AIAgentCycle
com.aiagentcycle/aiagentcycleaiagentcycle.comstreamable-httpv0.3.2Scanned
Read-only facts on AIAgentCycle: n8n automation, AI agents, integrations, prices, cases (NL/EN).
10 tools: 10 only read.
- Reads private data · 3
- Reads text others write · 3
- Can send data out · 0
- No findings
Anlyon alternative
Run the operations that matter as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
10 tools
Only reads 10Show 10 read-only tools
get_company_profileWho AIAgentCycle is: summary, legal name, location, founder, focus and approach.No findings
Why it is in this group
- The name "get_company_profile" says "get": a word for reading.
Description, as the server wrote it Who AIAgentCycle is: summary, legal name, location, founder, focus and approach. lang is nl or en. facts_verified tells whether the key facts still appear on the About page.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_contact_infoPublic contact route: email, phone/WhatsApp, contact page and the free assessment (scan) page.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_contact_info" says "get": a word for reading.
What it can reach
- private-dataThe name "get_contact_info" says "get" and "contact": it reads contacts.
- private-dataThe description's first sentence says "contact": it reads contacts.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it Public contact route: email, phone/WhatsApp, contact page and the free assessment (scan) page. This server cannot send messages or book appointments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_documentFull text (Markdown) of one page, article, case, solution, sector or integration page, with its source url, language and last-modified date.Reads private dataNo findings
Why it is in this group
- The name "get_document" says "get": a word for reading.
What it can reach
- private-dataThe name "get_document" says "get" and "document": it reads documents.
Description, as the server wrote it Full text (Markdown) of one page, article, case, solution, sector or integration page, with its source url, language and last-modified date. Ids come from search_knowledge_base or list_documents.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_faqFrequently asked questions about prices, maintenance and approach, verbatim from the pricing page.No findings
Why it is in this group
- The name "get_faq" says "get": a word for reading.
Description, as the server wrote it Frequently asked questions about prices, maintenance and approach, verbatim from the pricing page. lang is nl or en.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_serviceOne public service by id (ids come from list_services).No findings
Why it is in this group
- The name "get_service" says "get": a word for reading.
Description, as the server wrote it One public service by id (ids come from list_services). An unknown id is an error.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_casesPublished case studies (client and own projects) with title, summary and url.Reads text others writeNo findings
Why it is in this group
- The name "list_cases" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it Published case studies (client and own projects) with title, summary and url. Read one in full with get_document. lang is nl or en.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_documentsCatalogue of the website: id, type, title, url, last-modified date and a one-line summary per document.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_documents" says "list": a word for reading.
What it can reach
- private-dataThe name "list_documents" says "list" and "document": it reads documents.
- untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
Description, as the server wrote it Catalogue of the website: id, type, title, url, last-modified date and a one-line summary per document. lang is nl or en. type optionally narrows to: article, page, integration, case, solution, sector.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_integrationsThe integrations catalogue of aiagentcycle.com (190 systems): name, status, domain, category, description, open-source license and a detail-page url where one exists.No findings
Why it is in this group
- The name "list_integrations" says "list": a word for reading.
Description, as the server wrote it The integrations catalogue of aiagentcycle.com (190 systems): name, status, domain, category, description, open-source license and a detail-page url where one exists. Status: productie = already running in production at AIAgentCycle or a client; standaard = n8n has a built-in node; maatwerk = custom via API, export, database or screen automation. Filters: query (name or text, max 100 chars), domain (administratie, verkoop, samenwerken, data), status, open_source. lang is nl or en. A system that is not listed can usually still be connected through one of those four routes.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_servicesAll public services and maintenance packages with indicative prices (excl.No findings
Why it is in this group
- The name "list_services" says "list": a word for reading.
Description, as the server wrote it All public services and maintenance packages with indicative prices (excl. VAT, business clients). Each price carries price_verified: true if it still appears verbatim on the live pricing page.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
search_knowledge_baseRanked full-text search over every page, solution, sector page, case, integration and article of aiagentcycle.com.No findings
Why it is in this group
- The name "search_knowledge_base" says "search": a word for reading.
Description, as the server wrote it Ranked full-text search over every page, solution, sector page, case, integration and article of aiagentcycle.com. Any word may match; documents matching more words rank higher. lang is nl or en. type optionally narrows to: article, page, integration, case, solution, sector. query max 100 chars, limit 1-10. Each hit has an id for get_document and the source url.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data3
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write3
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 0.3.2. Values in angle brackets are yours to fill in.
claude mcp add --transport http aiagentcycle https://mcp.aiagentcycle.com/mcpclaude mcp add --transport http aiagentcycle https://mcp.aiagentcycle.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__aiagentcycle__get_company_profile",
"mcp__aiagentcycle__list_services",
"mcp__aiagentcycle__get_service",
"mcp__aiagentcycle__search_knowledge_base",
"mcp__aiagentcycle__get_document",
"mcp__aiagentcycle__list_documents",
"mcp__aiagentcycle__list_integrations",
"mcp__aiagentcycle__get_faq",
"mcp__aiagentcycle__list_cases",
"mcp__aiagentcycle__get_contact_info"
],
"ask": [],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as aiagentcycle. Review it before you use it.
Capability tags behind 4 rules
- mcp__aiagentcycle__get_document private-data
- mcp__aiagentcycle__list_documents private-data, untrusted-input
- mcp__aiagentcycle__list_cases untrusted-input
- mcp__aiagentcycle__get_contact_info private-data, untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.aiagentcycle/aiagentcycle/verify?hash=f20a6a6cd5d4942f5ac8543853c76333a24924b3c729fd526d49573bab5a24b6" | jq -e '.changed == false'Pinned hash f20a6a6cd5d4, from Nov 2, 2026, 20:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.aiagentcycle/aiagentcycle/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.aiagentcycle/aiagentcycle)Source: MCP Registry · repository. Synced Nov 2, 2026, 21:17 UTC.