Skip to content

slashyear - sourced history

by slashyear.com · remote · no sign-in to list tools · v1.2.0 · published by com.slashyear

Sourced history by year: events, world leaders, prices and No. 1 songs, each with its source.

Changes · 1Changed
CompareRegistry entry

11 tools: 1 change things and 10 only read.

Scanned Oct 22, 2026 · tools changed Oct 22, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http slashyear https://slashyear.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Changes things 1Claude Code: ask
  • convert_dollarsInflation-adjust U.S.No findings

    Why it is in this group

    • The name "convert_dollars" says "convert": a word for a change.
    Description, as the server wrote it
    Inflation-adjust U.S. dollars between years with the BLS CPI-U (1913 onward). Omit to_year for the latest published month.
Only reads 10Claude Code: allow
  • get_countryOne country's dated record, century by century, harvested from the per-country year articles English Wikipedia writes separately ('1969 in Japan') and never indexes together.No findings

    Why it is in this group

    • The name "get_country" says "get": a word for reading.
    Description, as the server wrote it
    One country's dated record, century by century, harvested from the per-country year articles English Wikipedia writes separately ('1969 in Japan') and never indexes together. Use this when the question is about a nation rather than a year or a subject.
  • get_dayOne calendar day across every recorded year — what happened on 4 July in all of them.Reads private dataNo findings

    Why it is in this group

    • The name "get_day" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "calendar": it reads calendars.
    Description, as the server wrote it
    One calendar day across every recorded year — what happened on 4 July in all of them. This aggregate exists in no single encyclopedia article.
  • get_leadersWho led a country (or every country) in a year, 1800-2025: heads of state, heads of government and ruling-party leaders, in the order they held the post.Reads text others writeNo findings

    Why it is in this group

    • The name "get_leaders" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
    Description, as the server wrote it
    Who led a country (or every country) in a year, 1800-2025: heads of state, heads of government and ruling-party leaders, in the order they held the post. Each name is quoted from Wikipedia's list of state leaders (revision id given) and kept only where the person's Wikidata record holds the same post over the same years, so a missing name means the sources disagree, not that the post was empty.
  • get_number_one_songThe Billboard Hot 100 No.No findings

    Why it is in this group

    • The name "get_number_one_song" says "get": a word for reading.
    Description, as the server wrote it
    The Billboard Hot 100 No. 1 single on a given date (1958-08-04 onward): the first chart issue dated on or after that day, quoted from a cited Wikipedia revision.
  • get_timelineOne subject's whole record in date order: every dated entry across all years in which Wikipedia's editors linked to it, with its Wikidata id for joining to other datasets.No findings

    Why it is in this group

    • The name "get_timeline" says "get": a word for reading.
    Description, as the server wrote it
    One subject's whole record in date order: every dated entry across all years in which Wikipedia's editors linked to it, with its Wikidata id for joining to other datasets.
  • get_yearEverything the record holds for one year: the headline summary and every dated entry, grouped by subject, each with its source revision.No findings

    Why it is in this group

    • The name "get_year" says "get": a word for reading.
    Description, as the server wrote it
    Everything the record holds for one year: the headline summary and every dated entry, grouped by subject, each with its source revision.
  • get_year_factsWhat a year (1800-2025) looked like in numbers, from outside sources rather than encyclopedia prose: world population, U.S.No findings

    Why it is in this group

    • The name "get_year_facts" says "get": a word for reading.
    Description, as the server wrote it
    What a year (1800-2025) looked like in numbers, from outside sources rather than encyclopedia prose: world population, U.S. CPI and what a dollar then is worth now, average U.S. prices (gas, eggs, bread, milk, houses, income, minimum wage), who led the major powers, and the Billboard Hot 100 No. 1 songs. Every figure carries its source. For any other country's leaders use get_leaders.
  • list_countriesBrowse the countries that have a record of their own, largest first.Reads text others writeNo findings

    Why it is in this group

    • The name "list_countries" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse the countries that have a record of their own, largest first.
  • list_subjectsBrowse the subjects that have a timeline, largest record first.Reads text others writeNo findings

    Why it is in this group

    • The name "list_subjects" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse the subjects that have a timeline, largest record first.
  • search_historyFull-text search across every dated entry in the historical record, plus the subjects that match.No findings

    Why it is in this group

    • The name "search_history" says "search": a word for reading.
    Description, as the server wrote it
    Full-text search across every dated entry in the historical record, plus the subjects that match. Each entry is a sentence quoted verbatim from a numbered English Wikipedia revision and carries that revision id, so an answer built on it can cite a source that will still say the same thing next year. Use this whenever you need a dated fact.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write3
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Tool changes

Every rescan that found different tool definitions, newest first.

  1. Oct 22, 2026

    16d34774877f

    +4 added

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:41 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
1
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
none
RFC 9728 protected resource metadata
none
Authorization servers
none
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • WarnThe whole server

    The endpoint served tools/list without credentials, and the list has 1 tool that changes things (1 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://slashyear.com/mcp: tools/list returned 11 tools to an anonymous client, including convert_dollars (write)

    What this check looks for

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http slashyear https://slashyear.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__slashyear__search_history",
      "mcp__slashyear__get_year",
      "mcp__slashyear__get_day",
      "mcp__slashyear__get_timeline",
      "mcp__slashyear__get_country",
      "mcp__slashyear__get_year_facts",
      "mcp__slashyear__get_leaders",
      "mcp__slashyear__get_number_one_song",
      "mcp__slashyear__list_countries",
      "mcp__slashyear__list_subjects"
    ],
    "ask": [
      "mcp__slashyear__convert_dollars"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as slashyear. Review it before you use it.

Capability tags behind 4 rules
  • mcp__slashyear__get_day private-data
  • mcp__slashyear__get_leaders untrusted-input
  • mcp__slashyear__list_countries untrusted-input
  • mcp__slashyear__list_subjects untrusted-input