# `com.australiawidefirstaid/courses` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.australiawidefirstaid/courses
- JSON: https://anlyon.dev/api/v1/servers/com.australiawidefirstaid/courses
- Version: 1.0.0 (active)
- Publisher: com.australiawidefirstaid (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T17:51:43.823Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Australia Wide First Aid courses
Find first aid and CPR courses, venues and sessions across Australia. Read-only; no sign-in.
```

Scanned 2026-10-21T18:46:27.252Z over streamable-http.

**7 tools: 1 change things and 6 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 1 | ask |
| Only reads | read | 6 | allow |

## Findings

- **warn** Annotations that disagree with the tool in `start_booking` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "start_booking" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_booking" says "start": a word for a change.
```


## Changes things (1)

Creates or changes something that can be changed back. Claude Code: ask.

### `start_booking`

- The name "start_booking" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Get the link that books one place in a session found with search_sessions or search_nearby_sessions. Give the link to the person: they open it, confirm, and finish on the enrolment site, where they enter their own details and pay themselves. This tool books nothing, holds no seat and takes no personal or payment details, so don't tell the person they are booked. The link is for one person: for a group, book each person separately or use the corporate enquiry page (/corporate).
```

## Only reads (6)

Looks things up and changes nothing. Claude Code: allow.

### `get_course_details`

- The name "get_course_details" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Full details for one course: what it covers, how it is assessed, the pre-course online work, what to bring, when the certificate is issued, and how long it stays current. Use it to answer whether a course meets a workplace or childcare requirement. course is the id from list_courses; a unit code such as HLTAID011 also works.
```

### `get_faqs`

- The name "get_faqs" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Frequently asked questions and answers: which course a job needs, recognition, certificate timing, renewal, online learning, group training, cost, what to wear. Pass a topic to get the most relevant ones; omit it for all.
```

### `list_courses`

- The name "list_courses" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the nationally recognised first aid and CPR courses Australia Wide First Aid runs, with unit code (HLTAID009/011/012), price in AUD, duration, delivery (including any online pre-course learning) and renewal period. Use this to turn a need like "first aid for work" or "childcare certificate" into a course id for the other tools.
```

### `list_locations`

- The name "list_locations" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List training venues with address, grouped by state. Pass state to narrow to one state, or near (an Australian postcode or suburb the person gives you, such as "4510" or "Caboolture QLD") to get the closest venues with their distance in km. The id of a venue is the location for search_sessions.
```

### `search_nearby_sessions`

- The name "search_nearby_sessions" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Upcoming sessions of one course across the venues closest to a postcode or suburb, merged soonest first, with each venue's distance in km. near is required: this server can't tell where the person is, so ask them for their postcode or suburb. If a suburb exists in several states the reply lists the candidates: ask which one and retry with the state or postcode.
```

### `search_sessions`

- The name "search_sessions" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Upcoming sessions of one course at one venue, soonest first: date, time, venue address, price, seats available (as the site shows them, such as "5+") and a session_id for start_booking. If the person gave a suburb or postcode rather than a venue, use search_nearby_sessions instead.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `courses`:

```json
{
  "permissions": {
    "allow": [
      "mcp__courses__get_course_details",
      "mcp__courses__get_faqs",
      "mcp__courses__list_courses",
      "mcp__courses__list_locations",
      "mcp__courses__search_nearby_sessions",
      "mcp__courses__search_sessions"
    ],
    "ask": [
      "mcp__courses__start_booking"
    ],
    "deny": []
  }
}
```