FINLY Balance Report Analysis

by finly.co.il · remote · no sign-in to list tools · v0.1.0 · published by il.co.finly

Israeli mortgage reports with Hebrew results, 15-minute recovery and authorized external OCR.

Deletes · 1Changes · 2

Compare Registry entry

4 tools: 1 can delete or cancel things, 2 change things and 1 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things2Claude Code: ask: see these tools
Only reads1Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http report-analysis https://finly.co.il/mcp/reports

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnanalyze_balance_report
The server marks "analyze_balance_report" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "analyze_balance_report" says "analyze": a word for reading.
What this check looks for
Warnget_report_analysis_requirements
The server marks "get_report_analysis_requirements" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "get_report_analysis_requirements" says "get": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

4 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

delete_report_analysis_resultCancel this operation and delete its encrypted result using its exact capability.No findings
Why it is in this group
- The name "delete_report_analysis_result" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel this operation and delete its encrypted result using its exact capability. A deleted operation cannot be restarted. No raw report, identity or result is placed in the URL.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

analyze_balance_reportAnalyze a PDF, JPEG or PNG balance report.1 finding
Why it is in this group
- The name "analyze_balance_report" says "analyze": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "analyze_balance_report" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "analyze_balance_report" says "analyze": a word for reading.
  What this check looks for
Description, as the server wrote it
Analyze a PDF, JPEG or PNG balance report. Include the pre-issued operation for encrypted result recovery and safe same-payload replay for up to 15 minutes from issuance; restarting the service ends recovery. Omit operation only for legacy immediate-only delivery. Raw reports are not persisted. Returns structured facts and readable Hebrew text/HTML. External OCR sends personal/financial mortgage data to Google Document AI outside Israel only with an agent attestation that the existing task permits this transfer, or legacy separate approval. The supplier notice hash is not evidence a human saw it. Local-only is the default. A terminal failure never restarts the same operation.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_report_analysis_requirementsGet the processing notice, external OCR supplier notices for existing-task authority or legacy approval, and a single-use proof-of-work challenge.1 finding
Why it is in this group
- The name "get_report_analysis_requirements" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "get_report_analysis_requirements" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "get_report_analysis_requirements" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get the processing notice, external OCR supplier notices for existing-task authority or legacy approval, and a single-use proof-of-work challenge. Normal report analysis requires no additional FINLY approval. Solve SHA-256(challenge_token + ":" + proof) so its first two bytes are zero.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Only reads 1Looks things up and changes nothing.Claude Code: allow

get_report_analysis_resultRetrieve the result or pending status using the exact operation capability received before upload.No findings
Why it is in this group
- The name "get_report_analysis_result" says "get": a word for reading.
Description, as the server wrote it
Retrieve the result or pending status using the exact operation capability received before upload. Does not upload, analyze, call OCR, renew expiry or prove Customer identity. An expired or restarted service cannot recover the result.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http report-analysis https://finly.co.il/mcp/reports

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__report-analysis__get_report_analysis_result"
    ],
    "ask": [
      "mcp__report-analysis__analyze_balance_report",
      "mcp__report-analysis__get_report_analysis_requirements"
    ],
    "deny": [
      "mcp__report-analysis__delete_report_analysis_result"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as report-analysis. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/il.co.finly/report-analysis/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:13 UTC.

For agents: Markdown · JSON · report this listing