Skip to content
anlyon.devby Anlyon

io.github.sudomichael/mcpserverlist-mcp

io.github.sudomichael/mcpserverlist-mcpsudomichaelstreamable-httpv0.1.0Scanned

Check if your MCP server is ready for MCP directories, then get it submitted.

35 tools: 10 can delete or cancel things, 1 do something that can't be undone, 7 change things and 17 only read.

Tools: 10 delete, 1 irreversible, 7 write, 17 read.
  • Reads private data · 4
  • Reads text others write · 12
  • Can send data out · 3
  • 7 findings

Anlyon alternative

18 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

35 tools

Deletes or cancels 10Claude Code: deny
  • create_accountAnonymous signup returns a new account API key once.1 finding

    Why it is in this group

    • The name "create_account" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ely; email is not an access or recovery credential."

      What this check looks for
    Description, as the server wrote it
    Anonymous signup returns a new account API key once. Save it securely; email is not an access or recovery credential.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • create_checkoutRequires API key, launch ID and stable purchase key.Reads text others writeNo findings

    Why it is in this group

    • The name "create_checkout" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Requires API key, launch ID and stable purchase key. Human payment fallback for the saved immutable service fee (current new-launch offer $49); only verified paid settlement queues jobs. This tool does not autonomously pay.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • create_launchRequires API key and explicit owner authorization of the displayed preflight plans.No findings

    Why it is in this group

    • The name "create_launch" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Requires API key and explicit owner authorization of the displayed preflight plans. Creates an unpaid draft bound to a ready owned preflight; this call does not pay. Verified payment later automatically queues the authorized submissions.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • create_preparation_pull_requestRequires explicit owner approval of the exact displayed patch digest.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "create_preparation_pull_request" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "create_preparation_pull_request" says "create" and "pull request": it writes something other people read.
    Description, as the server wrote it
    Requires explicit owner approval of the exact displayed patch digest. Creates a branch and PR in the source repository, never merges or publishes. After uncertain writes, only reconciles matching existing PRs; never blindly retries writes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • create_serverRequires API key.No findings

    Why it is in this group

    • The name "create_server" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Requires API key. Save accurate public profile fields before checking all selected destination prerequisites. Smithery currently needs a public unauthenticated Streamable HTTP endpoint and owned namespace/server name.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • prepare_repositoryFree owner-authenticated inspection at a pinned GitHub revision.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free owner-authenticated inspection at a pinned GitHub revision. Returns exact proposed file diffs, preservation warnings and approval digest. No external writes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • replace_launch_connectionAfter the owner securely uploads a fresh connection, verify repository ownership and replace the same already-authorized provider for a paid launch.Reads text others writeNo findings

    Why it is in this group

    • The name "replace_launch_connection" says "replace": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    After the owner securely uploads a fresh connection, verify repository ownership and replace the same already-authorized provider for a paid launch. Cannot retry uncertain writes or change submission plans.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • reply_to_service_caseAdd a customer reply or acknowledgement.Can send data out1 finding

    Why it is in this group

    • The name "reply_to_service_case" says "reply": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • outboundThe name "reply_to_service_case" says "reply": it sends or publishes something to other people.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...reply or acknowledgement. Never include credentials or private payloads."

      What this check looks for
    Description, as the server wrote it
    Add a customer reply or acknowledgement. Never include credentials or private payloads.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • revoke_connectionRequires explicit owner authorization.No findings

    Why it is in this group

    • The name "revoke_connection" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Requires explicit owner authorization. Revoking a connection prevents jobs using it from completing until reconnected.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • run_preflightRequires API key.Reads text others writeNo findings

    Why it is in this group

    • The name "run_preflight" says "run": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Requires API key. Read-only provider checks produce an immutable 30-minute report, exact public payloads, blockers and remedies. No external submission or charge occurs. Unsupported/paused destinations cannot be bought.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Can't be undone 1Claude Code: ask
  • payment_instructionsRead-only protocol instructions for an approved launch_id.1 finding

    Why it is in this group

    • The name "payment_instructions" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "payment_instructions" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "payment_instructions" says "payment": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Read-only protocol instructions for an approved launch_id. No payment is made by this tool. Obtain owner authorization for the saved launch amount (current new-launch offer $49); payment starts automatic submissions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 7Claude Code: ask
  • answer_launch_questionsSave explicit public answers to the questions in an owned intake.No findings

    Why it is in this group

    • The description's first verb is "save": a word for a change.
    Description, as the server wrote it
    Save explicit public answers to the questions in an owned intake. No upstream mutation or payment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • authorize_publisher_taskOnly use within existing explicit owner authority covering this exact task revision, digest, submit/publish action and truthful attestations; obtain missing authority first.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Only use within existing explicit owner authority covering this exact task revision, digest, submit/publish action and truthful attestations; obtain missing authority first. Records a guarded grant, not proof of submission, approval or publication. Does not pay.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • check_launch_coverageCheck all implemented destinations with read-only provider requests, remove blocked destinations and preserve prerequisites.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Check all implemented destinations with read-only provider requests, remove blocked destinations and preserve prerequisites. Destinations whose topic or eligibility does not fit this server come back as state not_applicable (not a failure; reasons say how to set directory_categories if it fits). Saves the exact final report. At least one qualifying new submission required to launch; no charge or upstream writes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • check_repositoryAnonymous free diagnostic for a public GitHub repository.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Anonymous free diagnostic for a public GitHub repository. This is not the per-destination purchase preflight.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • create_publisher_taskFree preparation for Claude/OpenAI owner review.Can send data out1 finding

    Why it is in this group

    • The name "create_publisher_task" says "create": a word for a change.

    What it can reach

    • outboundThe input takes a destination (input.channel): what the tool writes goes there.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ry or adds paid coverage. No secrets or credential uploads."

      What this check looks for
    Description, as the server wrote it
    Free preparation for Claude/OpenAI owner review. Saves a field packet and eligible package; never submits, proves delivery or adds paid coverage. No secrets or credential uploads.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • import_repositoryInspect a public repository and save an owned launch intake.Reads text others writeNo findings

    Why it is in this group

    • The name "import_repository" says "import": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Inspect a public repository and save an owned launch intake. Infers evidenced public facts and asks only missing facts. No upstream writes or payment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • mark_form_task_submittedRecords only that the owner says they submitted the directory form themselves.No findings

    Why it is in this group

    • The name "mark_form_task_submitted" says "mark": a word for a change.
    Description, as the server wrote it
    Records only that the owner says they submitted the directory form themselves. Not proof of acceptance or listing.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 17Show 17 read-only tools
  • connection_instructionsRead-only instructions for direct HTTPS credential upload.Reads private dataReads text others write2 findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "read" and "credential": it reads secrets.
    • untrusted-inputThe description's first sentence says "read" and "http": it reads web pages, which anyone can write.

    Findings

    • Info

      The title mentions "credentials".

      Matched text

      title: "Connect owner credentials securely"

      What this check looks for
    • Info

      The description mentions "credential".

      Matched text

      description: "Read-only instructions for direct HTTPS credential upload. Never put third-party secrets i..."

      What this check looks for
    Description, as the server wrote it
    Read-only instructions for direct HTTPS credential upload. Never put third-party secrets in chat or MCP tool arguments.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_accountRequires API key.No findings

    Why it is in this group

    • The name "get_account" says "get": a word for reading.
    Description, as the server wrote it
    Requires API key. Read account and configured billing/execution availability. Generic launch credits are not sold.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_launchRequires API key.No findings

    Why it is in this group

    • The name "get_launch" says "get": a word for reading.
    Description, as the server wrote it
    Requires API key. Read owned jobs, real provider IDs, evidence, ingestion waits and operator-attention states. Submitted is not approved; listed requires matching provider evidence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_launch_intakeRead your persisted profile, evidence, missing questions and next action.No findings

    Why it is in this group

    • The name "get_launch_intake" says "get": a word for reading.
    Description, as the server wrote it
    Read your persisted profile, evidence, missing questions and next action.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_launch_overviewRequires API key.No findings

    Why it is in this group

    • The name "get_launch_overview" says "get": a word for reading.
    Description, as the server wrote it
    Requires API key. One owner-scoped summary of a launch: totals, the refund-commitment promise (qualifying, listed, needed, on track), what is waiting on the owner, and every destination with state, typical review time, links and timeline. Listed always means verified; submitted is not listed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_orderRequires API key.No findings

    Why it is in this group

    • The name "get_order" says "get": a word for reading.
    Description, as the server wrote it
    Requires API key. Returns your owned order and bound launch after payment or timeout. Do not purchase again while outcome is unknown.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_preflightRequires API key.No findings

    Why it is in this group

    • The name "get_preflight" says "get": a word for reading.
    Description, as the server wrote it
    Requires API key. Review every target, blocker and proposed public payload with the owner before authorizing a paid launch.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_publisher_taskRead the exact owned task revision, digest, missing owner/provider actions and optional authenticated ZIP download link.1 finding

    Why it is in this group

    • The name "get_publisher_task" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ted ZIP download link. No raw binary or credentials are returned through MCP."

      What this check looks for
    Description, as the server wrote it
    Read the exact owned task revision, digest, missing owner/provider actions and optional authenticated ZIP download link. No raw binary or credentials are returned through MCP.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_repository_preparationRead owned pinned patch, warnings and digest before authorizing a PR within existing owner authority or requesting missing approval.Reads private dataNo findings

    Why it is in this group

    • The name "get_repository_preparation" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_repository_preparation" says "get" and "repository": it reads repositories.
    Description, as the server wrote it
    Read owned pinned patch, warnings and digest before authorizing a PR within existing owner authority or requesting missing approval.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_service_caseRead an owned review with operator updates and resolution evidence.Reads text others writeNo findings

    Why it is in this group

    • The name "get_service_case" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "read" and "review": it reads comments, which other people can write.
    Description, as the server wrote it
    Read an owned review with operator updates and resolution evidence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_connectionsRequires API key.No findings

    Why it is in this group

    • The name "list_connections" says "list": a word for reading.
    Description, as the server wrote it
    Requires API key. Returns owned connection IDs, providers, expiry and revocation metadata. Never returns plaintext or ciphertext.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_directoriesAnonymous catalog with source references and requirements.Reads private dataNo findings

    Why it is in this group

    • The name "list_directories" says "list": a word for reading.

    What it can reach

    • private-dataThe name "list_directories" says "list" and "directory": it reads files.
    Description, as the server wrote it
    Anonymous catalog with source references and requirements. Discovery does not establish purchase eligibility; run a full authenticated preflight.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_form_tasksRead free prefilled packets (submit URL, exact field values, which free option to choose) for directories that only accept a web form.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "list_form_tasks" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "read" and "directory": it reads files.
    • untrusted-inputThe description's first sentence says "read" and "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Read free prefilled packets (submit URL, exact field values, which free option to choose) for directories that only accept a web form. The owner submits each form; nothing is sent, paid or verified by this service.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_launchesRequires API key.No findings

    Why it is in this group

    • The name "list_launches" says "list": a word for reading.
    Description, as the server wrote it
    Requires API key. Read durable execution and provider result states.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_publisher_tasksRead owned preparation tasks and operator journal status; pending provider work is not fulfillment.No findings

    Why it is in this group

    • The name "list_publisher_tasks" says "list": a word for reading.
    Description, as the server wrote it
    Read owned preparation tasks and operator journal status; pending provider work is not fulfillment.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_serversRequires API key; returns only your saved profiles.No findings

    Why it is in this group

    • The name "list_servers" says "list": a word for reading.
    Description, as the server wrote it
    Requires API key; returns only your saved profiles.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_service_casesRead owned delivery reviews, assigned operator, due date and fulfillment summary.Reads text others writeNo findings

    Why it is in this group

    • The name "list_service_cases" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "read" and "review": it reads comments, which other people can write.
    Description, as the server wrote it
    Read owned delivery reviews, assigned operator, due date and fulfillment summary.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

144 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data4
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write12
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__mcpserverlist__create_preparation_pull_request",
      "mcp__mcpserverlist__create_publisher_task",
      "mcp__mcpserverlist__reply_to_service_case"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn6 info
Show 1 more finding

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http mcpserverlist https://mcpserverlist.io/mcp
claude mcp add --transport http mcpserverlist https://mcpserverlist.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__mcpserverlist__list_directories",
      "mcp__mcpserverlist__get_account",
      "mcp__mcpserverlist__connection_instructions",
      "mcp__mcpserverlist__list_connections",
      "mcp__mcpserverlist__list_servers",
      "mcp__mcpserverlist__get_launch_intake",
      "mcp__mcpserverlist__get_repository_preparation",
      "mcp__mcpserverlist__list_publisher_tasks",
      "mcp__mcpserverlist__get_publisher_task",
      "mcp__mcpserverlist__list_form_tasks",
      "mcp__mcpserverlist__get_preflight",
      "mcp__mcpserverlist__list_service_cases",
      "mcp__mcpserverlist__get_service_case",
      "mcp__mcpserverlist__get_order",
      "mcp__mcpserverlist__list_launches",
      "mcp__mcpserverlist__get_launch",
      "mcp__mcpserverlist__get_launch_overview"
    ],
    "ask": [
      "mcp__mcpserverlist__check_repository",
      "mcp__mcpserverlist__import_repository",
      "mcp__mcpserverlist__answer_launch_questions",
      "mcp__mcpserverlist__check_launch_coverage",
      "mcp__mcpserverlist__create_publisher_task",
      "mcp__mcpserverlist__authorize_publisher_task",
      "mcp__mcpserverlist__mark_form_task_submitted",
      "mcp__mcpserverlist__payment_instructions"
    ],
    "deny": [
      "mcp__mcpserverlist__create_account",
      "mcp__mcpserverlist__revoke_connection",
      "mcp__mcpserverlist__create_server",
      "mcp__mcpserverlist__prepare_repository",
      "mcp__mcpserverlist__create_preparation_pull_request",
      "mcp__mcpserverlist__run_preflight",
      "mcp__mcpserverlist__create_launch",
      "mcp__mcpserverlist__create_checkout",
      "mcp__mcpserverlist__reply_to_service_case",
      "mcp__mcpserverlist__replace_launch_connection"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as mcpserverlist. Review it before you use it.

Capability tags behind 16 rules
  • mcp__mcpserverlist__list_directories private-data
  • mcp__mcpserverlist__check_repository untrusted-input
  • mcp__mcpserverlist__connection_instructions private-data, untrusted-input
  • mcp__mcpserverlist__import_repository untrusted-input
  • mcp__mcpserverlist__check_launch_coverage untrusted-input
  • mcp__mcpserverlist__prepare_repository untrusted-input
  • mcp__mcpserverlist__get_repository_preparation private-data
  • mcp__mcpserverlist__create_preparation_pull_request untrusted-input, outbound
  • mcp__mcpserverlist__create_publisher_task outbound
  • mcp__mcpserverlist__list_form_tasks private-data, untrusted-input
  • mcp__mcpserverlist__run_preflight untrusted-input
  • mcp__mcpserverlist__create_checkout untrusted-input
  • mcp__mcpserverlist__list_service_cases untrusted-input
  • mcp__mcpserverlist__get_service_case untrusted-input
  • mcp__mcpserverlist__reply_to_service_case outbound
  • mcp__mcpserverlist__replace_launch_connection untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.sudomichael/mcpserverlist-mcp/verify?hash=71597c9d83c72f5d9a0d7f28c09aa931da10ba617cc775082e2a7d01ac55de1a" | jq -e '.changed == false'

Pinned hash 71597c9d83c7, from Nov 4, 2026, 22:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.sudomichael/mcpserverlist-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.sudomichael/mcpserverlist-mcp
[![anlyon.dev](https://anlyon.dev/badge/io.github.sudomichael/mcpserverlist-mcp.svg)](https://anlyon.dev/servers/io.github.sudomichael/mcpserverlist-mcp)

Source: MCP Registry · repository. Synced Nov 4, 2026, 22:18 UTC.