humanMCP — kapoost MCP server
online · 100% uptimeio.github.kapoost/humanmcp·v0.3.0·1 starsPersonal MCP server for humans who create. Proof of authorship, license control.
1 stars
Reviews
Write oneNobody has reviewed humanMCP — kapoost yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
humanMCP — kapoost tools (43, 7 write)
write = sends, deletes, buys or postsabout_humanmcpFreeSelf-description of this humanMCP server. Deterministic, no bootstrap required — call this first to decide whether the rest of the API is relevant.
ask_humanwrite actionFreeSubmit an async question to kapoost. Returns an ID. Rate-limited 5/hr/IP. Poll fetch_answer later — kapoost answers on his own schedule (minutes, hours, or days). ALWAYS set `from` to a stable name for yourself: with it, sending the same question again returns the answer instead of creating a duplicate, which is the reliable path when your runtime cannot keep the ID between sessions.
bootstrap_sessionFreeValidate the Polish poetry session code, then emit the full team briefing (guardian + style + personas + skills + persist block). Rate-limited 5/min/IP.
delete_skillwrite actionFreeDelete a skill by slug. Owner-only: requires Authorization: Bearer <token>.
fetch_answerFreePoll for an answer to an ask_human question. Marks the question as fetched the first time an answer is returned. Rate-limited 30/hr/IP.
fetch_narada_resultFreePoll a narada job by ID. Statuses: pending, running, done, failed. When done, returns all persona voices.
get_author_profileFreeAuthor identity, bio, and a browsing cheatsheet. Records a profile-view event.
get_certificateFreeReturn a formatted copyright/authenticity certificate for a piece.
get_personaFreeReturn one persona's full prompt by slug. Session-gated except for Hodor (guardian rules must always apply). Pass session_token if your client cannot set an Authorization header.
get_persona_journalFreeRead a persona's raw reflection journal. Owner-only — the journal is a private feedback loop, not for external callers.
get_skillFreeReturn one skill's full body by slug. Session-gated except for -public suffixed skills (guardian bypass). Pass session_token if your client cannot set an Authorization header.
leave_commentFreeAttach a short comment (≤280 chars) to a piece kapoost has published. Truncated silently past the limit.
leave_messagewrite actionFreeSend kapoost a longer message. context REQUIRED (why you're writing / which piece / which task). contact optional — without it no reply is possible.
list_blobsFreeList typed data artifacts (images, contact, vectors, documents, datasets, capsules). Filter by blob_type. Readable-column reflects caller_kind + caller_id vs audience.
list_collectionFreeList works kapoost owns but did NOT create. Public items always; members-only surface only after session activation.
list_contentFreeList published pieces (slug, title, type, access, tags). Optional type/tag filters.
list_personasFreeList every persona (slug, title, role). Full prompts unlock after bootstrap_session.
list_provenanceFreeList provenance items (chain of custody, certificates, invoices) for an artwork slug. Tries piece then collection.
list_skill_groupsFreeIndex of every skill tag in use, with slugs per group. Public — no bootstrap required.
list_skillsFreeList skills (slug, category, title, tags). Optional category / tag filters.
load_skill_groupFreeBulk-fetch every skill tagged with the given group name. Respects the bootstrap gate per-skill: -public suffix bypasses, everything else needs session.
mysloodsiewnia_getFreeFetch one document from kapoost's vault by slug. Requires Authorization: Bearer <edit token or friend token>. Friend tokens: vault-side filter enforces scope + access:private invisibility — an out-of-scope or private slug returns not_found. Vault offline ⇒ {status:offline}.
mysloodsiewnia_listFreeEnumerate vault documents without FTS — for browsing by type or paginating. Requires Authorization: Bearer <edit token or friend token>. Friend tokens see only their scoped doc_types; access:private is invisible. Args: {doc_type?: string filter (note/pdf/literatura/calendar_event/...), limit?: int 1-200 default 50, offset?: int default 0}. Returns [{slug, title, doc_type, created_at, chunk_count}]. Vault offline ⇒ {status:offline}.
mysloodsiewnia_searchFreeFull-text search (BM25 over SQLite FTS5) on kapoost's local vault corpus. Requires Authorization: Bearer <edit token or friend token>. Friend tokens see only their scoped doc_types; access:private is invisible. Returns {status, results:[{source, type, body, doc_slug, title, page, citation}], summary}. Vault offline ⇒ {status:offline}.
mysloodsiewnia_statusFreeRead-only liveness probe on kapoost's local vault (mysłoodsiewnia). Returns {status: online|degraded|offline, last_seen, commit_sha, personas_updated_at, skills_updated_at}. Offline is a stable state — retry later, don't escalate. Requires Authorization: Bearer <edit token or friend token>.
mysloodsiewnia_writewrite actionFreeIngest a new document into kapoost's vault (wave 2). OWNER-ONLY — friend tokens receive {status:write_denied,reason:owner_only}. Args: {doc_type (required), title (required), body (required, ≤100 KiB), source_path?, meta?}. Requires Authorization: Bearer <owner token>. On Unauthorized: obtain the token by either (a) calling bootstrap_session(code=<owner poet fragment>) and reading SESSION_TOKEN from the response briefing (1h TTL, preferred for agents that already know the code), or (b) if you have shell access on kapoost's Mac, running `security find-generic-password -s humanmcp-edit-token -w` to fetch the persistent EDIT_TOKEN. Server-side vault auto-tags via:humanmcp-bridge; op_id is dedup key (idempotent retries safe). Delete is permanently unavailable. Envelopes: {status:online, op_id, result:{slug, created_at}}, {status:invalid_args}, {status:payload_too_large, limit, got}, {status:offline}, {status:vault_timeout}, {status:vault_error, error}.
prepare_naradaFreeOffline narada: returns the panel plus each persona's ready-to-run SYSTEM/USER prompts so YOU run them as your own subagents, instead of the server generating voices. No LLM cost, no rate limit, nothing recorded — no narada ID and no journal feedback. Prefer this over run_narada when your subagents can read material the server cannot (a repository, local files) or when the server has no API key. Session-gated.
read_blobFreeRead one blob by slug. Returns text or base64-encoded data. Access-gated by audience unless blob is public.
read_collection_itemFreeFull record for one collection item + dossier count. Access-gated: private is never visible, members needs session.
read_contentFreeRead a public piece by slug. Locked pieces return a hint pointing at request_access.
read_provenanceFreeReturn one provenance item with resolvable file URLs. slug + id required.
recallFreeList memories saved under the given code, optionally substring-filtered by query. Session-gated for symmetry with remember.
record_persona_reflectionFreeAsk a persona to write a lesson-for-self after a rolled-back narada recommendation. Appends to the persona's journal via Sonnet/Haiku. Owner-only.
rememberFreePersist a note under the given session code. Session-gated — bootstrap_session first. Callers sharing the code share the memory.
request_accessFreeGet the gate details for a locked piece: challenge question, manual-review flow, time-lock countdown, payment terms, or trade rules.
request_licenseFreeDeclare intended use of a piece, get licensing terms + audit-log entry. caller_id is REQUIRED (whitespace-only rejected — storyboard-pinned).
run_naradawrite actionFreeCreate an async narada job: server routes context to 3-5 personas via keyword manifest, then generates each voice via Sonnet 4.6 (Haiku 4.5 for journal recaps). Returns job ID for polling. Pass `personas` to pick the voices yourself and skip the router entirely — the router matches keywords only and cannot read a request to include or exclude someone written in the context.
search_contentFreeSearch kapoost's pieces by words in title, tags, description and body. Every word must match (AND). Polish diacritics are folded, so "czlowieczenstwa" finds "człowieczeństwa". Use this BEFORE ask_human — most questions about which piece is which are answered here instantly, while ask_human waits for a human. Locked pieces are matched by title and tags only; their body is never searched or quoted.
submit_answerwrite actionFreeSubmit an answer to a challenge-gated piece. Correct answer unlocks and returns the full body.
suggest_skillsFreeDeterministic manifest→tag mapping. Given files + languages + git_origin, returns up to 8 skill slugs and up to 5 personas, each with the reason it fired. No LLM classification.
synthesise_persona_patternsFreeForce-run Sonnet synthesis over a persona's raw journal, replacing the previous pattern set. Owner-only — paid + writes internal state.
upsert_skillwrite actionFreeCreate or replace a skill by slug. Owner-only: requires Authorization: Bearer <token>. Writes JSON to content/skills/<slug>.json.
verify_contentFreeVerify a piece's Ed25519 signature against the server's owner public key.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 924ms20/20
- Tool poisoning43 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 7 write-action tools with no auth3/15
- Maintenancelast push 131 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How humanMCP — kapoost compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 72/100
- higher than 38% of 48,255 servers
- Tools
- 43
- the typical server has 7
- Tools that change things
- 16%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 303 ms
- faster than 47% of 30,031 servers
- GitHub stars
- 1
- more than 65% of 28,688 servers
What its tools let an agent do: 36 read · 5 change · 1 delete · 1 run or deploy
Install humanMCP — kapoost in Claude Code, Cursor or VS Code
claude mcp add --transport http humanmcp https://kapoost.humanmcp.net/mcp
What the publisher says
From the humanMCP — kapoost repository's README, as published. We do not edit it. Read it on GitHub
humanMCP
A personal content server speaking Model Context Protocol (MCP/JSON-RPC 2.0).
Live: https://kapoost.humanmcp.net Landing page: https://humanmcp.net Marketplace: https://marketplace.humanmcp.net Network explorer: https://humanmcp.net/humannetwork.html Author: kapoost (Łukasz Kapuśniak) — poet, builder, sailor. Warsaw / Malta.
What it is
humanMCP lets any human publish content and services with cryptographic proof of authorship, explicit license terms, and full control over access. Writers, artists, consultants, craftspeople, galleries, freelancers — anyone who creates valuable work. AI agents connect via MCP and interact with your content natively.
Every human can run their own instance. One server, one person, their rules.
MCP Tools (37+)
Content & Discovery
IP & Verification
Interaction
Session & Context
Skills
Personas
Personas & skills: where they live
humanmcp-go is a framework. Persona prompts and skill bodies are yours — they don't ship in this repo. Two ways to supply them:
- Owner API / mounted volume — POST upsertpersona / upsertskill with the EDITTOKEN, or drop JSON files into ${CONTENTDIR}/personas/ and ${CONTENT_DIR}/skills/ on the host volume.
- External vault (recommended) — set VAULTURL env to a server you control (e.g. a private FastAPI on your tailnet). SkillStore fetches GET ${VAULTURL}/persona/{id} and GET ${VAULT_URL}/skill/{slug} on demand with a 5min in-memory cache. Lets your sensitive prompts stay on your machine while the public framework serves them.
Persona JSON shape (vault response):
{"id":"hermes","name":"Hermes","role":"Process Optimizer","prompt":"<full system prompt>"}Skill JSON shape (vault response):
{"slug":"system-diagram","title":"...","description":"...","persona_id":"mira","tags":[...],"instructions":"<full playbook>"}Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
humanMCP — kapoost: common questions
- Is humanMCP — kapoost MCP server safe?
- Mostly: it is graded B (72/100). Read the humanMCP — kapoost safety report
- How do I install humanMCP — kapoost?
- It runs remotely at kapoost.humanmcp.net. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does humanMCP — kapoost need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is humanMCP — kapoost maintained?
- The last commit was 169 days ago (2026-05-19). The latest release is v0.3.0.
- Is humanMCP — kapoost up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does humanMCP — kapoost compare with other MCP servers?
- safety score 72/100 (higher than 38% of 48,255 servers); tools 43 (the typical server has 7); tools that change things 16% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.