# `com.402rates/rates` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.402rates/rates
- JSON: https://anlyon.dev/api/v1/servers/com.402rates/rates
- Version: 0.2.0 (active)
- Publisher: com.402rates (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T17:47:13.588Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Rates by 402rates
Source-backed treasury data, settlement costs. Free instrument records and history.
```

Scanned 2026-10-21T18:45:15.852Z over streamable-http.

**12 tools: 1 do something that can't be undone and 11 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 1 | ask |
| Changes things | write | 0 | ask |
| Only reads | read | 11 | allow |

## Findings

- **info** The word "credentials" in `estimate_payment_costs` ([credentials-mention](https://anlyon.dev/methodology#credentials-mention))

```untrusted-server-text
The input schema at properties.profiles.items.properties.source.properties.url.description mentions "credentials".

inputSchema.properties.profiles.items.properties.source.properties.url.description: "...supplied HTTPS source reference without credentials, query or fragment. Never fetched."
```

- **warn** Annotations that disagree with the tool in `estimate_payment_costs` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "estimate_payment_costs" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "estimate_payment_costs" says "payment": a word that usually means money moves, which cannot be taken back.
```


## Can't be undone (1)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `estimate_payment_costs`

- The name "estimate_payment_costs" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: info credentials-mention, warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Free exact-decimal calculation from caller-supplied prices, fees and setup costs for a planned number of calls. Separates locked capital and batches; unknown costs stay unknown. Compares complete profiles only within the same currency. No exchange-rate conversion, external fee measurement, payment or verification of supplied inputs.
```

## Only reads (11)

Looks things up and changes nothing. Claude Code: allow.

### `cheapest_settlement_chain`

- The description's first verb is "return": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns only the single cheapest chain for a USDC transfer right now, its total transaction fee in USD, the scope of that figure and how long it stays valid. Free and deliberately minimal: no per-chain table, no runner-up, no fee components and no source provenance. The paid tool compare_settlement_costs returns the full comparison with every input disclosed.
```

### `compare_rwa_benchmark`

- The name "compare_rwa_benchmark" says "compare": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Free arithmetic comparison of a saved measured USD instrument response and caller-supplied US Treasury total-return index levels with identical dates. Simple actual/365; 28-32 days. Input provenance is not verified. Spot rates, unmatched windows, quoted yields and other currencies are not comparable. The spread does not establish fees or causality.
```

### `compare_rwa_snapshots`

- The name "compare_rwa_snapshots" says "compare": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Free comparison of two supplied 402rates Treasury snapshots: yield, issuer divergence, source identifiers, calculation windows and data availability. Reports numeric threshold crossings without assigning economic significance. No new data access, authentication of snapshots, historical reconstruction or automatic monitoring. Examples are synthetic.
```

### `compare_settlement_costs`

- The name "compare_settlement_costs" says "compare": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Measured USDC transfer costs on Base, Polygon, Arbitrum, Ethereum and XDC: simulated gas, current token prices, fresh chain heads and applicable rollup L1 fees. Inputs and block references accompany each figure. Cheapest first; unmeasurable chains are excluded, not estimated. Business/professional use only. Terms: https://402rates.com/data-terms/ Price: 0.01 USDC per call over x402.
```

### `get_manifest`

- The name "get_manifest" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Free OpenAPI manifest for Rates by 402rates. Contains this product and shared service information only.
```

### `get_rwa_history`

- The name "get_rwa_history" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns free normalized observations for one tracked instrument, one reconstructible recorder source and one inclusive date window. Every point carries value, date, source id, revision and source-time versus read-time dating. Omit source_id to list the instrument's audited sources. The five current-only issuer series return HISTORY_SOURCE_RESERVED with the data-use URL, never an empty gap. Shares the instrument view's three-ticker rolling-hour breadth limit.
```

### `get_rwa_instrument`

- The name "get_rwa_instrument" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Returns the free frozen-contract state view for one tracked tokenized treasury: identity, Open Treasury Yield Basis result or explicit unavailable reason, issuer-term evidence cells, verified deployments and evidence dates. Three distinct tickers are free per caller in a rolling hour; repeats stay free, and the fourth returns BREADTH_LIMIT with the paid complete-snapshot path. An omitted ticker returns only the known ticker list.
```

### `get_rwa_instruments`

- The name "get_rwa_instruments" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Complete evidence snapshot for 13 tokenized treasury funds: yield or gap, measured size, subscription/redemption minimums, fees, settlement, access conditions, chain conflicts, quotes, URLs and dates. Same records as the free instrument view. Internal use with attribution included; continuous access, change notices and customer-facing use are separate. Business/professional use only. Terms: https://402rates.com/data-terms/ Price: 5 USDC per call over x402.
```

### `get_rwa_yields`

- The name "get_rwa_yields" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Realised 30-day yields for 13 tokenized treasury funds under the Open Treasury Yield Basis. Measured rows use NAV, price or verified passive-holder balances, with observations, sources and dates. Issuer figures and differences appear where available. Quoted and unavailable rows stay explicit; free coverage lists funds and gaps. Business/professional use only. Terms: https://402rates.com/data-terms/ Price: 0.03 USDC per call over x402.
```

### `list_capabilities`

- The name "list_capabilities" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Free capability and MCP tool catalogue for Rates by 402rates. Contains this product and shared service information only.
```

### `list_rwa_updates`

- The name "list_rwa_updates" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Free cursor-based Treasury change notices. Default instrument scope retains version 1; opt-in market scope uses version 2 and separate cursors. Fifteen-minute capture; up to 90-day retention subject to source permissions. Field names and digests, no paid market values. No reconstruction before the first baseline.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `rates`:

```json
{
  "permissions": {
    "allow": [
      "mcp__rates__list_rwa_updates",
      "mcp__rates__compare_rwa_benchmark",
      "mcp__rates__compare_rwa_snapshots",
      "mcp__rates__list_capabilities",
      "mcp__rates__get_manifest",
      "mcp__rates__get_rwa_instrument",
      "mcp__rates__get_rwa_history",
      "mcp__rates__cheapest_settlement_chain",
      "mcp__rates__compare_settlement_costs",
      "mcp__rates__get_rwa_yields",
      "mcp__rates__get_rwa_instruments"
    ],
    "ask": [
      "mcp__rates__estimate_payment_costs"
    ],
    "deny": []
  }
}
```