# `fr.kiltikonet/kiltikonet-public` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/fr.kiltikonet/kiltikonet-public - JSON: https://anlyon.dev/api/v1/servers/fr.kiltikonet/kiltikonet-public - Version: 1.2.0 (active) - Publisher: fr.kiltikonet (domain proven to the MCP Registry) - Runs: remote (streamable-http) - Sign-in to list tools: none - Metadata from the official MCP Registry, synced 2026-10-25T23:17:41.077Z Title and description, as the publisher wrote them: ```untrusted-server-text Kiltikonet (public) Public Caribbean & diaspora cultural data: Observatory facts, territories, events. ``` Scanned 2026-10-25T23:18:00.440Z over streamable-http. **10 tools: 10 change things.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 0 | ask | | Changes things | write | 10 | ask | | Only reads | read | 0 | allow | ## Exfil surface No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound. | Tag | Meaning | Tools | | --- | --- | --- | | private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none | | untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | none | | outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none | ## Findings No check matched anything in these tool definitions. ## Changes things (10) Creates or changes something that can be changed back. Claude Code: ask. ### `culture_event` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Détail d'un événement Culture Connect (identifiant ou slug) et places encore disponibles par tarif. ``` ### `culture_events` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Événements Culture Connect en billetterie (ouverte ou en pause) : dates, lieu, tarifs. ``` ### `network_overview` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Instantané agrégé du Kiltikonet Network (territoires, opérateurs, franchises, licences). ``` ### `network_programmes` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Nomenclature canonique des programmes du Kiltikonet Network. ``` ### `observatory_caribbean_brief` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Dossier consolidé en lecture seule : indicateurs culturels, couverture territoriale, corpus de référence, lentilles régionales et vue Caraïbe. Les sections conservent les réponses de leurs routes sources ; generated_at indique l'heure de compilation, pas la date de mise à jour des données sources. ``` ### `observatory_caribbean_overview` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Vue agrégée de la couverture culturelle vérifiée de la Caraïbe. ``` ### `observatory_global_corpora` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Corpus de référence qui alimentent l'Observatory. ``` ### `observatory_global_facts` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Faits culturels vérifiés de l'Observatory, filtrables par territoire, indicateur ou type d'entité. Données agrégées, redistribuables, provenance fournisseur retenue. ``` ### `observatory_global_territories` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Carte de couverture du corpus culturel mondial de l'Observatory, par territoire. ``` ### `observatory_regional_lenses` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Définitions des lentilles d'analyse régionale de l'Observatory. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `kiltikonet-public`: ```json { "permissions": { "allow": [], "ask": [ "mcp__kiltikonet-public__observatory_global_facts", "mcp__kiltikonet-public__observatory_global_territories", "mcp__kiltikonet-public__observatory_global_corpora", "mcp__kiltikonet-public__observatory_regional_lenses", "mcp__kiltikonet-public__observatory_caribbean_overview", "mcp__kiltikonet-public__observatory_caribbean_brief", "mcp__kiltikonet-public__network_overview", "mcp__kiltikonet-public__network_programmes", "mcp__kiltikonet-public__culture_events", "mcp__kiltikonet-public__culture_event" ], "deny": [] } } ```