io.github.sepehr071/toolsmelt

What it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on; accounts and data in outside web services.

14 of 19 tools are described as changing something (creating, editing, deleting, sending or running).

• smith_guideon 1 other serverreads or searches

  “Return the rules for designing the tools of an MCP server (the plan.yaml format).”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  Takes no inputs.

• smith_inspecton 1 other serverreads or searchesdescribed as changing data

  “Read an OpenAPI file or HAR and write source.json and digest.md into the workdir.”

  Publisher declares: read-only no · destructive yes · open-world yes

  4 inputs, 1 required

  • sourcestringrequired“OpenAPI/Swagger file or HAR, as an absolute path or an http(s) URL.”
  • workdirstring“Absolute directory for source.json, digest.md and plan.yaml.”
  • hostsarray or null“HAR only: keep traffic to these hosts, e.g.”
  • budgetinteger“Maximum digest size in characters.”
• smith_app_androidon 1 other serverreads or searchesdescribed as changing data

  “Read the HTTP interface an Android app declares (through the jadx CLI or REA's JADX jar) into source.json, for the user's own or an authorized app.”

  Publisher declares: read-only no · destructive yes · open-world yes

  6 inputs

  • apkstring or null“Absolute path of the APK on this machine.”
  • class_namestring or null“Decompiled Retrofit interface class; omit to list candidate classes.”
  • base_urlstring“The app's API base URL, e.g.”
  • workdirstring“Absolute directory for source.json and digest.md.”
  • source_filestring or null“Absolute path of a .java class already decompiled by any tool; skips the jar.”
  • jadx_jarstring or null“REA's JADX MCP jar; default: `jadx` on PATH, else $REA_JADX_MCP_JAR.”
• smith_app_json 1 other serverreads or searchesdescribed as changing data

  “Read the HTTP calls an Electron/JavaScript app makes out of its own shipped code, for the user's own or an authorized app.”

  Publisher declares: read-only no · destructive yes · open-world yes

  3 inputs, 1 required

  • pathstringrequired“Absolute path of the app directory, its app.asar, or one .js/.ts/.map file.”
  • base_urlstring“The app's API base URL, e.g.”
  • workdirstring“Absolute directory for source.json and digest.md.”
• smith_app_desktopon 1 other serverreads or searchesdescribed as changing data

  “Guide recording a desktop program's own traffic, then import the HAR, for the user's own or an authorized program.”

  Publisher declares: read-only no · destructive yes · open-world yes

  5 inputs

  • harstring or null“Absolute path of the HAR the user's own mitmdump wrote; omit to get the steps.”
  • hostsarray or null“Keep traffic to these hosts only.”
  • workdirstring“Absolute directory for source.json and digest.md.”
  • portinteger“Proxy port used in the steps.”
  • forceboolean“Overwrite an existing source.json.”
• smith_drafton 1 other servercreates or changes datadescribed as changing data

  “Write a heuristic starting <workdir>/plan.yaml from source.json.”

  Publisher declares: read-only no · destructive yes · open-world yes

  3 inputs, 1 required

  • workdirstringrequired“Absolute workdir that smith_inspect wrote source.json into.”
  • namestring or null“Project name, e.g.”
  • forceboolean“Overwrite an existing plan.yaml (loses your edits).”
• smith_validateon 1 other serverreads or searches

  “Check plan.yaml against the design rules and return its errors and warnings.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  2 inputs

  • workdirstring or null“Absolute workdir holding plan.yaml (and source.json).”
  • plan_pathstring or null“Absolute path of a plan file, if not <workdir>/plan.yaml.”
• smith_generateon 1 other serverdescribed as changing data

  “Validate plan.yaml and, if it has no errors, write the server project.”

  Publisher declares: read-only no · destructive yes · open-world yes

  3 inputs, 1 required

  • workdirstringrequired“Absolute workdir holding plan.yaml (and source.json).”
  • outstring or null“Absolute output directory.”
  • forceboolean“Write into an existing output directory.”
• smith_installon 1 other servermanages infrastructuredescribed as changing data

  “Register a generated server with the user's coding agents so it runs as a normal MCP server.”

  Publisher declares: read-only no · destructive yes · open-world yes

  6 inputs, 1 required

  • projectstringrequired“Absolute path of a project written by smith_generate.”
  • agentsarray or null“Agents to register with: claude, codex, cursor, gemini.”
  • removeboolean“Remove the project's entry instead.”
  • forceboolean“Replace an entry of the same name that runs something else.”
  • pypiboolean“Run the released package (uvx name@version), not the folder.”
  • dry_runboolean“Only return the planned changes; false applies them.”
• smith_probeon 1 other serverreads or searchesdescribed as changing data

  “Call unverified GET endpoints live with the user's own credentials and store scrubbed example responses.”

  Publisher declares: read-only no · destructive yes · open-world yes

  3 inputs, 1 required

  • workdirstringrequired“Absolute workdir holding source.json.”
  • limitinteger“Most endpoints to probe.”
  • writesboolean“Also call non-GET endpoints on the live API.”
• smith_checkon 1 other serverreads or searchesdescribed as changing data

  “Call every tool of a generated project against the live API with its example arguments.”

  Publisher declares: read-only no · destructive yes · open-world yes

  2 inputs, 1 required

  • projectstringrequired“Absolute path of a generated project directory.”
  • writesboolean“Also call tools that change data on the live API.”
• smith_record_starton 1 other serverdescribed as changing data

  “Start recording the API calls of the shared Chrome (opened with `toolsmelt browser`) into a HAR.”

  Publisher declares: read-only no · destructive yes · open-world yes

  2 inputs, 2 required

  • namestringrequired“Short name for this recording, e.g.”
  • hostsarrayrequired“Record only these hosts and their subdomains, e.g.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.