# `ai.pensionhunter/pensionhunter` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/ai.pensionhunter/pensionhunter
- JSON: https://anlyon.dev/api/v1/servers/ai.pensionhunter/pensionhunter
- Version: 1.12.0 (active)
- Publisher: ai.pensionhunter (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/PensionHunter/pensionhunter-claude-plugin
- Metadata from the official MCP Registry, synced 2026-10-21T17:42:50.553Z

Title and description, as the publisher wrote them:

```untrusted-server-text
PensionHunter
Cross-border pension facts: country coverage, sourced rules, dated deadlines and employer lookups.
```

Scanned 2026-10-21T18:30:53.048Z over streamable-http.

**11 tools: 8 change things and 3 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 8 | ask |
| Only reads | read | 3 | allow |

## Findings

No check matched anything in these tool definitions.


## Changes things (8)

Creates or changes something that can be changed back. Claude Code: ask.

### `authority_answer`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
What a national pension institution told us in writing, as published on our answers page, with the institution, the date of the reply and the link. The question is free text, matched to the questions we hold answers to.
```

### `check_work_history`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
For each country in a work history: whether a pension is likely to exist and why, the official free routes first, what is hard from abroad and any dated obligation that applies. Years may be exact, rough or unknown.
```

### `country_pension_facts`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
One country's facts, the official free routes first, then what is hard from abroad by scheme and process, what the money is worth and dated obligations. Every fact carries its source and read date. Pass question or pensionType to get one kind of pension.
```

### `create_order_link`

- The name "create_order_link" says "create": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Returns our order page with the report and countries filled in. Fees: Country $99 per country, Enhanced $199 for one country, Global $299. Payment opens only when the person chooses to pay there, so send only countries and the tier, never personal details.
```

### `deadline_check`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
The date a departure deadline runs out, from our deadline register and the date the person left or died, with the official source and read date. Where the start event depends on the person's circumstances, the date is an estimate and says what to confirm. Nothing is stored.
```

### `gpfr_info`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
What GPFR, the Global Pension Finding Register, is, in the caller's language, with the register page, the consent text and its version and, with a country, our fund pages. Show the consent text to the person before gpfr_register. Read only.
```

### `gpfr_register`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Registers a person in GPFR after they said yes to the consent sentence from gpfr_info, shown word for word. It sends one confirmation email and the registration stays pending until they click its link. At most 3 emails a day per address.
```

### `gpfr_status`

- The name "gpfr_status" says "status": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.

Description, as the server wrote it:

```untrusted-server-text
The status of a GPFR registration. Without a code it emails a one-time code to the registered address, with the code it returns one status word. At most 3 emails a day per address.
```

## Only reads (3)

Looks things up and changes nothing. Claude Code: allow.

### `gpfr_fund_count`

- The name "gpfr_fund_count" says "count": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
For fund-side agents: how many confirmed people are registered for a pension fund, shown from 10 upwards, otherwise fewer than 10. An aggregate only.
```

### `list_covered_countries`

- The name "list_covered_countries" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
The countries we research, each with its ISO code and one sourced line, and the mapped countries with the institution that pays their old age pension.
```

### `resolve_employer`

- The name "resolve_employer" says "resolve": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Places an employer name in a country and lists the employers we hold that it may mean, each with a confidence from 0 to 1. For employers we researched it adds what the employer became and its workplace pension plan, each fact with source and read date. Legal entities only.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `pensionhunter`:

```json
{
  "permissions": {
    "allow": [
      "mcp__pensionhunter__list_covered_countries",
      "mcp__pensionhunter__resolve_employer",
      "mcp__pensionhunter__gpfr_fund_count"
    ],
    "ask": [
      "mcp__pensionhunter__country_pension_facts",
      "mcp__pensionhunter__check_work_history",
      "mcp__pensionhunter__authority_answer",
      "mcp__pensionhunter__deadline_check",
      "mcp__pensionhunter__create_order_link",
      "mcp__pensionhunter__gpfr_info",
      "mcp__pensionhunter__gpfr_register",
      "mcp__pensionhunter__gpfr_status"
    ],
    "deny": []
  }
}
```