Anole AI Visibility

io.github.piotrlitwa/anolepiotrlitwastreamable-httpv2.0.1Scanned 1 hour ago

Audit website AI readiness, publish Markdown pages for LLMs and manage llms.txt.

19 tools: 4 can delete or cancel things, 4 change things and 11 only read.

Reads private data · 6
Reads text others write · 12
Can send data out · 4
1 finding

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

19 tools

Deletes or cancels 4Removes, cancels or revokes something.Claude Code: deny

crawl_siteStarts a background crawl of the site sitemap and refreshes the audit.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "start": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "crawl_site" says "crawl": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "crawl": it reads web pages, which anyone can write.
Description, as the server wrote it
Starts a background crawl of the site sitemap and refreshes the audit. Returns immediately; check get_site_overview for results.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
publish_documentPublishes a document: makes its .md URL public, adds it to the site llms.txt and pushes it to the customer server when auto-deploy is configured.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "publish_document" says "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "publish_document" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Publishes a document: makes its .md URL public, adds it to the site llms.txt and pushes it to the customer server when auto-deploy is configured.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
unpublish_documentArchives a document: removes its public .md URL and its llms.txt entry.No findings
Why it is in this group
- The description's first verb is "archive": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Archives a document: removes its public .md URL and its llms.txt entry. Content is kept and can be published again.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
update_documentReplaces the Markdown body and/or title/description of a document.No findings
Why it is in this group
- The name "update_document" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Replaces the Markdown body and/or title/description of a document. The previous version is kept as a revision. A published document changes publicly at once.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

add_siteAdds a website (domain) to the Anole account.No findings
Why it is in this group
- The name "add_site" says "add": a word for a change.
Description, as the server wrote it
Adds a website (domain) to the Anole account. It is crawled in the next background cycle, or right away with crawl_site.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
analyze_contentRuns the Anole SEO, readability and GEO analyzer on Markdown, HTML or a page URL of the site.Reads text others writeCan send data out1 finding
Why it is in this group
- The name "analyze_content" says "analyze": a word for reading.
- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "run" and "html": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Findings
- Warn
  The server marks "analyze_content" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "analyze_content" says "analyze": a word for reading.
  What this check looks for
Description, as the server wrote it
Runs the Anole SEO, readability and GEO analyzer on Markdown, HTML or a page URL of the site. Returns a 0-100 score, a traffic light and per-check results. Does not save anything.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
create_documentCreates a draft Markdown document in Content Studio, from Markdown text or by converting a web page (source_url) to Markdown.Reads text others writeNo findings
Why it is in this group
- The name "create_document" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Creates a draft Markdown document in Content Studio, from Markdown text or by converting a web page (source_url) to Markdown. Drafts are not public until publish_document.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
generate_documentWrites a draft Markdown document on a topic with the Anole AI writer and saves it in Content Studio.Reads text others writeNo findings
Why it is in this group
- The name "generate_document" says "generate": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Writes a draft Markdown document on a topic with the Anole AI writer and saves it in Content Studio. Uses AI credits (free with an Own Key plan). Not public until publish_document.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false

Only reads 11Looks things up and changes nothing.Show 11 read-only tools

compare_with_top_resultsCompares a page of the site with the pages ranking in the top 10 for a search phrase: title, meta description, H1-H3 structure and heading topics, word count, paragraphs, links, im…Reads text others writeCan send data outNo findings
Why it is in this group
- The name "compare_with_top_results" says "compare": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Compares a page of the site with the pages ranking in the top 10 for a search phrase: title, meta description, H1-H3 structure and heading topics, word count, paragraphs, links, images, dates and structured data. Returns the client values, medians for the top results, a list of gaps ordered by impact and heading topics the top results cover that the page does not. Uses competitor_urls when given (for example from a web search); otherwise Anole fetches the current Google top 10 when its search API is configured. Analysed pages count towards the plan quota (see get_account).
Annotations the server declares
- openWorldHint: true
- idempotentHint: false
- readOnlyHint: true
- destructiveHint: false
fetchReturns the full content of a search result (id like doc:123 or url:456).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "fetch" says "fetch": a word for reading.
What it can reach
- private-dataThe description's first sentence says "return" and "doc": it reads documents.
- untrusted-inputThe description's first sentence says "return" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Returns the full content of a search result (id like doc:123 or url:456).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_accountReturns the Anole plan, plan limits, AI credit balance and site usage of the account.No findings
Why it is in this group
- The name "get_account" says "get": a word for reading.
Description, as the server wrote it
Returns the Anole plan, plan limits, AI credit balance and site usage of the account.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_documentFull Markdown body and metadata of one Content Studio document.Reads private dataNo findings
Why it is in this group
- The name "get_document" says "get": a word for reading.
What it can reach
- private-dataThe name "get_document" says "get" and "document": it reads documents.
- private-dataThe description's first sentence says "document": it reads documents.
Description, as the server wrote it
Full Markdown body and metadata of one Content Studio document.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_llms_txtThe llms.txt file Anole serves for a site, with its public URL.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_llms_txt" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
The llms.txt file Anole serves for a site, with its public URL.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_site_overviewCrawl statistics, average AI-readiness score, llms.txt coverage and document counts for one site.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_site_overview" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
- untrusted-inputThe description's first sentence says "crawl": it reads web pages, which anyone can write.
Description, as the server wrote it
Crawl statistics, average AI-readiness score, llms.txt coverage and document counts for one site.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_url_auditFull audit of one URL from the site sitemap, including the stored SEO/GEO analysis when available.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "get_url_audit" says "get": a word for reading.
What it can reach
- untrusted-inputThe name "get_url_audit" says "get" and "url": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Full audit of one URL from the site sitemap, including the stored SEO/GEO analysis when available.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_documentsMarkdown documents of a site in Content Studio.Reads private dataNo findings
Why it is in this group
- The name "list_documents" says "list": a word for reading.
What it can reach
- private-dataThe name "list_documents" says "list" and "document": it reads documents.
- private-dataThe description's first sentence says "document": it reads documents.
Description, as the server wrote it
Markdown documents of a site in Content Studio. status: published (default), draft, archived or all.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_sitesLists the websites (domains) in the Anole account with their crawl status and average score.Reads text others writeNo findings
Why it is in this group
- The name "list_sites" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "crawl": it reads web pages, which anyone can write.
Description, as the server wrote it
Lists the websites (domains) in the Anole account with their crawl status and average score.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_urlsSitemap URLs of a site with their audit result.Reads text others writeNo findings
Why it is in this group
- The name "list_urls" says "list": a word for reading.
What it can reach
- untrusted-inputThe name "list_urls" says "list" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Sitemap URLs of a site with their audit result. filter: all, missing_md (no Markdown version), low_score (worst first), errors (HTTP errors).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
searchSearches published documents and audited URLs of the account sites.Reads private dataNo findings
Why it is in this group
- The name "search" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "document": it reads documents.
Description, as the server wrote it
Searches published documents and audited URLs of the account sites. Returns ids for fetch.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

288 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 4 outbound tools breaks every one.

Reads private data6: Reads files, mail, messages, databases, secrets, calendars or repositories.; fetch
get_document
get_llms_txt
get_site_overview
list_documents
search
Reads text others write12: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; analyze_content
compare_with_top_results
crawl_site
create_document
fetch
generate_document
get_llms_txt
get_site_overview
get_url_audit
list_sites
list_urls
publish_document
Can send data out4: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; analyze_content
compare_with_top_results
get_url_audit
publish_document

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__anole__analyze_content",
      "mcp__anole__compare_with_top_results",
      "mcp__anole__get_url_audit",
      "mcp__anole__publish_document"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnanalyze_content
The server marks "analyze_content" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "analyze_content" says "analyze": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 2.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http anole https://anole.app/mcp/

claude mcp add --transport http anole https://anole.app/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__anole__list_sites",
      "mcp__anole__get_account",
      "mcp__anole__get_site_overview",
      "mcp__anole__list_urls",
      "mcp__anole__get_llms_txt",
      "mcp__anole__list_documents",
      "mcp__anole__get_document",
      "mcp__anole__search",
      "mcp__anole__fetch"
    ],
    "ask": [
      "mcp__anole__get_url_audit",
      "mcp__anole__analyze_content",
      "mcp__anole__compare_with_top_results",
      "mcp__anole__add_site",
      "mcp__anole__create_document",
      "mcp__anole__generate_document"
    ],
    "deny": [
      "mcp__anole__crawl_site",
      "mcp__anole__update_document",
      "mcp__anole__publish_document",
      "mcp__anole__unpublish_document"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as anole. Review it before you use it.

Capability tags behind 15 rules

mcp__anole__list_sites untrusted-input
mcp__anole__get_site_overview private-data, untrusted-input
mcp__anole__list_urls untrusted-input
mcp__anole__get_url_audit untrusted-input, outbound
mcp__anole__get_llms_txt private-data, untrusted-input
mcp__anole__list_documents private-data
mcp__anole__get_document private-data
mcp__anole__analyze_content untrusted-input, outbound
mcp__anole__compare_with_top_results untrusted-input, outbound
mcp__anole__search private-data
mcp__anole__fetch private-data, untrusted-input
mcp__anole__crawl_site untrusted-input
mcp__anole__create_document untrusted-input
mcp__anole__generate_document untrusted-input
mcp__anole__publish_document untrusted-input, outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.piotrlitwa/anole/verify?hash=7e81c146de641ec575e70aa6efd1ba2b8e532ac551543f88e1f3de1cb1cbbd9f" | jq -e '.changed == false'

Pinned hash 7e81c146de64, from Nov 2, 2026, 21:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.piotrlitwa/anole/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.piotrlitwa/anole.svg)](https://anlyon.dev/servers/io.github.piotrlitwa/anole)

Source: MCP Registry · repository. Synced Nov 2, 2026, 21:18 UTC.