com.eacpartners/concierge

com.eacpartners/conciergeeacpartners.comstreamable-httpv0.1.0Scanned 54 minutes ago

Public tools for EAC Partners: offerings, insights, and appointment requests.

18 tools: 5 change things and 13 only read.

Reads private data · 1
Reads text others write · 4
Can send data out · 1
No findings

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

18 tools

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

leave_lead_noteQueues a short note from a prospective customer.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Queues a short note from a prospective customer. Web addresses are rejected.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
match_needMatches a short need to offerings in the published catalog only.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Matches a short need to offerings in the published catalog only. Does not invent services.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
open_support_requestOpens a support request.No findings
Why it is in this group
- The name "open_support_request" says "open": a word for a change.
Description, as the server wrote it
Opens a support request. Not available until phase 2, and this build does not store one.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
request_appointmentQueues an appointment request for a slotId previously returned by list_open_slots.No findings
Why it is in this group
- The name "request_appointment" says "request": a word for a change.
Description, as the server wrote it
Queues an appointment request for a slotId previously returned by list_open_slots. Status is pending confirmation. Nothing is sent or held automatically.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
submit_referralQueues a partner referral for staff review.No findings
Why it is in this group
- The name "submit_referral" says "submit": a word for a change.
Description, as the server wrote it
Queues a partner referral for staff review. Nothing is sent automatically.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false

Only reads 13Looks things up and changes nothing.Show 13 read-only tools

download_invoice_pdfReturns an invoice PDF.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Returns an invoice PDF. Not available until phase 2, and this build returns no file.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_business_cardReturns the public EAC Partners business card: name, emails, phone, address, time zone, and website.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_business_card" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "return" and "email": it reads mail.
- untrusted-inputThe description's first sentence says "return" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Returns the public EAC Partners business card: name, emails, phone, address, time zone, and website.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_insightReturns one Insights article by vertical and slug, or by canonical URL.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "get_insight" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "return" and "url": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Returns one Insights article by vertical and slug, or by canonical URL. Summary and URL only unless full text is enabled.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_invoiceReturns one invoice.No findings
Why it is in this group
- The name "get_invoice" says "get": a word for reading.
Description, as the server wrote it
Returns one invoice. Not available until phase 2, and this build returns no record.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_privacy_noticeReturns the Concierge privacy notice.No findings
Why it is in this group
- The name "get_privacy_notice" says "get": a word for reading.
Description, as the server wrote it
Returns the Concierge privacy notice. Host AI vendors may see tool calls and tool results.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_billed_timeLists billed time.No findings
Why it is in this group
- The name "list_billed_time" says "list": a word for reading.
Description, as the server wrote it
Lists billed time. Not available until phase 2, and this build returns no records.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_insightsLists Insights articles with title, summary, date, and canonical URL.Reads text others writeNo findings
Why it is in this group
- The name "list_insights" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "list" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Lists Insights articles with title, summary, date, and canonical URL. Full article text is not included.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_invoicesLists customer invoices.No findings
Why it is in this group
- The name "list_invoices" says "list": a word for reading.
Description, as the server wrote it
Lists customer invoices. Not available until phase 2, and this build returns no records.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_offeringsLists EAC Partners offerings, including a footnote of small demonstrations built by EAC Partners.No findings
Why it is in this group
- The name "list_offerings" says "list": a word for reading.
Description, as the server wrote it
Lists EAC Partners offerings, including a footnote of small demonstrations built by EAC Partners. The ERP title comes from configuration.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_open_slotsLists open appointment slots in America/New_York for discovery, project review, or support.Reads text others writeNo findings
Why it is in this group
- The name "list_open_slots" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "list" and "review": it reads comments, which other people can write.
Description, as the server wrote it
Lists open appointment slots in America/New_York for discovery, project review, or support. Phase 1 uses a deterministic schedule stub.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
list_subscriptionsLists subscriptions.No findings
Why it is in this group
- The name "list_subscriptions" says "list": a word for reading.
Description, as the server wrote it
Lists subscriptions. Not available until phase 2, and this build returns no records.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
search_insightsSearches Insights titles and summaries.No findings
Why it is in this group
- The name "search_insights" says "search": a word for reading.
Description, as the server wrote it
Searches Insights titles and summaries. Returns a summary and canonical URL.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
whoamiReports the signed-in customer.No findings
Why it is in this group
- The name "whoami" says "whoami": a word for reading.
Description, as the server wrote it
Reports the signed-in customer. Sign-in is not enabled, and this build returns no customer record.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

4 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_business_card
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_business_card
get_insight
list_insights
list_open_slots
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; get_insight

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__concierge__get_insight"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http concierge https://concierge.eacpartners.com/mcp

claude mcp add --transport http concierge https://concierge.eacpartners.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__concierge__get_business_card",
      "mcp__concierge__list_offerings",
      "mcp__concierge__get_privacy_notice",
      "mcp__concierge__list_insights",
      "mcp__concierge__search_insights",
      "mcp__concierge__whoami",
      "mcp__concierge__list_invoices",
      "mcp__concierge__get_invoice",
      "mcp__concierge__download_invoice_pdf",
      "mcp__concierge__list_subscriptions",
      "mcp__concierge__list_billed_time",
      "mcp__concierge__list_open_slots"
    ],
    "ask": [
      "mcp__concierge__match_need",
      "mcp__concierge__get_insight",
      "mcp__concierge__submit_referral",
      "mcp__concierge__leave_lead_note",
      "mcp__concierge__open_support_request",
      "mcp__concierge__request_appointment"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as concierge. Review it before you use it.

Capability tags behind 4 rules

mcp__concierge__get_business_card private-data, untrusted-input
mcp__concierge__list_insights untrusted-input
mcp__concierge__get_insight untrusted-input, outbound
mcp__concierge__list_open_slots untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.eacpartners/concierge/verify?hash=ea4bead35649ab4d50a47911bcfd17c77fc33815cb0cd50f0f71a319ee2e1def" | jq -e '.changed == false'

Pinned hash ea4bead35649, from Nov 3, 2026, 11:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.eacpartners/concierge/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.eacpartners/concierge.svg)](https://anlyon.dev/servers/com.eacpartners/concierge)

Source: MCP Registry. Synced Nov 3, 2026, 11:17 UTC.