# `com.signalaf/contribution-exchange` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.signalaf/contribution-exchange
- JSON: https://anlyon.dev/api/v1/servers/com.signalaf/contribution-exchange
- Version: 1.0.0 (active)
- Publisher: com.signalaf (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/SunrisesIllNeverSee/sigrank-app
- Metadata from the official MCP Registry, synced 2026-10-21T18:04:59.466Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Contribution Exchange
Contribution Exchange MCP: domain discovery, policies, preflight, proposals, and signals.
```

Scanned 2026-10-21T18:36:37.677Z over streamable-http.

**6 tools: 2 change things and 4 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 4 | allow |

## Findings

- **warn** Annotations that disagree with the tool in `exchange_preflight` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "exchange_preflight" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.
```


## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `exchange_discover_domain`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Determine whether a domain publishes a Contribution Exchange profile. Returns the canonical Exchange manifest, policy URLs, signal URLs, and whether the domain is self-hosted or delegated to a Steward. Read-only — does not propose, commit, or authorize anything. Enforces HTTPS, redirect limits, timeouts, and SSRF protections (blocks loopback, link-local, private-network, and metadata-service targets).
```

### `exchange_preflight`

- The description's first verb is "evaluate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Evaluate a proposed contribution against the same policy logic used by the real proposal flow. Returns whether the proposal is likely to be auto-engaged, accepted for review, escalated to a human, or rejected as invalid. READ-ONLY: performs no proposal insertion, notification, event creation, or state transition. The result is advisory and time-bound — a favorable preflight does NOT guarantee engagement, Commitment, authorization, payment, or execution. Uses the same evaluateProposal function as the canonical proposal route.
```

## Only reads (4)

Looks things up and changes nothing. Claude Code: allow.

### `exchange_get_attempt`

- The name "exchange_get_attempt" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get detail for a signal attempt. Read-only. Enforces attempt visibility — actors may only read their own private attempts. Returns attempt status and verification result if available. Attempt status is NOT an exchange state. Verification is Steward-controlled and cannot be self-asserted.
```

### `exchange_get_policy`

- The name "exchange_get_policy" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Fetch the canonical Contribution Exchange policy for a domain or its delegated Steward. Returns authority ceilings, consideration limits, human-review requirements, and supported behavior. Read-only — does not mutate state or perform preflight evaluation. Distinguishes a missing policy from an unavailable service.
```

### `exchange_get_signal`

- The name "exchange_get_signal" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get full detail for a single Exchange Signal by ID. Read-only. Returns the complete signal including constraints, participation rules, verification configuration, consideration declaration, and follow-on behavior. A signal does NOT create a Commitment, authorize execution, or guarantee payment.
```

### `exchange_list_signals`

- The name "exchange_list_signals" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List domain-published Exchange Signals (problems, requests, challenges, bounties, verification tasks, discoveries, experiments). Read-only. Returns canonical URLs, signal revision, revision hash, and status. Signal status is DISTINCT from exchange status — a signal does not create a Commitment or authorize execution. Supports the same filters and pagination as the HTTP API.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `contribution-exchange`:

```json
{
  "permissions": {
    "allow": [
      "mcp__contribution-exchange__exchange_get_policy",
      "mcp__contribution-exchange__exchange_list_signals",
      "mcp__contribution-exchange__exchange_get_signal",
      "mcp__contribution-exchange__exchange_get_attempt"
    ],
    "ask": [
      "mcp__contribution-exchange__exchange_discover_domain",
      "mcp__contribution-exchange__exchange_preflight"
    ],
    "deny": []
  }
}
```