Jerry Insurance
ai.jerry/insurancejerry.aistreamable-httpv0.0.1Scanned
Compare US car, home and renters insurance quotes with Jerry. Sign-in required; buy in the app.
8 tools: 4 change things and 4 only read.
- Reads private data · 1
- Reads text others write · 3
- Can send data out · 0
- No findings
Anlyon alternative
4 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
8 tools
Changes things 4Claude Code: ask
jerry_request_final_priceGet the final price of the quote the customer chose.Reads text others writeNo findings
Why it is in this group
- The name "jerry_request_final_price" says "request": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Get the final price of the quote the customer chose. Call it first with bundleId only: that selects the quote and returns the status, which may list what the final price still needs, then a confirmation. After the customer says yes to that confirmation, call again with its token and the customer's exact reply. Nothing is requested unless requested comes back true.
Annotations the server declares
- title: Request final price
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
jerry_request_quotesRequest quotes.Reads text others writeNo findings
Why it is in this group
- The name "jerry_request_quotes" says "request": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Request quotes. Every request needs the confirmation from the status: show its summary, get the customer's explicit yes, then pass its token and their exact reply. Nothing is requested unless requested comes back true; reason says why not, and status is the intent after the call. On stale_confirmation the facts changed: show the new confirmation and ask again.
Annotations the server declares
- title: Request quotes
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
jerry_start_shoppingStart shopping for the insurance products the customer asked for.No findings
Why it is in this group
- The name "jerry_start_shopping" says "start": a word for a change.
Description, as the server wrote it Start shopping for the insurance products the customer asked for. If a shopping intent for exactly these products is already open, it resumes that one. Pass the main facts you already know in application, so the status asks only for the rest. application takes the main fields only: send any other fact with jerry_update_application right after. Returns the status, with rejected and clarify. When a fact comes from anything other than the customer, sources says where, and permission holds the customer's reply allowing it.
Annotations the server declares
- title: Start shopping
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
jerry_update_applicationSave application facts the customer gave, in their own words.No findings
Why it is in this group
- The name "jerry_update_application" says "update": a word for a change.
Description, as the server wrote it Save application facts the customer gave, in their own words. Every field is optional and merges into what's saved, so send only facts that are new or changed. - Items with an id update that driver, car or home; items without one are added. included puts an item on the quote or leaves it off. - Add a car by vin, by licensePlate and licensePlateState, or by year, make and model. Send year, make and model only when there's no VIN or plate, since those set them. A final price needs the VIN. - Answer any other requirement in answers, by its path. A fact that has its own field here comes back rejected as typed_field if it's sent in answers. - coverage and history.currentMonthlyPremiumCents are optional and never block quotes. Send them only when the customer asks for a coverage level or specific coverages, or says what they pay now. - Drivers and cars Jerry found are in the status's suggested list, each with an id that starts with suggested:. Once the customer confirms one, send that id in drivers or vehicles with included: true. Returns the status, with suggested. rejected lists values to correct with the customer, and clarify lists values to choose from. The rest of the write is saved either way.
Annotations the server declares
- title: Update application
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 4Show 4 read-only tools
jerry_get_accountRead the name, email and phone on the customer's Jerry account, and whether the phone is verified.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "jerry_get_account" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "read" and "email": it reads mail.
- untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it Read the name, email and phone on the customer's Jerry account, and whether the phone is verified. It doesn't verify an email or change any insurance information.
Annotations the server declares
- title: Account details
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
jerry_get_quotesList every quote for a shopping intent, cheapest first by monthly price (in USD cents); each policy has a coverageSummary.No findings
Why it is in this group
- The name "jerry_get_quotes" says "get": a word for reading.
Description, as the server wrote it List every quote for a shopping intent, cheapest first by monthly price (in USD cents); each policy has a coverageSummary. Pass up to 4 bundleIds to also get their coverages, discounts and payment plans, for example to compare them. Prices are estimates until priceStatus is final. Declined quotes are left out and counted in declinedCount. It doesn't request quotes.
Annotations the server declares
- title: View quotes
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
jerry_get_statusRead where the customer's insurance shopping stands: the stage, what the current goal still needs (by application path), a summary of the application, what Jerry found that isn't o…No findings
Why it is in this group
- The name "jerry_get_status" says "get": a word for reading.
Description, as the server wrote it Read where the customer's insurance shopping stands: the stage, what the current goal still needs (by application path), a summary of the application, what Jerry found that isn't on the application yet (suggested) and, when a request is ready, the confirmation to show. It doesn't change anything.
Annotations the server declares
- title: Shopping status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
jerry_waitWait for quotes or a final price after requesting them.No findings
Why it is in this group
- The name "jerry_wait" says "wait": a word for reading.
Description, as the server wrote it Wait for quotes or a final price after requesting them. Returns as soon as they're ready, or after timeoutSeconds with the status so far; call again while they're still running. When quotes are ready, it returns the quote list too. A final price is ready once it's resolved. If a Jerry agent takes it over (manual) or it's taking longer than usual (delayed), the wait stops with that reason, and the status's nextStep says what happens next. Calling again on a delayed price keeps waiting.
Annotations the server declares
- title: Wait for results
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write3
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 0.0.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http insurance https://mcp.jerry.ai/mcpclaude mcp add --transport http insurance https://mcp.jerry.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__insurance__jerry_get_account",
"mcp__insurance__jerry_wait",
"mcp__insurance__jerry_get_status",
"mcp__insurance__jerry_get_quotes"
],
"ask": [
"mcp__insurance__jerry_start_shopping",
"mcp__insurance__jerry_update_application",
"mcp__insurance__jerry_request_quotes",
"mcp__insurance__jerry_request_final_price"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as insurance. Review it before you use it.
Capability tags behind 3 rules
- mcp__insurance__jerry_get_account private-data, untrusted-input
- mcp__insurance__jerry_request_quotes untrusted-input
- mcp__insurance__jerry_request_final_price untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/ai.jerry/insurance/verify?hash=223ba111a4b4dddc9fa3e54a16e323e3d86373b972fa12924a34a8276d36e913" | jq -e '.changed == false'Pinned hash 223ba111a4b4, from Oct 25, 2026, 03:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/ai.jerry/insurance/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/ai.jerry/insurance)Source: MCP Registry. Synced Oct 25, 2026, 03:17 UTC.