Skip to content

IYT Test

io.github.nikolai-shilin/iyt-testnikolai-shilinstreamable-httpv1.0.1Scanned

Sailing exam practice for IYT levels and the Racing Rules: questions, mock exams, theory. EN/RU.

13 tools: 5 change things and 8 only read.

Tools: 0 delete, 0 irreversible, 5 write, 8 read.
  • Reads private data · 1
  • Reads text others write · 0
  • Can send data out · 0
  • 2 findings

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

13 tools

Changes things 5Claude Code: ask
  • check_answerWhether an option of a question is right: the right option, the one-line note that names the rule, and the theory section that explains it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Whether an option of a question is right: the right option, the one-line note that names the rule, and the theory section that explains it.

    Annotations the server declares

    • title: Check an answer
    • readOnlyHint: true
    • openWorldHint: false
  • grade_examThe marks of a finished mock exam: the score, pass or fail, the result per topic, every mistake with the right answer and its note, and the theory sections to read.1 finding

    Why it is in this group

    • The description's first verb is "mark": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "grade_exam" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "mark": a word for a change.

      What this check looks for
    Description, as the server wrote it
    The marks of a finished mock exam: the score, pass or fail, the result per topic, every mistake with the right answer and its note, and the theory sections to read. A question with option null was not answered and counts as wrong.

    Annotations the server declares

    • title: Grade a mock exam
    • readOnlyHint: true
    • openWorldHint: false
  • practice_sectionThe questions on what a theory section explains, at random, without the answers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The questions on what a theory section explains, at random, without the answers.

    Annotations the server declares

    • title: Practise a theory section
    • readOnlyHint: true
    • openWorldHint: false
  • question_of_the_dayToday's question, the same one the Telegram bot @iyt_test_bot sends: one text question per day (UTC), for one level when a level is given, without the answer.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Today's question, the same one the Telegram bot @iyt_test_bot sends: one text question per day (UTC), for one level when a level is given, without the answer.

    Annotations the server declares

    • title: Question of the day
    • readOnlyHint: true
    • openWorldHint: false
  • start_mock_examA mock exam of a level: the exam's number of questions spread evenly over all topics, with the time allowed and the pass mark, without the answers.1 finding

    Why it is in this group

    • The name "start_mock_exam" says "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "start_mock_exam" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "start_mock_exam" says "start": a word for a change.

      What this check looks for
    Description, as the server wrote it
    A mock exam of a level: the exam's number of questions spread evenly over all topics, with the time allowed and the pass mark, without the answers.

    Annotations the server declares

    • title: Start a mock exam
    • readOnlyHint: true
    • openWorldHint: false
Only reads 8Show 8 read-only tools
  • explain_questionA question with its answer, the note that names the rule and the full text of the theory section that explains it.No findings

    Why it is in this group

    • The name "explain_question" says "explain": a word for reading.
    Description, as the server wrote it
    A question with its answer, the note that names the rule and the full text of the theory section that explains it.

    Annotations the server declares

    • title: Explain a question
    • readOnlyHint: true
    • openWorldHint: false
  • get_figureThe drawing of a question or of a theory section as SVG markup.No findings

    Why it is in this group

    • The name "get_figure" says "get": a word for reading.
    Description, as the server wrote it
    The drawing of a question or of a theory section as SVG markup.

    Annotations the server declares

    • title: Get a drawing
    • readOnlyHint: true
    • openWorldHint: false
  • get_questionsRandom practice questions of a level, of one topic or difficulty when given, without the answers.No findings

    Why it is in this group

    • The name "get_questions" says "get": a word for reading.
    Description, as the server wrote it
    Random practice questions of a level, of one topic or difficulty when given, without the answers.

    Annotations the server declares

    • title: Get practice questions
    • readOnlyHint: true
    • openWorldHint: false
  • get_theoryA theory article, or one section of it, as text: the rule, the reason, tables and links to the drawings.Reads private dataNo findings

    Why it is in this group

    • The name "get_theory" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "table": it reads databases.
    Description, as the server wrote it
    A theory article, or one section of it, as text: the rule, the reason, tables and links to the drawings. Study notes close to the syllabus, not official IYT text.

    Annotations the server declares

    • title: Read a theory article
    • readOnlyHint: true
    • openWorldHint: false
  • list_levelsThe levels with a question bank (IYT courses, the Racing Rules of Sailing, the charter check-in): topics, number of questions, mock-exam settings and which topics have a theory art…No findings

    Why it is in this group

    • The name "list_levels" says "list": a word for reading.
    Description, as the server wrote it
    The levels with a question bank (IYT courses, the Racing Rules of Sailing, the charter check-in): topics, number of questions, mock-exam settings and which topics have a theory article.

    Annotations the server declares

    • title: List levels
    • readOnlyHint: true
    • openWorldHint: false
  • list_theoryThe theory articles: one per topic, each in sections.No findings

    Why it is in this group

    • The name "list_theory" says "list": a word for reading.
    Description, as the server wrote it
    The theory articles: one per topic, each in sections. With a level, the sections of its articles; without, which topics of every level have an article. Some topics have no article yet.

    Annotations the server declares

    • title: List theory articles
    • readOnlyHint: true
    • openWorldHint: false
  • search_questionsQuestions whose text, options, rule reference or topic have the words (e.g.No findings

    Why it is in this group

    • The name "search_questions" says "search": a word for reading.
    Description, as the server wrote it
    Questions whose text, options, rule reference or topic have the words (e.g. "cardinal mark", "MAYDAY"), without the answers.

    Annotations the server declares

    • title: Search questions
    • readOnlyHint: true
    • openWorldHint: false
  • search_theoryThe sections of the theory articles that have the words (e.g.No findings

    Why it is in this group

    • The name "search_theory" says "search": a word for reading.
    Description, as the server wrote it
    The sections of the theory articles that have the words (e.g. "scope", "cardinal marks"), with an excerpt of each.

    Annotations the server declares

    • title: Search theory
    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input or outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • The server marks "start_mock_exam" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "start_mock_exam" says "start": a word for a change.

    What this check looks for
  • The server marks "grade_exam" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "mark": a word for a change.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

  1. Tools13 changed.~13 changedView diff

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http iyt-test https://iyt.rycrentals.com/api/mcp
claude mcp add --transport http iyt-test https://iyt.rycrentals.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__iyt-test__list_levels",
      "mcp__iyt-test__get_questions",
      "mcp__iyt-test__search_questions",
      "mcp__iyt-test__list_theory",
      "mcp__iyt-test__get_theory",
      "mcp__iyt-test__search_theory",
      "mcp__iyt-test__explain_question",
      "mcp__iyt-test__get_figure"
    ],
    "ask": [
      "mcp__iyt-test__check_answer",
      "mcp__iyt-test__start_mock_exam",
      "mcp__iyt-test__grade_exam",
      "mcp__iyt-test__question_of_the_day",
      "mcp__iyt-test__practice_section"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as iyt-test. Review it before you use it.

Capability tags behind 1 rule
  • mcp__iyt-test__get_theory private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.nikolai-shilin/iyt-test/verify?hash=1cd606ee17a3798c4b105e93ad53e4563383f315fc985ec3e59f5fbcc77733a3" | jq -e '.changed == false'

Pinned hash 1cd606ee17a3, from Nov 5, 2026, 10:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.nikolai-shilin/iyt-test/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.nikolai-shilin/iyt-test
[![anlyon.dev](https://anlyon.dev/badge/io.github.nikolai-shilin/iyt-test.svg)](https://anlyon.dev/servers/io.github.nikolai-shilin/iyt-test)

Source: MCP Registry · repository. Synced Nov 5, 2026, 10:18 UTC.