Skip to content
anlyon.devby Anlyon

Near Fine

com.nearfine/booksnearfine.comstreamable-httpv1.0.0Scanned

Search booksellers worldwide for any book, new or used, and set alerts for copies not listed yet.

5 tools: 1 can delete or cancel things, 1 change things and 3 only read.

Tools: 1 delete, 0 irreversible, 1 write, 3 read.
  • Reads private data · 0
  • Reads text others write · 1
  • Can send data out · 0
  • 1 finding

Anlyon alternative

2 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

5 tools

Deletes or cancels 1Claude Code: deny
  • cancel_alertCancel one of the person's alerts on Near Fine by its id, from list_alerts or set_alert, deleting it as its Delete button on Near Fine does.No findings

    Why it is in this group

    • The name "cancel_alert" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel one of the person's alerts on Near Fine by its id, from list_alerts or set_alert, deleting it as its Delete button on Near Fine does. The first time, they sign in. Returns the cancelled alert and the person's plan.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
Changes things 1Claude Code: ask
  • set_alertSet an alert on a search for the person.No findings

    Why it is in this group

    • The name "set_alert" says "set": a word for a change.
    Description, as the server wrote it
    Set an alert on a search for the person. The first time, they sign in to Near Fine. Near Fine checks the alert for six months and emails them once when a new listing turns up with everything the query asks for, such as a first edition, a signed copy or a price cap. The query reads as search_books reads it. Listings there already never count: the alert stays pending until its first check has noted them. Setting an alert that's already set keeps it as it is. Returns the alert, with its status and its link on Near Fine, and the person's plan: how many alerts it allows, how many are in use and how often each is checked. A full plan comes back as an error; paid plans, at plans_url, have more.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
Only reads 3Show 3 read-only tools
  • list_alertsList the person's alerts on Near Fine.No findings

    Why it is in this group

    • The name "list_alerts" says "list": a word for reading.
    Description, as the server wrote it
    List the person's alerts on Near Fine. The first time, they sign in. Finds come first, then alerts being checked, then the rest, newest first. Each has its id, query, country, status, when it was set, last checked and runs until, a link to it on Near Fine, and, once it has found a listing, the listing's title, seller, condition, price and shipping in the person's currency, and the URL to buy it. Statuses: pending (noting what's listed already), live (watching), found (emailed a find and stopped), ended (the person got the book), expired (ran its six months) and paused (the plan has room for fewer alerts). Also returns the person's plan.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • list_sourcesList the bookseller catalogs Near Fine searches, each with the countries it serves.No findings

    Why it is in this group

    • The name "list_sources" says "list": a word for reading.
    Description, as the server wrote it
    List the bookseller catalogs Near Fine searches, each with the countries it serves. Pass a country to see only the sources that serve buyers there.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • search_booksSearch for a book across every bookseller Near Fine covers for the buyer's country (AbeBooks and eBay sites everywhere, plus World of Books, ThriftBooks, Casa del Libro, Hugendubel…Reads text others write1 finding

    Why it is in this group

    • The name "search_books" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description is 2,796 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...isting turns up with everything the query asks for. A search takes a few seconds."

      What this check looks for
    Description, as the server wrote it
    Search for a book across every bookseller Near Fine covers for the buyer's country (AbeBooks and eBay sites everywhere, plus World of Books, ThriftBooks, Casa del Libro, Hugendubel, Booklooker, Leslibraires.fr, Rarewaves, Ex Libris, Librairie Mollat, Boekwinkeltjes.nl, Standaard Boekhandel, Managementboek, Dubray Books, Malliaris-Paideia, Indigo, Kinokuniya, Daunt Books, Paper Cavalier, Lets Buy Books, Chapters Bookstore, Harry Hartog, Book Grocer, Whitcoulls, Bokkilden, Bog & idé, Suomalainen Kirjakauppa, Booky.fi, Bookbot, Świat Książki, Matras, Luxor, Kosmas, IBS, Libraccio, Libreria Universitaria, Agapea, Label Emmaüs, Gandhi, Porrúa, Livraria da Travessa, Martins Fontes, Librería de la U, Ibero Librerías, Contrapunto, Maruzen Junkudo, BookOff, Kyobo, Yes24, Book Outlet, Livrenpoche, Buybook, Exclusive Books, Readers Warehouse, Wordsworth Books, Graffiti Books, Popular, MPH, BookXcess, National Book Store, Bookazine, Atlantic Books, Kitabay, Liberty Books, Tecni-Ciencia, Librairie Club, Books Upstairs, Nexus, Czytam.pl, Americanas, Livrarias Curitiba, Kel Ediciones and SBS Librerías where they ship, and Apple Books ebooks and audiobooks; shops' ebooks and audiobook downloads only in their own country). Pass an ISBN-10 or ISBN-13 for an exact edition, or title and author keywords. The query can also carry a price cap, as in "under $40" or "max 30 €" (in the buyer's currency when it names none), and ask for a first edition, a signed copy, a dust jacket, a hardcover or a paperback, as in "wolf hall signed first edition under £200", or for an ebook or audiobook alone. Offers over the cap, counting known shipping, and offers in other formats than the one asked for are left out; criteria reports what was read. Returns offers sorted cheapest first, each with title, seller, condition (new, used, ebook or audiobook), price and shipping in the seller's currency, the same in the buyer's currency when it differs, and the URL to buy. Shipping is left out where the shop doesn't publish it. Each offer may carry a match from 0 to 1: how sure a decision model is that the listing is the book searched for rather than a study guide, summary, adaptation or another book that shares a word. Below about 0.2 it rarely is. When the query asks for attributes, each offer carries verdicts: true where the decision model, reading the listing and any filter the bookseller applied, confirms the listing claims it, false where it doesn't, and left out where unjudged. Also reports which sources answered, failed or timed out, an amazon_url that opens the same search on the buyer's Amazon site, and a search_url that opens it on Near Fine, where the buyer can set an alert and get an email when a new listing turns up with everything the query asks for. A search takes a few seconds.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 info
  • Infosearch_books

    The description is 2,796 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...isting turns up with everything the query asks for. A search takes a few seconds."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http books https://nearfine.com/mcp
claude mcp add --transport http books https://nearfine.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__books__search_books",
      "mcp__books__list_sources",
      "mcp__books__list_alerts"
    ],
    "ask": [
      "mcp__books__set_alert"
    ],
    "deny": [
      "mcp__books__cancel_alert"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as books. Review it before you use it.

Capability tags behind 1 rule
  • mcp__books__search_books untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.nearfine/books/verify?hash=4d869032fe21ea2187732c0f161f32baf3b7001eccf2ed4620d9e9f7b3fe3a17" | jq -e '.changed == false'

Pinned hash 4d869032fe21, from Oct 28, 2026, 16:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.nearfine/books/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.nearfine/books
[![anlyon.dev](https://anlyon.dev/badge/com.nearfine/books.svg)](https://anlyon.dev/servers/com.nearfine/books)

Source: MCP Registry. Synced Oct 28, 2026, 16:17 UTC.