# `io.usefulapi/dailymed` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.usefulapi/dailymed
- JSON: https://anlyon.dev/api/v1/servers/io.usefulapi/dailymed
- Version: 1.16.4 (active)
- Publisher: io.usefulapi (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/m190/usefulapi-mcp
- Metadata from the official MCP Registry, synced 2026-10-22T11:18:35.241Z

Title and description, as the publisher wrote them:

```untrusted-server-text
DailyMed MCP by usefulapi
Search DailyMed drug labels, SPLs, NDCs and packaging.
```

Scanned 2026-10-22T10:19:19.700Z over streamable-http.

**12 tools: 4 change things and 8 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 4 | ask |
| Only reads | read | 8 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | none |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

- **warn** Annotations that disagree with the tool in `dailymed_label_history` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "dailymed_label_history" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true}; The name "dailymed_label_history" says "label": a word for a change.
```

- **warn** Annotations that disagree with the tool in `dailymed_label_ndcs` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "dailymed_label_ndcs" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true}; The name "dailymed_label_ndcs" says "label": a word for a change.
```

- **warn** Annotations that disagree with the tool in `dailymed_label_media` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "dailymed_label_media" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true}; The name "dailymed_label_media" says "label": a word for a change.
```

- **warn** Annotations that disagree with the tool in `dailymed_label_packaging` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "dailymed_label_packaging" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true}; The name "dailymed_label_packaging" says "label": a word for a change.
```


## Changes things (4)

Creates or changes something that can be changed back. Claude Code: ask.

### `dailymed_label_history`

- The name "dailymed_label_history" says "label": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
List every published version (spl_version + published_date) of a label for a SETID — useful to see how a drug's labeling has changed over time. DailyMed v2: GET /spls/{setid}/history.
```

### `dailymed_label_media`

- The name "dailymed_label_media" says "label": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
List media assets (product/packaging images, with mime_type and URL) for a label's current version, for a SETID. DailyMed v2: GET /spls/{setid}/media.
```

### `dailymed_label_ndcs`

- The name "dailymed_label_ndcs" says "label": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
List the National Drug Codes (package-level NDCs) associated with a label's current version, for a SETID. DailyMed v2: GET /spls/{setid}/ndcs.
```

### `dailymed_label_packaging`

- The name "dailymed_label_packaging" says "label": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Get packaging descriptions plus product names and active ingredients (name + strength) for each product in a label, by SETID. DailyMed v2: GET /spls/{setid}/packaging.
```

## Only reads (8)

Looks things up and changes nothing. Claude Code: allow.

### `dailymed_get_label`

- The name "dailymed_get_label" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Fetch the complete Structured Product Label for a SETID as HL7 v3 SPL XML — the full FDA-approved labeling: indications, dosage, warnings, boxed warning, adverse reactions, active/inactive ingredients, etc. NOTE: DailyMed serves the full document only as XML (there is no JSON form), so this returns raw XML text. Use dailymed_search_labels first to find the setid. DailyMed v2: GET /spls/{setid}.xml.
```

### `dailymed_list_application_numbers`

- The name "dailymed_list_application_numbers" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List FDA application numbers (NDA/ANDA/BLA) with their marketing category code, across all labels (paginated). DailyMed v2: GET /applicationnumbers.
```

### `dailymed_list_drug_classes`

- The name "dailymed_list_drug_classes" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List pharmacologic drug classes linked to labels (code, coding system, type — e.g. EPC Established Pharmacologic Class — and name). DailyMed v2: GET /drugclasses.
```

### `dailymed_list_drug_names`

- The name "dailymed_list_drug_names" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List drug names in DailyMed (name + name_type B=brand/G=generic). Pass drug_name to filter by a substring — a fast way to discover exact spellings before searching labels. DailyMed v2: GET /drugnames.
```

### `dailymed_list_ndcs`

- The name "dailymed_list_ndcs" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List National Drug Codes across all labels in DailyMed (paginated; the full set is large). DailyMed v2: GET /ndcs.
```

### `dailymed_list_rxcuis`

- The name "dailymed_list_rxcuis" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List product-level RxNorm concept identifiers (rxcui + rxstring + rxtty term type) known to DailyMed (paginated). DailyMed v2: GET /rxcuis.
```

### `dailymed_list_uniis`

- The name "dailymed_list_uniis" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List FDA UNII codes and their active-moiety names (paginated). Use a unii_code to filter labels in dailymed_search_labels. DailyMed v2: GET /uniis.
```

### `dailymed_search_labels`

- The name "dailymed_search_labels" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search Structured Product Labels (SPLs) — one label per marketed drug product. Filter by drug name, NDC, RxCUI, UNII, application (NDA/ANDA) number, marketing category, or publish date. Returns setid, title, spl_version and published_date for each match (use the setid with dailymed_get_label and the label_* tools). DailyMed v2: GET /spls.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `dailymed`:

```json
{
  "permissions": {
    "allow": [
      "mcp__dailymed__dailymed_search_labels",
      "mcp__dailymed__dailymed_get_label",
      "mcp__dailymed__dailymed_list_drug_names",
      "mcp__dailymed__dailymed_list_ndcs",
      "mcp__dailymed__dailymed_list_rxcuis",
      "mcp__dailymed__dailymed_list_uniis",
      "mcp__dailymed__dailymed_list_drug_classes",
      "mcp__dailymed__dailymed_list_application_numbers"
    ],
    "ask": [
      "mcp__dailymed__dailymed_label_history",
      "mcp__dailymed__dailymed_label_ndcs",
      "mcp__dailymed__dailymed_label_media",
      "mcp__dailymed__dailymed_label_packaging"
    ],
    "deny": []
  }
}
```