# `ai.hodds/hodds` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/ai.hodds/hodds
- JSON: https://anlyon.dev/api/v1/servers/ai.hodds/hodds
- Version: 0.4.0 (active)
- Publisher: ai.hodds (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-26T07:17:40.846Z

Title and description, as the publisher wrote them:

```untrusted-server-text
HODDS
Find software, SaaS and APIs for a need in a sourced catalogue organised by business process.
```

Scanned 2026-10-26T07:17:47.033Z over streamable-http.

**19 tools: 3 can delete or cancel things, 1 do something that can't be undone, 5 change things and 10 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 3 | deny |
| Can't be undone | irreversible | 1 | ask |
| Changes things | write | 5 | ask |
| Only reads | read | 10 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged untrusted-input.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__hodds__search_solutions` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | none |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | `mcp__hodds__send_feedback` |

## Findings

No check matched anything in these tool definitions.


## Deletes or cancels (3)

Removes, cancels or revokes something. Claude Code: deny.

### `cancel_creator_plan`

- The name "cancel_creator_plan" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Stops the subscription at the end of the paid period. Listings, claims, declarations and ranking are unchanged; the coarse demand table stays free. Contract 0.3.1. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `cancel_plan`

- The name "cancel_plan" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Stops the paid plan at the end of the Stripe period. Then the paid watches are CLOSED and stay readable 30 days; the free watch and the agent tokens are unchanged. Without a paid plan the tool answers not_paid. Contract 0.4.0. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `unwatch_need`

- The description's first verb is "close": a word for a change.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Closes a watch; its need, constraints and alerts are erased 30 days after closing. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

## Can't be undone (1)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `send_feedback`

- The name "send_feedback" says "send": a word for sending, and what is sent cannot be taken back.
- Tag outbound: The name "send_feedback" says "send": it sends or publishes something to other people.

Description, as the server wrote it:

```untrusted-server-text
Stores a declarative outcome report for an option returned by search_solutions: outcome YES (the option met the need), PARTLY or NO, with the request_id and the option id exactly as returned. It is the only HODDS tool that writes data without a token; the watch tools (watch_need and the others) write only with an organisation token. The report is stored as an unverified caller statement and never changes ranking by itself; the same report sent twice is stored once. When feedback storage is unavailable on the deployment, the tool returns an error and stores nothing.
```

## Changes things (5)

Creates or changes something that can be changed back. Claude Code: ask.

### `ack_alerts`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Acknowledges alerts of one watch (alert_ids, or all: true for every alert of this watch); the only call that empties the pending delivery. Returns the number acknowledged and the number remaining for the organisation; a replay changes nothing. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `rate_alert`

- The description's first verb is "mark": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Marks one alert relevant or not_relevant, with an optional note of at most 500 characters. It never changes ranking. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `set_creator_processes`

- The name "set_creator_processes" says "set": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Replaces the list of subscribed processes. Without an active subscription the result has status 402 and a Stripe Checkout destination for a person to open. With one, an addition through this tool also answers status 402 with the Plan page as destination: nothing is charged here, only the page charges, after a person confirms it. Removals apply at once and the removed processes stay readable until the end of the paid period. An empty list is refused (empty_selection): use cancel_creator_plan. Contract 0.3.1. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `set_current_choice`

- The name "set_current_choice" says "set": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Sets a solution by id or free name (any process), null clears. Returns the watch; challenger recomputed later. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `watch_need`

- The description's first verb is "open": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Opens a watch on a need for the organisation of the token: constraints and software by id or name (any process). CATEGORY follows a process. Returns the watch, initially not_computed; public rules produce a challenger and switch brief. Alerts arrive on following calls; unknown constraints stay uninterpreted. The FREE plan follows one active watch per organisation. Error codes beyond the free watch: free_watch_used (no paid plan; destination = Stripe Checkout), plan_ending (the paid plan is stopped: no new paid watch; destination = the Plan page /my/plan), in _meta["ai.hodds/error"]. Price: search is free; 1 watched solution free, then €0.50 per watched solution per month, €2 monthly minimum (excl. VAT); a 409 with destination is resolved by a person who opens that URL. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

## Only reads (10)

Looks things up and changes nothing. Claude Code: allow.

### `compare_solutions`

- The name "compare_solutions" says "compare": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Compare 2–3 catalogue IDs by required capabilities, offer, context and dated sources. Unknown/stale/conflict stay explicit; unknown price is never zero. Discover IDs at /api/capabilities and details at /api/solutions/{id}/specification. Costs require all assumptions. Large result: repeat arguments with view; restart on 409. Public read, no billing/business writes; one call per POST.
```

### `find_comparable_solutions`

- The name "find_comparable_solutions" says "find": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Find alternatives by required priority, optionally relative to one solution. IDs/context: /api/capabilities. A match satisfies every requirement in one configuration. Evaluates the whole pilot before limit, separating match/unresolved/mismatch and stating catalogue coverage, not market coverage. Large result: repeat arguments with view; restart on 409. Public read, no billing/business writes; one call per POST.
```

### `get_creator_plan`

- The name "get_creator_plan" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns the demand data subscription of the organisation of the token: plan NONE or SUBSCRIBED, subscribed processes, pending removals, the coming invoice, payment provider and invoices. €10 excl. VAT per process per month, invoiced by VORAN, paid through Stripe; no effect on ranking. Contract 0.3.1. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `get_plan`

- The name "get_plan" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns the plan of the organisation of the token: FREE, PAID, PAST_DUE, ENDING or ENDED; watched solutions billed in the current Stripe period, the coming invoice, the payment provider and the invoices. 1 watched solution free, then €0.50 per watched solution per month, €2 monthly minimum (excl. VAT), invoiced by VORAN, paid through Stripe. A paid watch is billed for a period when it is active at least one day of it, whatever the number of agents that read it. Contract 0.4.0. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `get_solution`

- The name "get_solution" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns one HODDS catalogue record by id (an option id returned by search_solutions): name, homepage, summary in English and French, processes (the first is primary), keywords, pricing models without amounts (empty means unknown) with the pricing page, interfaces (public API, MCP server, self-hosting: yes, no or unknown), markets, publisher, dated sources and status. Status non_attested means the publisher has not confirmed the record; unknown values are stated as unknown. Read-only.
```

### `get_watch`

- The name "get_watch" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns one watch of the organisation: constraints, solution in place, challenger with its switch brief and HODDS status, challenger_reason when there is none, and the 50 most recent alerts, unacknowledged first (all: true for 200). Reading does not acknowledge. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `list_gaps`

- The name "list_gaps" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns, for a subscribed process, the gaps formulated by HODDS and the client aggregates above the anonymity threshold (watched needs, organisations watching, NO_MATCH, current choices, constraints, challengers delivered, GAP_RESOLVED). No need text, no organisation, no agent. Contract 0.3.1. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `list_processes`

- The name "list_processes" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns the HODDS process taxonomy: groups (for example "Run the business") and processes (for example "invoice-and-get-paid"), with English and French labels and the number of catalogue records per process. A process id is accepted as the `process` filter of search_solutions. Read-only.
```

### `list_watches`

- The name "list_watches" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Lists the watches of the organisation with their challenger and number of pending alerts; include_closed adds the watches closed in the last 30 days. Needs an organisation token (Authorization: Bearer hodds_...); without it the tool returns the error token_required.
```

### `search_solutions`

- The name "search_solutions" says "search": a word for reading.
- Tag private-data: The description's first sentence says "search" and "meeting": it reads calendars.

Description, as the server wrote it:

```untrusted-server-text
Searches the HODDS catalogue of software, SaaS, APIs and online services, organised by business process, for records that match a need written in English or French (for example "transcribe my meetings" or "automatiser mes workflows"). Returns a request_id, a status and up to `limit` options; each option has an id, a label, a short description and source URLs (provenance). Ranking combines lexical matching on record names, keywords and processes with semantic similarity (multilingual embeddings on Cloudflare Workers AI), or lexical matching alone when the semantic part is unavailable; ownership or sponsorship never changes it. Confidence is always UNKNOWN: records are non-attested facts taken from publishers' public pages. Status NO_MATCH with an empty option list means that no record matches the need closely enough, or that the need belongs to a process with no record yet; results are never padded. Read-only.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `hodds`:

```json
{
  "permissions": {
    "allow": [
      "mcp__hodds__search_solutions",
      "mcp__hodds__get_solution",
      "mcp__hodds__list_processes",
      "mcp__hodds__get_watch",
      "mcp__hodds__list_watches",
      "mcp__hodds__get_creator_plan",
      "mcp__hodds__list_gaps",
      "mcp__hodds__get_plan",
      "mcp__hodds__compare_solutions",
      "mcp__hodds__find_comparable_solutions"
    ],
    "ask": [
      "mcp__hodds__send_feedback",
      "mcp__hodds__watch_need",
      "mcp__hodds__set_current_choice",
      "mcp__hodds__ack_alerts",
      "mcp__hodds__rate_alert",
      "mcp__hodds__set_creator_processes"
    ],
    "deny": [
      "mcp__hodds__unwatch_need",
      "mcp__hodds__cancel_creator_plan",
      "mcp__hodds__cancel_plan"
    ]
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__hodds__search_solutions`: private-data
- `mcp__hodds__send_feedback`: outbound