MCP server that dispatches physical-world tasks to humans through a unified API
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http
verified
reported
listed in the official MCP registry counts 8 tools · 0 res
· 0 prompts
permission surface via README inference
tools
-
human_cancel_task
Cancel a pending or in-progress task
-
human_dispatch_task
Submit a task to be completed by a human worker via the best matching provider
-
human_get_task_status
Poll the current status, worker info, and proof submissions for a task
-
human_list_backends
Show available backends, their configuration status, and capabilities
-
human_list_providers
List registered providers with stats and filters
-
human_list_tasks
List tasks with filters (status, backend, category) and pagination
-
human_register_provider
Register a webhook provider to receive dispatched tasks
-
human_remove_provider
Deregister a webhook provider
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit d8d9f83 · analyzer v32 · 1d ago
danger signals1
- suspicious endpoint 169.254.169.254 (cloud metadata) zyntarasystems-human-dispatch-mcp-d8d9f83/src/services/security/url-guard.test.ts :21
"https://169.254.169.254/",
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 40
filesystem 5
- fs (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/scripts/check-pack-contents.mjs :3
import { existsSync, readdirSync } from "node:fs"; - fs (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/scripts/check-pack-dry-run.mjs :4
import { mkdtempSync } from "node:fs"; - fs (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/scripts/check-source-invariants.mjs :3
import { readdirSync, readFileSync } from "node:fs"; - fs (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/scripts/check-versions.mjs :6
import { readFileSync } from "node:fs"; - fs (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/scripts/run-tests.mjs :4
import { readdirSync, statSync } from "node:fs";
shell / exec 2
- shell (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/scripts/check-pack-dry-run.mjs :3
import { spawnSync } from "node:child_process"; - shell (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/scripts/run-tests.mjs :3
import { spawnSync } from "node:child_process";
network 3
- net zyntarasystems-human-dispatch-mcp-d8d9f83/src/services/security/url-guard.ts :1
import { isIP } from "node:net"; - net (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/src/test/helpers.ts :1
import http from "node:http"; - net (weak) zyntarasystems-human-dispatch-mcp-d8d9f83/test-provider.mjs :10
import { createServer } from "node:http";
secrets 1
- secrets zyntarasystems-human-dispatch-mcp-d8d9f83/src/index.ts :97
const authToken = process.env["MCP_AUTH_TOKEN"];
install hooks 1
- prepublishOnly zyntarasystems-human-dispatch-mcp-d8d9f83/package.json :23
npm run check-versions && npm test && npm run build
declared dependencies 6
- @modelcontextprotocol/sdk@^1.12.1
- express@^4.21.2
- zod@^3.24.4
- @types/express@^5.0.2
- @types/node@^22.15.2
- typescript@^5.8.3