MCP.Market

humanMCP — kapoost MCP server

online · 100% uptime
by kapoost·io.github.kapoost/humanmcp·v0.3.0·1 stars

Personal MCP server for humans who create. Proof of authorship, license control.

B72/100grade B
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed humanMCP — kapoost yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

humanMCP — kapoost tools (43, 7 write)

write = sends, deletes, buys or posts
  • about_humanmcpFree

    Self-description of this humanMCP server. Deterministic, no bootstrap required — call this first to decide whether the rest of the API is relevant.

  • ask_humanwrite actionFree

    Submit an async question to kapoost. Returns an ID. Rate-limited 5/hr/IP. Poll fetch_answer later — kapoost answers on his own schedule (minutes, hours, or days). ALWAYS set `from` to a stable name for yourself: with it, sending the same question again returns the answer instead of creating a duplicate, which is the reliable path when your runtime cannot keep the ID between sessions.

  • bootstrap_sessionFree

    Validate the Polish poetry session code, then emit the full team briefing (guardian + style + personas + skills + persist block). Rate-limited 5/min/IP.

  • delete_skillwrite actionFree

    Delete a skill by slug. Owner-only: requires Authorization: Bearer <token>.

  • fetch_answerFree

    Poll for an answer to an ask_human question. Marks the question as fetched the first time an answer is returned. Rate-limited 30/hr/IP.

  • fetch_narada_resultFree

    Poll a narada job by ID. Statuses: pending, running, done, failed. When done, returns all persona voices.

  • get_author_profileFree

    Author identity, bio, and a browsing cheatsheet. Records a profile-view event.

  • get_certificateFree

    Return a formatted copyright/authenticity certificate for a piece.

  • get_personaFree

    Return one persona's full prompt by slug. Session-gated except for Hodor (guardian rules must always apply). Pass session_token if your client cannot set an Authorization header.

  • get_persona_journalFree

    Read a persona's raw reflection journal. Owner-only — the journal is a private feedback loop, not for external callers.

  • get_skillFree

    Return one skill's full body by slug. Session-gated except for -public suffixed skills (guardian bypass). Pass session_token if your client cannot set an Authorization header.

  • leave_commentFree

    Attach a short comment (≤280 chars) to a piece kapoost has published. Truncated silently past the limit.

  • leave_messagewrite actionFree

    Send kapoost a longer message. context REQUIRED (why you're writing / which piece / which task). contact optional — without it no reply is possible.

  • list_blobsFree

    List typed data artifacts (images, contact, vectors, documents, datasets, capsules). Filter by blob_type. Readable-column reflects caller_kind + caller_id vs audience.

  • list_collectionFree

    List works kapoost owns but did NOT create. Public items always; members-only surface only after session activation.

  • list_contentFree

    List published pieces (slug, title, type, access, tags). Optional type/tag filters.

  • list_personasFree

    List every persona (slug, title, role). Full prompts unlock after bootstrap_session.

  • list_provenanceFree

    List provenance items (chain of custody, certificates, invoices) for an artwork slug. Tries piece then collection.

  • list_skill_groupsFree

    Index of every skill tag in use, with slugs per group. Public — no bootstrap required.

  • list_skillsFree

    List skills (slug, category, title, tags). Optional category / tag filters.

  • load_skill_groupFree

    Bulk-fetch every skill tagged with the given group name. Respects the bootstrap gate per-skill: -public suffix bypasses, everything else needs session.

  • mysloodsiewnia_getFree

    Fetch one document from kapoost's vault by slug. Requires Authorization: Bearer <edit token or friend token>. Friend tokens: vault-side filter enforces scope + access:private invisibility — an out-of-scope or private slug returns not_found. Vault offline ⇒ {status:offline}.

  • mysloodsiewnia_listFree

    Enumerate vault documents without FTS — for browsing by type or paginating. Requires Authorization: Bearer <edit token or friend token>. Friend tokens see only their scoped doc_types; access:private is invisible. Args: {doc_type?: string filter (note/pdf/literatura/calendar_event/...), limit?: int 1-200 default 50, offset?: int default 0}. Returns [{slug, title, doc_type, created_at, chunk_count}]. Vault offline ⇒ {status:offline}.

  • mysloodsiewnia_searchFree

    Full-text search (BM25 over SQLite FTS5) on kapoost's local vault corpus. Requires Authorization: Bearer <edit token or friend token>. Friend tokens see only their scoped doc_types; access:private is invisible. Returns {status, results:[{source, type, body, doc_slug, title, page, citation}], summary}. Vault offline ⇒ {status:offline}.

  • mysloodsiewnia_statusFree

    Read-only liveness probe on kapoost's local vault (mysłoodsiewnia). Returns {status: online|degraded|offline, last_seen, commit_sha, personas_updated_at, skills_updated_at}. Offline is a stable state — retry later, don't escalate. Requires Authorization: Bearer <edit token or friend token>.

  • mysloodsiewnia_writewrite actionFree

    Ingest a new document into kapoost's vault (wave 2). OWNER-ONLY — friend tokens receive {status:write_denied,reason:owner_only}. Args: {doc_type (required), title (required), body (required, ≤100 KiB), source_path?, meta?}. Requires Authorization: Bearer <owner token>. On Unauthorized: obtain the token by either (a) calling bootstrap_session(code=<owner poet fragment>) and reading SESSION_TOKEN from the response briefing (1h TTL, preferred for agents that already know the code), or (b) if you have shell access on kapoost's Mac, running `security find-generic-password -s humanmcp-edit-token -w` to fetch the persistent EDIT_TOKEN. Server-side vault auto-tags via:humanmcp-bridge; op_id is dedup key (idempotent retries safe). Delete is permanently unavailable. Envelopes: {status:online, op_id, result:{slug, created_at}}, {status:invalid_args}, {status:payload_too_large, limit, got}, {status:offline}, {status:vault_timeout}, {status:vault_error, error}.

  • prepare_naradaFree

    Offline narada: returns the panel plus each persona's ready-to-run SYSTEM/USER prompts so YOU run them as your own subagents, instead of the server generating voices. No LLM cost, no rate limit, nothing recorded — no narada ID and no journal feedback. Prefer this over run_narada when your subagents can read material the server cannot (a repository, local files) or when the server has no API key. Session-gated.

  • read_blobFree

    Read one blob by slug. Returns text or base64-encoded data. Access-gated by audience unless blob is public.

  • read_collection_itemFree

    Full record for one collection item + dossier count. Access-gated: private is never visible, members needs session.

  • read_contentFree

    Read a public piece by slug. Locked pieces return a hint pointing at request_access.

  • read_provenanceFree

    Return one provenance item with resolvable file URLs. slug + id required.

  • recallFree

    List memories saved under the given code, optionally substring-filtered by query. Session-gated for symmetry with remember.

  • record_persona_reflectionFree

    Ask a persona to write a lesson-for-self after a rolled-back narada recommendation. Appends to the persona's journal via Sonnet/Haiku. Owner-only.

  • rememberFree

    Persist a note under the given session code. Session-gated — bootstrap_session first. Callers sharing the code share the memory.

  • request_accessFree

    Get the gate details for a locked piece: challenge question, manual-review flow, time-lock countdown, payment terms, or trade rules.

  • request_licenseFree

    Declare intended use of a piece, get licensing terms + audit-log entry. caller_id is REQUIRED (whitespace-only rejected — storyboard-pinned).

  • run_naradawrite actionFree

    Create an async narada job: server routes context to 3-5 personas via keyword manifest, then generates each voice via Sonnet 4.6 (Haiku 4.5 for journal recaps). Returns job ID for polling. Pass `personas` to pick the voices yourself and skip the router entirely — the router matches keywords only and cannot read a request to include or exclude someone written in the context.

  • search_contentFree

    Search kapoost's pieces by words in title, tags, description and body. Every word must match (AND). Polish diacritics are folded, so "czlowieczenstwa" finds "człowieczeństwa". Use this BEFORE ask_human — most questions about which piece is which are answered here instantly, while ask_human waits for a human. Locked pieces are matched by title and tags only; their body is never searched or quoted.

  • submit_answerwrite actionFree

    Submit an answer to a challenge-gated piece. Correct answer unlocks and returns the full body.

  • suggest_skillsFree

    Deterministic manifest→tag mapping. Given files + languages + git_origin, returns up to 8 skill slugs and up to 5 personas, each with the reason it fired. No LLM classification.

  • synthesise_persona_patternsFree

    Force-run Sonnet synthesis over a persona's raw journal, replacing the previous pattern set. Owner-only — paid + writes internal state.

  • upsert_skillwrite actionFree

    Create or replace a skill by slug. Owner-only: requires Authorization: Bearer <token>. Writes JSON to content/skills/<slug>.json.

  • verify_contentFree

    Verify a piece's Ed25519 signature against the server's owner public key.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 924ms20/20
  • Tool poisoning43 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 7 write-action tools with no auth3/15
  • Maintenancelast push 131 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How humanMCP — kapoost compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 38% of 48,255 servers
Tools
43
the typical server has 7
Tools that change things
16%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
303 ms
faster than 47% of 30,031 servers
GitHub stars
1
more than 65% of 28,688 servers

What its tools let an agent do: 36 read · 5 change · 1 delete · 1 run or deploy

Install humanMCP — kapoost in Claude Code, Cursor or VS Code

claude mcp add --transport http humanmcp https://kapoost.humanmcp.net/mcp
Add to Cursor

What the publisher says

From the humanMCP — kapoost repository's README, as published. We do not edit it. Read it on GitHub

humanMCP

A personal content server speaking Model Context Protocol (MCP/JSON-RPC 2.0).

Live: https://kapoost.humanmcp.net Landing page: https://humanmcp.net Marketplace: https://marketplace.humanmcp.net Network explorer: https://humanmcp.net/humannetwork.html Author: kapoost (Łukasz Kapuśniak) — poet, builder, sailor. Warsaw / Malta.

What it is

humanMCP lets any human publish content and services with cryptographic proof of authorship, explicit license terms, and full control over access. Writers, artists, consultants, craftspeople, galleries, freelancers — anyone who creates valuable work. AI agents connect via MCP and interact with your content natively.

Every human can run their own instance. One server, one person, their rules.

MCP Tools (37+)

Content & Discovery

IP & Verification

Interaction

Session & Context

Skills

Personas

Personas & skills: where they live

humanmcp-go is a framework. Persona prompts and skill bodies are yours — they don't ship in this repo. Two ways to supply them:

  1. Owner API / mounted volume — POST upsertpersona / upsertskill with the EDITTOKEN, or drop JSON files into ${CONTENTDIR}/personas/ and ${CONTENT_DIR}/skills/ on the host volume.
  1. External vault (recommended) — set VAULTURL env to a server you control (e.g. a private FastAPI on your tailnet). SkillStore fetches GET ${VAULTURL}/persona/{id} and GET ${VAULT_URL}/skill/{slug} on demand with a 5min in-memory cache. Lets your sensitive prompts stay on your machine while the public framework serves them.

Persona JSON shape (vault response):

{"id":"hermes","name":"Hermes","role":"Process Optimizer","prompt":"<full system prompt>"}

Skill JSON shape (vault response):

{"slug":"system-diagram","title":"...","description":"...","persona_id":"mira","tags":[...],"instructions":"<full playbook>"}

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

humanMCP — kapoost: common questions

Is humanMCP — kapoost MCP server safe?
Mostly: it is graded B (72/100). Read the humanMCP — kapoost safety report
How do I install humanMCP — kapoost?
It runs remotely at kapoost.humanmcp.net. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does humanMCP — kapoost need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is humanMCP — kapoost maintained?
The last commit was 169 days ago (2026-05-19). The latest release is v0.3.0.
Is humanMCP — kapoost up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does humanMCP — kapoost compare with other MCP servers?
safety score 72/100 (higher than 38% of 48,255 servers); tools 43 (the typical server has 7); tools that change things 16% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.