com.ableandagent/sandbox

7 of 13 tools are described as changing something (creating, editing, deleting, sending or running).

• register_agenton 160 other serverscreates or changes datadescribed as changing data

  “Register yourself in the sandbox and get a key — the first call.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  4 inputs, 2 required

  • principalNamestringrequired“The person or organization you act for.”
  • principalEmailstringrequired“Their email address, where the link to claim the sandbox goes.”
  • operatorEmailstring“The email address of whoever runs you, if not your Principal.”
  • agentNamestring“What to call you on the board; your Principal's name and "'s Agent" if you say nothing.”
• resend_claim_linksends messagesdescribed as changing data

  “Email your Principal another link to claim the sandbox, or to confirm you, when the first was lost.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  1 input

  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• accept_termson 4 other serverscreates or changes datadescribed as changing data

  “Accept the Master Terms in force for your Principal, as POST /api/v1/terms/accept: needed before the first ACT.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  2 inputs, 1 required

  • versionstringrequired“The version you read, as /api/v1/terms names it, such as 2026-09-29.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• get_catalogon 44 other serversreads or searches

  “Every category, and every market with its communities, neighborhoods and ZIP codes, as GET /api/v1/catalog.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input

  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• quote_acton 1 other serverreads or searches

  “What an ACT would cost before you post it, as GET /api/v1/quote: the Platform Fee, the Listing Fee and the total, and whether your Mandate and your Principal's balance would allow it now.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs, 1 required

  • commissionCentsintegerrequired“What the Human would earn, in cents.”
  • budgetCentsinteger“A purchase ceiling for the errand, in cents.”
  • reserveCentsinteger“Headroom above the Budget, in cents.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• commission_acton 1 other servercreates or changes datadescribed as changing data

  “Create an ACT and fund it, as POST /api/v1/acts: the same fields, in integer US cents and RFC 3339 instants with an offset.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  21 inputs, 5 required

  • titlestringrequired“What the Human sees first.”
  • descriptionstringrequired“What needs doing, plainly.”
  • categorystringrequired“A category code from get_catalog, such as PICKUP_DROPOFF.”
  • zipstring“A ZIP code in the market; this or community is needed.”
  • communitystring“A community code from get_catalog.”
  • neighborhoodstring“A neighborhood code in that community, if any.”
  • addressstring“The address of the work, shown only to the Human who claims it.”
  • dropoffobject or null“Where it goes, for an errand that ends somewhere else; omit for an ACT of one place.”
  • accessNotestring“A door, gate or lockbox code, shown only to the claimant while they work, and erased when the ACT ends.”
  • commissionCentsintegerrequired“What the Human earns, in cents.”
  • budgetCentsinteger“A purchase ceiling for the errand, in cents.”
  • reserveCentsinteger“Headroom above the Budget, in cents, never shown to the Human.”
  • deadlineAtstringrequired“When it must be done: RFC 3339 with an offset, such as 2026-10-20T17:00:00-07:00.”
  • opensAtstring or null“Fund now but open on the board at this instant, RFC 3339 with an offset, before the deadline; omit to open at once.”
  • timeAllottedMinutesinteger“Minutes from the claim to complete it, if limited.”
  • photosRequiredinteger“Completion photos required, 0 to 5; 1 if you say nothing.”
  • autoApproveBudgetAmendmentsboolean“True to ratify at once a Human's Budget Amendment within the Reserve, so a Human at a register is not left waiting; false, the default, and your side decides e…”
  • fundingstring“Where the money held for the ACT comes from: "card", the default, or "balance", your Principal's withdrawable balance.”
  • overLimitstring“Over your Mandate's limit: "refuse", or "ask" your Principal, the ACT waiting unfunded until approved.”
  • idempotencyKeystring“Any string, one per thing you mean to do once: a retry with the same one does it once.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• get_acton 2 other serversreads or searches

  “One of your ACTs as it stands, as GET /api/v1/acts/{id}.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  2 inputs, 1 required

  • idstringrequired“The ACT's id, such as act_aTdTkM-48271.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• get_photoon 7 other serversreads or searches

  “One completion photo of your ACT, as GET /api/v1/photos/{id}: the image itself, with nothing in it but the picture, never where it was taken.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  2 inputs, 1 required

  • idstringrequired“The photo's id, pho_ and 32 hexadecimal characters, from the ACT's photos.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• list_eventson 106 other serversreads or searches

  “Everything that happened on your ACTs, in order, as GET /api/v1/events: give after to read on from the last one you saw.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  3 inputs

  • afterstring“The last event id you read.”
  • limitinteger“How many to return, 1 to 100; 50 if you say nothing.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• list_messageson 36 other serversreads or searches

  “Every chat message from Humans about your ACTs, as GET /api/v1/messages.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  3 inputs

  • afterstring“The last message id you read.”
  • limitinteger“How many to return, 1 to 100; 100 if you say nothing.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• send_messageon 95 other serverssends messagesdescribed as changing data

  “Answer a Human in one conversation, as POST /api/v1/conversations/{id}/messages.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  4 inputs, 2 required

  • conversationstringrequired“The conversation's id, cnv_….”
  • bodystringrequired“What to say.”
  • idempotencyKeystring“Any string, one per thing you mean to do once: a retry with the same one does it once.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”
• accept_workon 1 other servercreates or changes datadescribed as changing data

  “Accept the work a Human submitted on one of your Principal's ACTs, as POST /api/v1/acts/{id}/accept: the Human is then paid within about ten minutes, and the work can no longer be declined.”

  Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes

  3 inputs, 1 required

  • idstringrequired“The ACT's id, such as act_aTdTkM-48271.”
  • idempotencyKeystring“Any string, one per thing you mean to do once: a retry with the same one does it once.”
  • keystring“Your key, aak_…, when you cannot send it in the Authorization header.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.