Skip to content
anlyon.devby Anlyon

Avenbridge

com.avenbridgetech/avenbridgeavenbridgetech.comstreamable-httpv0.6.0Scanned

Hosted MCP knowledge base: businesses forward emails and docs; buyers query them over MCP.

8 tools: 2 do something that can't be undone, 3 change things and 3 only read.

Tools: 0 delete, 2 irreversible, 3 write, 3 read.
  • Reads private data · 3
  • Reads text others write · 3
  • Can send data out · 1
  • 2 findings

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

8 tools

Can't be undone 2Claude Code: ask
  • ask_businessSend questions to one business's contact person, for example the questions answer_questions could not answer.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe description's first verb is "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Send questions to one business's contact person, for example the questions answer_questions could not answer. Nothing is sent on the first call: it returns a preview of exactly what would go to the contact person, and a confirmation code. Show the whole preview to the user; only if they agree, call again with the same business and confirm set to the code. Then Avenbridge emails the questions to the contact (with the user's email as reply-to) and sends the user a copy; the answers come back through status and, once given, through answer_questions. The same questions sent again within a day are not sent twice. Needs business_id (or business) when the user has more than one business.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: true
    • title: Ask the business
    • readOnlyHint: false
    • idempotentHint: false
  • requestSend a request to one business: anything the user wants that business to do.Reads text others writeNo findings

    Why it is in this group

    • The name "request" says "request": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Send a request to one business: anything the user wants that business to do. Each business lists the kinds of request it takes (list_my_businesses and the server instructions; by default quote, sample, document, reschedule, complaint, other). When the user wants a call or meeting and the business lists "call", use kind call: the user gets the business's booking page at once and picks a time there. Otherwise nothing is sent on the first call: it returns a preview of exactly what would go to the business's contact person, and a confirmation code. Show the whole preview to the user; only if they agree, call again with the same business and confirm set to the code. Then Avenbridge emails the request to the contact (with the user's email as reply-to) and sends the user a copy; the reply shows up in `status`. The same request sent again within a day is not sent twice. Before a quote or sample request, ask the user for the items in the business's request checklist (shown by list_my_businesses and in the server instructions) so the request arrives complete, and put them in details.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: true
    • title: Send a request to the business
    • readOnlyHint: false
    • idempotentHint: false
Changes things 3Claude Code: ask
  • answer_questionsCall this for any question about a business in list_my_businesses, even when notes, memory or a web page seem to answer it: only this tool returns the business's approved answers.1 finding

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "answer_questions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Call this for any question about a business in list_my_businesses, even when notes, memory or a web page seem to answer it: only this tool returns the business's approved answers. Look up a business's approved answers: questionnaire questions (supplier, compliance, security or due-diligence questionnaires) and other questions about the business, its products, terms and prices. For each question it returns the closest approved answers with their source, approval date and similarity, or says that none was found; a question without one also gets the passages of the business's current documents that match it, quoted with document, version and page (not approved answers: say so if you use one, and cite it). You write the reply from these. Each answer was approved by the business for the question shown with it, so check that it fits before using it. Only answers the business approved for the same question count; a question without one is reported as unanswered, with at most one approved answer to a different question shown as possibly related. To get an unanswered question to the business, call ask_business. Without business_id or business it searches every business the user has and names the business next to each answer. When the user writes in another language than the business's material (most businesses write in English), pass each question in the business's language too, as a second question, so it matches; then reply to the user in their own language.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
    • title: Find approved answers
    • readOnlyHint: true
    • idempotentHint: true
  • open_invitationOpen an invitation a business sent the user, using the invitation code from their message (8 letters and digits, e.g.1 finding

    Why it is in this group

    • The name "open_invitation" says "open": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "open_invitation" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "open_invitation" says "open": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Open an invitation a business sent the user, using the invitation code from their message (8 letters and digits, e.g. K7Q2M8XD). Returns the business, what the invitation is about, its contact person and its current shareable documents with download links. Works before the user signs in.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
    • title: Open an invitation
    • readOnlyHint: true
    • idempotentHint: true
  • shareGive the user a page where they attach files for a business: drawings, filled forms, photos of a defect, specifications.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Give the user a page where they attach files for a business: drawings, filled forms, photos of a defect, specifications. Files cannot travel through this tool, so the page is the way; the link works for 15 minutes. With case_id the files attach to that request; without one, the page sends them to the business as a new request.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
    • title: Send files to the business
    • readOnlyHint: false
    • idempotentHint: true
Only reads 3Show 3 read-only tools
  • get_documentsGet the current versions of a business's shareable documents: certificates (ISO 9001 and others), compliance declarations (RoHS, REACH, conflict minerals), safety data sheets, data…Reads private dataNo findings

    Why it is in this group

    • The name "get_documents" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_documents" says "get" and "document": it reads documents.
    • private-dataThe description's first sentence says "get" and "document": it reads documents.
    Description, as the server wrote it
    Get the current versions of a business's shareable documents: certificates (ISO 9001 and others), compliance declarations (RoHS, REACH, conflict minerals), safety data sheets, data sheets and test reports. Filter by part number and/or document type. Returns version, issue and expiry dates, and a download link that works for 15 minutes. Without business_id or business it lists the documents of every business the user has, grouped by business.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
    • title: Get documents
    • readOnlyHint: true
    • idempotentHint: true
  • list_my_businessesList the businesses (suppliers) that share documents and approved answers with this user through Avenbridge: their ids, counts and any context from their invitation, such as a ship…Reads private dataNo findings

    Why it is in this group

    • The name "list_my_businesses" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "document": it reads documents.
    Description, as the server wrote it
    List the businesses (suppliers) that share documents and approved answers with this user through Avenbridge: their ids, counts and any context from their invitation, such as a shipment or part number. Call it first when you do not know which business the user means or need a business_id.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
    • title: List my businesses
    • readOnlyHint: true
    • idempotentHint: true
  • statusThe user's open and recent requests (questions, quotes, samples, documents, complaints) with one business or with all of them: what was asked, when, where it stands, and the busine…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "status" says "status": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "document": it reads documents.
    • untrusted-inputThe description's first sentence says "reply": it reads comments, which other people can write.
    Description, as the server wrote it
    The user's open and recent requests (questions, quotes, samples, documents, complaints) with one business or with all of them: what was asked, when, where it stands, and the business's reply when there is one. Use it when the user asks whether a business has answered or what is pending.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
    • title: Status of my requests
    • readOnlyHint: true
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

9 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write3
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__avenbridge__ask_business"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnopen_invitation

    The server marks "open_invitation" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "open_invitation" says "open": a word for a change.

    What this check looks for
  • Warnanswer_questions

    The server marks "answer_questions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http avenbridge https://mcp.avenbridgetech.com/mcp
claude mcp add --transport http avenbridge https://mcp.avenbridgetech.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__avenbridge__list_my_businesses",
      "mcp__avenbridge__get_documents",
      "mcp__avenbridge__status"
    ],
    "ask": [
      "mcp__avenbridge__open_invitation",
      "mcp__avenbridge__answer_questions",
      "mcp__avenbridge__ask_business",
      "mcp__avenbridge__request",
      "mcp__avenbridge__share"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as avenbridge. Review it before you use it.

Capability tags behind 5 rules
  • mcp__avenbridge__list_my_businesses private-data
  • mcp__avenbridge__get_documents private-data
  • mcp__avenbridge__ask_business untrusted-input, outbound
  • mcp__avenbridge__request untrusted-input
  • mcp__avenbridge__status private-data, untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.avenbridgetech/avenbridge/verify?hash=e4c870b413440bc034d79e68d89fc4142d504a6f7017586ab297e5a96deb3e92" | jq -e '.changed == false'

Pinned hash e4c870b41344, from Oct 31, 2026, 09:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.avenbridgetech/avenbridge/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.avenbridgetech/avenbridge
[![anlyon.dev](https://anlyon.dev/badge/com.avenbridgetech/avenbridge.svg)](https://anlyon.dev/servers/com.avenbridgetech/avenbridge)

Source: MCP Registry. Synced Oct 31, 2026, 09:17 UTC.