ReachKee MCP

com.reachkee/mcpreachkee.comstreamable-httpv1.5.0Scanned 57 minutes ago

B2B people search, AI lead scoring and work-email lookup. 15 tools.

15 tools: 4 change things and 11 only read.

Reads private data · 4
Reads text others write · 5
Can send data out · 0
No findings

Anlyon alternative

4 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

15 tools

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

bulk_query_emailStart a background email lookup batch for up to 50 people.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "bulk_query_email" says "query": a word for reading.
- The description's first verb is "start": a word for a change.
What it can reach
- private-dataThe name "bulk_query_email" says "query" and "email": it reads mail.
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe name "bulk_query_email" says "query" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "start" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Start a background email lookup batch for up to 50 people. Provide profile_urns (from search_leads rows) and/or profile_urls. Deliberately slow (3-8s between people; up to 1-2 min per person worst case). Billing: email_cost credits charged ONLY per person whose email or phone is actually found. Returns job_id - poll get_bulk_email_results. One active batch per card.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorld: true
create_search_taskCreate a background B2B search task (people or company).No findings
Why it is in this group
- The name "create_search_task" says "create": a word for a change.
Description, as the server wrote it
Create a background B2B search task (people or company). Pages are fetched slowly in the background under strict rate limits. Credits are frozen upfront and settled by actual rows fetched. Returns the task plus queue position and ETA (hours).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorld: true
parse_icpFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Turn a natural-language description (any language) of your ideal customer or candidate into structured suggestions: entity_type (people/company), scoring dimensions, and search filter suggestions (industry, geography, titles, company size, ...). Use the output to compose keywords/query for search_leads, search_companies or create_search_task.
Annotations the server declares
- readOnlyHint: true
score_rowsScore up to 25 rows against your ideal-customer profile with AI.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Score up to 25 rows against your ideal-customer profile with AI. Billing: 1 credit per call (up to 25 rows, same as AI scoring in the web app), charged only when at least one row is scored. Provide icp_description (any language) - or reuse the dimensions array returned by a previous call to skip re-parsing - plus rows like {name,title,company,location,summary}. Returns 0-100 score, verdict, confidence and a one-line reason per row. Takes a few seconds per row.
Annotations the server declares
- readOnlyHint: true

Only reads 11Looks things up and changes nothing.Show 11 read-only tools

card_statusFree.No findings
Why it is in this group
- The name "card_status" says "status": a word for reading.
Description, as the server wrote it
Free. Returns status, remaining credits and usage limits of the authenticated card.
Annotations the server declares
- readOnlyHint: true
enrich_companyFetch full details of one company found by search_companies: description, website, industry, headquarters, employee count and growth, revenue range, specialties, type, year founded…Reads text others writeNo findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "fetch" and "website": it reads web pages, which anyone can write.
Description, as the server wrote it
Fetch full details of one company found by search_companies: description, website, industry, headquarters, employee count and growth, revenue range, specialties, type, year founded. Input: company_id / company_urn / link from a search_companies row. Billing: free, same as company details in the web app (results cached for 24h).
Annotations the server declares
- readOnlyHint: true
- openWorld: true
enrich_profileFetch the complete public profile of one person found by search_leads: headline, about summary, positions (experience), educations, skills, languages, public contact info (emails/p…Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
What it can reach
- private-dataThe description's first sentence says "fetch" and "contact": it reads contacts.
- untrusted-inputThe description's first sentence says "fetch" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Fetch the complete public profile of one person found by search_leads: headline, about summary, positions (experience), educations, skills, languages, public contact info (emails/phones/websites), connection count and the real public profile URL. Input is the profile_urn field from a search_leads row. Billing: 1 credit per successful fetch; repeating the same person within 24h is free (cached). Takes 5-30 seconds.
Annotations the server declares
- readOnlyHint: true
- openWorld: true
get_bulk_email_resultsFree.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_bulk_email_results" says "get": a word for reading.
What it can reach
- private-dataThe name "get_bulk_email_results" says "get" and "email": it reads mail.
- untrusted-inputThe name "get_bulk_email_results" says "get" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Free. Get status and per-person results of a bulk_query_email job. Jobs expire 24h after creation and the in-memory queue is lost on server restart (credits are only charged per found email, so nothing is lost financially).
Annotations the server declares
- readOnlyHint: true
get_taskGet one task: status, progress, billing (frozen/charged), queue position and ETA.No findings
Why it is in this group
- The name "get_task" says "get": a word for reading.
Description, as the server wrote it
Get one task: status, progress, billing (frozen/charged), queue position and ETA. Does not return result rows (use get_task_results).
Annotations the server declares
- readOnlyHint: true
get_task_resultsGet kept result rows of a task (paginated).No findings
Why it is in this group
- The name "get_task_results" says "get": a word for reading.
Description, as the server wrote it
Get kept result rows of a task (paginated). Rows are simplified: name/title/company/location/email/link/page.
Annotations the server declares
- readOnlyHint: true
list_tasksList all tasks for this card with status, progress and usage snapshot.No findings
Why it is in this group
- The name "list_tasks" says "list": a word for reading.
Description, as the server wrote it
List all tasks for this card with status, progress and usage snapshot.
Annotations the server declares
- readOnlyHint: true
query_emailLook up email addresses (plus phones and social links) for one person.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "query_email" says "query": a word for reading.
What it can reach
- private-dataThe name "query_email" says "query" and "email": it reads mail.
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe name "query_email" says "query" and "email": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Look up email addresses (plus phones and social links) for one person. Provide profile_url OR profile_urn (the profile_urn field returned by search_leads rows). Optional first_name/last_name/company improve matching. Billing: charged email_cost credits only when an email or phone is actually found; no result = no charge. Slow: can take 30-120 seconds.
Annotations the server declares
- readOnlyHint: true
- openWorld: true
resolve_filterFree.No findings
Why it is in this group
- The name "resolve_filter" says "resolve": a word for reading.
Description, as the server wrote it
Free. Turn a human filter value (region "Shanghai", industry "Medical Device", title "CEO", company "Siemens", ...) into search filter options with IDs, plus a ready-to-paste filter_snippet for the query parameter of search_leads / search_companies / create_search_task. Combine snippets like: (filters:List(SNIPPET,SNIPPET),keywords:...,spellCorrectionEnabled:true).
Annotations the server declares
- readOnlyHint: true
- openWorld: true
search_companiesInstant B2B company (accounts) search, returns one page of 25 rows synchronously.No findings
Why it is in this group
- The name "search_companies" says "search": a word for reading.
Description, as the server wrote it
Instant B2B company (accounts) search, returns one page of 25 rows synchronously. Give free-text keywords OR a full Sales-style query string. Billing: 1 credit per successful page with results; the same query+page repeated within 24h is served from cache for free.
Annotations the server declares
- readOnlyHint: true
- openWorld: true
search_leadsInstant B2B people (leads) search, returns one page of 25 rows synchronously.No findings
Why it is in this group
- The name "search_leads" says "search": a word for reading.
Description, as the server wrote it
Instant B2B people (leads) search, returns one page of 25 rows synchronously. Give free-text keywords OR a full Sales-style query string. Billing: 1 credit per successful page with results; the same query+page repeated within 24h is served from cache for free.
Annotations the server declares
- readOnlyHint: true
- openWorld: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; bulk_query_email
enrich_profile
get_bulk_email_results
query_email
Reads text others write5: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; bulk_query_email
enrich_company
enrich_profile
get_bulk_email_results
query_email
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.5.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http reachkee https://api.reachkee.com/mcp --header 'Authorization: <your-authorization>'

claude mcp add --transport http reachkee https://api.reachkee.com/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__reachkee__search_leads",
      "mcp__reachkee__search_companies",
      "mcp__reachkee__card_status",
      "mcp__reachkee__query_email",
      "mcp__reachkee__enrich_profile",
      "mcp__reachkee__list_tasks",
      "mcp__reachkee__get_task",
      "mcp__reachkee__get_task_results",
      "mcp__reachkee__resolve_filter",
      "mcp__reachkee__enrich_company",
      "mcp__reachkee__get_bulk_email_results"
    ],
    "ask": [
      "mcp__reachkee__parse_icp",
      "mcp__reachkee__create_search_task",
      "mcp__reachkee__bulk_query_email",
      "mcp__reachkee__score_rows"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as reachkee. Review it before you use it.

Capability tags behind 5 rules

mcp__reachkee__query_email private-data, untrusted-input
mcp__reachkee__enrich_profile private-data, untrusted-input
mcp__reachkee__enrich_company untrusted-input
mcp__reachkee__bulk_query_email private-data, untrusted-input
mcp__reachkee__get_bulk_email_results private-data, untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.reachkee/mcp/verify?hash=e74c1d8844d0bf113106fa2035e59a606055bfabeed2a49c3934ae1a9d86b132" | jq -e '.changed == false'

Pinned hash e74c1d8844d0, from Oct 23, 2026, 00:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.reachkee/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.reachkee/mcp.svg)](https://anlyon.dev/servers/com.reachkee/mcp)

Source: MCP Registry. Synced Oct 23, 2026, 00:17 UTC.