CarrierVet
dev.carriervet/carriervetcarriervet.devstreamable-httpv1.3.0Scanned
PASS/REVIEW/FAIL verdicts, risk, history, alerts, receipts. Verified against official FMCSA records.
10 tools: 1 can delete or cancel things, 1 change things and 8 only read.
- Reads private data · 3
- Reads text others write · 6
- Can send data out · 1
- No findings
Tools listed without sign-in. Remote posture
Anlyon alternative
2 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
10 tools
Deletes or cancels 1Claude Code: deny
remove_from_watchlistStop watching a carrier on this account.No findings
Why it is in this group
- The name "remove_from_watchlist" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Stop watching a carrier on this account.
Annotations the server declares
- title: Remove carrier from watchlist
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
Changes things 1Claude Code: ask
add_to_watchlistWatch a carrier (paid plans) and get an email and/or signed webhook (Pro+) when its FMCSA record changes.Can send data outNo findings
Why it is in this group
- The name "add_to_watchlist" says "add": a word for a change.
What it can reach
- outboundThe input takes a URL (input.webhook_url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it Watch a carrier (paid plans) and get an email and/or signed webhook (Pro+) when its FMCSA record changes. The carrier must have been looked up at least once. Provide alert_email, webhook_url, or both.
Annotations the server declares
- title: Add carrier to watchlist
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 8Show 8 read-only tools
batch_lookupLook up to 500 USDOT or MC numbers in one call from stored snapshots (Pro and Business plans).Reads text others writeNo findings
Why it is in this group
- The name "batch_lookup" says "lookup": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Look up to 500 USDOT or MC numbers in one call from stored snapshots (Pro and Business plans). Each found result includes the same verdict, verdict_reasons and verdict_basis as lookup_carrier. Costs 1 lookup per unique identifier.
Annotations the server declares
- title: Batch carrier lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_historyList changes CarrierVet detected in a carrier's FMCSA record (address, phone, email, authority, insurance, out-of-service), newest first, plus fmcsa_history: dated changes from FMC…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_history" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it List changes CarrierVet detected in a carrier's FMCSA record (address, phone, email, authority, insurance, out-of-service), newest first, plus fmcsa_history: dated changes from FMCSA's daily files and census, each with the date FMCSA recorded it, the date CarrierVet saw it, and the before and after values. History starts on the date CarrierVet began recording, so older changes are not included. Recent contact changes are a common double-brokering warning sign. Costs 1 lookup.
Annotations the server declares
- title: Carrier change history
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_receiptFetch the saved copy of an earlier lookup by its receipt_id: the time it was made, the endpoint, the identifier, and the exact response CarrierVet returned, with its SHA-256.No findings
Why it is in this group
- The name "get_receipt" says "get": a word for reading.
Description, as the server wrote it Fetch the saved copy of an earlier lookup by its receipt_id: the time it was made, the endpoint, the identifier, and the exact response CarrierVet returned, with its SHA-256. Any API key on the account that made the lookup can read it. Receipts are saved a few seconds after the lookup. Free; does not cost a lookup.
Annotations the server declares
- title: Get a lookup receipt
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_riskGet a 0-100 risk score for a carrier by USDOT number or MC/FF/MX docket number, with reason codes (e.g.Reads text others writeNo findings
Why it is in this group
- The name "get_risk" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Get a 0-100 risk score for a carrier by USDOT number or MC/FF/MX docket number, with reason codes (e.g. insurance_lapsed, authority_under_90_days, shared_phone, multiple_contact_changes). Levels: low 0-24, elevated 25-49, high 50-74, severe 75-100. Hard failures (revoked, inactive or missing authority, out-of-service, lapsed or missing insurance, inactive USDOT number, not allowed to operate, Unsatisfactory safety rating) are listed in gates and keep the score at 50 or more, so a carrier that fails one is never low. With mc, the authority status is that docket's own. Also returns an overall verdict (PASS, REVIEW or FAIL) with verdict_reasons, and receipt_id. Informational signal for human review, not a safety rating. Pass exactly one of dot or mc. Costs 1 lookup.
Annotations the server declares
- title: Carrier risk score
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_usageShow this API key's plan, lookups used and remaining this UTC month, monitor count and rate limit.No findings
Why it is in this group
- The name "get_usage" says "get": a word for reading.
Description, as the server wrote it Show this API key's plan, lookups used and remaining this UTC month, monitor count and rate limit. Free; does not cost a lookup.
Annotations the server declares
- title: Quota and plan
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_watchlistList carriers on this account's watchlist (monitors) with alert email, webhook and last delivery status.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_watchlist" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it List carriers on this account's watchlist (monitors) with alert email, webhook and last delivery status.
Annotations the server declares
- title: List watchlist
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
lookup_carrierGet a US motor carrier's FMCSA profile by USDOT number or MC/FF/MX docket number: legal name, operating authority status and age, insurance on file, out-of-service status, fleet si…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "lookup_carrier" says "lookup": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "file": it reads files.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Get a US motor carrier's FMCSA profile by USDOT number or MC/FF/MX docket number: legal name, operating authority status and age, insurance on file, out-of-service status, fleet size, address and contact. Returns an overall verdict (PASS, REVIEW or FAIL) with verdict_reasons, based on the PASS/FLAG/FAIL checks for authority, insurance, out-of-service, USDOT operating status and FMCSA safety rating: FAIL if any check is FAIL, REVIEW if any is FLAG, PASS otherwise. Pass exactly one of dot or mc. The response includes receipt_id; get_receipt returns the saved copy of this response later. Costs 1 lookup.
Annotations the server declares
- title: Look up a motor carrier
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_carriersFind carriers already stored by CarrierVet whose legal or DBA name contains the given text (max 25).Reads text others writeNo findings
Why it is in this group
- The name "search_carriers" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Find carriers already stored by CarrierVet whose legal or DBA name contains the given text (max 25). Prefer lookup_carrier when you have a USDOT or MC number. Costs 1 lookup.
Annotations the server declares
- title: Search carriers by name
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
18 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.
- Reads private data3
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write6
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out1
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
{
"permissions": {
"deny": [
"mcp__carriervet__add_to_watchlist"
]
}
}Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Remote posture
What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.
Looked at Oct 28, 2026, 20:19 UTC, unchanged since Oct 28, 2026. No credentials were sent and no tool was called. What is looked at.
- Reachable
- yes
- HTTP status of an anonymous initialize
- 200
- tools/list served without credentials
- yes
- Tools that change things, listed without credentials
- 2
- Protocol version
- 2025-06-18
- WWW-Authenticate on 401
- not observed
- resource_metadata in WWW-Authenticate
- not observed
- RFC 9728 protected resource metadata
- not observed
- Authorization servers
- not observed
- Legacy HTTP+SSE transport
- no
- Dynamic client registration
- not observed
- Client ID metadata documents
- not observed
- HighThe whole server
The endpoint served tools/list without credentials, and the list has 2 tools that change things (1 destructive, 1 write). Whether a call also works without credentials was not tested: tools are never called.
What this check looks forMatched text
https://carriervet.dev/mcp: tools/list returned 10 tools to an anonymous client, including remove_from_watchlist (destructive), add_to_watchlist (write)
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.3.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http carriervet https://carriervet.dev/mcp --header 'Authorization: <your-authorization>'claude mcp add --transport http carriervet https://carriervet.dev/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__carriervet__lookup_carrier",
"mcp__carriervet__get_risk",
"mcp__carriervet__get_receipt",
"mcp__carriervet__get_history",
"mcp__carriervet__search_carriers",
"mcp__carriervet__batch_lookup",
"mcp__carriervet__get_usage",
"mcp__carriervet__list_watchlist"
],
"ask": [
"mcp__carriervet__add_to_watchlist"
],
"deny": [
"mcp__carriervet__remove_from_watchlist"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as carriervet. Review it before you use it.
Capability tags behind 7 rules
- mcp__carriervet__lookup_carrier private-data, untrusted-input
- mcp__carriervet__get_risk untrusted-input
- mcp__carriervet__get_history private-data, untrusted-input
- mcp__carriervet__search_carriers untrusted-input
- mcp__carriervet__batch_lookup untrusted-input
- mcp__carriervet__list_watchlist private-data, untrusted-input
- mcp__carriervet__add_to_watchlist outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/dev.carriervet/carriervet/verify?hash=9ae075a2b49e9a3751dc480dd2ddc0f6b936a48fd28b5c3e666708ba857066e9" | jq -e '.changed == false'Pinned hash 9ae075a2b49e, from Oct 28, 2026, 20:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/dev.carriervet/carriervet/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/dev.carriervet/carriervet)Source: MCP Registry. Synced Oct 28, 2026, 21:17 UTC.