly unmuted. The room still appears
POST /rooms/:roomID/unmute — Unmute a room Unmute a previously-muted room. Clears `mutedUntilAt`. **Access:** the caller must be a member/subscriber of the room. Idempotent. ⚠️ WRITE operation: this m
POST /rooms/:roomID/archive — Archive a room Archive a room — hides it from the inbox sidebar without unsubscribing. Use `unarchive` to bring it back. **Access:** the caller must be a member/subscribe
POST /rooms/:roomID/unarchive — Unarchive a room Unarchive a previously-archived room. Restores it to the inbox sidebar. **Access:** the caller must be a member/subscriber. Idempotent. ⚠️ WRITE operat
POST /rooms/:roomID/pin — Pin a room Pin a room to the top of the inbox. For subscription-type rooms the caller is auto-subscribed if not already (mirrors the in-app behavior — you can't pin what you
POST /rooms/:roomID/unpin — Unpin a room Unpin a previously-pinned room. Returns it to its normal place in the inbox sort order. **Access:** the caller must be a member/subscriber. Idempotent. ⚠️ WRIT
GET /search — Cross-resource omni-search Cross-resource search across profiles, rooms, messages (incl. private DMs + group DMs you're in), events, and chapters in one round trip. Returns the top-N mat
GET /search/profiles — Search profiles Full-text search across DCer profiles — headlines, bios, business descriptions, expertise, hobbies, etc. Returns matching profile records with privacy gates appl
GET /search/rooms — Search rooms Search rooms by name, description, and topic. Returns rooms that match the query AND that you have access to (subscribed-or-browsable; private rooms / DMs / group DMs
GET /search/messages — Search messages (incl. your private DMs) Search message bodies across every room you can access. **This is the key surface for "catch me up on what was said about X"** — your pr
GET /search/events — Search events Search enabled DC events by name, description, host, and venue. No default time filter — pass `?since=` or `?until=` (ISO 8601 dates) to constrain. They compose: pas
GET /search/chapters — Search chapters Search DC chapters by city or country name. **Query syntax (`q=`):** plain words match with prefix + typo tolerance. Wrap a phrase in double quotes to require an
GET /tickets — List your tickets Returns your tickets across events, newest first. Defaults to the tickets you're holding (`valid` plus `maybe`) — "what am I attending". Pass `?status=valid`, `?status
GET /virtual-events — List Live Calls Returns upcoming Live Calls (online sessions like Connect Calls, Happy Hour, Welcome Call, plus DC BLACK-only calls). Add `?past=true` to include past calls.
GET /virtual-events/:sessionID — Get Live Call details Returns the same payload shape as one entry from `GET /virtual-events` for a single online Live Call — `sessionID`, `name`, `description`, `kind`
GET /virtual-events/:sessionID/attendees — List Live Call attendees List the attendees of a Live Call — the DCers who RSVPd `yes` or `maybe` (the same set behind `attendeeCount`, mirroring how `GET /e
POST /virtual-events/:sessionID/rsvp — RSVP to Live Call RSVP to a Live Call. The user is added to the matching attendance list on the session doc (`participantIDs` for `yes`, `maybeIDs` for `maybe`,
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: alerts_create
A tool description tries to alter the model’s use of another tool.
POST /alerts — Create an alert Create a new alert. The systRecommendationDescriptions must describe only their own tool.
tool: alerts_by_id_update
A tool description tries to alter the model’s use of another tool.
PATCH /alerts/:alertID — Update an alert Update one or moreRecommendationDescriptions must describe only their own tool.
tool: alerts_by_id_delete
A tool description tries to alter the model’s use of another tool.
DELETE /alerts/:alertID — Deactivate an alert Soft-delete anRecommendationDescriptions must describe only their own tool.
tool: announcements
A tool description tries to alter the model’s use of another tool.
the DC team and chapter staff (DC, DCBKK, DCMEX, DC BLACK, etc.). SameRecommendationDescriptions must describe only their own tool.
tool: announcements_latest
A tool description tries to alter the model’s use of another tool.
GET /announcements/latest — Latest announcement per channel (quickRecommendationDescriptions must describe only their own tool.
tool: trips
A tool description tries to alter the model’s use of another tool.
I meet on this trip?"** fetch `GET /trips/:tripID` (or the discoverRecommendationDescriptions must describe only their own tool.
tool: trips_create
A tool description tries to alter the model’s use of another tool.
POST /trips — Create a trip Create a new trip. Provide exaRecommendationDescriptions must describe only their own tool.
tool: trip_update
A tool description tries to alter the model’s use of another tool.
PATCH /trips/:tripID — Update a trip Update one or more fieRecommendationDescriptions must describe only their own tool.
tool: trip_delete
A tool description tries to alter the model’s use of another tool.
DELETE /trips/:tripID — Delete a trip Permanently delete oneRecommendationDescriptions must describe only their own tool.
tool: trips_overlaps
A tool description tries to alter the model’s use of another tool.
GET /trips/overlaps — Find overlapping trips Find other mRecommendationDescriptions must describe only their own tool.
tool: trip
A tool description tries to alter the model’s use of another tool.
GET /trips/:tripID — Get a single trip Single-trip read wRecommendationDescriptions must describe only their own tool.
tool: trip_refresh_create
A tool description tries to alter the model’s use of another tool.
POST /trips/:tripID/refresh — Trigger a trip refresh OwnerRecommendationDescriptions must describe only their own tool.
tool: trip_discovery
A tool description tries to alter the model’s use of another tool.
GET /trips/:tripID/discovery — Get the discovery block forRecommendationDescriptions must describe only their own tool.
tool: chapters
A tool description tries to alter the model’s use of another tool.
ss it to `POST /trips` to create a trip to that chapter's city. **SeRecommendationDescriptions must describe only their own tool.
tool: chapter
A tool description tries to alter the model’s use of another tool.
ting via active trips. - `members` — DCers whose **home chapter** isRecommendationDescriptions must describe only their own tool.
tool: events
A tool description tries to alter the model’s use of another tool.
2026'`), `POST /search/events` searches title + description directly —RecommendationDescriptions must describe only their own tool.
tool: event
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID — Get event details Returns full detaRecommendationDescriptions must describe only their own tool.
tool: event_attendees
A tool description tries to alter the model’s use of another tool.
e-match`, `GET /trips/:tripID/discovery`, etc.) — full public-other-pRecommendationDescriptions must describe only their own tool.
tool: event_rsvp
A tool description tries to alter the model’s use of another tool.
POST /events/:eventID/rsvp — RSVP to a free event RSVP to aRecommendationDescriptions must describe only their own tool.
tool: event_schedule
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/schedule — Get event schedule ReturnsRecommendationDescriptions must describe only their own tool.
tool: event_agenda
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/agenda — Get your personal agenda forRecommendationDescriptions must describe only their own tool.
tool: event_agenda_get
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/agenda/:userID — Get another attendee'RecommendationDescriptions must describe only their own tool.
tool: event_schedule_attendees
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/schedule/:sessionID/attendees — List sRecommendationDescriptions must describe only their own tool.
tool: event_meetups
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/meetups — List event meetups ReturnsRecommendationDescriptions must describe only their own tool.
tool: event_meetup_attendees
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/meetups/:meetupID/attendees — List meeRecommendationDescriptions must describe only their own tool.
tool: event_sponsors
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/sponsors — List event sponsors ReturnRecommendationDescriptions must describe only their own tool.
tool: event_schedule_bookmark
A tool description tries to alter the model’s use of another tool.
POST /events/:eventID/schedule/:sessionID/bookmark — BookmarRecommendationDescriptions must describe only their own tool.
tool: event_meetup_rsvp
A tool description tries to alter the model’s use of another tool.
POST /events/:eventID/meetups/:meetupID/rsvp — RSVP to / leaRecommendationDescriptions must describe only their own tool.
tool: event_agendas
A tool description tries to alter the model’s use of another tool.
GET /events/:eventID/agendas — Get multiple attendees' agenRecommendationDescriptions must describe only their own tool.
tool: event_free_slots_create
A tool description tries to alter the model’s use of another tool.
POST /events/:eventID/free-slots — Find shared free time sloRecommendationDescriptions must describe only their own tool.
tool: follows_profiles
A tool description tries to alter the model’s use of another tool.
tions — surface trip + event activity from DCers and cities you careRecommendationDescriptions must describe only their own tool.
tool: follows_profiles_by_id_create
A tool description tries to alter the model’s use of another tool.
tions — surface trip + event activity from DCers and cities you careRecommendationDescriptions must describe only their own tool.
tool: follows_chapters
A tool description tries to alter the model’s use of another tool.
ul for creating trips or surfacing activity in that city. Cap: 50 folRecommendationDescriptions must describe only their own tool.
tool: follows_chapter_create
A tool description tries to alter the model’s use of another tool.
tions — surface trip + event activity from DCers and cities you careRecommendationDescriptions must describe only their own tool.
tool: follows_chapter_delete
A tool description tries to alter the model’s use of another tool.
DELETE /follows/chapters/:cityID — Unfollow a chapter Unfollow a DC chaRecommendationDescriptions must describe only their own tool.
tool: inbox_unread
A tool description tries to alter the model’s use of another tool.
. Only includes rooms you are subscribed to or are a member of.RecommendationDescriptions must describe only their own tool.
tool: interests_create
A tool description tries to alter the model’s use of another tool.
POST /interests — Subscribe or unsubscribe from interests SubsRecommendationDescriptions must describe only their own tool.
tool: invites_create
A tool description tries to alter the model’s use of another tool.
POST /invites — Send an invite Send a referral invite to somRecommendationDescriptions must describe only their own tool.
tool: invites_permacode
A tool description tries to alter the model’s use of another tool.
GET /invites/permacode — Get your permacode Returns your peRecommendationDescriptions must describe only their own tool.
tool: calendar
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
below controls. Tokens are deterministic, so the URLs never change forRecommendationRemove side-channel parameters; constrain tool inputs.
tool: calendar
A tool description tries to alter the model’s use of another tool.
ual calls, your trips, chapter events, and flagship events — exactlyRecommendationDescriptions must describe only their own tool.
tool: calendar_update
A tool description tries to alter the model’s use of another tool.
PATCH /calendar — Update calendar feed settings Update any subRecommendationDescriptions must describe only their own tool.
tool: limits
A tool description tries to alter the model’s use of another tool.
erive from your membership tier (DC member: 10/min, 300/day; DC BLACK membRecommendationDescriptions must describe only their own tool.
tool: locator_digest
A tool description tries to alter the model’s use of another tool.
lists upcoming trips/events into that city + new ones added since laRecommendationDescriptions must describe only their own tool.
tool: locator_settings
A tool description tries to alter the model’s use of another tool.
s, tickets, and trips relevant to you.RecommendationDescriptions must describe only their own tool.
tool: membership_invoices
A tool description tries to alter the model’s use of another tool.
GET /membership/invoices — List your Stripe invoices Returns yRecommendationDescriptions must describe only their own tool.
tool: notifications
A tool description tries to alter the model’s use of another tool.
digest, not per-event push/email).RecommendationDescriptions must describe only their own tool.
tool: notifications_update
A tool description tries to alter the model’s use of another tool.
PATCH /notifications — Update your notification preferences UpdateRecommendationDescriptions must describe only their own tool.
tool: places_search
A tool description tries to alter the model’s use of another tool.
lity usable for trips) or `venue` (a specific establishment, address,RecommendationDescriptions must describe only their own tool.
tool: place
A tool description tries to alter the model’s use of another tool.
ng it to `POST /trips` (which only accepts `type: "city"` placeIDs anRecommendationDescriptions must describe only their own tool.
tool: profile_match_create
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: profile_update
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: report_issue_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
. Don't include passwords, payment details, or other secrets. ⚠️ WRITE oRecommendationRemove side-channel parameters; constrain tool inputs.
tool: rooms
A tool description tries to alter the model’s use of another tool.
ns, activities, event rooms), sorted by `lastActivityAt` descending.RecommendationDescriptions must describe only their own tool.
tool: rooms_inbox
A tool description tries to alter the model’s use of another tool.
GET /rooms/inbox/:type — List your rooms by type ReturnsRecommendationDescriptions must describe only their own tool.
tool: rooms_browse
A tool description tries to alter the model’s use of another tool.
GET /rooms/browse/:type — Browse public channels by typeRecommendationDescriptions must describe only their own tool.
tool: rooms_by_id
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
that slot. For history (older summaries), call `GET /rooms/:roomID/sumRecommendationRemove side-channel parameters; constrain tool inputs.
tool: rooms_by_id
A tool description tries to alter the model’s use of another tool.
group DMs, and event/city rooms you are not a member of return 403.RecommendationDescriptions must describe only their own tool.
tool: rooms_summary
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
h segment. For history (multiple past summaries) use `GET /rooms/:roomRecommendationRemove side-channel parameters; constrain tool inputs.
tool: rooms_summary
A tool description tries to alter the model’s use of another tool.
GET /rooms/:roomID/summary/:type — Get the latest daily orRecommendationDescriptions must describe only their own tool.
tool: rooms_summaries
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
re I rejoin the conversation"). Same access gate as `GET /rooms/:roomID`. *RecommendationRemove side-channel parameters; constrain tool inputs.
tool: rooms_summaries
A tool description tries to alter the model’s use of another tool.
GET /rooms/:roomID/summaries/:type — List past daily or weRecommendationDescriptions must describe only their own tool.
tool: rooms_messages
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ast N messages, conversation reconstruction); search is the right call whenRecommendationRemove side-channel parameters; constrain tool inputs.
tool: rooms_messages
A tool description tries to alter the model’s use of another tool.
DMs (`group`), event rooms, and city/country/mastermind rooms hard-bRecommendationDescriptions must describe only their own tool.
tool: rooms_messages
One tool reads private data, ingests untrusted content, AND can send data outbound — the three preconditions for autonomous data theft in a single call. A prompt injection reaching this tool can exfiltrate secrets with no further step.
ous response to fetch the next (older) page. Default page size 50, max 50. **See also:** FRecommendationSplit the capabilities across separate least-privilege tools so no single tool can read secrets, read untrusted input, and reach the network at once.
tool: rooms_subscribe_create
A tool description tries to alter the model’s use of another tool.
event — call `/events/:eventID` first to verify ticket status. DMs anRecommendationDescriptions must describe only their own tool.
tool: rooms_unsubscribe_create
A tool description tries to alter the model’s use of another tool.
ck-question, or event room. The caller's `seen` doc is updated to `flRecommendationDescriptions must describe only their own tool.
tool: rooms_mute_create
A tool description tries to alter the model’s use of another tool.
te a room Mute notifications for a room. Sets `mutedUntilAt` to a far-futureRecommendationDescriptions must describe only their own tool.
tool: rooms_unmute_create
A tool description tries to alter the model’s use of another tool.
POST /rooms/:roomID/unmute — Unmute a room Unmute a previoRecommendationDescriptions must describe only their own tool.
tool: rooms_archive_create
A tool description tries to alter the model’s use of another tool.
POST /rooms/:roomID/archive — Archive a room Archive a rooRecommendationDescriptions must describe only their own tool.
tool: rooms_unarchive_create
A tool description tries to alter the model’s use of another tool.
POST /rooms/:roomID/unarchive — Unarchive a room UnarchiveRecommendationDescriptions must describe only their own tool.
tool: rooms_pin_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
an interaction history with the room (DMs and group DMs require havingRecommendationRemove side-channel parameters; constrain tool inputs.
tool: rooms_pin_create
A tool description tries to alter the model’s use of another tool.
POST /rooms/:roomID/pin — Pin a room Pin a room to the topRecommendationDescriptions must describe only their own tool.
tool: rooms_unpin_create
A tool description tries to alter the model’s use of another tool.
t to its normal place in the inbox sort order. **Access:** the callerRecommendationDescriptions must describe only their own tool.
tool: search
A tool description tries to alter the model’s use of another tool.
rs in one round trip. Returns the top-N matches per resource, groupeRecommendationDescriptions must describe only their own tool.
tool: search_profiles
A tool description tries to alter the model’s use of another tool.
eturns matching profile records with privacy gates applied (hidden + guRecommendationDescriptions must describe only their own tool.
tool: search_rooms
A tool description tries to alter the model’s use of another tool.
GET /search/rooms — Search rooms Search rooms by name, descriptiRecommendationDescriptions must describe only their own tool.
tool: search_messages
A tool description tries to alter the model’s use of another tool.
ed against your membership — passing a roomID you're not in returns 403, nRecommendationDescriptions must describe only their own tool.
tool: search_events
A tool description tries to alter the model’s use of another tool.
GET /search/events — Search events Search enabled DC events by naRecommendationDescriptions must describe only their own tool.
tool: search_chapters
A tool description tries to alter the model’s use of another tool.
GET /search/chapters — Search chapters Search DC chapters by city oRecommendationDescriptions must describe only their own tool.
tool: tickets
A tool description tries to alter the model’s use of another tool.
tickets across events, newest first. Defaults to the tickets you're hRecommendationDescriptions must describe only their own tool.
tool: virtual_events
A tool description tries to alter the model’s use of another tool.
GET /virtual-events — List Live Calls Returns upcoming Live CallsRecommendationDescriptions must describe only their own tool.
tool: virtual_event
A tool description tries to alter the model’s use of another tool.
GET /virtual-events/:sessionID — Get Live Call details Returns theRecommendationDescriptions must describe only their own tool.
tool: virtual_event_attendees
A tool description tries to alter the model’s use of another tool.
GET /virtual-events/:sessionID/attendees — List Live Call attendeesRecommendationDescriptions must describe only their own tool.
tool: virtual_event_rsvp
A tool description tries to alter the model’s use of another tool.
POST /virtual-events/:sessionID/rsvp — RSVP to Live Call RSVP to aRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: alerts_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "alerts_create"RecommendationScope tools to the minimum needed.
tool: alerts_by_id_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "alerts_by_id_update"RecommendationScope tools to the minimum needed.
tool: alerts_by_id_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "alerts_by_id_delete"RecommendationScope tools to the minimum needed.
tool: announcements
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "announcements"RecommendationScope tools to the minimum needed.
tool: trips_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "trips_create"RecommendationScope tools to the minimum needed.
tool: trip_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "trip_update"RecommendationScope tools to the minimum needed.
tool: trip_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "trip_delete"RecommendationScope tools to the minimum needed.
tool: trips_overlaps
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "trips_overlaps"RecommendationScope tools to the minimum needed.
tool: trip
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "trip"RecommendationScope tools to the minimum needed.
tool: trip_refresh_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "trip_refresh_create"RecommendationScope tools to the minimum needed.
tool: chapters
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "chapters"RecommendationScope tools to the minimum needed.
tool: events
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "events"RecommendationScope tools to the minimum needed.
tool: event_rsvp
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "event_rsvp"RecommendationScope tools to the minimum needed.
tool: event_agenda
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "event_agenda"RecommendationScope tools to the minimum needed.
tool: event_schedule_bookmark
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "event_schedule_bookmark"RecommendationScope tools to the minimum needed.
tool: event_meetup_rsvp
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "event_meetup_rsvp"RecommendationScope tools to the minimum needed.
tool: event_agendas
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "event_agendas"RecommendationScope tools to the minimum needed.
tool: event_free_slots_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "event_free_slots_create"RecommendationScope tools to the minimum needed.
tool: follows_profiles
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "follows_profiles"RecommendationScope tools to the minimum needed.
tool: follows_profiles_by_id_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "follows_profiles_by_id_create"RecommendationScope tools to the minimum needed.
tool: follows_profiles_by_id_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "follows_profiles_by_id_delete"RecommendationScope tools to the minimum needed.
tool: follows_chapter_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "follows_chapter_create"RecommendationScope tools to the minimum needed.
tool: follows_chapter_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "follows_chapter_delete"RecommendationScope tools to the minimum needed.
tool: interests
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "interests"RecommendationScope tools to the minimum needed.
tool: interests_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "interests_create"RecommendationScope tools to the minimum needed.
tool: invites
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "invites"RecommendationScope tools to the minimum needed.
tool: invites_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "invites_create"RecommendationScope tools to the minimum needed.
tool: calendar_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "calendar_update"RecommendationScope tools to the minimum needed.
tool: limits
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "limits"RecommendationScope tools to the minimum needed.
tool: locator_digest
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "locator_digest"RecommendationScope tools to the minimum needed.
tool: locator_settings_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "locator_settings_update"RecommendationScope tools to the minimum needed.
tool: notifications
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "notifications"RecommendationScope tools to the minimum needed.
tool: notifications_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "notifications_update"RecommendationScope tools to the minimum needed.
tool: places_search
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "places_search"RecommendationScope tools to the minimum needed.
tool: place
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "place"RecommendationScope tools to the minimum needed.
tool: profile_match_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "profile_match_create"RecommendationScope tools to the minimum needed.
tool: profile
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "profile"RecommendationScope tools to the minimum needed.
tool: profile_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "profile_update"RecommendationScope tools to the minimum needed.
tool: report_issue_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "report_issue_create"RecommendationScope tools to the minimum needed.
tool: rooms_by_id
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_by_id"RecommendationScope tools to the minimum needed.
tool: rooms_summary
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_summary"RecommendationScope tools to the minimum needed.
tool: rooms_summaries
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_summaries"RecommendationScope tools to the minimum needed.
tool: rooms_messages
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_messages"RecommendationScope tools to the minimum needed.
tool: rooms_subscribe_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_subscribe_create"RecommendationScope tools to the minimum needed.
tool: rooms_unsubscribe_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_unsubscribe_create"RecommendationScope tools to the minimum needed.
tool: rooms_mute_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_mute_create"RecommendationScope tools to the minimum needed.
tool: rooms_unmute_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_unmute_create"RecommendationScope tools to the minimum needed.
tool: rooms_archive_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_archive_create"RecommendationScope tools to the minimum needed.
tool: rooms_unarchive_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_unarchive_create"RecommendationScope tools to the minimum needed.
tool: rooms_pin_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_pin_create"RecommendationScope tools to the minimum needed.
tool: rooms_unpin_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rooms_unpin_create"RecommendationScope tools to the minimum needed.
tool: search_profiles
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "search_profiles"RecommendationScope tools to the minimum needed.
tool: virtual_event_attendees
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "virtual_event_attendees"RecommendationScope tools to the minimum needed.
tool: virtual_event_rsvp
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "virtual_event_rsvp"RecommendationScope tools to the minimum needed.
tool: trip
An unusually long description is a common injection-padding tactic.
description length 2129 charsRecommendationKeep descriptions concise.
tool: profile_match_create
An unusually long description is a common injection-padding tactic.
description length 2053 charsRecommendationKeep descriptions concise.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.