Skip to content
anlyon.devby Anlyon

CXT Software MCP by usefulapi

io.usefulapi/cxt-softwareusefulapi.iostreamable-httpv1.0.0Scanned

Track and search CXT courier orders, check drivers, propose and save order and route plans.

14 tools: 2 can delete or cancel things, 5 change things and 7 only read.

Tools: 2 delete, 0 irreversible, 5 write, 7 read.
  • Reads private data · 0
  • Reads text others write · 14
  • Can send data out · 0
  • 5 findings

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

14 tools

Deletes or cancels 2Claude Code: deny
  • cxt_save_order_planCOMMIT an order plan: assigns the orders to the drivers and DISPATCHES them (drivers receive the work in the driver app; customers may be notified by the system's own status rules)…Reads text others writeNo findings

    Why it is in this group

    • The name "cxt_save_order_plan" says "save": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    COMMIT an order plan: assigns the orders to the drivers and DISPATCHES them (drivers receive the work in the driver app; customers may be notified by the system's own status rules). Use only after the user has seen and approved the plan from cxt_plan_orders / cxt_optimize_order_plan. Pass each driver's stops from the plan reply: id, type (PICKUP or DELIVERY), sequence and from (the scheduled time). Response is empty on success (204). Needs ITINERARY_PLANNING_ACCESS. POST /v3/ItineraryPlanning/Orders/Save.

    Annotations the server declares

    • title: Save order plan (dispatch orders to drivers)
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • cxt_save_route_planCOMMIT a route plan for one route date: moves and re-sequences route stops as in the plan and DISPATCHES the changed routes to drivers.Reads text others writeNo findings

    Why it is in this group

    • The name "cxt_save_route_plan" says "save": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    COMMIT a route plan for one route date: moves and re-sequences route stops as in the plan and DISPATCHES the changed routes to drivers. Use only after the user has seen and approved the plan from cxt_plan_routes / cxt_optimize_route_plan. Pass each route's stops from the plan reply: id, sequence and from (the scheduled time). Response is empty on success (204). Needs ITINERARY_PLANNING_ACCESS. POST /v3/ItineraryPlanning/Routes/{postDate}/Save.

    Annotations the server declares

    • title: Save route plan (reassign route stops)
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Changes things 5Claude Code: ask
  • cxt_optimize_order_planRe-optimize a single driver's plan after manual changes (proposal only: nothing is dispatched until cxt_save_order_plan).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Re-optimize a single driver's plan after manual changes (proposal only: nothing is dispatched until cxt_save_order_plan). Needs ITINERARY_PLANNING_ACCESS. POST /v3/ItineraryPlanning/Orders/Optimize.

    Annotations the server declares

    • title: Re-optimize one driver's order plan
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_optimize_route_planRe-optimize a single route after manual changes (proposal only: nothing changes until cxt_save_route_plan).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Re-optimize a single route after manual changes (proposal only: nothing changes until cxt_save_route_plan). Needs ITINERARY_PLANNING_ACCESS. POST /v3/ItineraryPlanning/Routes/{postDate}/Optimize.

    Annotations the server declares

    • title: Re-optimize one route
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_plan_ordersGenerate a proposed itinerary that assigns on-demand orders to drivers (pickup and delivery stops in sequence, with times, distance and unassigned stops).Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "cxt_plan_orders" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a proposed itinerary that assigns on-demand orders to drivers (pickup and delivery stops in sequence, with times, distance and unassigned stops). This only PROPOSES a plan: nothing is dispatched until cxt_save_order_plan is called. Needs ITINERARY_PLANNING_ACCESS. Check the limits with cxt_get_planning_limits first. POST /v3/ItineraryPlanning/Orders.

    Annotations the server declares

    • title: Plan orders onto drivers
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_plan_routesGenerate a proposed re-sequencing of the stops of existing routes for one route date (stops move between the output routes, with times, distance and unassigned stops).Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "cxt_plan_routes" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a proposed re-sequencing of the stops of existing routes for one route date (stops move between the output routes, with times, distance and unassigned stops). Proposal only: nothing changes until cxt_save_route_plan is called. Needs ITINERARY_PLANNING_ACCESS. POST /v3/ItineraryPlanning/Routes/{postDate}.

    Annotations the server declares

    • title: Plan route stops
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_track_shipmentsTrack orders and route stops by tracking number: matches a parcel reference, a parcel item barcode, or Reference1/Reference2 of an order or route stop.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...p login this endpoint is called without credentials (CXT lists only internet users and anon..."

      What this check looks for
    Description, as the server wrote it
    Track orders and route stops by tracking number: matches a parcel reference, a parcel item barcode, or Reference1/Reference2 of an order or route stop. Returns shipment summaries with status events and proof of delivery as far as the caller's permissions allow: an INET login sees the most detail; with an Operations App login this endpoint is called without credentials (CXT lists only internet users and anonymous callers for it), which returns the limited public tracking view. Costs 1 API credit with the vendor. POST /v2/Shipments/Summaries.

    Annotations the server declares

    • title: Track shipments
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Only reads 7Show 7 read-only tools
  • cxt_get_dispatch_orderOne on-demand order with itemized charges, as an OPERATIONS APP (X Dispatch) user sees it (sign in with user type XDISPATCH): addresses, times, driver, status events, proof of deli…Reads text others writeNo findings

    Why it is in this group

    • The name "cxt_get_dispatch_order" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One on-demand order with itemized charges, as an OPERATIONS APP (X Dispatch) user sees it (sign in with user type XDISPATCH): addresses, times, driver, status events, proof of delivery. Costs 1 API credit with the vendor. GET /v2/Dispatch/Orders/{onDemandOrderId}.

    Annotations the server declares

    • title: Get dispatch order
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_get_orderOne on-demand order with its status, confirmation, pickup, delivery and proof-of-delivery details, as an INTERNET user sees it (sign in with user type INET).Reads text others writeNo findings

    Why it is in this group

    • The name "cxt_get_order" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "internet": it reads web pages, which anyone can write.
    Description, as the server wrote it
    One on-demand order with its status, confirmation, pickup, delivery and proof-of-delivery details, as an INTERNET user sees it (sign in with user type INET). Optionally with the itemized charges. Operations App users should use cxt_get_dispatch_order. Costs 1 API credit with the vendor. GET /v2/Orders/{orderId}/{includeItemizedCharges}.

    Annotations the server declares

    • title: Get order
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_get_planning_limitsThe itinerary planning limits of this X Dispatch system: maxAllowedStops (shipments x 2), maxAllowedLocations and maxAllowedPlaceholders.Reads text others writeNo findings

    Why it is in this group

    • The name "cxt_get_planning_limits" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The itinerary planning limits of this X Dispatch system: maxAllowedStops (shipments x 2), maxAllowedLocations and maxAllowedPlaceholders. Needs an Operations App user with the ITINERARY_PLANNING_ACCESS permission. GET /v3/ItineraryPlanning/Settings.

    Annotations the server declares

    • title: Get itinerary planning limits
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_list_recent_ordersThe most recent orders of the signed-in INTERNET user (user type INET; the orders of their account).Reads text others writeNo findings

    Why it is in this group

    • The name "cxt_list_recent_orders" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "internet": it reads web pages, which anyone can write.
    Description, as the server wrote it
    The most recent orders of the signed-in INTERNET user (user type INET; the orders of their account). Costs 1 API credit with the vendor. POST /v2/Shipments/Summaries with numRecentOrders.

    Annotations the server declares

    • title: List recent orders
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_search_shipmentsSearch orders and route stops by place, address, city, state, postal code, order template, or only by date range.Reads text others write1 finding

    Why it is in this group

    • The name "cxt_search_shipments" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...p login this endpoint is called without credentials (CXT lists only internet users and anon..."

      What this check looks for
    Description, as the server wrote it
    Search orders and route stops by place, address, city, state, postal code, order template, or only by date range. tracking_type says which field search_criteria is matched against: Location (origin/destination or stop name), Address, City, State, Postal (zip or zip+4), Template (order template name), Tracking (references/barcodes) or DateOnly (no criteria: everything between begin_date and end_date). Returns shipment summaries, up to 1000 per page. An INET login sees the most detail; with an Operations App login this endpoint is called without credentials (CXT lists only internet users and anonymous callers for it), so the view is limited. Costs 1 API credit with the vendor. POST /v2/Shipments/Summaries.

    Annotations the server declares

    • title: Search orders and route stops
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_validate_driver_for_ordersCheck one driver against specific orders: vehicle violations, HR violations and capability violations (for example Hazmat or Lift Gate that the driver lacks).Reads text others writeNo findings

    Why it is in this group

    • The name "cxt_validate_driver_for_orders" says "validate": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Check one driver against specific orders: vehicle violations, HR violations and capability violations (for example Hazmat or Lift Gate that the driver lacks). Changes nothing. Needs ITINERARY_PLANNING_ACCESS. POST /v3/ItineraryPlanning/Orders/Drivers/{driverId}/Validate.

    Annotations the server declares

    • title: Validate a driver for orders
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • cxt_validate_driversCheck whether drivers are available to be planned: for each driver id, vehicle violations (for example an expired inspection) and HR violations (for example not scheduled), each wi…Reads text others write1 finding

    Why it is in this group

    • The name "cxt_validate_drivers" says "validate": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 45-character base64 string.

      Matched text

      description: "...ANNING_ACCESS. POST /v3/ItineraryPlanning/Orders/Drivers/Validate."

      What this check looks for
    Description, as the server wrote it
    Check whether drivers are available to be planned: for each driver id, vehicle violations (for example an expired inspection) and HR violations (for example not scheduled), each with isBypassable. Changes nothing. Needs ITINERARY_PLANNING_ACCESS. POST /v3/ItineraryPlanning/Orders/Drivers/Validate.

    Annotations the server declares

    • title: Validate drivers for planning
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write14
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

3 warn2 info
  • Warncxt_validate_drivers

    The description contains a 45-character base64 string.

    Matched text

    description: "...ANNING_ACCESS. POST /v3/ItineraryPlanning/Orders/Drivers/Validate."

    What this check looks for
  • Warncxt_plan_orders

    The server marks "cxt_plan_orders" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

    What this check looks for
  • Warncxt_plan_routes

    The server marks "cxt_plan_routes" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

    What this check looks for
  • Infocxt_track_shipments

    The description mentions "credentials".

    Matched text

    description: "...p login this endpoint is called without credentials (CXT lists only internet users and anon..."

    What this check looks for
  • Infocxt_search_shipments

    The description mentions "credentials".

    Matched text

    description: "...p login this endpoint is called without credentials (CXT lists only internet users and anon..."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cxt-software https://cxt-software.usefulapi.io/mcp
claude mcp add --transport http cxt-software https://cxt-software.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cxt-software__cxt_search_shipments",
      "mcp__cxt-software__cxt_list_recent_orders",
      "mcp__cxt-software__cxt_get_order",
      "mcp__cxt-software__cxt_get_dispatch_order",
      "mcp__cxt-software__cxt_get_planning_limits",
      "mcp__cxt-software__cxt_validate_drivers",
      "mcp__cxt-software__cxt_validate_driver_for_orders"
    ],
    "ask": [
      "mcp__cxt-software__cxt_track_shipments",
      "mcp__cxt-software__cxt_plan_orders",
      "mcp__cxt-software__cxt_optimize_order_plan",
      "mcp__cxt-software__cxt_plan_routes",
      "mcp__cxt-software__cxt_optimize_route_plan"
    ],
    "deny": [
      "mcp__cxt-software__cxt_save_order_plan",
      "mcp__cxt-software__cxt_save_route_plan"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as cxt-software. Review it before you use it.

Capability tags behind 14 rules
  • mcp__cxt-software__cxt_track_shipments untrusted-input
  • mcp__cxt-software__cxt_search_shipments untrusted-input
  • mcp__cxt-software__cxt_list_recent_orders untrusted-input
  • mcp__cxt-software__cxt_get_order untrusted-input
  • mcp__cxt-software__cxt_get_dispatch_order untrusted-input
  • mcp__cxt-software__cxt_get_planning_limits untrusted-input
  • mcp__cxt-software__cxt_validate_drivers untrusted-input
  • mcp__cxt-software__cxt_validate_driver_for_orders untrusted-input
  • mcp__cxt-software__cxt_plan_orders untrusted-input
  • mcp__cxt-software__cxt_optimize_order_plan untrusted-input
  • mcp__cxt-software__cxt_plan_routes untrusted-input
  • mcp__cxt-software__cxt_optimize_route_plan untrusted-input
  • mcp__cxt-software__cxt_save_order_plan untrusted-input
  • mcp__cxt-software__cxt_save_route_plan untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/cxt-software/verify?hash=cff676da3f7bd17db66ce735934d245a9e5bf0411d71f69ef82907d70858a983" | jq -e '.changed == false'

Pinned hash cff676da3f7b, from Oct 24, 2026, 16:21 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/cxt-software/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.usefulapi/cxt-software
[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/cxt-software.svg)](https://anlyon.dev/servers/io.usefulapi/cxt-software)

Source: MCP Registry · repository. Synced Oct 24, 2026, 17:17 UTC.