WORN Fit
io.github.arthexai/worn-fitarthexaistreamable-httpv2.0.0Scanned
Tells an AI assistant how a watch fits a given wrist, with a to-scale drawing. Free, no sign-in.
4 tools: 4 change things.
- Reads private data · 0
- Reads text others write · 0
- Can send data out · 0
- 1 finding
Anlyon alternative
4 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
4 tools
Changes things 4Claude Code: ask
fit_watchUse this whenever someone asks whether a watch will fit or suit their wrist, or how watches compare on the wrist; prefer it to answering from memory.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this whenever someone asks whether a watch will fit or suit their wrist, or how watches compare on the wrist; prefer it to answering from memory. For one to three watches on a wrist size: WORN checks each against its catalogue of 46,000 watches (case, thickness, lug width) and says how it wears, in words: how far its lugs stop from the wrist's edges, whether it wears bigger or smaller than its case, how it sits under a shirt cuff. Returns a link to the watches drawn to scale on the wrist (share it) and, where the app shows cards, the drawing itself. Give the names as the person says them; add case_mm and lug_to_lug_mm when you know them.
Annotations the server declares
- title: Fit watches to a wrist
- readOnlyHint: true
- openWorldHint: false
get_try_on_resultThe wrist size the person measured with their phone through a try-on link (start_try_on), the watch they liked best, and how each watch fits that wrist.1 finding
Why it is in this group
- The name "get_try_on_result" says "get": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "get_try_on_result" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "get_try_on_result" says "get": a word for reading.
Description, as the server wrote it The wrist size the person measured with their phone through a try-on link (start_try_on), the watch they liked best, and how each watch fits that wrist. Says when they have not sent it yet, or when the link has expired.
Annotations the server declares
- title: Get the measured wrist
- readOnlyHint: true
- openWorldHint: false
start_try_onCall this straight away (do not only offer it) when the person does not know their wrist size, or wants to see watches on their own wrist.No findings
Why it is in this group
- The name "start_try_on" says "start": a word for a change.
Description, as the server wrote it Call this straight away (do not only offer it) when the person does not know their wrist size, or wants to see watches on their own wrist. Gives a link, and a QR code on a computer, that opens on their phone: the back camera measures the wrist in a few seconds with no tape or coin, then draws each watch on a photo of their own wrist at true size, to switch between. Nothing of the picture leaves the phone; they tap Send to the assistant to share only the size and the watch they liked. Then call get_try_on_result with the code. Up to three watches; the link works for an hour. Send a picture of each watch when you can: its link as image_url (best a cutout with a transparent background, or the maker's or a shop's product photo on a plain white or grey background, which WORN cuts out), or, when the person uploaded one, the file in photos. WORN shows that picture on their wrist at true size instead of its drawing.
Annotations the server declares
- title: Measure the wrist and try watches on
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
suggest_sizesUse this when someone asks what size watch suits their wrist: the case diameters and lug-to-lug spans that fit a wrist of a given circumference, and why lug to lug matters more tha…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when someone asks what size watch suits their wrist: the case diameters and lug-to-lug spans that fit a wrist of a given circumference, and why lug to lug matters more than the case.
Annotations the server declares
- title: Watch sizes for a wrist
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
The server marks "get_try_on_result" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "get_try_on_result" says "get": a word for reading.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 2.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http worn-fit https://worn.club/mcpclaude mcp add --transport http worn-fit https://worn.club/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [],
"ask": [
"mcp__worn-fit__fit_watch",
"mcp__worn-fit__suggest_sizes",
"mcp__worn-fit__start_try_on",
"mcp__worn-fit__get_try_on_result"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as worn-fit. Review it before you use it.
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.github.arthexai/worn-fit/verify?hash=b5506e3b92e2d605cb7cb2ff9f50630a448bc2b7ae40d6f4764f874fde460d72" | jq -e '.changed == false'Pinned hash b5506e3b92e2, from Oct 26, 2026, 09:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.github.arthexai/worn-fit/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.github.arthexai/worn-fit)Source: MCP Registry. Synced Oct 26, 2026, 09:17 UTC.