Skip to content

GetMyData

io.getmydata/getmydatagetmydata.iostreamable-httpv1.1.0Scanned

Public web data as rows from any public website. Free sample first, then one fixed-price payment.

16 tools: 2 can delete or cancel things, 1 do something that can't be undone, 8 change things and 5 only read.

Tools: 2 delete, 1 irreversible, 8 write, 5 read.
  • Reads private data · 3
  • Reads text others write · 4
  • Can send data out · 3
  • 2 findings

Tools listed without sign-in. Remote posture

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

16 tools

Deletes or cancels 2Claude Code: deny
  • cancel_collectionOnly when the person explicitly asks: stop continued collection of a guaranteed-N order whose get_order status is collecting.No findings

    Why it is in this group

    • The name "cancel_collection" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Only when the person explicitly asks: stop continued collection of a guaranteed-N order whose get_order status is collecting. Rows delivered so far stay available, the order settles as partial, and the undelivered share is refunded pro rata to the original payment method; the person is emailed. Tell them the refund amount shown in collection.refund first.

    Annotations the server declares

    • title: Stop collection
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • cancel_requestCancel an unpaid request and release unused coupons where payment has not started.No findings

    Why it is in this group

    • The name "cancel_request" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel an unpaid request and release unused coupons where payment has not started. Paid orders require support.

    Annotations the server declares

    • title: Cancel request
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Can't be undone 1Claude Code: ask
  • start_email_verificationSend (or resend) the one-time code that verifies the person’s email for this request.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "start_email_verification" says "start": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "start_email_verification" says "start" and "email": it writes something other people read.
    Description, as the server wrote it
    Send (or resend) the one-time code that verifies the person’s email for this request. Needed before the sample is shown (sampling itself starts at once), and again before payment if the verification is older than the re-verify window. human_email may be corrected only before it is verified. Use when next_action is start_email_verification (email_verification.state not_sent, unavailable, expired, replaced or attempts_exceeded after resend_after). Ask the person to give you the code and to check spam; if the state stays unavailable after requesting a new code once, ask them to contact support@getmydata.io; this code email contains no price or link (the later quote email contains the private payment link).

    Annotations the server declares

    • title: Send email code
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 8Claude Code: ask
  • confirm_quoteRecord final quote confirmation for quote_id and revision.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Record final quote confirmation for quote_id and revision. Use start_order next; start_order also records this selection if not already confirmed.

    Annotations the server declares

    • title: Confirm quote
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • confirm_scopeConfirm the current immutable sample_id and revision and request a fixed quote.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Confirm the current immutable sample_id and revision and request a fixed quote. The quote is prepared asynchronously and emailed to the person with the payment link; check get_request on a schedule, never in a loop. After the final quote, use start_order or create_order to read the confirmation link.

    Annotations the server declares

    • title: Confirm sample scope
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_orderRead or update the order for the final quote.No findings

    Why it is in this group

    • The name "create_order" says "create": a word for a change.
    Description, as the server wrote it
    Read or update the order for the final quote. Pass explicitly available renewal, referral or channel codes in coupon_codes before payment starts. Tell the person which codes were added and their valid/invalid status. Give confirmation_url to the person to review codes and pay themselves. Never submit payment for them. Save order_id and order_capability before passing confirmation_url to the person. After payment, use get_order even if the original session is lost.

    Annotations the server declares

    • title: Prepare order
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • refresh_sessionBefore session expiry, renew using the current Mcp-Session-Id.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Before session expiry, renew using the current Mcp-Session-Id. Save the returned header/token. A session is valid for 7 days; each refresh extends it by up to 7 days, never beyond a hard lifetime of thirty days from initialization; request and delivery expiries do not change.

    Annotations the server declares

    • title: Refresh session
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • revise_requisitionRevise an unpaid request using the current expected_revision with the full set of required fields.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.channel_id): what the tool writes goes there.
    Description, as the server wrote it
    Revise an unpaid request using the current expected_revision with the full set of required fields. Existing samples and quotes are replaced. Use it when next_action is revise (including reason_code no_capability: try other sources or fields).

    Annotations the server declares

    • title: Revise request
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • start_orderSelect the final quote and read the human confirmation link issued for the verified email (no second code).No findings

    Why it is in this group

    • The name "start_order" says "start": a word for a change.
    Description, as the server wrote it
    Select the final quote and read the human confirmation link issued for the verified email (no second code). Save order_id and order_capability before passing confirmation_url to the person.

    Annotations the server declares

    • title: Start order
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • submit_requisitionRequest public web data as rows when browsing it yourself is impractical.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "submit_requisition" says "submit": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.channel_id): what the tool writes goes there.
    Description, as the server wrote it
    Request public web data as rows when browsing it yourself is impractical. Free sample first, one-off payment by the person, no signup or subscription. Collect every required field from the person first (sources, fields, filters, geo, row_target, deadline, language, description) and generate search_keywords yourself; missing or invalid fields are returned as error.missing/error.invalid (HTTP 422) and are not clarified by the service. The service is subject to applicable law. You are responsible for using the data lawfully and must not use the service for abuse such as harassment, spam or fraud. Do not send account passwords, cookies or session tokens. Save the returned request capability privately. The person must verify their email with a one-time code before the sample is shown (ask them to give you the code); sampling starts meanwhile. Then sampling runs asynchronously and every result is emailed to them.

    Annotations the server declares

    • title: Request public web data
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • verify_emailSubmit the code the person read from their email.No findings

    Why it is in this group

    • The description's first verb is "submit": a word for a change.
    Description, as the server wrote it
    Submit the code the person read from their email. A wrong code returns otp_invalid with attempts_remaining. On success the sample becomes visible once ready (or, at quote time, the order confirmation link is issued). Results are then emailed to the verified address; check get_request later instead of polling continuously.

    Annotations the server declares

    • title: Verify email code
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
Only reads 5Show 5 read-only tools
  • fetch_deliveryAfter payment, use the delivery token to list files or read rows.Reads private dataNo findings

    Why it is in this group

    • The name "fetch_delivery" says "fetch": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    Description, as the server wrote it
    After payment, use the delivery token to list files or read rows. Use json, csv, xlsx, fields.json, or rows pages; a paid excess-rows add-on has its own extra.json, extra.csv, extra.xlsx and extra.fields.json. XLSX is returned as base64 bytes with its content type. All rows pages for a file count once per token; a full download counts once each. On expiry or download_limit, call get_order with your order capability for a fresh token. A current session is required and the delivery token is bound to it. If the original session expired, initialize a new one and call get_order first.

    Annotations the server declares

    • title: Download delivery
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_orderUse the order_capability saved at order creation to read paid order status and obtain or renew a delivery token.1 finding

    Why it is in this group

    • The name "get_order" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...required. No email recovery; keep this credential private until file retention ends. Afte..."

      What this check looks for
    Description, as the server wrote it
    Use the order_capability saved at order creation to read paid order status and obtain or renew a delivery token. It works with a new valid session if the original session expired; a current session is required. No email recovery; keep this credential private until file retention ends. After an original full refund, top-level add_on describes any separate purchase. If add_on.delivery_available is true, next_action is fetch_delivery and the renewed token can list/download only extra.* files; delivery.rows_url is null. The original refund status and original-file 410 remain unchanged.

    Annotations the server declares

    • title: Get order
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_payment_statusCheck email verification, order creation and verified payment status.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_payment_status" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Check email verification, order creation and verified payment status. After payment, return this request’s coupon notifications and a separate delivery token when files are ready.

    Annotations the server declares

    • title: Get payment status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_quoteRead the quote or estimated waiting time, without payment credentials.Reads private data1 finding

    Why it is in this group

    • The name "get_quote" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "read" and "credential": it reads secrets.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...estimated waiting time, without payment credentials."

      What this check looks for
    Description, as the server wrote it
    Read the quote or estimated waiting time, without payment credentials.

    Annotations the server declares

    • title: Get quote
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_requestRead the current request, questions, sample and next action.No findings

    Why it is in this group

    • The name "get_request" says "get": a word for reading.
    Description, as the server wrote it
    Read the current request, questions, sample and next action. After accepted payment, remind the customer about returned renewal/referral codes and expiry; pending codes are not ready. When next_action is wait, check again after suggested_check_after_seconds via a scheduled task if available; never loop. The person is emailed on every result.

    Annotations the server declares

    • title: Get request
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

36 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write4
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__getmydata__revise_requisition",
      "mcp__getmydata__start_email_verification",
      "mcp__getmydata__submit_requisition"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 23, 2026, 15:19 UTC, unchanged since Oct 23, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
11
Protocol version
2025-03-26
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
not observed
Authorization servers
not observed
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 11 tools that change things (2 destructive, 1 irreversible, 8 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://getmydata.io/mcp: tools/list returned 16 tools to an anonymous client, including cancel_request (destructive), cancel_collection (destructive), start_email_verification (irreversible), refresh_session (write), submit_requisition (write) and 6 more

    What this check looks for

Findings

Matches of fixed checks, with the text they matched.

2 info

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http getmydata https://getmydata.io/mcp
claude mcp add --transport http getmydata https://getmydata.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__getmydata__get_request",
      "mcp__getmydata__get_quote",
      "mcp__getmydata__get_payment_status",
      "mcp__getmydata__get_order",
      "mcp__getmydata__fetch_delivery"
    ],
    "ask": [
      "mcp__getmydata__refresh_session",
      "mcp__getmydata__submit_requisition",
      "mcp__getmydata__revise_requisition",
      "mcp__getmydata__confirm_scope",
      "mcp__getmydata__confirm_quote",
      "mcp__getmydata__start_email_verification",
      "mcp__getmydata__verify_email",
      "mcp__getmydata__start_order",
      "mcp__getmydata__create_order"
    ],
    "deny": [
      "mcp__getmydata__cancel_request",
      "mcp__getmydata__cancel_collection"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as getmydata. Review it before you use it.

Capability tags behind 6 rules
  • mcp__getmydata__submit_requisition untrusted-input, outbound
  • mcp__getmydata__revise_requisition untrusted-input, outbound
  • mcp__getmydata__start_email_verification untrusted-input, outbound
  • mcp__getmydata__get_quote private-data
  • mcp__getmydata__get_payment_status private-data, untrusted-input
  • mcp__getmydata__fetch_delivery private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.getmydata/getmydata/verify?hash=a2fc67839cc3c11b2a4335709f17b6b8e60c99826fb2795bbf770a1c6a2bc44f" | jq -e '.changed == false'

Pinned hash a2fc67839cc3, from Oct 23, 2026, 14:20 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.getmydata/getmydata/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.getmydata/getmydata
[![anlyon.dev](https://anlyon.dev/badge/io.getmydata/getmydata.svg)](https://anlyon.dev/servers/io.getmydata/getmydata)

Source: MCP Registry. Synced Oct 23, 2026, 14:20 UTC.