USPS Holiday Shipping Deadlines MCP server
io.github.theluckystrike/usps-holiday-shipping-deadlines-mcptheluckystrikestreamable-httpv1.0.0Scanned
USPS holiday shipping deadlines: Christmas send-by dates, days left, military and international.
3 tools: 1 change things and 2 only read.
- Reads private data · 2
- Reads text others write · 3
- Can send data out · 0
- No findings
With Anlyon
1 tool here changes things. Govern it.
- Anlyon lists the tools and adopts none.
- Each tool you adopt gets approvals and receipts.
- Your agent never holds the key.
A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.
What the USPS Holiday Shipping Deadlines MCP server can do
The USPS Holiday Shipping Deadlines MCP server is published by the GitHub account theluckystrike. It has 3 tools. It can create or change data (1 tool: check_holiday_ship_by_date), but cannot delete data. 2 tools only read.
2 tools read private data (get_usps_holiday_shipping_deadlines and get_military_mail_deadline); 3 tools bring in text other people can write (get_usps_holiday_shipping_deadlines, check_holiday_ship_by_date and get_military_mail_deadline).
None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.
Last scanned Nov 5, 2026, version 1.0.0.
Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
3 tools
Changes things 1Claude Code: ask
check_holiday_ship_by_dateFor a ship date (default today, US Eastern) and a destination, lists each USPS service with its send-by date, days left and whether it is still on time for December 25, and names t…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it For a ship date (default today, US Eastern) and a destination, lists each USPS service with its send-by date, days left and whether it is still on time for December 25, and names the slowest (usually cheapest) service still on time. Destination can be "lower48", a state or territory ("Alaska", "Hawaii", "Puerto Rico", "Guam"), a country ("Canada", "Germany", "Japan"), a USPS region ("Europe") or an APO/FPO/DPO ZIP ("APO 09021").
Annotations the server declares
- title: Can I still ship for Christmas
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 2Show 2 read-only tools
get_military_mail_deadlineUSPS holiday send-by dates for December 25 delivery to one APO/FPO/DPO ZIP code (090-099 AE, 340 AA, 962-966 AP): Ground Advantage, First-Class Mail, Priority Mail and Priority Mai…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_military_mail_deadline" says "get": a word for reading.
What it can reach
- private-dataThe name "get_military_mail_deadline" says "get" and "mail": it reads mail.
- private-dataThe description's first sentence says "mail": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "get_military_mail_deadline" says "get" and "mail": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "mail": it reads inbound email, which other people can write.
Description, as the server wrote it USPS holiday send-by dates for December 25 delivery to one APO/FPO/DPO ZIP code (090-099 AE, 340 AA, 962-966 AP): Ground Advantage, First-Class Mail, Priority Mail and Priority Mail Express Military Service.
Annotations the server declares
- title: Military mail deadline
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_usps_holiday_shipping_deadlinesThe USPS recommended send-by dates for delivery before December 25 for the current holiday season, read at call time from usps.com: Ground Advantage, First-Class Mail, Priority Mai…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_usps_holiday_shipping_deadlines" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "mail": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "mail": it reads inbound email, which other people can write.
Description, as the server wrote it The USPS recommended send-by dates for delivery before December 25 for the current holiday season, read at call time from usps.com: Ground Advantage, First-Class Mail, Priority Mail and Priority Mail Express to the lower 48 and to Alaska, Hawaii, Puerto Rico and territories; First-Class Package International, Priority Mail International and Priority Mail Express International by world region; and APO/FPO/DPO military mail by ZIP group. Includes days left from today.
Annotations the server declares
- title: USPS holiday shipping deadlines
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data2
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write3
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http usps-holiday-shipping-deadlines https://usps-holiday-shipping-deadlines-mcp.lipmichal.workers.dev/mcpclaude mcp add --transport http usps-holiday-shipping-deadlines https://usps-holiday-shipping-deadlines-mcp.lipmichal.workers.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__usps-holiday-shipping-deadlines__get_usps_holiday_shipping_deadlines",
"mcp__usps-holiday-shipping-deadlines__get_military_mail_deadline"
],
"ask": [
"mcp__usps-holiday-shipping-deadlines__check_holiday_ship_by_date"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as usps-holiday-shipping-deadlines. Review it before you use it.
Capability tags behind 3 rules
- mcp__usps-holiday-shipping-deadlines__get_usps_holiday_shipping_deadlines private-data, untrusted-input
- mcp__usps-holiday-shipping-deadlines__check_holiday_ship_by_date untrusted-input
- mcp__usps-holiday-shipping-deadlines__get_military_mail_deadline private-data, untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.github.theluckystrike/usps-holiday-shipping-deadlines-mcp/verify?hash=ef8bdce707b92868375dd40b02805b4c670292caf2968f26375f5a0add4fd683" | jq -e '.changed == false'Pinned hash ef8bdce707b9, from Nov 5, 2026, 18:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.github.theluckystrike/usps-holiday-shipping-deadlines-mcp/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.github.theluckystrike/usps-holiday-shipping-deadlines-mcp)Source: MCP Registry · repository. Synced Nov 5, 2026, 19:18 UTC.
USPS Holiday Shipping Deadlines MCP server: questions and answers
Answered from the scan above, not from the publisher's description.
Is the USPS Holiday Shipping Deadlines MCP server safe?
- No scan can promise that. What its definitions show: 3 tools, 1 of which can change, send or delete something, and 0 findings from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.
Can the USPS Holiday Shipping Deadlines MCP server delete data?
- No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.
Can the USPS Holiday Shipping Deadlines MCP server do things that cannot be undone?
- No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.
What tools does the USPS Holiday Shipping Deadlines MCP server have?
- 3 tools: 1 write, 2 read. check_holiday_ship_by_date, get_usps_holiday_shipping_deadlines and get_military_mail_deadline.
Does the USPS Holiday Shipping Deadlines MCP server send data to outside services?
- None of its tools sends, posts or publishes, or takes a recipient, channel or URL.
Has the USPS Holiday Shipping Deadlines MCP server changed its tools?
- Not since anlyon.dev started tracking it. Last scanned Nov 5, 2026.