Translayte

com.translayte/translaytetranslayte.comstreamable-httpv1.0.1Scanned 3 hours ago

Certified, sworn, notarised and apostilled translations: quote, send documents, order, track.

9 tools: 1 do something that can't be undone, 2 change things and 6 only read.

Reads private data · 4
Reads text others write · 4
Can send data out · 2
1 finding

Tools listed without sign-in. Remote posture

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

9 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

send_documentSends a document to be translated (PDF, image or Office file, up to 25 MB): a file the user attached in chat as `document`, a public https `url`, or `content_base64` with its filen…Reads text others writeCan send data outNo findings
Why it is in this group
- The name "send_document" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "send_document" says "send": it sends or publishes something to other people.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Sends a document to be translated (PDF, image or Office file, up to 25 MB): a file the user attached in chat as `document`, a public https `url`, or `content_base64` with its filename when you hold the bytes yourself. It is measured the way the order form measures an upload; the response carries the billable pages and a file_token to pass to get_quote and create_order, valid for 24 hours and one order. If none of these is possible, create the order from the customer's page count and they upload the document at the status_url after paying.
Annotations the server declares
- openWorldHint: true

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

create_orderPlaces an unpaid order for the customer from the same arguments as get_quote plus their name, email and E.164 phone.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "create_order" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Places an unpaid order for the customer from the same arguments as get_quote plus their name, email and E.164 phone. The response carries signed links: pay_url is our payment page (card, PayPal, Google Pay, Apple Pay) to give the customer, status_url shows the order and collects any missing documents. Links last 48 hours. A customer whose email already has an account receives the links by email instead, and the response says so: tell them to check their inbox. Documents can be sent first with send_document, or uploaded by the customer at the status_url after paying when you create the order from a page count. Pass idempotency_key so a retry never places a second order.
Annotations the server declares
- openWorldHint: true
recover_order_linksEmails the customer fresh pay and status links for an order placed with their email address.No findings
Why it is in this group
- The name "recover_order_links" says "link": a word for a change.
Description, as the server wrote it
Emails the customer fresh pay and status links for an order placed with their email address. The answer is the same whether or not the order and email match, so it reveals nothing about other people's orders.
Annotations the server declares
- idempotentHint: true

Only reads 6Looks things up and changes nothing.Show 6 read-only tools

get_coverageWhere each service is available: the languages and certifications of certified translation and the countries whose authorities ask for each; the countries document notarisation and…Reads private dataNo findings
Why it is in this group
- The name "get_coverage" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
Description, as the server wrote it
Where each service is available: the languages and certifications of certified translation and the countries whose authorities ask for each; the countries document notarisation and apostille & legalisation are offered for, with their routes, formats and turnaround, and whether each is priced online or quoted. Anywhere else is a quote request through the order form.
Annotations the server declares
- readOnlyHint: true
get_order_statusWhere an order stands, from its signed status_url: status, payment, balance due, due date, documents received, the next action (pay, upload_documents, wait) and fresh links.Reads private dataReads text others write1 finding
Why it is in this group
- The name "get_order_status" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...wait) and fresh links. The link is the credential; nothing else identifies an order."
  What this check looks for
Description, as the server wrote it
Where an order stands, from its signed status_url: status, payment, balance due, due date, documents received, the next action (pay, upload_documents, wait) and fresh links. The link is the credential; nothing else identifies an order.
Annotations the server declares
- readOnlyHint: true
get_quoteThe price of a certified translation for a language pair, page count (or the documents sent with send_document), speed, certification and currency: the same calculator as checkout,…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_quote" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
- private-dataThe input names a file (input.file_tokens), and the tool reads: it reads files.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
The price of a certified translation for a language pair, page count (or the documents sent with send_document), speed, certification and currency: the same calculator as checkout, with the ex-VAT lines, the VAT and the total, every certification the pair offers with its total, a delivery estimate and the order_url for the website checkout.
Annotations the server declares
- readOnlyHint: true
list_countriesISO 3166-1 alpha-2 country codes for country_of_use (where the translation will be used) and customer_country (where the customer is, which decides VAT), each with whether it is in…Reads private dataNo findings
Why it is in this group
- The name "list_countries" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
Description, as the server wrote it
ISO 3166-1 alpha-2 country codes for country_of_use (where the translation will be used) and customer_country (where the customer is, which decides VAT), each with whether it is in the Hague Apostille Convention, whether sworn translations are offered for it, and whether document notarisation and apostille are priced online, quoted, or not offered there.
Annotations the server declares
- readOnlyHint: true
list_languagesThe language codes get_quote and create_order accept, each with the country whose sworn translators serve the language.No findings
Why it is in this group
- The name "list_languages" says "list": a word for reading.
Description, as the server wrote it
The language codes get_quote and create_order accept, each with the country whose sworn translators serve the language.
Annotations the server declares
- readOnlyHint: true
list_servicesThe services sold online with their unit, whether get_quote can price them, their "from" price in every currency (VAT included where it applies), the currencies, speeds and certifi…No findings
Why it is in this group
- The name "list_services" says "list": a word for reading.
Description, as the server wrote it
The services sold online with their unit, whether get_quote can price them, their "from" price in every currency (VAT included where it applies), the currencies, speeds and certifications get_quote accepts, the volume discount tiers and what counts as a page.
Annotations the server declares
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

32 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 outbound tools breaks every one.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_coverage
get_order_status
get_quote
list_countries
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; create_order
get_order_status
get_quote
send_document
Can send data out2: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; create_order
send_document

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__translayte__create_order",
      "mcp__translayte__send_document"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Nov 2, 2026, 00:19 UTC, unchanged since Nov 2, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 3
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: not observed
RFC 9728 protected resource metadata: not observed
Authorization servers: not observed
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

HighThe whole server
The endpoint served tools/list without credentials, and the list has 3 tools that change things (1 irreversible, 2 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://translayte.com/mcp: tools/list returned 9 tools to an anonymous client, including send_document (irreversible), create_order (write), recover_order_links (write)
What this check looks for

Findings

Matches of fixed checks, with the text they matched.

1 info

Infoget_order_status
The description mentions "credential".
Matched text
description: "...wait) and fresh links. The link is the credential; nothing else identifies an order."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http translayte https://translayte.com/mcp

claude mcp add --transport http translayte https://translayte.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__translayte__list_services",
      "mcp__translayte__list_languages",
      "mcp__translayte__list_countries",
      "mcp__translayte__get_coverage",
      "mcp__translayte__get_quote",
      "mcp__translayte__get_order_status"
    ],
    "ask": [
      "mcp__translayte__send_document",
      "mcp__translayte__create_order",
      "mcp__translayte__recover_order_links"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as translayte. Review it before you use it.

Capability tags behind 6 rules

mcp__translayte__list_countries private-data
mcp__translayte__get_coverage private-data
mcp__translayte__send_document untrusted-input, outbound
mcp__translayte__get_quote private-data, untrusted-input
mcp__translayte__create_order untrusted-input, outbound
mcp__translayte__get_order_status private-data, untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.translayte/translayte/verify?hash=ee7fec8ae27c54a2c789c4165da6a5727aa608ca5169e885c2f55cd15a8724d3" | jq -e '.changed == false'

Pinned hash ee7fec8ae27c, from Nov 1, 2026, 23:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.translayte/translayte/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.translayte/translayte.svg)](https://anlyon.dev/servers/com.translayte/translayte)

Source: MCP Registry. Synced Nov 1, 2026, 23:17 UTC.