Skip to content
anlyon.devby Anlyon

Psilocybin Research MCP — Papers, Trials and Research Data

com.psilocybin-research/researchpsilocybin-research.comstreamable-httpv1.0.0Scanned

Free, read-only psilocybin/psilocin papers, trials, citations and verified research datasets.

8 tools: 8 only read.

Tools: 0 delete, 0 irreversible, 0 write, 8 read.
  • Reads private data · 1
  • Reads text others write · 0
  • Can send data out · 0
  • No findings

Anlyon alternative

Run the operations that matter as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

8 tools

Only reads 8Show 8 read-only tools
  • fetchRetrieve the public metadata document for one search ID, with source links, publication status and citation.Reads private dataNo findings

    Why it is in this group

    • The name "fetch" says "fetch": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "retrieve" and "document": it reads documents.
    Description, as the server wrote it
    Retrieve the public metadata document for one search ID, with source links, publication status and citation. The document is bibliographic metadata, not the publisher full text or abstract.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_annual_statisticsRetrieve catalogue-wide annual/status counts, missing-year totals, UTC generation time and source revision.No findings

    Why it is in this group

    • The name "get_annual_statistics" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve catalogue-wide annual/status counts, missing-year totals, UTC generation time and source revision. No filters. Counts are indexed records, not independent studies or participants; current-year coverage is partial.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_citationRetrieve citation text, BibTeX and RIS for one visible record ID.No findings

    Why it is in this group

    • The name "get_citation" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve citation text, BibTeX and RIS for one visible record ID. Retains preprint/registration status. Check the original source before citing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_citation_relationshipsReturn a bounded set of explicit reference DOIs and indexed citing records for a visible record ID.No findings

    Why it is in this group

    • The name "get_citation_relationships" says "get": a word for reading.
    Description, as the server wrote it
    Return a bounded set of explicit reference DOIs and indexed citing records for a visible record ID. These source-derived links are incomplete and are not proof of scientific support, criticism or trial/result identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_dataset_downloadsRetrieve the current completed dataset manifest with eleven exact download URLs, SHA-256 checksums, byte sizes, count, UTC and source revision.No findings

    Why it is in this group

    • The name "get_dataset_downloads" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve the current completed dataset manifest with eleven exact download URLs, SHA-256 checksums, byte sizes, count, UTC and source revision. Use for full SQLite/CSV/JSON, citations, ZIP, compact JSON, titles/years TXT or frozen statistics. Check complete and is_current; preserve files because only three snapshots are retained. This tool returns download metadata, not binary bytes or a locally attached file.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_publicationsSearch public publications, preprints and trial-registration records with explicit filters, total counts and pagination.No findings

    Why it is in this group

    • The name "search_publications" says "search": a word for reading.
    Description, as the server wrote it
    Search public publications, preprints and trial-registration records with explicit filters, total counts and pagination. Query and author are keyword searches; journal/topic/source/status filters use stored labels. Preserve distinct IDs. For exhaustive or reproducible analysis use get_dataset_downloads.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_trialsFind registered clinical trials by keywords or exact country, sponsor, phase, condition or registry status.No findings

    Why it is in this group

    • The name "search_trials" says "search": a word for reading.
    Description, as the server wrote it
    Find registered clinical trials by keywords or exact country, sponsor, phase, condition or registry status. Returns bounded pages and registry observation dates. Registry statements and recruitment status are not completed treatment results; this collection overlaps trial records in publication search.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input or outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http research https://psilocybin-research.com/mcp
claude mcp add --transport http research https://psilocybin-research.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__research__search",
      "mcp__research__fetch",
      "mcp__research__search_publications",
      "mcp__research__search_trials",
      "mcp__research__get_citation",
      "mcp__research__get_citation_relationships",
      "mcp__research__get_annual_statistics",
      "mcp__research__get_dataset_downloads"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as research. Review it before you use it.

Capability tags behind 1 rule
  • mcp__research__fetch private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.psilocybin-research/research/verify?hash=48b458e802e5d1201df867561a91c1313f833769444bff8fccc7f102abc65077" | jq -e '.changed == false'

Pinned hash 48b458e802e5, from Nov 3, 2026, 19:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.psilocybin-research/research/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.psilocybin-research/research
[![anlyon.dev](https://anlyon.dev/badge/com.psilocybin-research/research.svg)](https://anlyon.dev/servers/com.psilocybin-research/research)

Source: MCP Registry. Synced Nov 3, 2026, 19:17 UTC.