Requstory

com.requstory/mcprequstory.comstreamable-httpv1.0.0Scanned 53 minutes ago

Map how a company works, who owns each process, and which steps AI agents can run.

10 tools: 3 change things and 7 only read.

Reads private data · 0
Reads text others write · 10
Can send data out · 0
No findings

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

10 tools

Changes things 3Creates or changes something that can be changed back.Claude Code: ask

ask_mapAsk a question about a saved map.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Ask a question about a saved map. By default it answers free from the map's website pages and entries, with citations. Set ai=true for a written Requ AI answer, which uses account credits (Team). Prefer get_map for an overview. Needs an API key.
Annotations the server declares
- title: Ask about a map
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_ai_readinessCheck whether AI agents can read, understand and act on any website (bots allowed, readable pages, product data, checkout, help).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check whether AI agents can read, understand and act on any website (bots allowed, readable pages, product data, checkout, help). Reads up to 3 public pages; results are kept for 24 hours and public at requstory.com/ai-readiness/<domain>/. Faster and narrower than map_website. If status is "queued" or "running", call again with start=false.
Annotations the server declares
- title: Check AI-agent readiness
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
map_websiteMap how a company works from up to 6 pages of its public website: customer journey, teams, processes and handoffs.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Map how a company works from up to 6 pages of its public website: customer journey, teams, processes and handoffs. The map is saved to your Requstory account (free; 5 a day). Waits up to 25 seconds; if the job is still running, poll get_map_job. Then read it with get_map. Needs an API key.
Annotations the server declares
- title: Map a website
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Only reads 7Looks things up and changes nothing.Show 7 read-only tools

get_accountShow the account behind the API key: plan (free or team), credits left, number of saved maps and maps left today.Reads text others writeNo findings
Why it is in this group
- The name "get_account" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Show the account behind the API key: plan (free or team), credits left, number of saved maps and maps left today. Needs an API key.
Annotations the server declares
- title: Get my account
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_ai_companyGet a made-up company run end to end by AI agents, built from real public company maps, as a Requ template: teams as agent lanes, the model for each step, steps a person keeps, and…Reads text others writeNo findings
Why it is in this group
- The name "get_ai_company" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get a made-up company run end to end by AI agents, built from real public company maps, as a Requ template: teams as agent lanes, the model for each step, steps a person keeps, and monthly model cost. Use it as a starting point to design an AI-agent-run business; edit the Requ and render it with npx @requstory/cli. Needs an API key.
Annotations the server declares
- title: Get an AI-run company template
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_company_scoreGet a public company's ease-of-doing-business score (0–100, four parts: find and understand, get started online, get help, AI-agent ready), its ranking place, and the gaps that cos…Reads text others writeNo findings
Why it is in this group
- The name "get_company_score" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get a public company's ease-of-doing-business score (0–100, four parts: find and understand, get started online, get help, AI-agent ready), its ranking place, and the gaps that cost it points, most costly first, with proof. Use after search_companies. For a site with no public page, use check_ai_readiness instead.
Annotations the server declares
- title: Get company ease score
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_mapRead a saved map in brief: journey stages, teams with owners and processes, teams with no owner, checks peers pass but this company misses, AI-agent readiness gaps, fix progress an…Reads text others writeNo findings
Why it is in this group
- The name "get_map" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Read a saved map in brief: journey stages, teams with owners and processes, teams with no owner, checks peers pass but this company misses, AI-agent readiness gaps, fix progress and source pages. Set full=true for the whole JSON model. Use ask_map for a specific question instead. Needs an API key.
Annotations the server declares
- title: Get a map
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_map_jobCheck a map_website job that was still running.Reads text others writeNo findings
Why it is in this group
- The name "get_map_job" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
Description, as the server wrote it
Check a map_website job that was still running. When status is "complete" it returns mapId for get_map. Needs an API key.
Annotations the server declares
- title: Get map job status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_mapsList the maps saved in your Requstory account (newest first) with their ids.Reads text others writeNo findings
Why it is in this group
- The name "list_maps" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the maps saved in your Requstory account (newest first) with their ids. Use to find a mapId for get_map or ask_map. Needs an API key.
Annotations the server declares
- title: List my maps
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_companiesFind companies Requstory has already mapped and scored from their public websites, by name or website.Reads text others writeNo findings
Why it is in this group
- The name "search_companies" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "find" and "website": it reads web pages, which anyone can write.
Description, as the server wrote it
Find companies Requstory has already mapped and scored from their public websites, by name or website. Use this first to get the "slug" for get_company_score. For a company that is not found, use check_ai_readiness (quick, public) or map_website (full map, needs a key).
Annotations the server declares
- title: Search companies
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write10: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; ask_map
check_ai_readiness
get_account
get_ai_company
get_company_score
get_map
get_map_job
list_maps
map_website
search_companies
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http requstory https://requstory.com/mcp

claude mcp add --transport http requstory https://requstory.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__requstory__search_companies",
      "mcp__requstory__get_company_score",
      "mcp__requstory__get_map_job",
      "mcp__requstory__list_maps",
      "mcp__requstory__get_map",
      "mcp__requstory__get_ai_company",
      "mcp__requstory__get_account"
    ],
    "ask": [
      "mcp__requstory__check_ai_readiness",
      "mcp__requstory__map_website",
      "mcp__requstory__ask_map"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as requstory. Review it before you use it.

Capability tags behind 10 rules

mcp__requstory__search_companies untrusted-input
mcp__requstory__get_company_score untrusted-input
mcp__requstory__check_ai_readiness untrusted-input
mcp__requstory__map_website untrusted-input
mcp__requstory__get_map_job untrusted-input
mcp__requstory__list_maps untrusted-input
mcp__requstory__get_map untrusted-input
mcp__requstory__ask_map untrusted-input
mcp__requstory__get_ai_company untrusted-input
mcp__requstory__get_account untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.requstory/mcp/verify?hash=0c1534ab1aae570508db8e0dc0dc5bd57fc8aef5e8a3480826e5bd91eee8a2dc" | jq -e '.changed == false'

Pinned hash 0c1534ab1aae, from Oct 28, 2026, 10:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.requstory/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.requstory/mcp.svg)](https://anlyon.dev/servers/com.requstory/mcp)

Source: MCP Registry. Synced Oct 28, 2026, 10:17 UTC.