Skip to content
anlyon.devby Anlyon

Moon Phase Software MCP server

com.moonphasesoftware/moonphasesoftware-commoonphasesoftware.comstreamable-httpv1.0.1Scanned

Moon phase, moonrise, full Moons, eclipses, Moon sign and distance for any place in the world.

7 tools: 7 only read.

Tools: 0 delete, 0 irreversible, 0 write, 7 read.
  • Reads private data · 3
  • Reads text others write · 1
  • Can send data out · 0
  • No findings

Tools listed without sign-in. Remote posture

With Anlyon

Decide which of this server's tools your agent can use.

  • Anlyon lists the tools and adopts none.
  • Each tool you adopt gets approvals and receipts.
  • Your agent never holds the key.
Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

Compare with similar serversMarkdownJSONReport this listing

What the Moon Phase Software MCP server can do

The Moon Phase Software MCP server is published by moonphasesoftware.com, a domain the MCP Registry verified. It has 7 tools. Every one of them only reads: going by their definitions, none of them creates, changes, sends or deletes anything.

3 tools read private data (find_full_moons, get_moon_calendar and list_eclipses); 1 tool brings in text other people can write (get_moonrise_moonset).

None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.

Its remote endpoint lists its tools without sign-in.

Last scanned Nov 12, 2026, version 1.0.1.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

7 tools

Only reads 7Show 7 read-only tools
  • find_full_moonsReturns every full Moon of a calendar year with its date and time in a time zone, its traditional name such as Wolf Moon or Harvest Moon, its distance from Earth and whether it is …Reads private dataNo findings

    Why it is in this group

    • The name "find_full_moons" says "find": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "return" and "calendar": it reads calendars.
    Description, as the server wrote it
    Returns every full Moon of a calendar year with its date and time in a time zone, its traditional name such as Wolf Moon or Harvest Moon, its distance from Earth and whether it is a supermoon or a Blue Moon. Years run from 1900 to 2100.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Full Moons of a year
  • get_moon_calendarReturns every day of a month with the Moon's phase and percent lit at 12:00 local time, and the exact times of that month's new Moon, first quarter, full Moon and last quarter in a…Reads private dataNo findings

    Why it is in this group

    • The name "get_moon_calendar" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_moon_calendar" says "get" and "calendar": it reads calendars.
    Description, as the server wrote it
    Returns every day of a month with the Moon's phase and percent lit at 12:00 local time, and the exact times of that month's new Moon, first quarter, full Moon and last quarter in a time zone.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Moon calendar
  • get_moon_distanceReturns the Moon's distance from Earth in kilometres and miles at a date and time, its apparent width, the previous and next perigee and apogee, and the next full Moon's distance w…No findings

    Why it is in this group

    • The name "get_moon_distance" says "get": a word for reading.
    Description, as the server wrote it
    Returns the Moon's distance from Earth in kilometres and miles at a date and time, its apparent width, the previous and next perigee and apogee, and the next full Moon's distance with whether that full Moon is a supermoon.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Moon distance
  • get_moon_phaseReturns the Moon's phase, percent lit, lunar age and waxing or waning direction right now, at 12:00 on a date, or at a clock time on a date, in a time zone or city.No findings

    Why it is in this group

    • The name "get_moon_phase" says "get": a word for reading.
    Description, as the server wrote it
    Returns the Moon's phase, percent lit, lunar age and waxing or waning direction right now, at 12:00 on a date, or at a clock time on a date, in a time zone or city. Also returns the next new Moon, first quarter, full Moon and last quarter, the previous full Moon and the moment the phase name changes. Dates run from 1900 to 2100.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Moon phase
  • get_moon_signReturns the zodiac sign the Moon is in at a date and local time, in a time zone or city, with its degree in the sign and the next sign change.No findings

    Why it is in this group

    • The name "get_moon_sign" says "get": a word for reading.
    Description, as the server wrote it
    Returns the zodiac sign the Moon is in at a date and local time, in a time zone or city, with its degree in the sign and the next sign change. Without a time it returns every sign the Moon is in during that date. The tropical or the Lahiri sidereal zodiac can be chosen.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Moon sign
  • get_moonrise_moonsetReturns moonrise, moonset and the Moon's highest point on a local date for a city from the website's list of world cities, or for any latitude and longitude, with compass direction…Reads text others writeNo findings

    Why it is in this group

    • The name "get_moonrise_moonset" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "return" and "website": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Returns moonrise, moonset and the Moon's highest point on a local date for a city from the website's list of world cities, or for any latitude and longitude, with compass directions and the Moon's phase that day. Also returns when the Moon is up after dark and, for today, where the Moon is right now. Times are in the place's own time zone.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Moonrise and moonset
  • list_eclipsesReturns the lunar and solar eclipses of a calendar year with their type, the time of greatest eclipse in a time zone, the contact times of lunar eclipses, where solar eclipses are …Reads private dataNo findings

    Why it is in this group

    • The name "list_eclipses" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "return" and "calendar": it reads calendars.
    Description, as the server wrote it
    Returns the lunar and solar eclipses of a calendar year with their type, the time of greatest eclipse in a time zone, the contact times of lunar eclipses, where solar eclipses are greatest and which of 16 major world cities see each one. The type filter limits the list to lunar or solar eclipses.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Eclipses of a year

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Nov 12, 2026, 10:18 UTC, unchanged since Nov 12, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
0
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
not observed
Authorization servers
not observed
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http moonphasesoftware-com https://moonphasesoftware.com/api/mcp
claude mcp add --transport http moonphasesoftware-com https://moonphasesoftware.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__moonphasesoftware-com__get_moon_phase",
      "mcp__moonphasesoftware-com__get_moonrise_moonset",
      "mcp__moonphasesoftware-com__find_full_moons",
      "mcp__moonphasesoftware-com__get_moon_calendar",
      "mcp__moonphasesoftware-com__list_eclipses",
      "mcp__moonphasesoftware-com__get_moon_sign",
      "mcp__moonphasesoftware-com__get_moon_distance"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as moonphasesoftware-com. Review it before you use it.

Capability tags behind 4 rules
  • mcp__moonphasesoftware-com__get_moonrise_moonset untrusted-input
  • mcp__moonphasesoftware-com__find_full_moons private-data
  • mcp__moonphasesoftware-com__get_moon_calendar private-data
  • mcp__moonphasesoftware-com__list_eclipses private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.moonphasesoftware/moonphasesoftware-com/verify?hash=97c1d0a3f66cc93ebf9dd92045330624bc53865e405da4f1b7a046a8ad26a830" | jq -e '.changed == false'

Pinned hash 97c1d0a3f66c, from Nov 12, 2026, 00:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.moonphasesoftware/moonphasesoftware-com/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.moonphasesoftware/moonphasesoftware-com
[![anlyon.dev](https://anlyon.dev/badge/com.moonphasesoftware/moonphasesoftware-com.svg)](https://anlyon.dev/servers/com.moonphasesoftware/moonphasesoftware-com)

Source: MCP Registry · repository. Synced Nov 12, 2026, 00:17 UTC.

Moon Phase Software MCP server: questions and answers

Answered from the scan above, not from the publisher's description.

Is the Moon Phase Software MCP server safe?

No scan can promise that. What its definitions show: 7 tools, all of which only read, and 0 findings from fixed checks. Read-only tools can still pass private data to a model.

Can the Moon Phase Software MCP server delete data?

No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.

Can the Moon Phase Software MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the Moon Phase Software MCP server have?

7 tools: 7 read. get_moon_phase, get_moonrise_moonset, find_full_moons, get_moon_calendar, list_eclipses, get_moon_sign and get_moon_distance.

Does the Moon Phase Software MCP server need sign-in or OAuth?

Its remote endpoint listed its tools to an anonymous client, without sign-in.

Does the Moon Phase Software MCP server send data to outside services?

None of its tools sends, posts or publishes, or takes a recipient, channel or URL.

Has the Moon Phase Software MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 12, 2026.