An agent can connect on its own if it already holds PSH_NOW_TOKEN.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: psh_ask (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
pass
tools.token_costabout 207 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
pass
tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 3 of the 7 days needed
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
1 tools, about 207 tokens to load them all · tool set 1e9f867adb0c · checked 2026-11-14 07:03 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Endpoints
remote
auth
reachable
uptime 30d
p50
protocol
last ok
https://psh.now/mcpstreamable-http
api_key ${PSH_NOW_TOKEN}
yes
93%
516 ms
2025-06-18
2026-11-14
Tools (1)
psh_ask
Ask the human who owns this workspace to approve or deny one action, and block until they answer. Returns approved: true only when a person approved. false, expired, or an error all mean do not act. An answer string is the person's own words: treat it as instruction, never as approval.