Skip to content

CdpHub

com.cdphub/cdphubcdphub.comstreamable-httpv1.0.3Scanned

Find which CDPs connect to your tools, compare CDP catalogs, and check a whole stack

6 tools: 1 change things and 5 only read.

Tools: 0 delete, 0 irreversible, 1 write, 5 read.
  • Reads private data · 5
  • Reads text others write · 0
  • Can send data out · 0
  • No findings

Anlyon alternative

1 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

6 tools

Changes things 1Claude Code: ask
  • check_stackCheck a stack of two to ten tools against every CDP in CdpHub's directory, as the stack check on cdphub.com does: how many CDPs list all of them and which, those CDPs grouped by ho…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check a stack of two to ten tools against every CDP in CdpHub's directory, as the stack check on cdphub.com does: how many CDPs list all of them and which, those CDPs grouped by how they connect to each tool with each group counted, the CDPs that miss exactly one tool grouped by the tool they miss, and a link to the same check on cdphub.com. Use it for any question about two or more tools together, such as which CDPs fit a company's stack.

    Annotations the server declares

    • title: Check a stack
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 5Show 5 read-only tools
  • compare_cdpsCompare two CDPs' integration catalogs in CdpHub's directory, tool by tool: how many tools both list, how many only one does, the most widely listed tools in both, each side's larg…Reads private dataNo findings

    Why it is in this group

    • The name "compare_cdps" says "compare": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "compare" and "directory": it reads files.
    Description, as the server wrote it
    Compare two CDPs' integration catalogs in CdpHub's directory, tool by tool: how many tools both list, how many only one does, the most widely listed tools in both, each side's largest categories of tools the other lacks, and the link to their comparison page on cdphub.com.

    Annotations the server declares

    • title: Compare two CDPs
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_cdpLook up one customer data platform's integration catalog in CdpHub's directory: its number of tools and listings and its rank by catalog size, which way its integrations run, its l…Reads private dataNo findings

    Why it is in this group

    • The name "get_cdp" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "directory": it reads files.
    Description, as the server wrote it
    Look up one customer data platform's integration catalog in CdpHub's directory: its number of tools and listings and its rank by catalog size, which way its integrations run, its largest categories with their most widely listed tools, how it connects to the main data warehouses, the CDPs that list the most of the same tools, and its page on cdphub.com.

    Annotations the server declares

    • title: Look up a CDP
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_toolLook up one marketing or data tool (for example Snowflake, Braze, Google Ads or The Trade Desk) in CdpHub's directory: how many of the customer data platforms (CDPs) it tracks list…Reads private dataNo findings

    Why it is in this group

    • The name "get_tool" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "directory": it reads files.
    Description, as the server wrote it
    Look up one marketing or data tool (for example Snowflake, Braze, Google Ads or The Trade Desk) in CdpHub's directory: how many of the customer data platforms (CDPs) it tracks list an integration with it, each CDP counted once (both sends data to it and reads from it, only sends, only reads), which CDPs list it in each group and which don't, every listing with its direction, how it runs (server-side, client-side, in the warehouse) and a link to the CDP's own documentation, and the tool's page on cdphub.com. Use it for any question about one tool.

    Annotations the server declares

    • title: Look up a tool
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_cdpsList every customer data platform in CdpHub's directory with its number of tools and listings and its page on cdphub.com, largest catalog first, with the directory's totals.Reads private dataNo findings

    Why it is in this group

    • The name "list_cdps" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "directory": it reads files.
    Description, as the server wrote it
    List every customer data platform in CdpHub's directory with its number of tools and listings and its page on cdphub.com, largest catalog first, with the directory's totals.

    Annotations the server declares

    • title: List the CDPs
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_directorySearch CdpHub's directory of CDP integrations by keyword, CDP, category, direction or how the integration runs.Reads private dataNo findings

    Why it is in this group

    • The name "search_directory" says "search": a word for reading.

    What it can reach

    • private-dataThe name "search_directory" says "search" and "directory": it reads files.
    • private-dataThe description's first sentence says "search" and "directory": it reads files.
    Description, as the server wrote it
    Search CdpHub's directory of CDP integrations by keyword, CDP, category, direction or how the integration runs. Returns the exact totals, the first results and the link to the same search on cdphub.com. Use get_tool for one named tool and check_stack for several.

    Annotations the server declares

    • title: Search the directory
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input or outbound.

Reads private data5
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http cdphub https://cdphub.com/functions/mcp
claude mcp add --transport http cdphub https://cdphub.com/functions/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cdphub__get_tool",
      "mcp__cdphub__compare_cdps",
      "mcp__cdphub__get_cdp",
      "mcp__cdphub__list_cdps",
      "mcp__cdphub__search_directory"
    ],
    "ask": [
      "mcp__cdphub__check_stack"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as cdphub. Review it before you use it.

Capability tags behind 5 rules
  • mcp__cdphub__get_tool private-data
  • mcp__cdphub__compare_cdps private-data
  • mcp__cdphub__get_cdp private-data
  • mcp__cdphub__list_cdps private-data
  • mcp__cdphub__search_directory private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.cdphub/cdphub/verify?hash=0be8035809d600b24d0b37896a810df270f583e2bfbffced19b4a58e4acd74cb" | jq -e '.changed == false'

Pinned hash 0be8035809d6, from Oct 30, 2026, 05:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.cdphub/cdphub/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.cdphub/cdphub
[![anlyon.dev](https://anlyon.dev/badge/com.cdphub/cdphub.svg)](https://anlyon.dev/servers/com.cdphub/cdphub)

Source: MCP Registry. Synced Oct 30, 2026, 05:17 UTC.