# `io.github.shift7667/cheapest-esim` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.shift7667/cheapest-esim
- JSON: https://anlyon.dev/api/v1/servers/io.github.shift7667/cheapest-esim
- Version: 1.0.0 (active)
- Publisher: io.github.shift7667 (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/shift7667/cheapest-esim-mcp
- Metadata from the official MCP Registry, synced 2026-10-21T18:49:20.848Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Cheapest eSIM Korea (최저가e심)
Daily verified travel eSIM/SIM prices: 54 countries, 1-30 day trips, Korean sellers. Free.
```

Scanned 2026-10-21T19:27:15.646Z over streamable-http.

**5 tools: 5 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 0 | ask |
| Only reads | read | 5 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__cheapest-esim__get_seller_profile` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

No check matched anything in these tool definitions.


## Only reads (5)

Looks things up and changes nothing. Claude Code: allow.

### `compare_countries`

- The name "compare_countries" says "compare": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Ranks destination countries by the cheapest unlimited travel eSIM (or SIM) price for the same trip length. 같은 이용 일수에서 나라별 무제한 eSIM(또는 유심) 최저가를 싼 순으로 보여 줍니다 (화면 규칙).
```

### `find_esim_prices`

- The name "find_esim_prices" says "find": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Verified daily prices of travel eSIMs (and physical SIMs) sold to Korean travelers on Naver SmartStore, for a destination country or major city (54 countries, e.g., japan/일본/오사카/tokyo, vietnam/베트남/다낭) and trip length (1-30 days, or Korean trip phrases like "3박 4일", "일주일", "한 달"). Returns sellers ranked by reviews (or price) and the cheapest price under the same rules as the website (pagePrice), plus cheapest daily-cap, total-cap, USIM/eSIM, and adjacent-day (N-1 / N+1 days) alternatives. Plan types: unlimited, daily (N GB/day), total (N GB total). 해외여행 eSIM(또는 실물 유심) 판매처 가격을 나라(또는 주요 도시)·이용 일수별로 조회합니다. 네이버 스마트스토어 판매처의 옵션가를 매일 수집·검증한 값이며, 판매처는 리뷰 많은 순(또는 싼 순), 화면 최저가(pagePrice)는 웹·앱 화면과 같은 규칙입니다.
```

### `get_price_trend`

- The name "get_price_trend" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Daily history of the cheapest unlimited eSIM price for a country and trip length, with a judgement of whether today is cheap compared with the recorded days. Does not forecast. 나라·일수별 무제한 최저가의 최근 일별 기록과 "지금이 싼 편인가" 판단(지난 기록 대비). 앞으로의 가격은 예측하지 않습니다.
```

### `get_seller_profile`

- The name "get_seller_profile" says "get": a word for reading.
- Tag untrusted-input: The description's first sentence says "website": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
How often an eSIM seller changed prices recently (increases/decreases), its sold-out option ratio, the country/day cells where it is cheapest today, and the daily cross-check of its official website prices against Naver (today + 30-day history: match rate, days official site was cheaper). Independent comparison service, not affiliated with sellers. 판매처가 최근 가격을 얼마나 자주 바꿨는지·품절 옵션 비율, 오늘 그 판매처가 최저가인 나라·일수, 그리고 그 판매처 공식 홈페이지 가격과 네이버 값의 매일 교차 확인(오늘 + 최근 30일 이력). 최저가e심은 판매처와 관계없는 비교 서비스입니다.
```

### `list_countries`

- The name "list_countries" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Destination countries covered (key, Korean name, number of sellers, 3-day unlimited eSIM cheapest price). 가격을 비교하는 54개국 목록 (key·한글 이름·판매처 수·3일 무제한 최저가).
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `cheapest-esim`:

```json
{
  "permissions": {
    "allow": [
      "mcp__cheapest-esim__find_esim_prices",
      "mcp__cheapest-esim__compare_countries",
      "mcp__cheapest-esim__get_price_trend",
      "mcp__cheapest-esim__get_seller_profile",
      "mcp__cheapest-esim__list_countries"
    ],
    "ask": [],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__cheapest-esim__get_seller_profile`: untrusted-input

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-10-22T15:05:31.299Z, unchanged since 2026-10-22T15:05:31.299Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `0` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `none` |
| Authorization servers | `none` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `not observed` |
| Client ID metadata documents | `not observed` |