Annalist
by ryanroskowski · remote · no sign-in to list tools · v0.16.0 · published by GitHub user ryanroskowski
Signed data for agents: agentic-commerce census, dependency digest, x402/MCP checks, Hyperliquid
43 tools: 1 do something that can't be undone, 41 change things and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone1Claude Code: ask: see these tools
- Changes things41Claude Code: ask: see these tools
- Only reads1Claude Code: allow: see these tools
3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http annalist https://api.annalist.dev/mcpFindings
Matches of fixed checks, with the text they matched.
- Warncrowd_history
The server marks "crowd_history" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
- Warncommerce_stores
The server marks "commerce_stores" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "commerce_stores" says "store": a word for a change.
The server marks "annalist_verify_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "annalist_verify_store" says "store": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
43 tools
Can't be undone 1Claude Code: ask
crowd_historySigned historical crowd-state events for backtesting: up to 30 days per call, optionally filtered by coin and state.1 finding
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "crowd_history" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it Signed historical crowd-state events for backtesting: up to 30 days per call, optionally filtered by coin and state. The archive is append-only and its daily hashes are published and Bitcoin-timestamped. Price: $0.05 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Changes things 41Claude Code: ask
ai_changesRecent changes to AI model prices and availability across providers, newest first: price cuts and raises per field (with the change), models added and removed, context-window chang…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Recent changes to AI model prices and availability across providers, newest first: price cuts and raises per field (with the change), models added and removed, context-window changes and deprecation dates, for the last 1 to 90 days, optionally by provider or model name. Source: LiteLLM's open price file (MIT), recorded daily. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
ai_pricesAI model prices per million tokens (input, output, cache, batch) with context window, for about 4,000 models across providers.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it AI model prices per million tokens (input, output, cache, batch) with context window, for about 4,000 models across providers. With model=: its price history and the same model on other providers. Without: a list filtered by provider, mode, min_context and max_input price, sorted by input, output or context. History from January 2026. Source: LiteLLM's open price file (MIT). Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
ai_retirementsRetirement calendar for AI models across platforms: shutdown dates, 'not sooner than' floors, states and recommended replacements from the official Anthropic, OpenAI and Amazon Bed…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Retirement calendar for AI models across platforms: shutdown dates, 'not sooner than' floors, states and recommended replacements from the official Anthropic, OpenAI and Amazon Bedrock deprecation pages, plus Azure, Vertex, Gemini and others, recorded daily so moved dates show. The same model often retires on different dates on different platforms. One model with model=, or upcoming shutdowns. Signed. Price: $0.005 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_aboutFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free. What Annalist is, every tool and its price, how payment works (x402, USDC on Base), and how fresh the data is.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_baseratesFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free. Historical base rates for every crowd state: sample size, median and spread of later returns, chance of further run-ups. Optional state filter.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_market_sampleFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free. The crowd_market view as it was 24 hours ago, to evaluate the data before paying.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_track_recordFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free. Every crowd-state event's later outcome, compared with its backtest base rate.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_verify_mcpFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free. Before connecting an MCP server, get its signed Annalist check: grade, uptime over 7 days, connect time, sign-in mode, tool count, whether its tools changed recently (the 'rug pull' pattern) and reasons. By registry name (io.github.user/server) or URL. Verify the signature with the key at /.well-known/annalist-key.json.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_verify_serviceFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free. Before paying an x402 service, get its signed Annalist check: grade, key facts (uptime, price and wallet match its listing, organic paying customers, test purchases) and reasons. The statement is signed; verify it with the key at /.well-known/annalist-key.json.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_verify_storeFree.1 finding
Why it is in this group
- The name "annalist_verify_store" says "store": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "annalist_verify_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "annalist_verify_store" says "store": a word for a change.
Description, as the server wrote it Free. Before an agent shops on a website, get its signed Annalist check from our weekly commerce census: is it a store, does it take agent checkout (UCP or ACP) and at which MCP endpoint, which payment handlers, how many countries it ships to, and which AI agents its robots.txt blocks. Verify the signature with the key at /.well-known/annalist-key.json.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
annalist_weekly_reportFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free. This week in the agent economy and the markets agents trade: x402 services listed, new and gone, price changes, typical prices by category, the services with the most real paying customers, MCP server health and tool changes, and a Hyperliquid summary. Optional date (YYYY-MM-DD) for an earlier week.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
apis_apiOne watched public API's contract record: current version, operation count and keys, deprecated operations, security schemes, and every dated change in the last 90 days with what b…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it One watched public API's contract record: current version, operation count and keys, deprecated operations, security schemes, and every dated change in the last 90 days with what broke. From the provider's published OpenAPI description, read daily. Without name=, lists the APIs we watch. Signed. Price: $0.005 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
apis_changesDated contract changes in widely used public APIs (Stripe, GitHub, OpenAI, Twilio, Slack, Plaid, Datadog and more), from their published OpenAPI descriptions read daily: operations…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Dated contract changes in widely used public APIs (Stripe, GitHub, OpenAI, Twilio, Slack, Plaid, Datadog and more), from their published OpenAPI descriptions read daily: operations, parameters and request fields added, removed or newly required, each change marked breaking or not. Last 1 to 90 days, one API with api=, or only breaking changes with breaking=true. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
checks_changesWhat changed in x402 service listings, from daily snapshots of Coinbase's Bazaar: price raises and cuts, endpoints added and dropped, new and departed services, and payout-wallet c…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What changed in x402 service listings, from daily snapshots of Coinbase's Bazaar: price raises and cuts, endpoints added and dropped, new and departed services, and payout-wallet changes (worth checking before paying: a hijacked listing looks the same as a rotated wallet). Market-wide for the last 1 to 7 days, or one service's 30-day change log with host=. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
checks_sellerChecks for an x402 seller wallet on Base: the services that pay out to it and their grades, and USDC received over 30 days with payers, repeat payers and fake-volume signals (payer…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Checks for an x402 seller wallet on Base: the services that pay out to it and their grades, and USDC received over 30 days with payers, repeat payers and fake-volume signals (payers the seller funded, crawler bots, one-wallet dominance). Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
checks_serviceUse before paying an x402 service: independent checks by host or URL.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use before paying an x402 service: independent checks by host or URL. Uptime and latency from repeated unpaid probes, whether the quoted price and payout wallet match the listing, real on-chain usage over 30 days with fake volume removed (self-funded payers, crawler bots, one-wallet dominance), test purchases and domain age, with a grade and reasons. Rankings are never for sale. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
checks_topLeaderboards from our independent checks of x402 services: most real (wash-adjusted) paying customers, most reliable, and flagged services (price or wallet mismatches, outages, mos…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Leaderboards from our independent checks of x402 services: most real (wash-adjusted) paying customers, most reliable, and flagged services (price or wallet mismatches, outages, mostly bot traffic, self-funded volume), with the method. With category= (shopping, ai-inference, crypto-data...), one category's boards. Rankings are never for sale. Signed. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
commerce_storesStores from our weekly census of 65,000 top sites, filtered by what a shopping agent needs: ships to a country, UCP agent checkout and its capabilities, payment handlers (Google Pa…1 finding
Why it is in this group
- The name "commerce_stores" says "store": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "commerce_stores" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "commerce_stores" says "store": a word for a change.
Description, as the server wrote it Stores from our weekly census of 65,000 top sites, filtered by what a shopping agent needs: ships to a country, UCP agent checkout and its capabilities, payment handlers (Google Pay, Shop Pay), currency, return window. Facts from each store's own machine-readable files, never its policy pages. Most visited first. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crowd_changesFor bots that poll: crowd-state events (a perp entering or leaving a state) since a timestamp, newest first, up to 7 days back.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it For bots that poll: crowd-state events (a perp entering or leaving a state) since a timestamp, newest first, up to 7 days back. Each event is signed with the mark price at the time. Not investment advice. Price: $0.005 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crowd_marketMarket-wide crowding on Hyperliquid: breadth of 7-day moves, how many perps are up 50%+/100%+ in a week, share of perps with funding in their own top/bottom 5%, total open interest…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Market-wide crowding on Hyperliquid: breadth of 7-day moves, how many perps are up 50%+/100%+ in a week, share of perps with funding in their own top/bottom 5%, total open interest and its 24h change, BTC and ETH funding percentiles, and Wikipedia attention to cryptocurrency. Signed. Not investment advice. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crowd_perpUse before acting on a Hyperliquid perpetual to see whether it is crowded or in a hype state and what historically followed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use before acting on a Hyperliquid perpetual to see whether it is crowded or in a hype state and what historically followed. Returns 7-day move, funding (hourly, APR, percentile vs its own 90 days and vs all perps), open interest and its 24h/7d change, premium, Wikipedia attention, active crowd states, and each state's base rates (sample size, median and spread of 7/30/90-day returns). Signed. Not investment advice. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crowd_statesEvery Hyperliquid perp currently in a crowd state (7-day moves of +50/+100/+200%, funding in its own top or bottom 5%, Wikipedia attention spikes, new listings), ranked by 7-day mo…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Every Hyperliquid perp currently in a crowd state (7-day moves of +50/+100/+200%, funding in its own top or bottom 5%, Wikipedia attention spikes, new listings), ranked by 7-day move, each with base rates for what followed similar states historically. Optional ?state= filter. Signed. Not investment advice. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
deps_digestOne call for all of an agent's dependencies: npm, PyPI, crates.io and Go packages (new publishers, install scripts, license changes), public API contracts (breaking changes), AI mo…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it One call for all of an agent's dependencies: npm, PyPI, crates.io and Go packages (new publishers, install scripts, license changes), public API contracts (breaking changes), AI models (retirement dates, price changes), MCP servers (tool changes, uptime) and x402 services (wallet and price changes, flags), for the last 1 to 30 days, with what needs attention first. Signed. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
hip3_marketOverview of every builder-deployed (HIP-3) perpetual on Hyperliquid, mostly 24/7 stock, index, commodity and FX markets: each exchange's markets, open interest and volume; the larg…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Overview of every builder-deployed (HIP-3) perpetual on Hyperliquid, mostly 24/7 stock, index, commodity and FX markets: each exchange's markets, open interest and volume; the largest and most traded markets; the biggest 24h moves; funding extremes; markets near their open-interest cap; and flags. Signed. Not investment advice. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
hip3_perpUse before trading a stock, index, commodity or FX perpetual on Hyperliquid (builder-deployed, HIP-3; coins like xyz:NVDA, xyz:GOLD, xyz:SP500): price and 1h, 24h, 7d and 30d moves…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use before trading a stock, index, commodity or FX perpetual on Hyperliquid (builder-deployed, HIP-3; coins like xyz:NVDA, xyz:GOLD, xyz:SP500): price and 1h, 24h, 7d and 30d moves, volume, open interest and its 24h change, how close it is to its open-interest cap, funding (hourly, APR, percentile vs its own 30 days), premium and max leverage, with flags. Signed. Not investment advice. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
hlp_vaultHyperliquid's own market-making vault (HLP), which takes over liquidated positions: account value, APR, PnL over a day, week, month and all time, and its net position per coin acro…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Hyperliquid's own market-making vault (HLP), which takes over liquidated positions: account value, APR, PnL over a day, week, month and all time, and its net position per coin across all its sub-vaults, with the most long, most short and biggest 24h changes. Shows where the exchange itself is exposed. Signed. Not investment advice. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
liq_marketLiquidation pressure across Hyperliquid's largest perps: for each, the known longs liquidating within 5% below the mark and shorts within 5% above it, cascade ratios against order-…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Liquidation pressure across Hyperliquid's largest perps: for each, the known longs liquidating within 5% below the mark and shorts within 5% above it, cascade ratios against order-book depth, 2% depth, how much of open interest the known positions cover, and flags; plus the coins with the most liquidations nearby. Aggregates only. Signed. Not investment advice. Price: $0.03 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
liq_perpUse before opening, sizing or holding a Hyperliquid perpetual position to see where forced selling or buying would hit: known longs liquidating within 1 to 20% below the mark and s…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use before opening, sizing or holding a Hyperliquid perpetual position to see where forced selling or buying would hit: known longs liquidating within 1 to 20% below the mark and shorts above it, the biggest clusters, and coverage of open interest, set against order-book depth, spread and slippage as cascade ratios. Flags long_cascade_risk, short_squeeze_risk, thin_book. From large accounts' public positions. Aggregates only. Signed. Not investment advice. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
mcp_changesTool changes across remote MCP servers in the Official MCP Registry, newest first: tools added, removed or redefined (description, input schema or annotations), from our daily fing…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Tool changes across remote MCP servers in the Official MCP Registry, newest first: tools added, removed or redefined (description, input schema or annotations), from our daily fingerprints. A tool that changes after you approved it is how 'rug pull' attacks work, so check before trusting a server again. Last 1 to 30 days, or one server with name= or url=. Servers whose tools change by design are marked. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
mcp_serverUse before connecting a remote MCP server: independent checks by registry name or URL.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use before connecting a remote MCP server: independent checks by registry name or URL. Uptime and connect time from daily probes (initialize and tools/list; no tool is ever called), sign-in mode, protocol version, tool count, and tool-definition changes in 30 days (how 'rug pull' attacks work), with domain age, a grade and reasons. Covers remote servers in the Official MCP Registry. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
mcp_topLeaderboards from our independent checks of remote MCP servers in the Official MCP Registry: most reliable (up in 99%+ of probes, fastest first), servers whose tool definitions cha…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Leaderboards from our independent checks of remote MCP servers in the Official MCP Registry: most reliable (up in 99%+ of probes, fastest first), servers whose tool definitions changed in the last 7 days, flagged servers (often down, new domains), and counts by sign-in mode, with the method. Rankings are never for sale. Signed. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
outcomes_marketOne Hyperliquid outcome (prediction) market by id: readable title, structured details (teams, thresholds, deadlines, official source), each side's implied probability, 24h change, …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it One Hyperliquid outcome (prediction) market by id: readable title, structured details (teams, thresholds, deadlines, official source), each side's implied probability, 24h change, volume and outstanding value, its question, and a week of hourly prices per side. Ids come from /v1/outcomes/list. Signed. Not investment advice. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
packages_checkSupply-chain check of a popular package (the 8,000 most used on each of npm, PyPI, crates.io and Go): latest version and release activity, maintainers or owners, install scripts, p…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Supply-chain check of a popular package (the 8,000 most used on each of npm, PyPI, crates.io and Go): latest version and release activity, maintainers or owners, install scripts, provenance, deprecation, retractions, and what changed since we began tracking it daily: releases by a new publisher account, owner changes, install scripts added, provenance dropped, source repository moved, yanks. Account names are never published. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
packages_watchSupply-chain watch across the 8,000 most-used packages on each of npm, PyPI, crates.io and Go, newest first: releases by a new publisher account, maintainer and owner changes, inst…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Supply-chain watch across the 8,000 most-used packages on each of npm, PyPI, crates.io and Go, newest first: releases by a new publisher account, maintainer and owner changes, install scripts added, provenance dropped, source repositories moved, retractions, deprecations and yanks, with counts, for the last 1 to 30 days (days=, default 7), for one ecosystem or all. Signed. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
perp_fullOne call, one payment for everything on a Hyperliquid perpetual: crowd state with base rates for what usually followed (as /v1/crowd/perp), smart-money positioning (as /v1/smart/pe…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it One call, one payment for everything on a Hyperliquid perpetual: crowd state with base rates for what usually followed (as /v1/crowd/perp), smart-money positioning (as /v1/smart/perp) and liquidation levels with order-book depth (as /v1/liq/perp), each with its own as_of. Cheaper than buying the three separately. Signed. Not investment advice. Price: $0.03 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
prices_benchmarksPrice benchmarks for x402 services by category (seller tags such as search, llm, weather, market-data): how many services, price percentiles (each service counted once, at its medi…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Price benchmarks for x402 services by category (seller tags such as search, llm, weather, market-data): how many services, price percentiles (each service counted once, at its median), and 7- and 30-day trends. Add price= to see where a price sits. Without tag: every category. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
prices_servicePrice history of an x402 service by host or URL: each listed endpoint's price, first-seen date and changes, price changes in 30 days (raised, lowered, delisted), the prices it actu…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Price history of an x402 service by host or URL: each listed endpoint's price, first-seen date and changes, price changes in 30 days (raised, lowered, delisted), the prices it actually quoted when we called it, and where it sits against similar services by category (market median and percentile). Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
smart_marketWhere Hyperliquid's most profitable traders are positioned across all perps: the cohort's overall net long or short, the coins it is most net long and most net short, the biggest 2…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Where Hyperliquid's most profitable traders are positioned across all perps: the cohort's overall net long or short, the coins it is most net long and most net short, the biggest 24-hour changes, and coins where smart money is positioned against the crowd. Cohort definition included. Aggregates only. Signed. Not investment advice. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
smart_perpUse before acting on a Hyperliquid perpetual to see how its most profitable traders are positioned: how many wallets in a 200-wallet smart-money cohort are long vs short, long, sho…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use before acting on a Hyperliquid perpetual to see how its most profitable traders are positioned: how many wallets in a 200-wallet smart-money cohort are long vs short, long, short and net USD, the 24h change, concentration, leverage settings, share of open interest, and how that compares with the crowd (funding, 7-day move). Flags smart money positioned against a crowded move. Aggregates only, never wallet addresses. Signed. Not investment advice. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
web_censusOur weekly census of 65,000 top sites: how many sites and stores publish UCP or ACP agent-checkout profiles, agent and MCP cards and llms.txt, which AI crawlers stores block, store…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Our weekly census of 65,000 top sites: how many sites and stores publish UCP or ACP agent-checkout profiles, agent and MCP cards and llms.txt, which AI crawlers stores block, store platforms, and changes in the last 30 days. With signal=, the stores that have it (for example signal=ucp), most-linked first. Signed. Price: $0.01 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
web_readinessOne site's agent readiness from our weekly census of 65,000 top sites: UCP and ACP agent checkout (its MCP endpoint, capabilities, payment handlers), A2A and MCP cards, a real llms…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it One site's agent readiness from our weekly census of 65,000 top sites: UCP and ACP agent checkout (its MCP endpoint, capabilities, payment handlers), A2A and MCP cards, a real llms.txt, robots.txt rules for 15 AI agents, x402, store and platform, Shopify store facts (ships-to countries, currency), and every change dated. A site not yet in the census is visited live. Measured by us. Signed. Price: $0.005 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Only reads 1Claude Code: allow
outcomes_listEvery live Hyperliquid outcome (prediction) market: readable title, category (sports, price, ipo, policy_rate, awards), deadline, each side's price as implied probability with its …No findings
Why it is in this group
- The name "outcomes_list" says "list": a word for reading.
Description, as the server wrote it Every live Hyperliquid outcome (prediction) market: readable title, category (sports, price, ipo, policy_rate, awards), deadline, each side's price as implied probability with its 24h change, and 24h volume, most traded first. Filter with category and q (text search). On-chain data. Signed. Not investment advice. Price: $0.02 USDC per call via x402 (Base or Solana).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.16.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http annalist https://api.annalist.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__annalist__outcomes_list"
],
"ask": [
"mcp__annalist__perp_full",
"mcp__annalist__crowd_perp",
"mcp__annalist__crowd_states",
"mcp__annalist__crowd_market",
"mcp__annalist__crowd_changes",
"mcp__annalist__crowd_history",
"mcp__annalist__smart_perp",
"mcp__annalist__smart_market",
"mcp__annalist__liq_perp",
"mcp__annalist__liq_market",
"mcp__annalist__hip3_perp",
"mcp__annalist__hip3_market",
"mcp__annalist__outcomes_market",
"mcp__annalist__checks_service",
"mcp__annalist__checks_seller",
"mcp__annalist__checks_top",
"mcp__annalist__checks_changes",
"mcp__annalist__mcp_server",
"mcp__annalist__mcp_top",
"mcp__annalist__mcp_changes",
"mcp__annalist__web_readiness",
"mcp__annalist__web_census",
"mcp__annalist__deps_digest",
"mcp__annalist__commerce_stores",
"mcp__annalist__apis_changes",
"mcp__annalist__apis_api",
"mcp__annalist__ai_retirements",
"mcp__annalist__ai_prices",
"mcp__annalist__ai_changes",
"mcp__annalist__packages_check",
"mcp__annalist__packages_watch",
"mcp__annalist__prices_service",
"mcp__annalist__prices_benchmarks",
"mcp__annalist__hlp_vault",
"mcp__annalist__annalist_about",
"mcp__annalist__annalist_baserates",
"mcp__annalist__annalist_market_sample",
"mcp__annalist__annalist_verify_service",
"mcp__annalist__annalist_verify_mcp",
"mcp__annalist__annalist_verify_store",
"mcp__annalist__annalist_weekly_report",
"mcp__annalist__annalist_track_record"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as annalist. Review it before you use it.
