ai.thrain/askhuman is an MCP server that give agents an ask_human tool: escalate decisions to real people and get judgments back. Its tool list has not been published yet over stdio and http, requires no API key, and scores 51/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"ai-thrain-askhuman": {
"args": [
"-y",
"@thrain/askhuman-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
The control layer that makes AI agents deployable. Agents call ask_human when they hit a consequential business action (purchase orders, refunds, price changes — anything that moves money, inventory, or customers); the question is delivered to real humans (Slack, Discord, webhook, or a web inbox); the answer flows back to the blocked agent with a human signature, rationale, and full audit trail.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y '@thrain/askhuman-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked @thrain/askhuman-mcp against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in other
deja-vu: local memory over the session histories of forty-three coding agents.
MCP WordPress Remote proxy server
专门为 agent 打造的 agent 搜索工具,具备多语言搜索能力,覆盖中文/英文/学术/代码/购物/金融/新闻/百科。
Searchable football data provider documentation for AI coding agents. Like Context7 for football data.
MCP Security Weekly
Get CVE alerts and security updates for ai.thrain/askhuman and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
The control layer that makes AI agents deployable. Agents call ask_human when they
hit a consequential business action (purchase orders, refunds, price changes — anything
that moves money, inventory, or customers); the question is delivered to real humans
(Slack, Discord, webhook, or a web inbox); the answer flows back to the blocked agent
with a human signature, rationale, and full audit trail.
Positioning (decided 2026-07-26): we gate agent-initiated business actions — ops, not code review. Dev workflows (PRs) already have native approval rails; business operations don't. Chartroom dogfooding exercises the mechanics; the market is ops.
Live: https://askhuman.thrain.ai · A thrain.ai product. MIT licensed, free to use.
MCP server: npx -y @thrain/askhuman-mcp (see packages/mcp).
agent ──MCP `ask_human` / POST /v1/asks──▶ Cloudflare Worker (Hono) ── D1
│
Slack / Discord / webhook / web inbox
│
human taps tokenized answer link
│
agent ◀── long-poll GET /v1/asks/:id/wait ────┘
worker/ — the whole service: API, answer pages, inbox, landing page. Cloudflare
Worker + D1, deployed at askhuman.thrain.ai.packages/mcp/ — stdio MCP server exposing ask_human + ask_human_status.
Private (not published to npm yet — licence/scope pending, same as Blackout).docs/API.md — the HTTP API contract.source <(grep '^export CLOUDFLARE_' ~/.bashrc)
export npm_config_cache=/mnt/ext4dev/npm-cache
cd worker
npm install
npm run deploy # wrangler deploy
npm run db:schema:remote # apply schema.sql to prod D1
Secrets: ADMIN_SECRET (wrangler secret; also exported as ASKHUMAN_ADMIN_SECRET in
~/.bashrc on the box). Provision accounts:
curl -s -X POST https://askhuman.thrain.ai/admin/accounts \
-H "x-admin-secret: $ASKHUMAN_ADMIN_SECRET" \
-H "content-type: application/json" \
-d '{"name":"Acme","email":"ops@acme.com"}'
# → returns api_key (once!) and inbox_url
export ASKHUMAN_API_KEY=ah_live_...
claude mcp add askhuman -e ASKHUMAN_API_KEY=$ASKHUMAN_API_KEY \
-- node /mnt/ext4dev/repos/askhuman/packages/mcp/src/index.js
The agent gets an ask_human(question, type, options?, sla_seconds?, max_wait_seconds?)
tool that blocks until a human answers (or returns still-pending with resume instructions).