# `com.triplicatedocs/triplicate` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.triplicatedocs/triplicate
- JSON: https://anlyon.dev/api/v1/servers/com.triplicatedocs/triplicate
- Version: 1.3.4 (active)
- Publisher: com.triplicatedocs (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:09:56.381Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Triplicate – export documents
Export invoices, packing list, SI, PO from order data; HS codes; port codes; CBM; Incoterms prices.
```

Scanned 2026-10-21T18:57:00.202Z over streamable-http.

**10 tools: 5 change things and 5 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 5 | ask |
| Only reads | read | 5 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged untrusted-input or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__triplicate__check_transport_document_draft` `mcp__triplicate__read_letter_of_credit` `mcp__triplicate__search_trade_guides` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | none |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

- **warn** Annotations that disagree with the tool in `create_trade_documents` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "create_trade_documents" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "create_trade_documents" says "create": a word for a change.
```


## Changes things (5)

Creates or changes something that can be changed back. Claude Code: ask.

### `calculate_export_price`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Build an export quotation price from unit cost, markup and shipment costs: totals and per-unit prices under EXW, FCA, FOB/FCA terminal, CFR/CPT, CIF/CIP, DAP, DPU and DDP, with the insurance premium (110% basis), import duty and VAT, and for each rule a link that opens Triplicate's generator with a proforma invoice at that price.
```

### `calculate_shipment`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
From carton sizes, quantities and gross weights: total CBM, gross weight, air and express volumetric and chargeable weight, LCL revenue tons and which standard containers the volume fits.
```

### `check_container_number`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Check a shipping container number (ISO 6346 check digit), find who owns its prefix (shipping line or container leasing company, e.g. MSCU = MSC, TGHU = Textainer) and get the line's official tracking page. Bill of lading numbers are recognised by the carrier's SCAC prefix (e.g. MEDU, HLCU, COSU). Does not return live status: the line's own site shows it.
```

### `create_trade_documents`

- The name "create_trade_documents" says "create": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Create a matching proforma invoice, commercial invoice, packing list and shipping instruction from one set of order data. Returns a link to Triplicate's free generator with everything filled in (the user reviews it and saves the PDF), plus totals (amount, cartons, net/gross weight, CBM) and checks (missing fields, HS code format, Incoterms freight/insurance consistency). Nothing is stored.
```

### `prepare_shipment`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
One call for an export order: the same order data as create_trade_documents plus the destination country (ISO code). Returns the link to the filled-in documents with totals and checks, Triplicate's guides for that destination and the products' HS chapters (country guide, labelling and import rules), a link to the landed cost calculator preset to the market, goods value and quantity, and HS lookups for items without a code. Nothing is stored.
```

## Only reads (5)

Looks things up and changes nothing. Claude Code: allow.

### `check_transport_document_draft`

- The description's first verb is "compare": a word for reading.
- Tag private-data: The name "check_transport_document_draft" says "document": it reads documents. The description's first sentence says "compare" and "document": it reads documents.

Description, as the server wrote it:

```untrusted-server-text
Compare the text of a bill of lading or air waybill draft from the forwarder or carrier with the order data (same fields as create_trade_documents): shipper, consignee (to-order drafts noted), notify party, ports, vessel and voyage, number of packages, gross weight, measurement (CBM), freight prepaid or collect against the Incoterms rule, shipping marks, goods description, container and seal numbers (shipment.containers) and the L/C number. Returns each field as ok, warning, mismatch or info with a short reason. Nothing is stored.
```

### `lookup_hs_code`

- The name "lookup_hs_code" says "lookup": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search the HS 2022 nomenclature (6-digit international level) by English product description or by code prefix. Returns candidate codes with chapter and heading text. Codes are suggestions to confirm in the destination country's tariff, not rulings.
```

### `lookup_port_code`

- The name "lookup_port_code" says "lookup": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Find the 5-character UN/LOCODE of a seaport, airport or inland container depot by place name (or check a code): returns code, name, country, subdivision, type and Triplicate's country page, for the port of loading or discharge on bookings, bills of lading and invoices. UN/LOCODE 2025-1, 37,000+ places.
```

### `read_letter_of_credit`

- The name "read_letter_of_credit" says "read": a word for reading.
- Tag private-data: The description's first sentence says "read" and "document": it reads documents.

Description, as the server wrote it:

```untrusted-server-text
Read the text of a documentary credit (SWIFT MT700 as advised by the bank): credit number, dates, amount and tolerance, partial shipments and transhipment, latest shipment, ports, presentation period, goods, the documents required (each with how to make it) and additional conditions, plus a letter_of_credit object for create_trade_documents. Read here, nothing stored.
```

### `search_trade_guides`

- The name "search_trade_guides" says "search": a word for reading.
- Tag private-data: The description's first sentence says "search" and "note": it reads notes.

Description, as the server wrote it:

```untrusted-server-text
Search Triplicate's practical trade guides (over 250 notes in 15 languages, checked against official sources: export guides for about 50 countries, import registration, labelling and product certification by country, cosmetics and food rules, US tariffs and refunds, EORI, rules of origin and certificates of origin, HS classification, Incoterms, letters of credit, bills of lading, dangerous goods, invoices and packing lists) and tool guides. Returns titles, page links and excerpts to cite.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `triplicate`:

```json
{
  "permissions": {
    "allow": [
      "mcp__triplicate__lookup_hs_code",
      "mcp__triplicate__lookup_port_code",
      "mcp__triplicate__search_trade_guides",
      "mcp__triplicate__check_transport_document_draft",
      "mcp__triplicate__read_letter_of_credit"
    ],
    "ask": [
      "mcp__triplicate__create_trade_documents",
      "mcp__triplicate__calculate_shipment",
      "mcp__triplicate__calculate_export_price",
      "mcp__triplicate__check_container_number",
      "mcp__triplicate__prepare_shipment"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__triplicate__search_trade_guides`: private-data
- `mcp__triplicate__check_transport_document_draft`: private-data
- `mcp__triplicate__read_letter_of_credit`: private-data