# `io.github.aihub1234/israel-gateway` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.aihub1234/israel-gateway
- JSON: https://anlyon.dev/api/v1/servers/io.github.aihub1234/israel-gateway
- Version: 0.2.2 (active)
- Publisher: io.github.aihub1234 (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-11-02T19:17:39.914Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Live Israeli public data for AI agents: alerts, prices, open data, FX rates, Shabbat times.
```

Scanned 2026-11-02T19:18:16.523Z over streamable-http.

**10 tools: 1 do something that can't be undone, 5 change things and 4 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 1 | ask |
| Changes things | write | 5 | ask |
| Only reads | read | 4 | allow |

## Exfil surface

20 private-data -> untrusted-input -> outbound paths in this server alone. Denying 1 outbound tool breaks every one: `mcp__israel-gateway__boi_convert`.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__israel-gateway__grocery_find_stores` `mcp__israel-gateway__grocery_search` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__israel-gateway__boi_convert` `mcp__israel-gateway__boi_exchange_rates` `mcp__israel-gateway__datagov_query` `mcp__israel-gateway__datagov_search` `mcp__israel-gateway__grocery_find_stores` `mcp__israel-gateway__grocery_search` `mcp__israel-gateway__israel_holidays` `mcp__israel-gateway__oref_alert_history` `mcp__israel-gateway__oref_current_alerts` `mcp__israel-gateway__shabbat_times` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | `mcp__israel-gateway__boi_convert` |

| Private data | Untrusted input | Outbound |
| --- | --- | --- |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__boi_convert` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__boi_exchange_rates` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__datagov_query` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__datagov_search` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__israel_holidays` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__oref_alert_history` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__oref_current_alerts` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__shabbat_times` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__boi_convert` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__boi_exchange_rates` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__datagov_query` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__datagov_search` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__grocery_find_stores` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__israel_holidays` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__oref_alert_history` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__oref_current_alerts` | `mcp__israel-gateway__boi_convert` |
| `mcp__israel-gateway__grocery_search` | `mcp__israel-gateway__shabbat_times` | `mcp__israel-gateway__boi_convert` |

## Findings

- **warn** Annotations that disagree with the tool in `boi_convert` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "boi_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "boi_convert" says "convert": a word for a change.
```


## Can't be undone (1)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `boi_convert`

- The name "boi_convert" says "convert": a word for a change.
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The input takes a destination (input.to): what the tool writes goes there.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Convert an amount between currencies using Bank of Israel representative rates.
```

## Changes things (5)

Creates or changes something that can be changed back. Claude Code: ask.

### `boi_exchange_rates`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Official Bank of Israel representative exchange rates (ILS). Optional list of currency codes.
```

### `israel_holidays`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Jewish/Israeli holidays for a year, with day_off=true for full holidays (yom tov).
```

### `oref_alert_history`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Recent Home Front Command alert history (last ~24h), newest first. Optional Hebrew city filter.
```

### `oref_current_alerts`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Active Home Front Command (Pikud HaOref) alerts in Israel right now (rockets, hostile aircraft, etc.). Optional city filter in Hebrew, e.g. 'חיפה'. The source is restricted to Israel, so this gateway reads it from an Israeli connection.
```

### `shabbat_times`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Candle lighting, havdalah and parasha for this week in an Israeli city (Hebrew or English name).
```

## Only reads (4)

Looks things up and changes nothing. Claude Code: allow.

### `datagov_query`

- The name "datagov_query" says "query": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Query rows from a data.gov.il resource (only resources marked queryable:true). Optional full-text filter.
```

### `datagov_search`

- The name "datagov_search" says "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Search Israel's national open-data portal (data.gov.il). Hebrew queries work best. Returns datasets and their resource_id values for datagov_query.
```

### `grocery_find_stores`

- The name "grocery_find_stores" says "find": a word for reading.
- Tag private-data: The description's first sentence says "find" and "branch": it reads repositories.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Find Shufersal branches by city or name (Hebrew). Returns store_id values for grocery_search.
```

### `grocery_search`

- The name "grocery_search" says "search": a word for reading.
- Tag private-data: The description's first sentence says "branch": it reads repositories.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Current shelf prices at a specific Shufersal branch, from the official price-transparency files. Search by Hebrew product name (e.g. 'חלב 3%') or barcode. Results sorted cheapest first.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `israel-gateway`:

```json
{
  "permissions": {
    "allow": [
      "mcp__israel-gateway__grocery_find_stores",
      "mcp__israel-gateway__grocery_search",
      "mcp__israel-gateway__datagov_search",
      "mcp__israel-gateway__datagov_query"
    ],
    "ask": [
      "mcp__israel-gateway__oref_current_alerts",
      "mcp__israel-gateway__oref_alert_history",
      "mcp__israel-gateway__boi_exchange_rates",
      "mcp__israel-gateway__boi_convert",
      "mcp__israel-gateway__shabbat_times",
      "mcp__israel-gateway__israel_holidays"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__israel-gateway__oref_current_alerts`: untrusted-input
- `mcp__israel-gateway__oref_alert_history`: untrusted-input
- `mcp__israel-gateway__grocery_find_stores`: private-data, untrusted-input
- `mcp__israel-gateway__grocery_search`: private-data, untrusted-input
- `mcp__israel-gateway__datagov_search`: untrusted-input
- `mcp__israel-gateway__datagov_query`: untrusted-input
- `mcp__israel-gateway__boi_exchange_rates`: untrusted-input
- `mcp__israel-gateway__boi_convert`: untrusted-input, outbound
- `mcp__israel-gateway__shabbat_times`: untrusted-input
- `mcp__israel-gateway__israel_holidays`: untrusted-input