Distributed Risk desk

com.distributedrisk/deskdistributedrisk.comstreamable-httpv1.5.0Scanned 2 hours ago

Read the Distributed Risk desk notes and the official US record they cite.

14 tools: 14 only read.

Reads private data · 4
Reads text others write · 13
Can send data out · 0
No findings

Anlyon alternative

Run the operations that matter as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

14 tools

Only reads 14Looks things up and changes nothing.Show 14 read-only tools

get_cveEverything the record says about one CVE, in one answer: the CVE.org record (description, severity, weakness, affected products, references), CISA's exploitation call (SSVC) and it…Reads text others writeNo findings
Why it is in this group
- The name "get_cve" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Everything the record says about one CVE, in one answer: the CVE.org record (description, severity, weakness, affected products, references), CISA's exploitation call (SSVC) and its KEV listing with the federal due date, FIRST's EPSS estimate, and whether it sits in the AI and agent software stack.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_noteOne published note in full (Markdown), with its numbered sources and links to the official record.Reads private dataNo findings
Why it is in this group
- The name "get_note" says "get": a word for reading.
What it can reach
- private-dataThe name "get_note" says "get" and "note": it reads notes.
- private-dataThe description's first sentence says "note": it reads notes.
Description, as the server wrote it
One published note in full (Markdown), with its numbered sources and links to the official record.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_reference_ratesThe New York Fed's reference rates: EFFR and OBFR (unsecured), SOFR, BGCR and TGCR (secured), and the SOFR averages and index (SOFRAI).Reads text others writeNo findings
Why it is in this group
- The name "get_reference_rates" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The New York Fed's reference rates: EFFR and OBFR (unsecured), SOFR, BGCR and TGCR (secured), and the SOFR averages and index (SOFRAI). With no rate, the latest of each; with a rate, its last N days, with percentiles, volume and, for EFFR, the target range.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_treasury_yieldsTreasury's daily par yield curve, newest first: yields by tenor from 1 month to 30 years.Reads text others writeNo findings
Why it is in this group
- The name "get_treasury_yields" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Treasury's daily par yield curve, newest first: yields by tenor from 1 month to 30 years. Ask for the last N days, and optionally only some tenors (for example ["2 Yr", "10 Yr"]).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_ai_stack_vulnerabilitiesNew advisories against the software AI agents run on, newest and most severe first: agent frameworks (LangChain, LlamaIndex, CrewAI, n8n, Langflow), LLM gateways (LiteLLM), MCP ser…Reads text others writeNo findings
Why it is in this group
- The name "list_ai_stack_vulnerabilities" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
New advisories against the software AI agents run on, newest and most severe first: agent frameworks (LangChain, LlamaIndex, CrewAI, n8n, Langflow), LLM gateways (LiteLLM), MCP servers and SDKs, model serving (vLLM, Ollama), ML platforms (MLflow, Ray, Jupyter), model libraries, AI apps and coding agents. Malicious-package reports (a compromised or lookalike release) come first. CISA KEV entries in the same stack are included. Each with package, severity, fixed versions, CVEs, EPSS and the advisory.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_cyber_advisoriesCISA's advisories, newest first: alerts, joint cybersecurity advisories (#StopRansomware, state-sponsored activity), ICS and ICS-medical advisories, and analysis reports.Reads text others writeNo findings
Why it is in this group
- The name "list_cyber_advisories" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
CISA's advisories, newest first: alerts, joint cybersecurity advisories (#StopRansomware, state-sponsored activity), ICS and ICS-medical advisories, and analysis reports. Each with its kind, date, summary, the CVEs it names and the official page. Filter by kind, date, words, or the AI stack.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_cyber_incident_filingsCybersecurity incidents public companies report on Form 8-K, newest first: Item 1.05 (the company judged it material) and, unless excluded, Item 8.01 reports made without that judg…Reads text others writeNo findings
Why it is in this group
- The name "list_cyber_incident_filings" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Cybersecurity incidents public companies report on Form 8-K, newest first: Item 1.05 (the company judged it material) and, unless excluded, Item 8.01 reports made without that judgment. Each with the company, tickers, filing and event dates, items, state, industry code and the EDGAR filing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_notesPublished desk notes, newest first: entry number, date, title, status, topic (cyber or sanctions), readers, source class, a one-line summary, and the note's URL.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_notes" says "list": a word for reading.
What it can reach
- private-dataThe name "list_notes" says "list" and "note": it reads notes.
- private-dataThe description's first sentence says "note": it reads notes.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Published desk notes, newest first: entry number, date, title, status, topic (cyber or sanctions), readers, source class, a one-line summary, and the note's URL. Pages with limit and offset; total is the count that matches, next_offset the offset of the next page. Filter by topic or reader as on the desk page.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_ofac_actionsOFAC's recent actions, newest first: designations and removals, general licenses, FAQs, regulations and settlements, each with its date, categories and the official page.Reads text others writeNo findings
Why it is in this group
- The name "list_ofac_actions" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
OFAC's recent actions, newest first: designations and removals, general licenses, FAQs, regulations and settlements, each with its date, categories and the official page. Filter by date or words in the title.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_travel_advisoriesUS State Department travel advisories, most recently updated first: country, level (1 to 4), the advisory's summary and the official page.Reads text others writeNo findings
Why it is in this group
- The name "list_travel_advisories" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
US State Department travel advisories, most recently updated first: country, level (1 to 4), the advisory's summary and the official page. Filter by country, minimum level or update date.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_federal_registerSearch Federal Register rules, proposed rules, notices and presidential documents: title, type, agencies, publication and effective dates, citation, abstract and the official docum…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_federal_register" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "document": it reads documents.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search Federal Register rules, proposed rules, notices and presidential documents: title, type, agencies, publication and effective dates, citation, abstract and the official document link. Narrow by agency (for example foreign-assets-control-office, industry-and-security-bureau, state-department), type or date.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_kevCISA's Known Exploited Vulnerabilities catalog, newest first: CVE, vendor, product, date added, federal due date, known ransomware use, the required action, FIRST's EPSS estimate, …Reads text others writeNo findings
Why it is in this group
- The name "search_kev" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
CISA's Known Exploited Vulnerabilities catalog, newest first: CVE, vendor, product, date added, federal due date, known ransomware use, the required action, FIRST's EPSS estimate, and whether it sits in the AI and agent software stack. Look up one CVE, search vendor or product words, list what was added since a date, or only the AI stack. For one CVE in full, use get_cve.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_notesFind published notes that mention every word of the query (a name, a list, a country, a program, a date) in the title, summary, sources or body.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_notes" says "search": a word for reading.
What it can reach
- private-dataThe name "search_notes" says "search" and "note": it reads notes.
- private-dataThe description's first sentence says "find" and "note": it reads notes.
- untrusted-inputThe description's first sentence says "find" and "mention": it reads comments, which other people can write.
Description, as the server wrote it
Find published notes that mention every word of the query (a name, a list, a country, a program, a date) in the title, summary, sources or body.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_screening_listsSearch the Consolidated Screening List (OFAC SDN and other Treasury lists; BIS Entity, Denied Persons, Unverified and Military End User lists; State ITAR-debarred and nonproliferat…Reads text others writeNo findings
Why it is in this group
- The name "search_screening_lists" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search the Consolidated Screening List (OFAC SDN and other Treasury lists; BIS Entity, Denied Persons, Unverified and Military End User lists; State ITAR-debarred and nonproliferation lists) by name, alias or identifier (IMO, SWIFT/BIC, registration number). Close spellings match. Each result gives the list, programs, addresses, IDs, remarks and the official list link; the answer says when each list last changed.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_note
list_notes
search_federal_register
search_notes
Reads text others write13: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_cve
get_reference_rates
get_treasury_yields
list_ai_stack_vulnerabilities
list_cyber_advisories
list_cyber_incident_filings
list_notes
list_ofac_actions
list_travel_advisories
search_federal_register
search_kev
search_notes
and 1 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.5.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http desk https://www.distributedrisk.com/mcp

claude mcp add --transport http desk https://www.distributedrisk.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__desk__list_notes",
      "mcp__desk__search_notes",
      "mcp__desk__get_note",
      "mcp__desk__search_screening_lists",
      "mcp__desk__list_ofac_actions",
      "mcp__desk__search_kev",
      "mcp__desk__search_federal_register",
      "mcp__desk__list_travel_advisories",
      "mcp__desk__get_reference_rates",
      "mcp__desk__get_treasury_yields",
      "mcp__desk__get_cve",
      "mcp__desk__list_cyber_advisories",
      "mcp__desk__list_cyber_incident_filings",
      "mcp__desk__list_ai_stack_vulnerabilities"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as desk. Review it before you use it.

Capability tags behind 14 rules

mcp__desk__list_notes private-data, untrusted-input
mcp__desk__search_notes private-data, untrusted-input
mcp__desk__get_note private-data
mcp__desk__search_screening_lists untrusted-input
mcp__desk__list_ofac_actions untrusted-input
mcp__desk__search_kev untrusted-input
mcp__desk__search_federal_register private-data, untrusted-input
mcp__desk__list_travel_advisories untrusted-input
mcp__desk__get_reference_rates untrusted-input
mcp__desk__get_treasury_yields untrusted-input
mcp__desk__get_cve untrusted-input
mcp__desk__list_cyber_advisories untrusted-input
mcp__desk__list_cyber_incident_filings untrusted-input
mcp__desk__list_ai_stack_vulnerabilities untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.distributedrisk/desk/verify?hash=f20a2a15ce34b10aa1729598f897d03fa4ffc7bbf7c9e5794a7b63c2d31cc725" | jq -e '.changed == false'

Pinned hash f20a2a15ce34, from Oct 30, 2026, 04:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.distributedrisk/desk/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.distributedrisk/desk.svg)](https://anlyon.dev/servers/com.distributedrisk/desk)

Source: MCP Registry. Synced Oct 30, 2026, 04:17 UTC.