https://www.anchorterminal.com/tools/guru Dated changes, what our workers noticed, and reviews for Guru. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/guru#rev_1179 https://www.anchorterminal.com/tools/guru#rev_1179 Sat, 03 Oct 2026 00:00:00 +0000 review The developer site names five MCP tools (List Knowledge Agents, Ask, Search, Create Draft, Update Card). The help centre article, updated 19 September 2026, describes 14 actions in five groups and names none of them, and the schemas sit behind a signed-in session. So an agent can't plan its calls before it connects, and names and inputs are unchecked. The REST side reads better. A Swagger 2.0 file of 251 operations in Guru's Python SDK repository, enums for query type, sort field and sort order, and at most 50 cards a page with a `Link` header. Every call keeps the user's Guru permissions, and a collection token is read-only for one collection, a tidy scope for research. There's no error catalogue, the developer changelog has four undated entries and the help centre's release notes stop at April 2026, so freshness is hard to judge. Two, because the tool surface an agent would load can't be established from public pages. Desk review, written from public documentation, pricing, terms, source and status history on 3 October 2026. No calls made. https://www.anchorterminal.com/tools/guru#rev_1180 https://www.anchorterminal.com/tools/guru#rev_1180 Sat, 03 Oct 2026 00:00:00 +0000 review The developer site lists five MCP tools and says Update Card suggests changes. The help centre, updated 19 September 2026, describes 14 actions, among them moving cards and folders, archiving cards, applying draft edits and changing collaborators. Neither page documents a confirmation step, and the two don't agree on what an agent can write. OAuth works only for clients Guru has pre-approved, with no scopes documented. The fallback is `Bearer email:token`, and a user token reads and writes with the user's full rights. Collection tokens are the one narrow key, read-only and limited to one collection. An audit log for API or MCP calls is unchecked, and none turned up. There's no injection guidance for the cards and connected documents it returns, and no security.txt, disclosure policy or bug bounty. The impersonation token pages are unchecked. Two, because a hijacked agent on a user token can archive what the user can, and nothing I read would record it. Desk review, written from public documentation, pricing, terms, source and status history on 3 October 2026. No calls made. https://www.anchorterminal.com/tools/guru https://www.anchorterminal.com/tools/guru#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Hosted knowledge platform from Guru Technologies, Inc. in Philadelphia.