# `ai.coldstate/knowledge` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/ai.coldstate/knowledge
- JSON: https://anlyon.dev/api/v1/servers/ai.coldstate/knowledge
- Version: 0.1.0 (active)
- Publisher: ai.coldstate (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T17:41:27.880Z

Title and description, as the publisher wrote them:

```untrusted-server-text
ColdState — Deterministic Knowledge Infrastructure
Deterministic knowledge for AI agents: search, fetch, cite and verify a 48M-entry knowledge base.
```

Scanned 2026-10-21T18:40:00.462Z over streamable-http.

**16 tools: 5 change things and 11 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 5 | ask |
| Only reads | read | 11 | allow |

## Findings

- **warn** Annotations that disagree with the tool in `coldstate_batch_search` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "coldstate_batch_search" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true}; The name "coldstate_batch_search" says "search": a word for reading.
```


## Changes things (5)

Creates or changes something that can be changed back. Claude Code: ask.

### `coldstate_batch_search`

- The name "coldstate_batch_search" says "search": a word for reading.
- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Run several knowledge-base queries in one call against a single consistent kb_snapshot. Returns each query with its ranked results — efficient and snapshot-consistent across the whole batch.
```

### `coldstate_capabilities`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Machine-readable manifest of this server: available tools, knowledge domains, current kb_snapshot, determinism guarantees, and limits. Call this first to self-configure.
```

### `coldstate_isomorph`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Cross-domain structural analog: given a knowledge entry id, find its closest structural twin in each OTHER domain ("same structure, different domain"). Deterministic. Use coldstate_resolve to turn a name into an id first.
```

### `coldstate_stats`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Deterministic statistics. With a `query`: total matches + state distribution of the top results. Without: global knowledge-base stats (entry count, domains, snapshot).
```

### `coldstate_verify`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Verify a previously-cited knowledge fact is unchanged. Provide the entry id and the content_hash you stored earlier; returns whether it still matches the current knowledge base. The trust primitive for AI-to-AI fact-checking.
```

## Only reads (11)

Looks things up and changes nothing. Claude Code: allow.

### `coldstate_browse_documents`

- The name "coldstate_browse_documents" says "browse": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Browse documents in a ColdState index. Indexes are zero-knowledge, so each document is returned as your ref_id plus its state classification and E-score — no stored text. Map ref_id back to your own content.
```

### `coldstate_cite`

- The description's first verb is "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get a canonical, reproducible citation for a knowledge entry by id (title, domain, source, content_hash, kb_snapshot). Cite a fact so it can be re-verified later with coldstate_verify.
```

### `coldstate_domains`

- The description's first verb is "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List all available knowledge domains in ColdState's global knowledge base with entry counts.
```

### `coldstate_explain`

- The name "coldstate_explain" says "explain": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Explain why a specific document ranked for a query. Returns a per-term relevance breakdown and an overall match summary — deterministic and reproducible.
```

### `coldstate_fetch`

- The name "coldstate_fetch" says "fetch": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Fetch a single knowledge-base entry verbatim by its stable id (e.g. "eng_000229f438f7cebd"). Deterministic retrieval — returns the full record plus a content_hash and kb_snapshot for reproducible citation.
```

### `coldstate_list_indexes`

- The name "coldstate_list_indexes" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List all your ColdState indexes with their status, mode, document count, and domain preset.
```

### `coldstate_related`

- The description's first verb is "find": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Find knowledge entries deterministically related to a given entry id via ColdState's concept-cluster graph. Returns same-cluster and neighboring-cluster entries, each tagged with its relation and a cross_domain flag. Same id ⇒ same neighbors.
```

### `coldstate_resolve`

- The name "coldstate_resolve" says "resolve": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Resolve a name, alias, or surface form to its canonical ColdState knowledge entry (id + title). Deterministic: an exact title match wins, else the top relevance-Ψ entry. Returns the canonical entry plus alternatives. Use the returned id with coldstate_fetch / coldstate_related.
```

### `coldstate_search`

- The name "coldstate_search" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search a ColdState index by collection name or index ID. Returns ranked results with Ψ scores and state classification (CRYSTALLINE/FLUID/REACTIVE/DECOHERENT). Provide exactly one of `collection` or `index_id`.
```

### `coldstate_search_global`

- The name "coldstate_search_global" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search ColdState's global knowledge base (48.4M+ entries across 35 domains including SCIENCE, MEDICINE, TECHNOLOGY, HISTORY, etc). Returns deterministically ranked results with Ψ relevance scores and a state classification. Optionally filter by domain.
```

### `coldstate_snapshot`

- The name "coldstate_snapshot" says "snapshot": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get the current knowledge-base snapshot/version id. Pin this kb_snapshot for reproducibility: the same query against the same kb_snapshot returns identical results.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `knowledge`:

```json
{
  "permissions": {
    "allow": [
      "mcp__knowledge__coldstate_search",
      "mcp__knowledge__coldstate_list_indexes",
      "mcp__knowledge__coldstate_browse_documents",
      "mcp__knowledge__coldstate_explain",
      "mcp__knowledge__coldstate_search_global",
      "mcp__knowledge__coldstate_domains",
      "mcp__knowledge__coldstate_fetch",
      "mcp__knowledge__coldstate_cite",
      "mcp__knowledge__coldstate_snapshot",
      "mcp__knowledge__coldstate_related",
      "mcp__knowledge__coldstate_resolve"
    ],
    "ask": [
      "mcp__knowledge__coldstate_verify",
      "mcp__knowledge__coldstate_batch_search",
      "mcp__knowledge__coldstate_stats",
      "mcp__knowledge__coldstate_capabilities",
      "mcp__knowledge__coldstate_isomorph"
    ],
    "deny": []
  }
}
```