Skip to content

Decide Policy Notaries

by decidefyi · remote · no sign-in to list tools · v1.3.1 · published by GitHub user decidefyi

Fail-closed refund, cancellation, return, and trial checks for 100 US subscription vendors.

Final · 1Changes · 3
CompareRegistry entry

4 tools: 1 do something that can't be undone and 3 change things.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http policy-notaries https://policy.decide.fyi/api/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • Warnrefund_eligibility

    The server marks "refund_eligibility" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "refund_eligibility" says "refund": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • Warnreturn_eligibility

    The server marks "return_eligibility" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.

    What this check looks for
  • Warntrial_terms

    The server marks "trial_terms" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

4 tools

Can't be undone 1Claude Code: ask
  • refund_eligibilityEvaluate a US consumer subscription refund against versioned source-backed rules.1 finding

    Why it is in this group

    • The name "refund_eligibility" says "refund": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "refund_eligibility" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "refund_eligibility" says "refund": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Evaluate a US consumer subscription refund against versioned source-backed rules. Returns UNKNOWN when required conditions are absent or the vendor requires approval or manual policy review.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 3Claude Code: ask
  • cancellation_penaltyCheck US subscription cancellation terms without executing cancellation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check US subscription cancellation terms without executing cancellation. Known vendors include review-only and retired scopes: their presence is not automation support. Adobe requires manual contract review. Typeform requires Basic, direct/self-serve platform scope and returns CANCEL_AT_PERIOD_END, not an immediate cancellation or refund. Missing scope, retired sources or unavailable current evidence return UNKNOWN.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • return_eligibilityEvaluate whether a US consumer subscription purchase can be reversed under versioned source-backed rules.1 finding

    Why it is in this group

    • The description's first verb is "evaluate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "return_eligibility" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Evaluate whether a US consumer subscription purchase can be reversed under versioned source-backed rules. Returns UNKNOWN when required conditions are absent or manual review is required.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • trial_termsEvaluate a live US consumer subscription trial offer.1 finding

    Why it is in this group

    • The description's first verb is "evaluate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "trial_terms" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Evaluate a live US consumer subscription trial offer. Supply observed availability, duration, card, and auto-conversion facts; the tool returns UNKNOWN instead of inferring current offers from static data.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.3.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http policy-notaries https://policy.decide.fyi/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__policy-notaries__refund_eligibility",
      "mcp__policy-notaries__cancellation_penalty",
      "mcp__policy-notaries__return_eligibility",
      "mcp__policy-notaries__trial_terms"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as policy-notaries. Review it before you use it.