# `io.github.SupplyGraphAI/supplygraph` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.SupplyGraphAI/supplygraph
- JSON: https://anlyon.dev/api/v1/servers/io.github.SupplyGraphAI/supplygraph
- Version: 1.0.2 (active)
- Publisher: io.github.SupplyGraphAI (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:21:38.805Z

Title and description, as the publisher wrote them:

```untrusted-server-text
SupplyGraph.AI
Official MCP: continuous supply-chain risk monitoring and early warning, not a one-off report.
```

Scanned 2026-10-21T19:08:53.275Z over streamable-http.

**9 tools: 6 change things and 3 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 6 | ask |
| Only reads | read | 3 | allow |

## Findings

- **info** Long descriptions in `due_diligence_report` ([long-description](https://anlyon.dev/methodology#long-description))

```untrusted-server-text
The description is 2,802 characters long, over the 2,000 this check looks for.

description ends: "...ed Balance Sheets", "per_run": 2145}, {"chapter_name": "ALL", "per_run": 26400}]}"
```


## Changes things (6)

Creates or changes something that can be changed back. Claude Code: ask.

### `corporate_exception_report`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Enterprise Change Report

Pricing: {"unit": "credits", "options": [{"chapter_name": "License", "per_run": 1518}, {"chapter_name": "GovRel", "per_run": 1419}, {"chapter_name": "R&D", "per_run": 1749}, {"chapter_name": "Reputation", "per_run": 8481}, {"chapter_name": "Ops", "per_run": 1749}, {"chapter_name": "GeneralRisks", "per_run": 1617}, {"chapter_name": "Profile", "per_run": 1749}, {"chapter_name": "Cost", "per_run": 1386}, {"chapter_name": "Compliance", "per_run": 1419}, {"chapter_name": "Competition", "per_run": 1452}, {"chapter_name": "Brand", "per_run": 3168}, {"chapter_name": "HR", "per_run": 1419}, {"chapter_name": "ALL", "per_run": 26400}]}
```

### `due_diligence_report`

- The description's first verb is "generate": a word for a change.
- Findings: info long-description

Description, as the server wrote it:

```untrusted-server-text
Generates comprehensive supplier due diligence reports using global enterprise data, benchmarking ownership, legal, and financial risk for compliance and procurement decisions.

Pricing: {"unit": "credits", "options": [{"chapter_name": "Company Registration Information", "per_run": 1518}, {"chapter_name": "Branch Offices", "per_run": 1650}, {"chapter_name": "Corporate Brand Initiatives", "per_run": 2079}, {"chapter_name": "Administrative Sanctions", "per_run": 1485}, {"chapter_name": "Software Copyright Details", "per_run": 1551}, {"chapter_name": "Outbound Investments", "per_run": 1650}, {"chapter_name": "Financing Activities", "per_run": 1452}, {"chapter_name": "Competitor Analysis", "per_run": 1485}, {"chapter_name": "Subsidiary Companies", "per_run": 1848}, {"chapter_name": "Trademark Portfolio", "per_run": 4059}, {"chapter_name": "Patent Holdings", "per_run": 12045}, {"chapter_name": "Website Registrations", "per_run": 1419}, {"chapter_name": "Court Judgments", "per_run": 1584}, {"chapter_name": "Shareholder Structure", "per_run": 1386}, {"chapter_name": "Senior Management Team", "per_run": 1452}, {"chapter_name": "Administrative Permits", "per_run": 1749}, {"chapter_name": "Court Hearing Notices", "per_run": 3696}, {"chapter_name": "Court Notices", "per_run": 3597}, {"chapter_name": "Equity Pledges", "per_run": 1419}, {"chapter_name": "Mobile Applications", "per_run": 1386}, {"chapter_name": "Copyrighted Works", "per_run": 1749}, {"chapter_name": "Equity Freezes", "per_run": 1419}, {"chapter_name": "Chattel Mortgages", "per_run": 1419}, {"chapter_name": "WeChat Official Accounts", "per_run": 1386}, {"chapter_name": "Tendering and Bidding Activities", "per_run": 2145}, {"chapter_name": "Qualification Certificates", "per_run": 2310}, {"chapter_name": "Engineering Irregularities", "per_run": 1419}, {"chapter_name": "Major Regulatory Violations", "per_run": 1452}, {"chapter_name": "Compensation and Benefits", "per_run": 1386}, {"chapter_name": "Enforcement Targets", "per_run": 1452}, {"chapter_name": "Supplier Network", "per_run": 1584}, {"chapter_name": "Credit Ratings", "per_run": 1419}, {"chapter_name": "Tax Offenses", "per_run": 1419}, {"chapter_name": "Regulatory Spot Checks", "per_run": 1485}, {"chapter_name": "Import-Export Credit Records", "per_run": 1386}, {"chapter_name": "Regulatory Actions", "per_run": 1617}, {"chapter_name": "Granted Government Subsidies", "per_run": 1551}, {"chapter_name": "Eligible Government Subsidies", "per_run": 1584}, {"chapter_name": "Consolidated Statements of Operations", "per_run": 1749}, {"chapter_name": "Income Statement", "per_run": 1947}, {"chapter_name": "Statement of Cash Flows", "per_run": 2442}, {"chapter_name": "Consolidated Balance Sheets", "per_run": 2145}, {"chapter_name": "ALL", "per_run": 26400}]}
```

### `sg_visualization`

- The description's first verb is "generate": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Generates global multi-tier supply-chain graphs providing full visibility into enterprise and product dependencies.

Pricing: {"unit": "credits", "per_run": 264590}
```

### `supply_chain_risk_prediction`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Continuously monitors global supply chain risk events and evaluates whether, how, and to what extent those events may affect a target company.

Pricing: {"unit": "credits", "per_run": 264590}
```

### `tariff_calc`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Calculates U.S. customs duties by combining HTS base rates with applicable Chapter 99 measures, providing transparent, rule-based tariff outcomes.

Pricing: {"unit": "credits", "per_run": 10}
```

### `tariff_classification`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Classifies products into correct HTS codes from text or documents, automating tariff lookup and ensuring customs compliance in real time.

Pricing: {"unit": "credits", "per_run": 2}
```

## Only reads (3)

Looks things up and changes nothing. Claude Code: allow.

### `search_company_candidates`

- The name "search_company_candidates" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search company candidates by company name, optionally filtered by country or region, and return possible matching records with mapped company IDs for caller-side selection.

Pricing: {"unit": "credits", "billing_model": "per_run", "per_run": 1}
```

### `search_region_candidates`

- The name "search_region_candidates" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Resolves natural-language country or region names (including aliases and abbreviations) against SupplyGraph’s internal geography registry and returns a list of standardized region names for downstream agent and MCP tool consumption.

Pricing: {"unit": "credits", "billing_model": "per_run", "per_run": 1}
```

### `sg_chokepoint`

- The description's first verb is "analyze": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Analyzes multi-tier supply chains to detect single-country concentration and quantify geographic dependency across regions.

Pricing: {"unit": "credits", "per_run": 264590}
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `supplygraph`:

```json
{
  "permissions": {
    "allow": [
      "mcp__supplygraph__search_company_candidates",
      "mcp__supplygraph__sg_chokepoint",
      "mcp__supplygraph__search_region_candidates"
    ],
    "ask": [
      "mcp__supplygraph__due_diligence_report",
      "mcp__supplygraph__tariff_calc",
      "mcp__supplygraph__corporate_exception_report",
      "mcp__supplygraph__sg_visualization",
      "mcp__supplygraph__tariff_classification",
      "mcp__supplygraph__supply_chain_risk_prediction"
    ],
    "deny": []
  }
}
```