Barmaan

co.barmaan/barmaanbarmaan.costreamable-httpv1.0.0Scanned 2 hours ago

Barmaan catalogue: instruments, specs, guides, certificate check, quote requests

14 tools: 1 do something that can't be undone, 2 change things and 11 only read.

Reads private data · 3
Reads text others write · 2
Can send data out · 1
2 findings

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

14 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

request_quoteSend a price/quote request to Barmaan's sales team (same inbox as the website form).Can send data outNo findings
Why it is in this group
- The name "request_quote" says "request": a word for a change.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Send a price/quote request to Barmaan's sales team (same inbox as the website form). Ask the user for name and phone first; never invent contact details. Call once with confirm=false to get a preview, show it to the user, then call with confirm=true only after they agree.
Annotations the server declares
- title: Request a quote
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

get_productFull public details of one product: specs, models, documents, FAQ, price/availability.Reads private data1 finding
Why it is in this group
- The name "get_product" says "get": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
Findings
- Warn
  The server marks "get_product" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_product" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Full public details of one product: specs, models, documents, FAQ, price/availability. Pass `slug` or the 6-digit `code`.
Annotations the server declares
- title: Get product details
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
verify_certificateCheck a Barmaan calibration certificate by its exact code.1 finding
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "verify_certificate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.code), which can change anything it can reach.
  What this check looks for
Description, as the server wrote it
Check a Barmaan calibration certificate by its exact code. Returns status, equipment, manufacturer and serial only.
Annotations the server declares
- title: Verify a calibration certificate
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 11Looks things up and changes nothing.Show 11 read-only tools

fetchGet the full text of one item by the id returned from `search` (product:, service:, project:, resource:<kind>/<slug>, category:, certificate:, company:info).No findings
Why it is in this group
- The name "fetch" says "fetch": a word for reading.
Description, as the server wrote it
Get the full text of one item by the id returned from `search` (product:, service:, project:, resource:<kind>/<slug>, category:, certificate:, company:info).
Annotations the server declares
- title: Fetch a Barmaan document
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_company_infoBarmaan company facts: location (Erbil, Iraq), public phones and email, hours, languages, and the accreditation statement.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_company_info" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Barmaan company facts: location (Erbil, Iraq), public phones and email, hours, languages, and the accreditation statement.
Annotations the server declares
- title: Company information
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_dwg_viewer_infoInformation about Barmaan's free browser DWG/DXF viewer.Reads text others writeNo findings
Why it is in this group
- The name "get_dwg_viewer_info" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "browser": it reads web pages, which anyone can write.
Description, as the server wrote it
Information about Barmaan's free browser DWG/DXF viewer. Files cannot be uploaded through MCP; give the user the link.
Annotations the server declares
- title: DWG viewer info
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_resourceFull text of one resource (kind + slug from list_resources).No findings
Why it is in this group
- The name "get_resource" says "get": a word for reading.
Description, as the server wrote it
Full text of one resource (kind + slug from list_resources). Text is capped at 20,000 characters.
Annotations the server declares
- title: Get a guide
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_serviceDetails of one service by slug (from list_services).No findings
Why it is in this group
- The name "get_service" says "get": a word for reading.
Description, as the server wrote it
Details of one service by slug (from list_services).
Annotations the server declares
- title: Get service details
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_categoriesProduct categories with product counts.No findings
Why it is in this group
- The name "list_categories" says "list": a word for reading.
Description, as the server wrote it
Product categories with product counts.
Annotations the server declares
- title: List product categories
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_projectsPublished reference projects.No findings
Why it is in this group
- The name "list_projects" says "list": a word for reading.
Description, as the server wrote it
Published reference projects.
Annotations the server declares
- title: List projects
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_resourcesPublished technical guides, standards notes, datasheets and glossary entries.Reads private dataNo findings
Why it is in this group
- The name "list_resources" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "note": it reads notes.
Description, as the server wrote it
Published technical guides, standards notes, datasheets and glossary entries.
Annotations the server declares
- title: List guides and resources
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_servicesBarmaan's engineering, calibration, inspection and software services.No findings
Why it is in this group
- The name "list_services" says "list": a word for reading.
Description, as the server wrote it
Barmaan's engineering, calibration, inspection and software services.
Annotations the server declares
- title: List services
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
searchSearch all public Barmaan content (products, categories, services, projects, guides, certificates).No findings
Why it is in this group
- The name "search" says "search": a word for reading.
Description, as the server wrote it
Search all public Barmaan content (products, categories, services, projects, guides, certificates). Returns ids to pass to `fetch`.
Annotations the server declares
- title: Search Barmaan
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_productsSearch the Barmaan product catalog (industrial instruments).No findings
Why it is in this group
- The name "search_products" says "search": a word for reading.
Description, as the server wrote it
Search the Barmaan product catalog (industrial instruments). Prices are published USD prices; price.on_request=true means ask for a quote.
Annotations the server declares
- title: Search products
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

6 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data3: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_company_info
get_product
list_resources
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_company_info
get_dwg_viewer_info
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; request_quote

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__barmaan__request_quote"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnget_product
The server marks "get_product" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_product" says "get": a word for reading.
What this check looks for
Warnverify_certificate
The server marks "verify_certificate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.code), which can change anything it can reach.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http barmaan https://barmaan.co/api/mcp

claude mcp add --transport http barmaan https://barmaan.co/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__barmaan__fetch",
      "mcp__barmaan__get_company_info",
      "mcp__barmaan__get_dwg_viewer_info",
      "mcp__barmaan__get_resource",
      "mcp__barmaan__get_service",
      "mcp__barmaan__list_categories",
      "mcp__barmaan__list_projects",
      "mcp__barmaan__list_resources",
      "mcp__barmaan__list_services",
      "mcp__barmaan__search",
      "mcp__barmaan__search_products"
    ],
    "ask": [
      "mcp__barmaan__get_product",
      "mcp__barmaan__request_quote",
      "mcp__barmaan__verify_certificate"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as barmaan. Review it before you use it.

Capability tags behind 5 rules

mcp__barmaan__get_company_info private-data, untrusted-input
mcp__barmaan__get_dwg_viewer_info untrusted-input
mcp__barmaan__get_product private-data
mcp__barmaan__list_resources private-data
mcp__barmaan__request_quote outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/co.barmaan/barmaan/verify?hash=8048b0c99ca8b366b8b5ab3ac4d845afd4ee6733c5567951765250c67902690a" | jq -e '.changed == false'

Pinned hash 8048b0c99ca8, from Oct 22, 2026, 17:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/co.barmaan/barmaan/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/co.barmaan/barmaan.svg)](https://anlyon.dev/servers/co.barmaan/barmaan)

Source: MCP Registry. Synced Oct 22, 2026, 18:17 UTC.