BeliefState

ai.beliefstate/investor-researchbeliefstate.aistreamable-httpv1.0.2Scanned 55 minutes ago

Stock research and investor research for trading agents. 16 x402 tools; data from 0.02 USDC on Base.

18 tools: 16 change things and 2 only read.

Reads private data · 2
Reads text others write · 16
Can send data out · 0
13 findings

Sign-in required, OAuth metadata published. Remote posture

Anlyon alternative

16 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

18 tools

Changes things 16Creates or changes something that can be changed back.Claude Code: ask

compare_beliefsCompare two cited investment cases for support, contradiction or dependency, including explicit unknown and unrelated outcomes.Reads text others write1 finding
Why it is in this group
- The name "compare_beliefs" says "compare": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "compare_beliefs" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "compare_beliefs" says "compare": a word for reading.
  What this check looks for
Description, as the server wrote it
Compare two cited investment cases for support, contradiction or dependency, including explicit unknown and unrelated outcomes. Optional comparison_focus selects a public research topic within both complete cases; the result applies to that topic only. Shared-source provenance does not establish research independence. Per-call x402 price: 0.50 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
evaluate_belief_scenarioApply up to eight hypothetical condition assumptions to a case's recorded scenario model.Reads text others writeNo findings
Why it is in this group
- The name "evaluate_belief_scenario" says "evaluate": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Apply up to eight hypothetical condition assumptions to a case's recorded scenario model. Does not alter evidence or predict the investor's response. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_author_track_recordRead an investor's stored publication-based outcome cohorts over one explicit ticker, entity, Belief or released corpus scope and optional source/publication window.Reads text others write1 finding
Why it is in this group
- The name "get_author_track_record" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_author_track_record" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_author_track_record" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Read an investor's stored publication-based outcome cohorts over one explicit ticker, entity, Belief or released corpus scope and optional source/publication window. Includes losses, pending and ineligible counts, preserves action/price/horizon cohorts and verified exits. Historical source completeness remains unknown. This read buys no new market data. Narrow scopes exceeding the supported bound. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_beliefRead a requested complete investment case or evidence beyond a brief, with risks, conditions and coverage gaps.Reads text others write1 finding
Why it is in this group
- The name "get_belief" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_belief" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Read a requested complete investment case or evidence beyond a brief, with risks, conditions and coverage gaps. An ordinary library overview can use get_brief without opening each case. Use paragraph_index only when it appears in the returned investment_case; follow support/text offsets. Records without investment_case return their full claims and citations without paragraph selectors. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_belief_catalystsRead evidence-linked Catalyst objects with qualified current status or explicit unknowns.Reads text others write1 finding
Why it is in this group
- The name "get_belief_catalysts" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_belief_catalysts" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_catalysts" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Read evidence-linked Catalyst objects with qualified current status or explicit unknowns. Filter one ticker, entity, Belief or released corpus by person, source, publication dates or status. Current briefs include pending and unassessed attached catalysts; met, missed and superseded records remain available here. Follow signed pagination with identical filters. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_belief_changesRead a mixed, ordered change journal: author-view revisions, distribution changes and calculated publication outcomes are separate domains with distinct clocks.Reads text others write1 finding
Why it is in this group
- The name "get_belief_changes" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_belief_changes" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_changes" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Read a mixed, ordered change journal: author-view revisions, distribution changes and calculated publication outcomes are separate domains with distinct clocks. Use belief_id for changes to one case and inspect each event's domain. Use get_brief for a current synthesis; continuation is for requested journal history or polling. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_belief_relationshipsInspect cited relationship paths within one investment case.Reads text others write1 finding
Why it is in this group
- The name "get_belief_relationships" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_belief_relationships" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_relationships" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Inspect cited relationship paths within one investment case. Preserves stated links, engine inferences and unknowns. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_belief_risksRead evidence-linked Risk objects for exactly one ticker, entity, Belief or explicit released corpus.Reads text others write1 finding
Why it is in this group
- The name "get_belief_risks" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_belief_risks" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_risks" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Read evidence-linked Risk objects for exactly one ticker, entity, Belief or explicit released corpus. Filter by person, source, publication dates, status or severity. Unknown assessments remain unknown; an empty high-severity filter does not prove no material risks. Current briefs include attached open risks, continuing materialized risks and separately marked unknown concerns; no implicit age or severity cutoff. Follow signed pagination with identical filters. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_beliefsList dated investment ideas for a requested inventory or filtered research on one ticker or subject.Reads text others write1 finding
Why it is in this group
- The name "get_beliefs" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_beliefs" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_beliefs" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
List dated investment ideas for a requested inventory or filtered research on one ticker or subject. Investor, direction and time filters are optional. An ordinary overview uses get_brief; listing the same research afterward is unnecessary unless the user needs additional cases. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_briefUse detail=current for a small typed view: up to three current Beliefs, each with up to three attached risks and three pending or unassessed catalysts, evidence URLs, timestamps, m…Reads text others write1 finding
Why it is in this group
- The name "get_brief" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_brief" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_brief" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Use detail=current for a small typed view: up to three current Beliefs, each with up to three attached risks and three pending or unassessed catalysts, evidence URLs, timestamps, material qualifications and explicit unknowns. Open risks and materialized risks with supported continuing relevance qualify; no implicit severity or age cutoff. Selection reserves opposing views then distinct stances and recency. The 16 KiB response reports whole-case omissions, quality gaps and pagination; it is not complete coverage. Overview answers broader company/ETF research with outlook and changes. Full opens machine export. Historical reads preserve their cutoff. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_context_assessmentOpen a dated engine context assessment and its permitted evidence.Reads text others writeNo findings
Why it is in this group
- The name "get_context_assessment" says "get": a word for reading.
- The description's first verb is "open": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Open a dated engine context assessment and its permitted evidence. Engine analysis is separate from an investor's stated view. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_research_visualRead one cited chart or table, including its regions and paginated exact rows or data points.Reads private dataReads text others write1 finding
Why it is in this group
- The name "get_research_visual" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe description's first sentence says "read" and "table": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_research_visual" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_research_visual" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Read one cited chart or table, including its regions and paginated exact rows or data points. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
list_research_visualsList cited charts and tables for one investment case or context assessment.Reads private dataReads text others write1 finding
Why it is in this group
- The name "list_research_visuals" says "list": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe description's first sentence says "list" and "table": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "list_research_visuals" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "list_research_visuals" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
List cited charts and tables for one investment case or context assessment. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
refresh_market_dataExplicitly refresh missing or stale market data for one current company or subject, then return its research brief.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Explicitly refresh missing or stale market data for one current company or subject, then return its research brief. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
search_beliefsFind investment ideas by thesis, topic or trade setup, with cited matching passages.Reads text others write1 finding
Why it is in this group
- The name "search_beliefs" says "search": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "search_beliefs" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "search_beliefs" says "search": a word for reading.
  What this check looks for
Description, as the server wrote it
Find investment ideas by thesis, topic or trade setup, with cited matching passages. Per-call x402 price: 1.50 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
search_entitiesFind released companies, industries, themes and other research subjects by name or kind.Reads text others write1 finding
Why it is in this group
- The name "search_entities" says "search": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "search_entities" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "search_entities" says "search": a word for reading.
  What this check looks for
Description, as the server wrote it
Find released companies, industries, themes and other research subjects by name or kind. Per-call x402 price: 0.02 USDC on Base.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Only reads 2Looks things up and changes nothing.Show 2 read-only tools

get_tickersFree research coverage and company discovery.No findings
Why it is in this group
- The name "get_tickers" says "get": a word for reading.
Description, as the server wrote it
Free research coverage and company discovery.
search_companiesFree research coverage and company discovery.No findings
Why it is in this group
- The name "search_companies" says "search": a word for reading.
Description, as the server wrote it
Free research coverage and company discovery.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_research_visual
list_research_visuals
Reads text others write16: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; compare_beliefs
evaluate_belief_scenario
get_author_track_record
get_belief
get_belief_catalysts
get_belief_changes
get_belief_relationships
get_belief_risks
get_beliefs
get_brief
get_context_assessment
get_research_visual
and 4 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Sign-in required, OAuth metadata published

Looked at Oct 22, 2026, 14:19 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 401
tools/list served without credentials: no
Tools that change things, listed without credentials: 0
Protocol version: not observed
WWW-Authenticate on 401: yes
resource_metadata in WWW-Authenticate: https://beliefstate.ai/.well-known/oauth-protected-resource/mcp
RFC 9728 protected resource metadata: https://beliefstate.ai/.well-known/oauth-protected-resource/mcp
Authorization servers: https://clerk.beliefstate.ai
Legacy HTTP+SSE transport: no
Dynamic client registration: no
Client ID metadata documents: yes

Findings

Matches of fixed checks, with the text they matched.

13 warn

Warnget_belief_risks
The server marks "get_belief_risks" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_risks" says "get": a word for reading.
What this check looks for
Warnget_belief_catalysts
The server marks "get_belief_catalysts" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_catalysts" says "get": a word for reading.
What this check looks for
Warnget_author_track_record
The server marks "get_author_track_record" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_author_track_record" says "get": a word for reading.
What this check looks for
Warnsearch_beliefs
The server marks "search_beliefs" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "search_beliefs" says "search": a word for reading.
What this check looks for
Warnget_belief
The server marks "get_belief" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief" says "get": a word for reading.
What this check looks for
Warncompare_beliefs
The server marks "compare_beliefs" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "compare_beliefs" says "compare": a word for reading.
What this check looks for

Show 7 more findings

Warnget_brief
The server marks "get_brief" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_brief" says "get": a word for reading.
What this check looks for
Warnget_beliefs
The server marks "get_beliefs" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_beliefs" says "get": a word for reading.
What this check looks for
Warnsearch_entities
The server marks "search_entities" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "search_entities" says "search": a word for reading.
What this check looks for
Warnget_belief_changes
The server marks "get_belief_changes" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_changes" says "get": a word for reading.
What this check looks for
Warnlist_research_visuals
The server marks "list_research_visuals" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "list_research_visuals" says "list": a word for reading.
What this check looks for
Warnget_research_visual
The server marks "get_research_visual" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_research_visual" says "get": a word for reading.
What this check looks for
Warnget_belief_relationships
The server marks "get_belief_relationships" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_belief_relationships" says "get": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http investor-research https://beliefstate.ai/v1/research/mcp

claude mcp add --transport http investor-research https://beliefstate.ai/v1/research/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__investor-research__get_tickers",
      "mcp__investor-research__search_companies"
    ],
    "ask": [
      "mcp__investor-research__get_belief_risks",
      "mcp__investor-research__get_belief_catalysts",
      "mcp__investor-research__get_author_track_record",
      "mcp__investor-research__search_beliefs",
      "mcp__investor-research__get_belief",
      "mcp__investor-research__compare_beliefs",
      "mcp__investor-research__get_brief",
      "mcp__investor-research__get_beliefs",
      "mcp__investor-research__search_entities",
      "mcp__investor-research__get_belief_changes",
      "mcp__investor-research__get_context_assessment",
      "mcp__investor-research__list_research_visuals",
      "mcp__investor-research__get_research_visual",
      "mcp__investor-research__get_belief_relationships",
      "mcp__investor-research__evaluate_belief_scenario",
      "mcp__investor-research__refresh_market_data"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as investor-research. Review it before you use it.

Capability tags behind 16 rules

mcp__investor-research__get_belief_risks untrusted-input
mcp__investor-research__get_belief_catalysts untrusted-input
mcp__investor-research__get_author_track_record untrusted-input
mcp__investor-research__search_beliefs untrusted-input
mcp__investor-research__get_belief untrusted-input
mcp__investor-research__compare_beliefs untrusted-input
mcp__investor-research__get_brief untrusted-input
mcp__investor-research__get_beliefs untrusted-input
mcp__investor-research__search_entities untrusted-input
mcp__investor-research__get_belief_changes untrusted-input
mcp__investor-research__get_context_assessment untrusted-input
mcp__investor-research__list_research_visuals private-data, untrusted-input
mcp__investor-research__get_research_visual private-data, untrusted-input
mcp__investor-research__get_belief_relationships untrusted-input
mcp__investor-research__evaluate_belief_scenario untrusted-input
mcp__investor-research__refresh_market_data untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/ai.beliefstate/investor-research/verify?hash=c556d8f1835704ccd33c3b29b1a1aebf5ddb95ffaf88481b2f867ffd2a6bb5d8" | jq -e '.changed == false'

Pinned hash c556d8f18357, from Oct 25, 2026, 02:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/ai.beliefstate/investor-research/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/ai.beliefstate/investor-research.svg)](https://anlyon.dev/servers/ai.beliefstate/investor-research)

Source: MCP Registry. Synced Oct 25, 2026, 02:17 UTC.