Is the EVS Meter Tools MCP server safe?

No scan can promise that. What its definitions show: 4 tools, 1 of which can change, send or delete something, and 1 finding from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.

Can the EVS Meter Tools MCP server delete data?

No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.

Can the EVS Meter Tools MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the EVS Meter Tools MCP server have?

4 tools: 1 write, 3 read. get_topup_link, get_meter_balance, get_meter_usage and get_recent_topups.

Does the EVS Meter Tools MCP server send data to outside services?

None of its tools sends, posts or publishes, or takes a recipient, channel or URL.

Has the EVS Meter Tools MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 5, 2026.

EVS Meter Tools MCP server

io.github.nicholasohjj/nusairconnicholasohjjstreamable-httpv2.0.1Scanned 2 hours ago

Check NUS and SUTD hostel EVS electricity meters and get top-up links. Unofficial.

4 tools: 1 change things and 3 only read.

Reads private data · 0
Reads text others write · 4
Can send data out · 0
1 finding

With Anlyon

1 tool here changes things. Govern it.

Anlyon lists the tools and adopts none.
Each tool you adopt gets approvals and receipts.
Your agent never holds the key.

Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

What the EVS Meter Tools MCP server can do

The EVS Meter Tools MCP server is published by the GitHub account nicholasohjj. It has 4 tools. It can create or change data (1 tool: get_topup_link), but cannot delete data. 3 tools only read.

4 tools bring in text other people can write (get_meter_balance, get_meter_usage, get_recent_topups and 1 more).

The fixed checks matched 1 finding (annotation-conflict). Each one comes with the text it matched.

Last scanned Nov 5, 2026, version 2.0.1.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

4 tools

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

get_topup_linkCreate a link to the secure top-up page, for the user to open and pay by card themselves.Reads text others write1 finding
Why it is in this group
- The name "get_topup_link" says "get": a word for reading.
- The description's first verb is "create": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_topup_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The name "get_topup_link" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Create a link to the secure top-up page, for the user to open and pay by card themselves. Creating the link charges nothing. Refuses a meter EVS doesn't recognise. If EVS can't be reached, meterVerified is false, so ask the user to check the meter on the page. NUS allows $6-$50 and SUTD allows $10-$50.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true

Only reads 3Looks things up and changes nothing.Show 3 read-only tools

get_meter_balanceGet the current prepaid credit balance of a meter, in SGD.Reads text others writeNo findings
Why it is in this group
- The name "get_meter_balance" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get the current prepaid credit balance of a meter, in SGD.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true
get_meter_usageGet up to 7 days of usage for an NUS meter, with spending analysis, month-to-date spending, and how long the balance may last.Reads text others writeNo findings
Why it is in this group
- The name "get_meter_usage" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get up to 7 days of usage for an NUS meter, with spending analysis, month-to-date spending, and how long the balance may last. Amounts are in SGD. Dates are as EVS reports them, with no time zone, and recent days may be missing. Not available for SUTD meters.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true
get_recent_topupsGet up to 10 recent top-ups for a meter.Reads text others writeNo findings
Why it is in this group
- The name "get_recent_topups" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get up to 10 recent top-ups for a meter. To confirm a payment, look for a top-up with the same amount dated after the createdAt of its link, and with no status showing it failed. Earlier top-ups can have the same amount, so always check the date. Dates have no time zone and appear to be Singapore time (UTC+8), while createdAt is ISO 8601. If nothing matches, the payment may not be recorded yet or may have failed: check again later, and have the user check their card statement before paying again.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_meter_balance
get_meter_usage
get_recent_topups
get_topup_link
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnget_topup_link
The server marks "get_topup_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The name "get_topup_link" says "get": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 2.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http nusaircon https://nusaircon-production.up.railway.app/mcp

claude mcp add --transport http nusaircon https://nusaircon-production.up.railway.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__nusaircon__get_meter_balance",
      "mcp__nusaircon__get_meter_usage",
      "mcp__nusaircon__get_recent_topups"
    ],
    "ask": [
      "mcp__nusaircon__get_topup_link"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as nusaircon. Review it before you use it.

Capability tags behind 4 rules

mcp__nusaircon__get_meter_balance untrusted-input
mcp__nusaircon__get_meter_usage untrusted-input
mcp__nusaircon__get_recent_topups untrusted-input
mcp__nusaircon__get_topup_link untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.nicholasohjj/nusaircon/verify?hash=5ccdde6d11b28df68fa2c71e79e52768beee953844bca57f207c9daabcc2bd0f" | jq -e '.changed == false'

Pinned hash 5ccdde6d11b2, from Nov 5, 2026, 17:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.nicholasohjj/nusaircon/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.nicholasohjj/nusaircon.svg)](https://anlyon.dev/servers/io.github.nicholasohjj/nusaircon)

Source: MCP Registry · repository. Synced Nov 5, 2026, 17:18 UTC.