Foliade

com.gekkode/foliadegekkode.comstreamable-httpv1.2.0Scanned 24 hours ago

Turn PDFs into mobile flipbook catalogues: upload private drafts, customise, publish, get stats.

35 tools: 15 can delete or cancel things, 4 do something that can't be undone, 7 change things and 9 only read.

Reads private data · 2
Reads text others write · 20
Can send data out · 4
No findings

Tools listed without sign-in. Remote posture

Anlyon alternative

26 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

35 tools

Deletes or cancels 15Removes, cancels or revokes something.Claude Code: deny

foliade_apply_themeCopies the styling and media of a theme of this account onto this catalogue.Reads text others writeNo findings
Why it is in this group
- The name "foliade_apply_theme" says "apply": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Copies the styling and media of a theme of this account onto this catalogue.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_publish_enrichmentsPublishes the interactive elements explicitly, with history.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "foliade_publish_enrichments" says "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "foliade_publish_enrichments" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Publishes the interactive elements explicitly, with history. Does not publish the catalogue itself.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_restore_enrichmentsRestores a version of this catalogue after re-checking the plan; creates a new history entry.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Restores a version of this catalogue after re-checking the plan; creates a new history entry.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_set_catalogue_accessChanges access on explicit request only.Reads text others writeNo findings
Why it is in this group
- The name "foliade_set_catalogue_access" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Changes access on explicit request only. Never publishes a draft. The password is never returned. This tool sets the password and the addresses; to make a draft public, use foliade_publish_catalogue. Declaring a domain does not configure DNS/TLS; activation remains a separate operation.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_set_chaptersReplaces the table of contents with the ordered list supplied; an empty list removes it.Reads text others writeNo findings
Why it is in this group
- The name "foliade_set_chapters" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Replaces the table of contents with the ordered list supplied; an empty list removes it. Only the table of contents: every other reader setting stays with foliade_update_catalogue.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_set_lead_captureSets activation, page, blocking mode, fields and consent.Reads text others writeNo findings
Why it is in this group
- The name "foliade_set_lead_capture" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Sets activation, page, blocking mode, fields and consent. A plan with lead capture is required; email is mandatory.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_set_shelf_accessPublication and access of the shelf on explicit request only; DNS/TLS remain separate.Reads text others writeNo findings
Why it is in this group
- The name "foliade_set_shelf_access" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Publication and access of the shelf on explicit request only; DNS/TLS remain separate.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_set_shelf_cataloguesReplaces the contents of the shelf with this ordered list with collection names.Reads text others writeNo findings
Why it is in this group
- The name "foliade_set_shelf_catalogues" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Replaces the contents of the shelf with this ordered list with collection names. The PDFs themselves are kept.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_unpublish_catalogueCloses the public link without deleting the data.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "close": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Closes the public link without deleting the data. Requires an explicit request.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_update_brandAccount-wide impact: use it when a global customisation is asked for, prefer update_catalogue for a single PDF.Reads text others writeNo findings
Why it is in this group
- The name "foliade_update_brand" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Account-wide impact: use it when a global customisation is asked for, prefer update_catalogue for a single PDF.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_update_catalogueChanges only the fields supplied: colours, bar, controls, sound, reading, logo, title, language, PDF.Reads text others writeNo findings
Why it is in this group
- The name "foliade_update_catalogue" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Changes only the fields supplied: colours, bar, controls, sound, reading, logo, title, language, PDF. It never touches the table of contents, which belongs to foliade_set_chapters. dry_run returns a preview without writing. No change to the publication state.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_update_enrichmentsReplaces the draft: 13 types, links, buttons, videos, forms, products, galleries, tours, questions.Reads text others writeNo findings
Why it is in this group
- The name "foliade_update_enrichments" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Replaces the draft: 13 types, links, buttons, videos, forms, products, galleries, tours, questions. No element that is invalid or closed off by the plan is accepted. Nothing is published before publish_enrichments. See capabilities and get_enrichments for the examples and the native structure.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_update_shelfTexts, six layouts, covers, shelf boards, colours, fonts, collections, search and opening.Reads text others writeNo findings
Why it is in this group
- The name "foliade_update_shelf" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Texts, six layouts, covers, shelf boards, colours, fonts, collections, search and opening.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_update_themeChanges the theme for its future applications.Reads text others writeNo findings
Why it is in this group
- The name "foliade_update_theme" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Changes the theme for its future applications. make_default changes the starting point of new catalogues.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false
foliade_update_tracking_linkChanges recipient, note, email or active flag; closing is explicit and reversible, with no message sent.Reads text others writeNo findings
Why it is in this group
- The name "foliade_update_tracking_link" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Changes recipient, note, email or active flag; closing is explicit and reversible, with no message sent.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
- readOnlyHint: false

Can't be undone 4Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

foliade_create_tracking_linkCreates a named Business link.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "foliade_create_tracking_link" says "create": a word for a change.
- The input addresses people (input.recipient): what it sends cannot be taken back.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.recipient): what the tool writes goes there.
Description, as the server wrote it
Creates a named Business link. No email is sent; does not publish the catalogue.
Annotations the server declares
- destructiveHint: false
- openWorldHint: true
- readOnlyHint: false
foliade_finalize_uploadFinalises an upload that has been received.No findings
Why it is in this group
- The name "foliade_finalize_upload" says "finalize": a word for a change that another call does not undo.
Description, as the server wrote it
Finalises an upload that has been received. A repeat returns the same catalogue, never a duplicate. Conversion is asynchronous: check foliade_catalogue_status before giving the final result. The catalogue stays private until it is published explicitly.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
foliade_import_chaptersMerges the PDF bookmarks into the table of contents without duplicates.Reads text others writeNo findings
Why it is in this group
- The name "foliade_import_chapters" says "import": a word for a change.
- The description's first verb is "merge": a word for a change that another call does not undo.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Merges the PDF bookmarks into the table of contents without duplicates.
Annotations the server declares
- destructiveHint: false
- openWorldHint: true
- readOnlyHint: false
foliade_publish_catalogueMakes the catalogue public, on explicit request only.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "foliade_publish_catalogue" says "publish": a word for a change that another call does not undo.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "foliade_publish_catalogue" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Makes the catalogue public, on explicit request only. Keeps its identifier. It does not change the password or the addresses: those belong to foliade_set_catalogue_access.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

foliade_accountConfirms the address and the plan of the destination account, without secrets or payment data.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Confirms the address and the plan of the destination account, without secrets or payment data.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_capabilitiesEffective entitlements, JSON schemas and examples.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Effective entitlements, JSON schemas and examples. Read before configuring; omitted fields are kept, null is refused. Setting changes are visible immediately on a published catalogue. Binary media, PDF replacements, API keys, REST webhooks, team and billing stay in the workspace/API.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_catalogue_statsAggregated statistics: reads and contacts, without disclosing the contact details.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Aggregated statistics: reads and contacts, without disclosing the contact details.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_create_shelfCreates a shelf as a draft.Reads text others writeNo findings
Why it is in this group
- The name "foliade_create_shelf" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Creates a shelf as a draft. The Distributeur plan is required; nothing is published automatically.
Annotations the server declares
- destructiveHint: false
- openWorldHint: true
- readOnlyHint: false
foliade_create_themeSaves the existing styling and media of the catalogue as a theme, within the limit of the plan.Reads text others writeNo findings
Why it is in this group
- The name "foliade_create_theme" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Saves the existing styling and media of the catalogue as a theme, within the limit of the plan.
Annotations the server declares
- destructiveHint: false
- openWorldHint: true
- readOnlyHint: false
foliade_import_urlFetches a PDF that is already online and prepares it as a private draft.Can send data outNo findings
Why it is in this group
- The name "foliade_import_url" says "import": a word for a change.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Fetches a PDF that is already online and prepares it as a private draft. Use this when the user gives a link, or when your host hands you an attachment as a download URL rather than a local file. For a file on the user's machine, use foliade_prepare_upload instead. Only public https links are accepted, and the server checks that the link really returns a PDF. Call foliade_finalize_upload next with the upload_id.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: false
foliade_prepare_uploadCreates a single-use 10-minute deposit.No findings
Why it is in this group
- The name "foliade_prepare_upload" says "upload": a word for a change.
Description, as the server wrote it
Creates a single-use 10-minute deposit. Compute the size and the SHA-256 of the local PDF. Transfer the bytes to upload_url with PUT, Content-Type application/pdf, with the headers returned. Do not publish these headers in your reply. This ticket allows no reading and is not an API key for the account.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: false

Only reads 9Looks things up and changes nothing.Show 9 read-only tools

foliade_catalogue_statusPrivate state: owner OAuth or guest token, never the public link alone.No findings
Why it is in this group
- The name "foliade_catalogue_status" says "status": a word for reading.
Description, as the server wrote it
Private state: owner OAuth or guest token, never the public link alone.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_get_brandBrand name, colour and default PDF download; without any billing information.No findings
Why it is in this group
- The name "foliade_get_brand" says "get": a word for reading.
Description, as the server wrote it
Brand name, colour and default PDF download; without any billing information.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_get_catalogue_settingsSettings, table of contents, lead capture, protection without secrets, and the revision needed for changes.Reads private dataNo findings
Why it is in this group
- The name "foliade_get_catalogue_settings" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "table": it reads databases.
Description, as the server wrote it
Settings, table of contents, lead capture, protection without secrets, and the revision needed for changes.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_get_enrichmentsElements, published version, differences and revision.No findings
Why it is in this group
- The name "foliade_get_enrichments" says "get": a word for reading.
Description, as the server wrote it
Elements, published version, differences and revision. The files remain those of the catalogue.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_get_shelfSettings, catalogues in order, and revision of the shelf.No findings
Why it is in this group
- The name "foliade_get_shelf" says "get": a word for reading.
Description, as the server wrote it
Settings, catalogues in order, and revision of the shelf.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_list_cataloguesLists the private and public catalogues of the connected account, with pagination.No findings
Why it is in this group
- The name "foliade_list_catalogues" says "list": a word for reading.
Description, as the server wrote it
Lists the private and public catalogues of the connected account, with pagination.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_list_shelvesPaginated list of the shelves and their settings, without passwords.Reads private dataNo findings
Why it is in this group
- The name "foliade_list_shelves" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "password": it reads secrets.
Description, as the server wrote it
Paginated list of the shelves and their settings, without passwords.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_list_themesAccount themes, their settings and revisions; a theme is a copy, not a live link.No findings
Why it is in this group
- The name "foliade_list_themes" says "list": a word for reading.
Description, as the server wrote it
Account themes, their settings and revisions; a theme is a copy, not a live link.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
foliade_list_tracking_linksNamed links of the catalogue owned by the account.No findings
Why it is in this group
- The name "foliade_list_tracking_links" says "list": a word for reading.
Description, as the server wrote it
Named links of the catalogue owned by the account. Contains the recipients; do not disclose them publicly.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

160 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 private-data tools breaks every one.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; foliade_get_catalogue_settings
foliade_list_shelves
Reads text others write20: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; foliade_apply_theme
foliade_create_shelf
foliade_create_theme
foliade_create_tracking_link
foliade_import_chapters
foliade_publish_catalogue
foliade_publish_enrichments
foliade_restore_enrichments
foliade_set_catalogue_access
foliade_set_chapters
foliade_set_lead_capture
foliade_set_shelf_access
and 8 more
Can send data out4: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; foliade_create_tracking_link
foliade_import_url
foliade_publish_catalogue
foliade_publish_enrichments

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__foliade__foliade_get_catalogue_settings",
      "mcp__foliade__foliade_list_shelves"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 22, 2026, 14:32 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 26
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: not observed
RFC 9728 protected resource metadata: https://foliade.gekkode.com/.well-known/oauth-protected-resource/mcp
Authorization servers: https://foliade.gekkode.com
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: yes

HighThe whole server
The endpoint served tools/list without credentials, and the list has 26 tools that change things (15 destructive, 4 irreversible, 7 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://foliade.gekkode.com/mcp: tools/list returned 35 tools to an anonymous client, including foliade_unpublish_catalogue (destructive), foliade_update_catalogue (destructive), foliade_set_catalogue_access (destructive), foliade_set_lead_capture (destructive), foliade_set_chapters (destructive) and 21 more
What this check looks for

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http foliade https://foliade.gekkode.com/mcp

claude mcp add --transport http foliade https://foliade.gekkode.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__foliade__foliade_list_catalogues",
      "mcp__foliade__foliade_catalogue_status",
      "mcp__foliade__foliade_get_catalogue_settings",
      "mcp__foliade__foliade_get_brand",
      "mcp__foliade__foliade_list_themes",
      "mcp__foliade__foliade_get_enrichments",
      "mcp__foliade__foliade_list_shelves",
      "mcp__foliade__foliade_get_shelf",
      "mcp__foliade__foliade_list_tracking_links"
    ],
    "ask": [
      "mcp__foliade__foliade_account",
      "mcp__foliade__foliade_prepare_upload",
      "mcp__foliade__foliade_import_url",
      "mcp__foliade__foliade_finalize_upload",
      "mcp__foliade__foliade_publish_catalogue",
      "mcp__foliade__foliade_catalogue_stats",
      "mcp__foliade__foliade_capabilities",
      "mcp__foliade__foliade_import_chapters",
      "mcp__foliade__foliade_create_theme",
      "mcp__foliade__foliade_create_shelf",
      "mcp__foliade__foliade_create_tracking_link"
    ],
    "deny": [
      "mcp__foliade__foliade_unpublish_catalogue",
      "mcp__foliade__foliade_update_catalogue",
      "mcp__foliade__foliade_set_catalogue_access",
      "mcp__foliade__foliade_set_lead_capture",
      "mcp__foliade__foliade_set_chapters",
      "mcp__foliade__foliade_update_brand",
      "mcp__foliade__foliade_update_theme",
      "mcp__foliade__foliade_apply_theme",
      "mcp__foliade__foliade_update_enrichments",
      "mcp__foliade__foliade_publish_enrichments",
      "mcp__foliade__foliade_restore_enrichments",
      "mcp__foliade__foliade_update_shelf",
      "mcp__foliade__foliade_set_shelf_catalogues",
      "mcp__foliade__foliade_set_shelf_access",
      "mcp__foliade__foliade_update_tracking_link"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as foliade. Review it before you use it.

Capability tags behind 23 rules

mcp__foliade__foliade_import_url outbound
mcp__foliade__foliade_publish_catalogue untrusted-input, outbound
mcp__foliade__foliade_unpublish_catalogue untrusted-input
mcp__foliade__foliade_get_catalogue_settings private-data
mcp__foliade__foliade_update_catalogue untrusted-input
mcp__foliade__foliade_set_catalogue_access untrusted-input
mcp__foliade__foliade_set_lead_capture untrusted-input
mcp__foliade__foliade_set_chapters untrusted-input
mcp__foliade__foliade_import_chapters untrusted-input
mcp__foliade__foliade_update_brand untrusted-input
mcp__foliade__foliade_create_theme untrusted-input
mcp__foliade__foliade_update_theme untrusted-input
mcp__foliade__foliade_apply_theme untrusted-input
mcp__foliade__foliade_update_enrichments untrusted-input
mcp__foliade__foliade_publish_enrichments untrusted-input, outbound
mcp__foliade__foliade_restore_enrichments untrusted-input
mcp__foliade__foliade_list_shelves private-data
mcp__foliade__foliade_create_shelf untrusted-input
mcp__foliade__foliade_update_shelf untrusted-input
mcp__foliade__foliade_set_shelf_catalogues untrusted-input
mcp__foliade__foliade_set_shelf_access untrusted-input
mcp__foliade__foliade_create_tracking_link untrusted-input, outbound
mcp__foliade__foliade_update_tracking_link untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.gekkode/foliade/verify?hash=6c5379a1a557d82519a18ed72b7baf51970966f0946676b9a4cd5fb9f6ccc91f" | jq -e '.changed == false'

Pinned hash 6c5379a1a557, from Oct 21, 2026, 18:49 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.gekkode/foliade/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.gekkode/foliade.svg)](https://anlyon.dev/servers/com.gekkode/foliade)

Source: MCP Registry. Synced Oct 21, 2026, 17:55 UTC.