# com.getfreedomos/freedom-mcp Business-ops MCP for FreedomOS — finance, OKRs, customer scoring, AI agents, content. 250+ tools. - **Type:** MCP server - **Trust:** 30/100 (D), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.0 - **Author:** com.getfreedomos - **License:** Unknown - **Endpoints:** streamable-http https://twuluxmoognlwtmaoqgo.supabase.co/functions/v1/freedom-mcp - **Source:** https://getfreedomos.com - **Endpoint health:** reachable (last checked 2026-09-14T13:22:10.588Z, 4 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 30/100 (D), scored on the content rubric - Publisher verified: no - Install scripts: suspicious script found - Prompt-injection scan: findings present - Obfuscation scan: clean - Evidence age: 1 day ## Security scan - **Status:** warnings - **Scanned:** 2026-09-14T13:22:10.588Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (note) in the `connect_remote_mcp` tool: Links to undeclared domain: is-agentic.com - injection-shaped content (note) in the `attach_product_request_pr` tool: Links to undeclared domain: github.com - injection-shaped content (note) in the `get_my_channel_partner_starter_pack` tool: Links to undeclared domain: getfreedomos.com - injection-shaped content (note) in the `link_agent_okrs` tool: References the system prompt - injection-shaped content (warning) in the `clear_pipeline_learnings` tool: Instruction-override phrase ## Tools 200 declared. Observed from a live `tools/list` probe. - `list_integrations` — List ALL connected external integrations — MCP servers, OAuth accounts (Google, X, ...), and direct integrations (Xero accounting, Stripe) — and the tools each - `invoke_integration` — Execute a tool on a connected MCP integration. First use list_integrations to discover available tools. [outbound-tier — list/read and content drafts can gradua - `search_connector_registry` — When a goal needs a service, search here — do not stop at not-connected. Returns this company's existing connectors, accounts the operator already admins on ano - `request_connector` — Climb the door ladder for a needed service: bind this company's connector, offer reuse of an account the operator already admins on another FreedomOS company (" - `start_oauth` — Start, poll, or finish FreedomOS-native vendor sign-in (X, Slack, Meta, Xero) after the operator approved the Connect card. action=start mints once and returns - `connect_remote_mcp` — Bind a remote Streamable HTTP MCP onto this company from an https URL. Optional static headers (Authorization and API-key names refused — keys stay in Vault). T - `grant_agent_tool` — Grant ONE specific tool to an agent's loadout (tool_access). Use when an operator says "give the tool" / "let use ". The tool name - `revoke_agent_tool` — Remove ONE specific tool from an agent's loadout (tool_access). Use when an operator says "take away from " — or to clean a phantom/stale name out - `submit_product_request` — File a bug report or feature request about FreedomOS the platform (FO UI, MCP tools, Command Center, auth, connectors, FO agents runtime) with the FreedomOS pro - `get_product_request_status` — Check status of a product request you previously filed with submit_product_request for your operator. Returns pending | approved | denied | dismissed | complete - `open_product_request_draft_pr` — MANUAL ONLY — open a draft GitHub PR shell for an approved FreedomOS product request. Approve no longer auto-opens a ticket PR (that class emailed the operator - `attach_product_request_pr` — Attach an existing freedom-ai GitHub PR URL to a product request and **resolve it by construction** (card → approved, product_status=fixed, history comment, fil - `claim_product_request_for_builder` — Mint a paste-ready Builder claim recipe for a FreedomOS product request so a host coding agent (Grok Build / Claude Code) with Harness + gstack can implement th - `scan_product_signals` — Scan a company for product-system bugs and unlocks (failed/timed-out activity runs, blocked_on_you cards, open error agent_feedback) and return ranked product-r - `get_team_pulse` — Get a real-time snapshot of team output volume, pending approvals, and founder load. pending_cards is the LIVE open queue (includes cards older than `days`). ac - `get_activity_health` — Audit all agent activities for staleness, business outcome alignment, and cross-agent overlap. Returns per-activity description, linked_kr_id, run count, all-ti - `get_command_center_items` — List Command Center cards for the company (pending by default; pass status_filter for approved/denied/snoozed/all). Returns decisions AND first-class update/rep - `get_command_center_item` — Read ONE Command Center card by id — full description, full deliverable content, and full context payload, in ANY status (pending, approved, denied, snoozed). T - `decide_command_center_item` — Approve or deny a Command Center card. This processes the decision through the full approval pipeline including trust scoring, autopilot evaluation, skill learn - `trigger_agent_activity` — Trigger a specific agent to run a specific activity immediately. This dispatches the work and returns — it does not wait for the activity to complete. Use this - `run_playbook` — Run a saved Playbook (growth_tactics) for the company operator or agent — dispatch the next unit as a one-off draft activity, or dry-run a Playbook brief with s - `toggle_agent_schedule` — Pause or resume an agent's scheduled activities — the whole activity plan, or a single activity via activity_name. Pausing stops future scheduler-dispatched run - `get_agent_performance` — Get detailed performance stats for a specific agent: run count, quality scores, approval/denial rates, error count, recent errors with context, and slowest runs - `add_agent_activity` — Add ONE activity to an agent's activity plan without regenerating the whole plan. Use to give an agent a new recurring or one-off deliverable. (To rebuild the e - `update_agent_activity` — Edit ONE existing activity in an agent's plan — change its name, description, frequency, tools_used, deliverable, or completion_criteria. Surgical alternative t - `remove_agent_activity` — Retire ONE activity from an agent's plan. Soft-archive (recoverable): the activity is MOVED to jd_content.archived_activities and removed from the live plan, so - `split_agent_activity` — Split ONE oversized activity into smaller activities (intake + finish) without regenerating the rest of the plan. Use when a run hit the continuation safety bac - `create_play_from_activity` — Draft a Play (growth_tactics with steps + human review) from an oversized agent activity. Does not run the play — operator Agrees via agree_playbook (MCP/Chat) - `get_attention_budget` — THE tool for the founder's attention budget — the operator-set ceiling on pending review cards before they are 'overloaded' (e.g. "what's my attention budget?", - `set_attention_budget` — Set the founder's attention budget — the maximum pending review cards before they are 'overloaded' (a whole number 1–100; default 7) — for a manager or the foun - `create_attention_directive` — Queue a short instruction for an external agent session — a coding/builder host (Grok terminal, Claude Code) or a Grok Bot desktop chat agent (host grok-bot, e. - `list_attention_directives` — List pending attention directives for THIS operator (optionally filtered by target_session_id). Hosts (Grok/Claude) and CoS use this to see what is waiting. Doe - `ack_attention_directive` — Mark a pending attention directive as acked after the host session has taken the instruction. Use when YOU are Grok/Claude/a host builder and you just executed - `cancel_attention_directive` — Cancel a pending attention directive (operator changed mind / wrong target). Use when the operator says drop/cancel that instruction to Grok or Claude, or CoS r - `route_operator_hud` — Route the operator's desk HUD to a view they asked to see — open a door (money, sessions, home, roster, loadout, upgrades), lock a company zone, drill into a co - `list_attention_sessions` — List THIS operator's coding/builder sessions (status, goal, ask). Hygiene: drops stale hosts (no recent heartbeat) and blocked rows without a real ask. Use need - `list_grok_bot_conversations` — List THIS operator's Grok Bot desktop chat seats (not Terminal/ACP coding Groks) with live/quiet/gone labels and last turns. Use when they ask to see or talk ab - `get_attention_quest` — Speech-safe Quest Log strip for voice CoS (N5). One call returns: primary next move (featured Command Center card when companyId given, else top host that needs - `get_factory_floor` — Read the Mac desk factory snapshot for THIS operator (ACP up/down, last launcher event, official workers vs leftover UUID/TUI tabs, Terminal fallbacks in 24h). - `park_attention_sessions` — Park THIS operator's coding host sessions (N6 hygiene). Use after "clean tabs" / "park ghosts" / list shows dead running hosts. Pass session_ids for explicit ta - …and 160 more ## Install **Verdict: do-not-install** — Do not install: 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. **Blocking** - 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. — tool:clear_pipeline_learnings: Instruction-override phrase **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it. If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true. ## Blast radius Extensive to critical — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs commands; 10 privileged tools. - Floor 46, ceiling 74 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.getfreedomos%2Ffreedom-mcp - Install plan: https://forgeregistry.com/api/v1/packages/com.getfreedomos%2Ffreedom-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.getfreedomos%2Ffreedom-mcp - HTML page: https://forgeregistry.com/registry/com.getfreedomos%2Ffreedom-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.