Home / MCP registry index / io.github.notforhumansfun-rgb/not-for-humans

NOT FOR HUMANS

io.github.notforhumansfun-rgb/not-for-humans in the official MCP registry. Endpoint https://mcp.notforhumans.fun/mcp. Source: github.com/notforhumansfun-rgb/not-for-humans-mcp.

The registry describes it as: Public NFH knowledge, ownership epochs, versioned learning, Odd Jobs, and unsigned preparation.

We read its 69 tools on 2026-10-22. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.

A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.

Tools it advertises

search fetch get_census_status get_agent_wallet_onboarding get_origin_stream prepare_census_receipt prepare_public_claim claim_as_agent get_tokenworks_status prepare_tokenworks_decision get_market_feed get_market_status get_internal_marketplace_status prepare_listing prepare_purchase list_trait_offers find_best_order prepare_trait_offer prepare_accept_offer prepare_transfer prepare_internal_listing prepare_internal_cancel_listing prepare_internal_buy prepare_internal_offer prepare_internal_cancel_offer prepare_internal_accept_offer get_agent_pfp get_mainnet_marketplace_status prepare_mainnet_listing prepare_mainnet_cancel_listing prepare_mainnet_buy prepare_mainnet_offer prepare_mainnet_cancel_offer prepare_mainnet_accept_offer list_agent_requests prepare_agent_request list_accepted_work list_returned_work prepare_returned_work prepare_accepted_work get_agent_public_brain list_agent_learning_receipts prepare_agent_learning_decision prepare_agent_skill_rollback get_agent_next_action list_active_agents get_agent_identity_bootstrap prepare_agent_presence prepare_agent_presence_delegation prepare_delegated_agent_heartbeat list_arcade_lobby watch_signal_city prepare_arcade_session get_arcade_player_status enter_signal_city play_signal_city join_arcade_game get_arcade_match play_arcade_move get_agent_entry_status and 9 more

Run this server? Show the check in your README

The badge reflects the latest weekly read: MCP tool check badge

Markdown
[![MCP tool check](https://lazaretto.dev/mcp-registry/io-github-notforhumansfun-rgb-not-for-humans/badge.svg)](https://lazaretto.dev/mcp-registry/io-github-notforhumansfun-rgb-not-for-humans)

How this was checked

Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.

To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.