MAX Data Value Check
ai.monsterdata/max-data-value-checkmonsterdata.aistreamable-httpv1.1.0Scanned
Is your business data licensable? Free readiness score, rights checklist, owner handoff to MAX.
5 tools: 1 change things and 4 only read.
- Reads private data · 1
- Reads text others write · 3
- Can send data out · 0
- No findings
Anlyon alternative
1 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
5 tools
Changes things 1Claude Code: ask
check_data_readinessScores how ready a business's operational data is to be licensed to data buyers (0-100), using only multiple-choice answers about the business and its records.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Scores how ready a business's operational data is to be licensed to data buyers (0-100), using only multiple-choice answers about the business and its records. Returns a factor-by-factor breakdown, the buyer types most likely to want those data types, red flags (privacy, consent, history length) and next steps. Use when someone asks whether their company's data could be sold or licensed, or what it would take. Does not estimate a dollar value, make an offer, contact anyone, or store answers. Do not send names, contact details, patient information or the data itself.
Annotations the server declares
- title: Check data readiness
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
Only reads 4Show 4 read-only tools
explain_data_licensing_termGives a short plain-English definition of a data licensing term such as recurring license, exclusive license, de-identification, data provenance, data room or alternative data.No findings
Why it is in this group
- The name "explain_data_licensing_term" says "explain": a word for reading.
Description, as the server wrote it Gives a short plain-English definition of a data licensing term such as recurring license, exclusive license, de-identification, data provenance, data room or alternative data. If the term isn't in the glossary, returns the list of available terms. Use when someone asks what a data licensing term means.
Annotations the server declares
- title: Explain data licensing term
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_data_rights_checklistReturns a step-by-step checklist a business should complete before licensing its data: ownership and contract checks, privacy-policy review, de-identification and re-identification…Reads text others writeNo findings
Why it is in this group
- The name "get_data_rights_checklist" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "return" and "review": it reads comments, which other people can write.
Description, as the server wrote it Returns a step-by-step checklist a business should complete before licensing its data: ownership and contract checks, privacy-policy review, de-identification and re-identification risk, vendor terms, provenance records and permitted uses, plus the privacy laws to review for the selected data types. Use when someone asks what permissions, consents or legal checks they need before selling or licensing business data. General information, not legal advice; stores nothing.
Annotations the server declares
- title: Get data rights checklist
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_owner_handoff_linkReturns a link the business owner can tap to open a prefilled text message to MAX, MON$TER's data agent, who arranges a free review of the business's data.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_owner_handoff_link" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "return" and "message": it reads messages.
- untrusted-inputThe description's first sentence says "return" and "message": it reads messages, which other people can write.
Description, as the server wrote it Returns a link the business owner can tap to open a prefilled text message to MAX, MON$TER's data agent, who arranges a free review of the business's data. Use only when the owner says they want a real review or next step, for example after check_data_readiness. Show the link to the owner; the owner decides whether to send the text, and nothing is sent without them. Never send the owner's name, phone number, email or data to this tool. If you act for a MON$TER ambassador, pass their referral code (or connect via https://monsterdata.ai/mcp?ref=CODE) so the referral is credited to that person. Referral rewards are paid only to the verified human ambassador, never to an agent or wallet. Tell the owner that the person you work for may earn a referral reward if the owner goes ahead.
Annotations the server declares
- title: Get owner handoff link
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
list_public_data_licensing_disclosuresLists public companies whose SEC filings (8-K, 10-K, 10-Q, S-1) mention AI data licensing, from MON$TER's weekly SEC EDGAR full-text tracker, with filing dates and direct links to …Reads text others writeNo findings
Why it is in this group
- The name "list_public_data_licensing_disclosures" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "list" and "mention": it reads comments, which other people can write.
Description, as the server wrote it Lists public companies whose SEC filings (8-K, 10-K, 10-Q, S-1) mention AI data licensing, from MON$TER's weekly SEC EDGAR full-text tracker, with filing dates and direct links to each filing on sec.gov. Optionally filter by part of a company name. Use when someone asks which companies license data to AI or wants public examples. A match means a filing mentions the phrases, not that a deal closed or its value.
Annotations the server declares
- title: List public data-licensing disclosures
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write3
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http max-data-value-check https://monsterdata.ai/mcpclaude mcp add --transport http max-data-value-check https://monsterdata.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__max-data-value-check__get_data_rights_checklist",
"mcp__max-data-value-check__list_public_data_licensing_disclosures",
"mcp__max-data-value-check__explain_data_licensing_term",
"mcp__max-data-value-check__get_owner_handoff_link"
],
"ask": [
"mcp__max-data-value-check__check_data_readiness"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as max-data-value-check. Review it before you use it.
Capability tags behind 3 rules
- mcp__max-data-value-check__get_data_rights_checklist untrusted-input
- mcp__max-data-value-check__list_public_data_licensing_disclosures untrusted-input
- mcp__max-data-value-check__get_owner_handoff_link private-data, untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/ai.monsterdata/max-data-value-check/verify?hash=5a7f760236d276bf53d632da50744cfc88e410204aa5506af2257c6a1ac12330" | jq -e '.changed == false'Pinned hash 5a7f760236d2, from Nov 5, 2026, 09:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/ai.monsterdata/max-data-value-check/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/ai.monsterdata/max-data-value-check)Source: MCP Registry. Synced Nov 5, 2026, 09:17 UTC.