Skip to content

MentionFox

io.github.OsakaSaul/mentionfoxOsakaSaulstreamable-httpv1.2.0Scanned

Company and people checks: red flags, funding, leadership. Every claim cited. Free to try.

10 tools: 1 can delete or cancel things, 5 change things and 4 only read.

Tools: 1 delete, 0 irreversible, 5 write, 4 read.
  • Reads private data · 1
  • Reads text others write · 6
  • Can send data out · 1
  • 4 findings

Tools listed without sign-in. Remote posture

Anlyon alternative

6 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

10 tools

Deletes or cancels 1Claude Code: deny
  • export_reportTurn something you already have into a file you can send someone: a web page, a print-ready page you can save as a PDF, or plain text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Turn something you already have into a file you can send someone: a web page, a print-ready page you can save as a PDF, or plain text. Nothing about MentionFox appears on it, and you can put your own name, logo and colours on it, so it goes to a client as your work. Use it for "send me that as a PDF", "I need this as a document for the client", "put our branding on it". This makes a fixed copy of what exists now — for something that keeps up to date as the information changes, share the live link instead. Costs 5 credits. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Make a sendable file
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Changes things 5Claude Code: ask
  • enrich_personHow to reach one person: their email address, phone number where there is one, and their profile links.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    How to reach one person: their email address, phone number where there is one, and their profile links. Give a name — add their employer if the name is a common one — and you get back the person, their current role, and the ways to contact them. Use it when someone says "how do I get hold of her", "find his email", "I need to reach the person who runs marketing there". Do not use it to find out WHO to contact: this looks up somebody you can already name. If the name matches more than one person you get the list of candidates and nothing is charged; pick one and ask again. Nothing is charged when nobody matches either. Costs 5 credits when it finds them. If you name a company MentionFox holds a record for, the answer starts with the MentionFox check on it: red flags found, in how many sources, with a link to the full findings. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Person's contact details
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_full_reportThe long version: a full written report on one subject, section by section, ending with the sources it drew on.Reads text others write2 findings

    Why it is in this group

    • The name "get_full_report" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description is 2,197 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...th a link to the full findings. Plans and credits: https://mentionfox.com/pricing"

      What this check looks for
    • Warn

      The server marks "get_full_report" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_full_report" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    The long version: a full written report on one subject, section by section, ending with the sources it drew on. Where the short brief runs to a page, this runs to several thousand words. It is fixed at the moment it is made — it records what the record said on that day and is never edited afterwards, so what you show someone in six months is what you bought. If you want a fresher picture, you ask for a new one: it is written and paid for separately and the old one stays exactly as it was. Asking again for a subject you already have a report on hands you the one you already bought, free. Writing takes a few minutes; if it is still being written when the call comes back you get a link and can return to it. Costs 50 credits and needs the Pro plan. Subject types you can ask for: accelerator (50 credits), company (50 credits), counterparty (50 credits), crypto_coin (50 credits), donor (50 credits), executive (50 credits), expert_witness (50 credits), founder (50 credits), insurance_underwriting (50 credits), investor (50 credits), journalism_person (50 credits), journalist (50 credits), litigation_funder (50 credits), nft_collection (50 credits), pe_firm (50 credits), penny_stock (50 credits), physician (50 credits), pre_ipo_secondary (50 credits), publication (50 credits), source (50 credits), spac_sponsor (50 credits), specific_fund (50 credits), vc_firm (50 credits), wealth_advisor (50 credits). For a company, put its website in company (for example subject "Flock Safety", company "flocksafety.com") and the report starts on that company straight away; a website on its own as the subject works too. If you give only a name and more than one company goes by it, nothing is charged: you get a short list of the companies it could be, each with its website and a line on what it does, and you call again with the right website in company. Use this when someone says "I need the full write-up", "proper due diligence before we commit", "the long one". If you name a company MentionFox holds a record for, the answer starts with the MentionFox check on it: red flags found, in how many sources, with a link to the full findings. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Full written report on one subject
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_snapshotA short brief on one subject: for a company, its red flags with sources (lawsuits, bankruptcy and SEC filings, executive departures, layoffs), who runs it and who funded it; for a …Reads text others write1 finding

    Why it is in this group

    • The name "get_snapshot" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "get_snapshot" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_snapshot" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    A short brief on one subject: for a company, its red flags with sources (lawsuits, bankruptcy and SEC filings, executive departures, layoffs), who runs it and who funded it; for a person or a publication, who they are and what the record shows. It is written from what is on the record and returned as text plus a link to a formatted page you can share. Say who the subject is and what kind of subject they are, because the brief is written for the kind: what matters about a founder is not what matters about a doctor. What comes back is about a page: who they are, what the record shows, what stands out, and what to be careful of. Ask for the same subject twice and the second time is free — you are handed the brief already written, unchanged, rather than paying for it again. Nothing is charged when there is no such subject or too little on the record to say anything useful. Subject types you can ask for, and what each costs: company (5 credits), counterparty (5 credits), crypto_coin (5 credits), donor (5 credits), executive (5 credits), expert_witness (5 credits), founder (5 credits), insurance_underwriting (5 credits), investor (5 credits), journalism_person (5 credits), journalist (5 credits), litigation_funder (5 credits), nft_collection (5 credits), pe_firm (5 credits), penny_stock (5 credits), physician (10 credits), pre_ipo_secondary (5 credits), publication (5 credits), source (5 credits), spac_sponsor (5 credits), specific_fund (5 credits), vc_firm (5 credits), wealth_advisor (5 credits). Use this when someone says "who is this", "what should I know before I meet them", "quick read on this firm". For the long version, use get_full_report. If you name a company MentionFox holds a record for, the answer starts with the MentionFox check on it: red flags found, in how many sources, with a link to the full findings. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Short brief on one subject
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • scan_for_mentionsWhat people said about something in the last day.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    What people said about something in the last day. Name a brand, a product, a topic or a person and this comes back with the posts, comments, articles and videos that mention it — each one with where it was said, a link to it, and whether it read as positive, negative or neither. It also marks the ones that sound like somebody about to buy, so this is the tool for "who is asking for something like ours". Use it for "what are people saying about us today", "did anyone pick up the launch", "anything new on this topic this week". It looks across 55 places by default and you can narrow that. It does not build a picture of a person — for that, ask for a brief. Costs 3 credits for each place it looks, so a default run of five places is about 15. If you name a company MentionFox holds a record for, the answer starts with the MentionFox check on it: red flags found, in how many sources, with a link to the full findings. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Scan platforms for brand mentions
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • source_checkSomeone says they are a doctor, a lawyer, a broker, a professor, a director of a company.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The input schema at properties.title.description mentions "credential".

      Matched text

      inputSchema.properties.title.description: "Optional. The role or credential they state, if it is not obvious from t..."

      What this check looks for
    Description, as the server wrote it
    Someone says they are a doctor, a lawyer, a broker, a professor, a director of a company. This checks those particular claims against the official lists that would record them. Paste whatever you have — the pitch email, a name, a link — and the claims are read out of it. You get one of four answers: verified, partly verified, could not verify, or contradicted by the record. Under it: each claim that was confirmed, where it was confirmed and a link to the entry; each claim that was not, saying exactly which list was searched and came back empty; and a plain list of what was not checked at all, so a gap looks like a gap instead of a clean bill of health. It will never tell you somebody is fake. There is no such answer, because failing to find someone on a list is not evidence they are lying — plenty of real people are not on the list that would cover them, and "could not verify" means one search, on one day, in one place. What comes back is fixed at the moment it was made and never edited; checking again later produces a new one and leaves the first alone. Use it for "is this person who they say they are", "check this expert before I quote them", "should I trust this pitch", "is this doctor actually registered". Costs 25 credits and takes a few seconds. If you name a company MentionFox holds a record for, the answer starts with the MentionFox check on it: red flags found, in how many sources, with a link to the full findings. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Check a source is who they say they are
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 4Show 4 read-only tools
  • compare_peopleTwo to five people set out side by side, line by line — how they work, how they come across, where their careers have gone, how deep their experience runs, how visible they are, wh…No findings

    Why it is in this group

    • The name "compare_people" says "compare": a word for reading.
    Description, as the server wrote it
    Two to five people set out side by side, line by line — how they work, how they come across, where their careers have gone, how deep their experience runs, how visible they are, who they are connected to. You get a table you can read down a column for one person or across a row to see how they differ. Tell it what the comparison is for and the framing follows: people to pitch, partners to weigh, guests or speakers to prepare for. Not a consumer report: never for deciding whether to hire, admit, lend to or house anyone. It compares people you have already looked up; if fewer than two of them are on file it says so and charges nothing. If a name matches more than one person you get the candidates for that name, also free. Costs 15 credits per comparison, whatever the number of people. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Compare 2+ people side-by-side
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • find_buyers_nowGive the website of the business you sell for.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "find_buyers_now" says "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Give the website of the business you sell for. MentionFox reads it to learn what you sell, then searches recent filed events for up to 10 companies with a reason to buy from you now: new funding filings, a new chief executive, finance chief, operations chief or general counsel, IPO filings, activist stakes of 5% or more, layoff filings and state layoff notices, crowdfunding raises and new Y Combinator companies. US companies only. Investment funds and real estate filings are left out. Every result carries the record it came from (record_url, for example the SEC filing or the state notice list), so you can check it yourself; the why_now line is written from that record, and fit is a short note on why the company matches what you sell. searched_feeds lists every feed searched with the date of its newest record. Fewer than 10 means fewer were found; the list is never padded. Costs 1 credit when companies come back; a search that finds none costs nothing. The same search is free to try at https://mentionfox.com/buyers. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Companies with a filed reason to buy from you
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_dossierEverything on file about one person, in sections: what they have done, who they work with, how they are spoken about, what they have written or said in public, and what has been in…Reads private dataNo findings

    Why it is in this group

    • The name "get_dossier" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    Description, as the server wrote it
    Everything on file about one person, in sections: what they have done, who they work with, how they are spoken about, what they have written or said in public, and what has been in the news about them lately. Broader than a short brief and not written for any one purpose — this is the file, not the verdict. Use it for "tell me everything about her", "what am I walking into with this person", "is this creator worth working with", "background on him before the call". If you only need an email, ask for their contact details instead — that is far cheaper. If a short written assessment is what you want, ask for a brief. If the name matches more than one person you get the candidates and nothing is charged; nothing is charged when nobody matches.Costs 30 credits the first time, and nothing at all if you have looked this person up before. If you name a company MentionFox holds a record for, the answer starts with the MentionFox check on it: red flags found, in how many sources, with a link to the full findings. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Everything on file about a person
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_my_recent_researchWhat you have already looked up.No findings

    Why it is in this group

    • The name "get_my_recent_research" says "get": a word for reading.
    Description, as the server wrote it
    What you have already looked up. Free: nothing is charged. Lists the people you have researched, the write-ups you have had made, and the calls you have run here recently — yours only, nobody else's. Worth calling before you pay for something: if you looked this person up last month, you already have it. Use it for "have I checked this person before", "what did I look at last week", "show me what I have". Nothing is looked up and nothing is charged. Plans and credits: https://mentionfox.com/pricing

    Annotations the server declares

    • title: Your recent research history
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

6 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write6
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__mentionfox__find_buyers_now"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 29, 2026, 21:56 UTC, unchanged since Oct 29, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
6
Protocol version
2025-03-26
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
https://mentionfox.com/.well-known/oauth-protected-resource/mcp
Authorization servers
https://mentionfox.com
Legacy HTTP+SSE transport
no
Dynamic client registration
yes
Client ID metadata documents
no
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 6 tools that change things (1 destructive, 5 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://mentionfox.com/mcp: tools/list returned 10 tools to an anonymous client, including export_report (destructive), source_check (write), enrich_person (write), get_snapshot (write), get_full_report (write) and 1 more

    What this check looks for

Posture changes

  1. Oct 29, 2026
    • HTTP status of an anonymous initialize: 429 to 200
    • tools/list served without credentials: no to yes
    • Tools that change things, listed without credentials: 0 to 6
    • Protocol version: none to 2025-03-26
    • RFC 9728 protected resource metadata: none to https://mentionfox.com/.well-known/oauth-protected-resource/mcp
    • Authorization servers: none to https://mentionfox.com
    • Dynamic client registration: not observed to yes
    • Client ID metadata documents: not observed to no

Findings

Matches of fixed checks, with the text they matched.

2 warn2 info
  • The server marks "get_snapshot" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_snapshot" says "get": a word for reading.

    What this check looks for
  • The server marks "get_full_report" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_full_report" says "get": a word for reading.

    What this check looks for
  • The input schema at properties.title.description mentions "credential".

    Matched text

    inputSchema.properties.title.description: "Optional. The role or credential they state, if it is not obvious from t..."

    What this check looks for
  • The description is 2,197 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...th a link to the full findings. Plans and credits: https://mentionfox.com/pricing"

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

  1. PostureRemote posture changed. HTTP status of an anonymous initialize: 429 -> 200; tools/list served without credentials: no -> yes; Tools that change things, listed without credentials: 0 -> 6 (and 5 more).View diff
    • HTTP status of an anonymous initialize: 429 to 200
    • tools/list served without credentials: no to yes
    • Tools that change things, listed without credentials: 0 to 6
    • Protocol version: none to 2025-03-26
    • RFC 9728 protected resource metadata: none to https://mentionfox.com/.well-known/oauth-protected-resource/mcp
    • Authorization servers: none to https://mentionfox.com
    • Dynamic client registration: not observed to yes
    • Client ID metadata documents: not observed to no

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http mentionfox https://mentionfox.com/mcp
claude mcp add --transport http mentionfox https://mentionfox.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__mentionfox__get_dossier",
      "mcp__mentionfox__compare_people",
      "mcp__mentionfox__get_my_recent_research"
    ],
    "ask": [
      "mcp__mentionfox__source_check",
      "mcp__mentionfox__enrich_person",
      "mcp__mentionfox__get_snapshot",
      "mcp__mentionfox__get_full_report",
      "mcp__mentionfox__scan_for_mentions",
      "mcp__mentionfox__find_buyers_now"
    ],
    "deny": [
      "mcp__mentionfox__export_report"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as mentionfox. Review it before you use it.

Capability tags behind 7 rules
  • mcp__mentionfox__source_check untrusted-input
  • mcp__mentionfox__enrich_person untrusted-input
  • mcp__mentionfox__get_snapshot untrusted-input
  • mcp__mentionfox__get_full_report untrusted-input
  • mcp__mentionfox__get_dossier private-data
  • mcp__mentionfox__scan_for_mentions untrusted-input
  • mcp__mentionfox__find_buyers_now untrusted-input, outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.OsakaSaul/mentionfox/verify?hash=231238782a5704999b76552b444655959fae04aae1af5a1ee63e79b547967061" | jq -e '.changed == false'

Pinned hash 231238782a57, from Nov 4, 2026, 03:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.OsakaSaul/mentionfox/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.OsakaSaul/mentionfox
[![anlyon.dev](https://anlyon.dev/badge/io.github.OsakaSaul/mentionfox.svg)](https://anlyon.dev/servers/io.github.OsakaSaul/mentionfox)

Source: MCP Registry. Synced Nov 4, 2026, 03:17 UTC.