Skip to content

YedaBase

com.yedabase/yedabaseyedabase.comstreamable-httpv1.7.3Scanned

Search and open investor records: family offices, VCs, funds of funds, permanent capital, RIAs.

21 tools: 1 can delete or cancel things, 6 change things and 14 only read.

Tools: 1 delete, 0 irreversible, 6 write, 14 read.
  • Reads private data · 9
  • Reads text others write · 2
  • Can send data out · 0
  • 1 finding

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

21 tools

Deletes or cancels 1Claude Code: deny
  • workspace_noteRead (text omitted) or replace (text given) one workspace note with a fixed name: about-us, connectors, events, team (shared by the workspace); voice, yb-preferences, send-log (per…Reads private dataNo findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • private-dataThe name "workspace_note" says "note": it reads notes.
    • private-dataThe description's first sentence says "read" and "note": it reads notes.
    Description, as the server wrote it
    Read (text omitted) or replace (text given) one workspace note with a fixed name: about-us, connectors, events, team (shared by the workspace); voice, yb-preferences, send-log (per person). Up to 8,000 characters. Other names are refused.

    Annotations the server declares

    • title: Workspace note
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Changes things 6Claude Code: ask
  • add_noteA note on one firm, signed by the signed-in person and shared with the workspace, up to 2,000 characters.No findings

    Why it is in this group

    • The name "add_note" says "add": a word for a change.
    Description, as the server wrote it
    A note on one firm, signed by the signed-in person and shared with the workspace, up to 2,000 characters. A "[YB] <skill> | <date> | status=<value> | …" line also sets that firm's status line on the user's lists. Meant for the workspace's own research on the firm, not for rows copied from a client's CRM.

    Annotations the server declares

    • title: Add a firm note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • export_listA list's firms in the 66-column export shape plus suggested_route, route_evidence and route_next_action, 200 rows per page as JSON.1 finding

    Why it is in this group

    • The name "export_list" says "list": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "export_list" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "export_list" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    A list's firms in the 66-column export shape plus suggested_route, route_evidence and route_next_action, 200 rows per page as JSON. Page 1 debits the workspace export pool once for the whole list; later pages of the same export the same day debit nothing. Up to 300 contacts per export (then contact columns are blank and contacts_truncated is true). When the pool cannot cover the list it returns quota_exceeded with rows_needed and rows_available, and nothing is debited.

    Annotations the server declares

    • title: Export a list
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • my_notesNotes in this workspace that the user is allowed to read (their own, shared with them, or workspace-wide), optionally for one firm.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Notes in this workspace that the user is allowed to read (their own, shared with them, or workspace-wide), optionally for one firm. Each note returns its id, author, date and text. Note text is written by workspace members.

    Annotations the server declares

    • title: My notes
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • save_to_listAdd firms to one of the user's workspace lists by name, creating the list when it does not exist (create_if_missing, default true).No findings

    Why it is in this group

    • The name "save_to_list" says "save": a word for a change.
    Description, as the server wrote it
    Add firms to one of the user's workspace lists by name, creating the list when it does not exist (create_if_missing, default true). Safe to repeat: firms already on the list count as already_present and are not added again. At most 500 firm ids per call. Returns list_id, added, already_present.

    Annotations the server declares

    • title: Save firms to a list
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • unlock_investorPreview accounts only: opens one locked firm's full record (overview, AUM as stored, decision-maker names and positions, philanthropy, news, events) and counts it toward the accoun…No findings

    Why it is in this group

    • The name "unlock_investor" says "unlock": a word for a change.
    Description, as the server wrote it
    Preview accounts only: opens one locked firm's full record (overview, AUM as stored, decision-maker names and positions, philanthropy, news, events) and counts it toward the account's 10 preview records; a firm already opened counts nothing. Returns the record and the number of preview records left; when none are left it returns no_unlocks_left. On full-access accounts it returns the same result as get_investor. Work emails and LinkedIn profiles are not part of preview records.

    Annotations the server declares

    • title: Open a locked investor (preview accounts)
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • yb_helloSession opener for YedaBase (also YB or Yeda): the greeting line, where the person stands (tier, seat, lists, notes, due items), the one recommended next step and which playbook to…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Session opener for YedaBase (also YB or Yeda): the greeting line, where the person stands (tier, seat, lists, notes, due items), the one recommended next step and which playbook to read. Useful at the start of a conversation, when the user greets YedaBase, or asks where they left off.

    Annotations the server declares

    • title: Start a YedaBase session
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 14Show 14 read-only tools
  • compare_investorsReturns the comparable fields of 2 to 5 firms in one call: category, type, location, primary and secondary domains, stage, check size, AUM as stored, year founded, team size, giant…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "compare_investors" says "compare": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "return" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "return" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Returns the comparable fields of 2 to 5 firms in one call: category, type, location, primary and secondary domains, stage, check size, AUM as stored, year founded, team size, giant flag, wealth origin and family name (family offices), philanthropy causes, decision-maker count, work emails on record, latest news date, upcoming event on record. Useful for side-by-side questions; one call covers what opening each firm would.

    Annotations the server declares

    • title: Compare investors
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • count_investorsCounts matching firms and breaks them down by one to three dimensions, e.g.No findings

    Why it is in this group

    • The name "count_investors" says "count": a word for reading.
    Description, as the server wrote it
    Counts matching firms and breaks them down by one to three dimensions, e.g. how many family offices in Texas by primary domain. Returns the total and, per dimension, the values with their counts (top 40 values). Useful for how many, breakdown, distribution and coverage questions; one call covers what paging through search results would.

    Annotations the server declares

    • title: Count investors
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_anglesConversation angles for one firm: other firms that spoke at the same events/podcasts, shared causes, and similar investors (same type + country, overlapping domains).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_angles" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "conversation": it reads messages.
    • untrusted-inputThe description's first sentence says "conversation": it reads messages, which other people can write.
    Description, as the server wrote it
    Conversation angles for one firm: other firms that spoke at the same events/podcasts, shared causes, and similar investors (same type + country, overlapping domains). These are possible angles, not known relationships.

    Annotations the server declares

    • title: Conversation angles
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_helpOne topic from the YedaBase help library (sending limits, LinkedIn, sign-in, connecting each AI client, seats and billing, the export pool, daily caps, contacts-restricted countrie…Reads private dataNo findings

    Why it is in this group

    • The name "get_help" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    Description, as the server wrote it
    One topic from the YedaBase help library (sending limits, LinkedIn, sign-in, connecting each AI client, seats and billing, the export pool, daily caps, contacts-restricted countries, lists and notes, playbooks, Match & Enrich, corrections and removal, data dates, cancellation and refunds, team invites, portal basics, agent rules), matched on its title; the list of topics when nothing matches.

    Annotations the server declares

    • title: Help library
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_investorFull record of one firm: investor category, overview, inclusion evidence, the category's module columns (FoF strategies, PPC type, RIA segments, CRD…), decision-makers with contact…Reads private dataNo findings

    Why it is in this group

    • The name "get_investor" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    Description, as the server wrote it
    Full record of one firm: investor category, overview, inclusion evidence, the category's module columns (FoF strategies, PPC type, RIA segments, CRD…), decision-makers with contacts (under the contacts-restricted rule), philanthropy, news, past and upcoming events, sources and data date.

    Annotations the server declares

    • title: Open an investor
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_listOne of the user's lists with its firms: per firm the status line text (status, status_updated_at) and the mandate status.No findings

    Why it is in this group

    • The name "get_list" says "get": a word for reading.
    Description, as the server wrote it
    One of the user's lists with its firms: per firm the status line text (status, status_updated_at) and the mandate status.

    Annotations the server declares

    • title: Open a list
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_personOne decision-maker by id (pe_…) with their firm; contacts under the contacts-restricted rule.Reads private dataNo findings

    Why it is in this group

    • The name "get_person" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    Description, as the server wrote it
    One decision-maker by id (pe_…) with their firm; contacts under the contacts-restricted rule.

    Annotations the server declares

    • title: Open a decision-maker
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_playbookOne playbook as markdown, by name (yb-start | yb-match-enrich | yb-shortlist | yb-research | yb-way-in | yb-reach-out | yb-pipeline).No findings

    Why it is in this group

    • The name "get_playbook" says "get": a word for reading.
    Description, as the server wrote it
    One playbook as markdown, by name (yb-start | yb-match-enrich | yb-shortlist | yb-research | yb-way-in | yb-reach-out | yb-pipeline). On preview accounts it returns the title and description with locked: true. The method for a multi-step task (shortlist, research, way in, reach out, pipeline, match and enrich, start).

    Annotations the server declares

    • title: Open a playbook
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_resourceThe same content as the MCP resources, inline: index (hashed firm index, CSV), adv-cache (public SEC Form ADV extract, CSV), vocabulary (field definitions, module tests and fit ter…No findings

    Why it is in this group

    • The name "get_resource" says "get": a word for reading.
    Description, as the server wrote it
    The same content as the MCP resources, inline: index (hashed firm index, CSV), adv-cache (public SEC Form ADV extract, CSV), vocabulary (field definitions, module tests and fit terms, JSON) and help (the help library, markdown). CSV comes in pages of 2,000 rows with the header on every page. Nothing in these is a record.

    Annotations the server declares

    • title: Read a resource
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_fieldsInvestor categories and their Type lists, field definitions (with the categories each field applies to), allowed values and the rules for placeholders and restricted contacts.Reads private dataNo findings

    Why it is in this group

    • The name "list_fields" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    Description, as the server wrote it
    Investor categories and their Type lists, field definitions (with the categories each field applies to), allowed values and the rules for placeholders and restricted contacts.

    Annotations the server declares

    • title: Fields and categories
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_playbooksThe seven YedaBase playbooks (step-by-step methods: Start, Match & Enrich, Investor Shortlist, Investor Research, Way In, Reach Out, Pipeline) with name, title and description; get…No findings

    Why it is in this group

    • The name "list_playbooks" says "list": a word for reading.
    Description, as the server wrote it
    The seven YedaBase playbooks (step-by-step methods: Start, Match & Enrich, Investor Shortlist, Investor Research, Way In, Reach Out, Pipeline) with name, title and description; get_playbook returns each one in full. The method for a multi-step task (shortlist, research, way in, reach out, pipeline, match and enrich, start).

    Annotations the server declares

    • title: List playbooks
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • my_listsThe user's lists/mandates (name, description, tags, item count).No findings

    Why it is in this group

    • The name "my_lists" says "list": a word for reading.
    Description, as the server wrote it
    The user's lists/mandates (name, description, tags, item count).

    Annotations the server declares

    • title: My lists
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • search_investorsSearch the licensed investor database (Family office, Venture capital & startup investor, Fund of funds, Principal & permanent capital, RIA; one category per firm) with structured …Reads private dataNo findings

    Why it is in this group

    • The name "search_investors" says "search": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "search" and "database": it reads databases.
    Description, as the server wrote it
    Search the licensed investor database (Family office, Venture capital & startup investor, Fund of funds, Principal & permanent capital, RIA; one category per firm) with structured filters and keywords together. Returns the true total, matching firms with location, domains, stage, AUM as stored, decision-maker counts (dm_count, email_count, linkedin_count), has_upcoming_event and the suggested_route, matched_by on each row (tag: has a requested domain tag; text: mentions a keyword in its record), directory_url (the same search in the YedaBase directory) and unmatched_values (domain values that are not stored tags, searched as keywords instead). Results are paged, 25 rows per page; the page argument returns more rows of the same search. Placeholder words (Undisclosed, Not provided, Unknown) are real stored values, not missing data.

    Annotations the server declares

    • title: Search investors
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • yeda_statusWhere this person stands: access level (preview or full), seat, workspace, onboarding notes done or missing and the YedaBase folder path, lists and sizes, notes count, the last Mat…Reads private dataNo findings

    Why it is in this group

    • The name "yeda_status" says "status": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "note": it reads notes.
    Description, as the server wrote it
    Where this person stands: access level (preview or full), seat, workspace, onboarding notes done or missing and the YedaBase folder path, lists and sizes, notes count, the last Match & Enrich list, the workspace export pool, calls used today, data and index as-of dates, the last tool error in 24 hours and tracked [YB] items with a due date ahead. Useful at the start of a session or when asked where things stand.

    Annotations the server declares

    • title: Account and session status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data9
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "export_list" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "export_list" says "list": a word for reading.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.7.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http yedabase https://yedabase.com/mcp
claude mcp add --transport http yedabase https://yedabase.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__yedabase__search_investors",
      "mcp__yedabase__get_investor",
      "mcp__yedabase__get_angles",
      "mcp__yedabase__list_fields",
      "mcp__yedabase__count_investors",
      "mcp__yedabase__compare_investors",
      "mcp__yedabase__get_person",
      "mcp__yedabase__get_list",
      "mcp__yedabase__my_lists",
      "mcp__yedabase__list_playbooks",
      "mcp__yedabase__get_playbook",
      "mcp__yedabase__get_resource",
      "mcp__yedabase__get_help",
      "mcp__yedabase__yeda_status"
    ],
    "ask": [
      "mcp__yedabase__my_notes",
      "mcp__yedabase__yb_hello",
      "mcp__yedabase__save_to_list",
      "mcp__yedabase__add_note",
      "mcp__yedabase__export_list",
      "mcp__yedabase__unlock_investor"
    ],
    "deny": [
      "mcp__yedabase__workspace_note"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as yedabase. Review it before you use it.

Capability tags behind 9 rules
  • mcp__yedabase__search_investors private-data
  • mcp__yedabase__get_investor private-data
  • mcp__yedabase__get_angles private-data, untrusted-input
  • mcp__yedabase__list_fields private-data
  • mcp__yedabase__compare_investors private-data, untrusted-input
  • mcp__yedabase__get_person private-data
  • mcp__yedabase__get_help private-data
  • mcp__yedabase__yeda_status private-data
  • mcp__yedabase__workspace_note private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.yedabase/yedabase/verify?hash=cc2322fd6fa0d98e5503fb51503f6bfa3c61713e2dac1b8370aa16738cbba0c9" | jq -e '.changed == false'

Pinned hash cc2322fd6fa0, from Oct 26, 2026, 12:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.yedabase/yedabase/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.yedabase/yedabase
[![anlyon.dev](https://anlyon.dev/badge/com.yedabase/yedabase.svg)](https://anlyon.dev/servers/com.yedabase/yedabase)

Source: MCP Registry. Synced Oct 26, 2026, 12:17 UTC.