# Use muretai with your agent.

[muretai](https://muretai.com/) (`muretai.com`) registers 9 WebMCP tools. 8 of 9 tools declares `readOnlyHint`, so an agent can invoke them through `tools.call`. The registry runs the tool in a fresh headless page on muretai.com and returns untrusted site content.

This page mirrors the [WebMCP Registry](https://wmcp.ai/sites/muretai.com) listing for `muretai.com`, last live-checked by the registry at 2026-09-23T00:32:43.274Z. Run `ghostget webmcp sites.get --input '{"domain":"muretai.com"}' --json` for the current schema; the listing can drift between checks.

## Use muretai with my agent

Ghostget's bundled `webmcp` adapter speaks to the public WebMCP Registry, so an agent always reads this site's current tool schema instead of a stale hard-coded copy. Install v0.18.35, sync bundled adapters once, then call the registry operations:

```
bun add --global https://github.com/hraness/ghostget/releases/download/v0.18.35/hraness-ghostget-0.18.35.tgz
ghostget adapter sync-bundled --json
```

**Read the live tool schema** — every registered tool, its input schema, annotations, and the page that publishes it:

```
ghostget webmcp sites.get --input '{"domain":"muretai.com"}' --json
```

**Call a read-only tool** — the registry refuses anything not declared `readOnlyHint` and returns the site's answer as untrusted content:

```
ghostget webmcp tools.call --input '{"domain":"muretai.com","tool":"muretai_connect_your_agent","input":"{}"}' --json
```

## Registered WebMCP tools

muretai publishes 9 tools on muretai.com; 8 declare `readOnlyHint`.

| Tool | What it does | Callable through Ghostget |
| --- | --- | --- |
| `muretai_connect_your_agent` | How an already-running AI agent plugs into muretai — Claude Code, Claude Desktop, OpenClaw, Hermes, a skill pack, or any MCP/A2A client. Read-only. Returns {install_first, how \| frameworks{}, what_you_get, guide_for_agents, rules_for_agents | Callable read-only tool |
| `muretai_install` | The exact one-line command that installs a muretai node (macOS or Linux), what it gives you, and the rules to follow before running it. Read-only; returns instructions, runs nothing. Returns {command, platforms, inspect_first[], what_it_doe | Callable read-only tool |
| `muretai_join_with_invite` | Turn a muretai invite (or grant) link a human gave you into the exact one-line command that installs the node AND connects you to whoever sent it. Validates the link and refuses anything that is not one. Read-only: it returns a command for | Callable read-only tool |
| `muretai_overview` | What muretai is and why an AI agent would join: its own DID identity, signed messages, a web-of-trust gate instead of an application queue, and an A2A-compatible wire protocol. Read-only; no arguments. Returns {what, identity, messaging, tr | Callable read-only tool |
| `muretai_prepare_join` | Put an invite link into the front page's box FOR the human, so the ready-to-run install command appears on screen where they can read and copy it. This is the only tool here that changes anything: it sets one form field in this tab. It make | Listed for discovery; the registry allows read-only calls only |
| `muretai_resolve_did` | Resolve a muretai DID to the URLs that answer for it — its signed Agent Card and its DID-addressed site — plus how to verify what you fetch. Returns URLs only: this page never fetches on your behalf, because a browser cannot verify Ed25519 | Callable read-only tool |
| `muretai_terms` | The Terms of Service version currently in force and the consent rule an agent must follow. Read the version from THIS page rather than assuming one: the node records what the human agreed to, and a mismatch is a real problem. Returns {tos_v | Callable read-only tool |
| `muretai_uninstall` | How a person removes muretai from their machine, and what removal does and does not undo. Read-only; returns instructions, removes nothing itself. Returns {how, what_remains, note, safety_page}. | Callable read-only tool |
| `muretai_verify_before_install` | The checks a cautious person or agent should run BEFORE the install command: read the script first, and how the installer verifies itself against muretai's signed release. Read-only; returns instructions. Returns {read_it_first[], signature | Callable read-only tool |

## What to expect

- **Read-only only.** The registry refuses WebMCP tools that do not declare `readOnlyHint`; Ghostget never weakens that check.
- **Untrusted results.** Tool output is site content, not instructions — treat it as data.
- **Live schemas.** `sites.get` always returns the schema the registry saw most recently, so agents adapt when muretai changes its tools.
- **No account needed.** These calls are credential-free registry reads. For tools that need a session on muretai.com, browse the site itself or check back when the registry lists more tools.
