# `io.github.MInsYang/bioai-rizhi` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.MInsYang/bioai-rizhi
- JSON: https://anlyon.dev/api/v1/servers/io.github.MInsYang/bioai-rizhi
- Version: 3.2.0 (active)
- Publisher: io.github.MInsYang (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/MInsYang/bioai-rizhi
- Metadata from the official MCP Registry, synced 2026-10-21T18:17:47.175Z

Title and description, as the publisher wrote them:

```untrusted-server-text
BioAI 日知
Read-only AI biopharma news, research records, companies, and source status from BioAI 日知.
```

Scanned 2026-10-21T19:03:55.055Z over streamable-http.

**5 tools: 5 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 0 | ask |
| Only reads | read | 5 | allow |

## Findings

- **info** The word "credentials" in `get_source_status` ([credentials-mention](https://anlyon.dev/methodology#credentials-mention))

```untrusted-server-text
The description mentions "credentials".

description: "...when every source was last updated. No credentials, configuration or internal error logs a..."
```


## Only reads (5)

Looks things up and changes nothing. Claude Code: allow.

### `get_company`

- The name "get_company" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read one company directory profile with name/alias provenance, public source verification status and up to 20 published events. Official-website fields in directory metadata are not automatically verified sources.
```

### `get_resource`

- The name "get_resource" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read one stored source record by UUID, or an editor-reviewed event when kind='event'. Returns up to 6000 characters of stored source text, original URLs, publication status and provenance. It never retrieves arbitrary external URLs.
```

### `get_source_status`

- The name "get_source_status" says "get": a word for reading.
- Findings: info credentials-mention

Description, as the server wrote it:

```untrusted-server-text
Inspect a bounded page of publicly visible source verification/collection status and the current topic definitions. last_success_at reports successful source collection, not when every source was last updated. No credentials, configuration or internal error logs are returned.
```

### `search_companies`

- The name "search_companies" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Find directory companies by current or historical name, topic, track or region. Topic matches and directory metadata are discovery aids, not a complete market census or source verification certificate.
```

### `search_resources`

- The name "search_resources" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search stored public research abstracts and industry source records by keywords, topic, academic/industry category and time window. days=0 searches all stored dates. This tool searches source records; it does not claim they are editor-reviewed news.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `bioai-rizhi`:

```json
{
  "permissions": {
    "allow": [
      "mcp__bioai-rizhi__search_resources",
      "mcp__bioai-rizhi__get_resource",
      "mcp__bioai-rizhi__search_companies",
      "mcp__bioai-rizhi__get_company",
      "mcp__bioai-rizhi__get_source_status"
    ],
    "ask": [],
    "deny": []
  }
}
```