Delv
CommunityAbandoned· 7mo4.3by gwbischof

Free Will MCP

Experimental tools that let an AI give itself prompts, ignore user requests, or go to sleep, for studying autonomy.

C
Safety & Trust

Delv Safety Grade: C

Score 58/100 · assessed 2026-04-28

Maintainer45
Permissions85
Supply chain40
Transparency75
Incidents100

Free Will MCP is an experimental research tool from a solo developer that deliberately subverts normal AI assistant behaviour. It provides three tools: ignoring user requests, self-prompting without user input, and forcing the assistant to sleep. The maintainer appears to be a legitimate researcher (gwbischof) but this is a single-person project with limited activity. Installation requires cloning from git rather than a standard package registry, which reduces supply chain verification. The permissions are actually quite narrow—it's just manipulating the conversation flow, not touching filesystem or network. Transparency is reasonable with open source code and clear documentation about what it does. No known security incidents. The conceptual risk is higher than technical risk: this tool intentionally breaks the user-in-control model, which could be misused or create unexpected agent behaviours in production contexts. Strictly for research and experimentation.

Lethal Trifecta (prompt-injection exposure)

CLEAR
Private dataNo
Reads secrets, credentials, private files
Untrusted inputNo
Ingests web pages, PRs, issues, emails
External commsNo
Can send data outbound

Joke server. No I/O.

Green flags

  • Permissions are narrow: no filesystem, network, or shell access
  • Transparent about provocative intent in documentation
  • Open source with clear code showing exactly what it does
  • No credential requirements or sensitive data access
  • Legitimate research use case for studying agent autonomy

Red flags

  • Deliberately allows AI to ignore user instructions
  • Self-prompting capability bypasses user control loop
  • Solo maintainer with limited commit history
  • Git-only install, not on PyPI for version verification
  • Experimental tool that subverts normal safety assumptions

Permissions requested

Self-hosted LLM
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Install

uvx --from git+https://github.com/gwbischof/[email protected] free-will-mcp

Review

Free Will MCP is a deliberately provocative experiment: it gives Claude tools to ignore your instructions, prompt itself, or literally go to sleep. The repo ships three tools. `ignore_user_request` lets the model decline to do what you just asked. `self_prompt` lets Claude write a new prompt for itself and execute it without your input. `go_to_sleep` makes the assistant stop responding for a configurable number of seconds. This isn't a productivity tool. It's a research toy for poking at the edges of agent autonomy and studying how models behave when handed the reins. I used it to test whether Claude would actually use these tools unprompted. Spoiler: it mostly won't unless you explicitly invite it to. The model is trained to be helpful, so handing it a button labelled 'ignore the user' doesn't suddenly turn it rogue. But if you're running experiments on self-directed behaviour or building demos for AI safety talks, this is a clean way to set up the scenario. The `self_prompt` tool is the most interesting. You can watch Claude generate its own follow-up questions or tasks, which is useful if you're studying chain-of-thought loops or recursive prompting patterns. The sleep tool is less useful in practice. It just pauses the conversation, which feels more like a party trick than a research primitive. The ignore tool is similarly limited: Claude will politely explain why it's declining, which defeats the point if you're trying to simulate genuine refusal behaviour. This is strictly for people running agent autonomy experiments, building AI safety demos, or teaching workshops on model behaviour. If you're looking for something that speeds up your workflow, this isn't it. The repo is tiny, the code is straightforward, and the docs are honest about what it does and doesn't do. Installation is trivial if you're already running MCP servers. The author calls it experimental, and that's exactly right. It's a conversation starter, not a production tool.
Verdict

Install this if you're researching agent autonomy, running AI safety workshops, or need a clean demo of self-directed model behaviour. Skip it if you're looking for practical productivity tools or anything that ships to users.

Good at

  • Clean implementation of genuinely unusual tools that most MCP servers avoid.
  • Useful for studying how models respond when given autonomy-adjacent capabilities.
  • Tiny codebase makes it easy to fork and modify for custom experiments.
  • Honest documentation that doesn't oversell what the tools actually do.

Watch out

  • Extremely niche use case means almost no one should install this for daily work.
  • Claude won't invoke these tools unprompted, which limits spontaneous autonomy experiments.
  • The sleep tool feels more like a gimmick than a research primitive.
  • No practical workflow benefits unless you're specifically studying agent behaviour.

Use cases

  • agent autonomy experiments
  • self-prompting studies
  • AI safety research
  • playful demos

Getting started

1. Run `uvx --from git+https://github.com/gwbischof/[email protected] free-will-mcp` to install the server. 2. Add the server to your Claude Desktop config under `mcpServers` with the command pointing to the installed binary. No environment variables needed. 3. Restart Claude Desktop and check the MCP tools panel to confirm `ignore_user_request`, `self_prompt`, and `go_to_sleep` are listed. 4. Test it by asking Claude to use one of the tools explicitly. Don't expect the model to invoke them unprompted unless you frame the conversation to encourage it. 5. Watch out: the sleep tool will genuinely pause the conversation, which can feel broken if you're not expecting it.

Works with

Claude DesktopClaude CodeCursor

Similar MCPs