# `by.ai-belarus/registry` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/by.ai-belarus/registry
- JSON: https://anlyon.dev/api/v1/servers/by.ai-belarus/registry
- Version: 1.19.0 (active)
- Publisher: by.ai-belarus (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T17:46:08.824Z

Title and description, as the publisher wrote them:

```untrusted-server-text
AI-BELARUS — Belarus business registry
Belarusian companies by UNP: state registry answers with source and sha256 for every fact.
```

Scanned 2026-10-21T18:44:11.702Z over streamable-http.

**5 tools: 3 change things and 2 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 3 | ask |
| Only reads | read | 2 | allow |

## Findings

No check matched anything in these tool definitions.


## Changes things (3)

Creates or changes something that can be changed back. Claude Code: ask.

### `check_counterparty`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Live answer of the Belarusian State Register of Payers (MNS) and related registries right now: exists / active (да | нет | не_установлено), address, registration date, tax office, bankruptcy cases, exclusion from public procurement, KGK inspection plans, procurement history. Pass `name` from your documents to get a name-match verdict. Takes seconds; rate-limited. Живой ответ реестра по УНП.
```

### `entity_timeline`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Change timeline of a Belarusian entity by UNP from collected data: an ordered log of canon changes per predicate (created / reaffirmed / superseded / conflict_detected), each event carrying old and new value, source registry and time (effective_at, observed_at). Lets an agent read anomalies over time (sudden address/head/activity change). Instant, no registry call. Хронология изменений субъекта по УНП из собранного.
```

### `sources_and_coverage`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Machine-readable trust card of the registry itself: every source with provenance (organ, tier, URL) and its DECLARED access/rights (machine_api_authorization, terms_status) AS DECLARED in config — not asserted by this tool; plus coverage (claims and evidence per source, which sources give canon) and grounding invariants (total claims, how many lack evidence, off-source, freshness). Technical availability is NOT a legal right to use or redistribute the data. Карточка доверия: источники, права как задекларированы, покрытие и заземление.
```

## Only reads (2)

Looks things up and changes nothing. Claude Code: allow.

### `lookup_company`

- The name "lookup_company" says "lookup": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Collected public card of a Belarusian business entity by UNP (9 digits): legal name, status, each statement with registry source, retrieval time and sha256 of the raw response; withheld fields with reasons. Instant, no registry call. Карточка субъекта по УНП из собранного.
```

### `search_companies`

- The name "search_companies" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search collected Belarusian legal entities by name fragment or UNP. Only legal entities are found by name (sole proprietors never are). Absence here is not absence in the state registry. Поиск юрлица по названию или УНП среди собранного.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `registry`:

```json
{
  "permissions": {
    "allow": [
      "mcp__registry__lookup_company",
      "mcp__registry__search_companies"
    ],
    "ask": [
      "mcp__registry__check_counterparty",
      "mcp__registry__sources_and_coverage",
      "mcp__registry__entity_timeline"
    ],
    "deny": []
  }
}
```