Skip to content
anlyon.devby Anlyon

Upper Route Planner MCP by usefulapi

io.usefulapi/upper-route-plannerusefulapi.iostreamable-httpv1.0.0Scanned

Read Upper drivers and stops; create and optimize routes, assign drivers, share routes to the app.

12 tools: 4 can delete or cancel things, 3 change things and 5 only read.

Tools: 4 delete, 0 irreversible, 3 write, 5 read.
  • Reads private data · 2
  • Reads text others write · 12
  • Can send data out · 1
  • No findings

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

12 tools

Deletes or cancels 4Claude Code: deny
  • upper_assign_driversWRITE: assign one or more drivers (ids from upper_list_drivers) to a route, replacing the route's drivers.Reads text others writeNo findings

    Why it is in this group

    • The name "upper_assign_drivers" says "assign": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: assign one or more drivers (ids from upper_list_drivers) to a route, replacing the route's drivers. Every id must be an active driver on the team. If the route was already optimized it is reset to unoptimized (needs_optimization: true), so run upper_optimize_route again. POST /ext-assign-drivers.

    Annotations the server declares

    • title: Assign drivers to a route
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • upper_optimize_routeWRITE: start optimizing a route's stop order.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "write": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: start optimizing a route's stop order. The route needs at least one stop and one assigned driver (upper_assign_drivers). It runs asynchronously: this returns status pending and a queue_id, then poll upper_get_optimization_status. If a job is already running, that job is returned. POST /ext-optimize-route.

    Annotations the server declares

    • title: Optimize route
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • upper_update_routeWRITE: change settings of an existing route (name, date, optimize_for, units, pickup_settings, service_time).Reads text others writeNo findings

    Why it is in this group

    • The name "upper_update_route" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: change settings of an existing route (name, date, optimize_for, units, pickup_settings, service_time). Only the fields you pass change. POST /ext-update-route.

    Annotations the server declares

    • title: Update route
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • upper_update_stopWRITE: change an existing stop; only the fields you pass change.Reads text others writeNo findings

    Why it is in this group

    • The name "upper_update_stop" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: change an existing stop; only the fields you pass change. A new address is re-geocoded (city/state/zipcode you pass with it are ignored); city/state/zipcode apply only without an address. Passing route_id moves the stop to that route. Editing a stop on an optimized route flags the route for re-optimization; stops on an active route cannot be edited. POST /ext-update-stop.

    Annotations the server declares

    • title: Update stop
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Changes things 3Claude Code: ask
  • upper_create_routeWRITE: create a new, empty route (name, date, optimization preference, units, pickup sequencing, service time).Reads text others writeNo findings

    Why it is in this group

    • The name "upper_create_route" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: create a new, empty route (name, date, optimization preference, units, pickup sequencing, service time). Omitted settings fall back to the account's defaults. Returns the new route_id; add stops with upper_create_stop. Calling it twice creates two routes. POST /ext-create-route.

    Annotations the server declares

    • title: Create route
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • upper_create_stopWRITE: create a stop.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "upper_create_stop" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.phone): what the tool writes goes there.
    Description, as the server wrote it
    WRITE: create a stop. The address is geocoded by Upper. Pass route_id to put it on a route (the route must not be active/in progress; an optimized route is flagged for re-optimization); omit it for an unscheduled stop. Calling it twice creates two stops. POST /ext-create-stop.

    Annotations the server declares

    • title: Create stop
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • upper_share_route_to_driversWRITE: push a route to the drivers' mobile app NOW, which sends each driver a notification.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "write": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: push a route to the drivers' mobile app NOW, which sends each driver a notification. Without driver_ids the route's assigned drivers are used; with them, every id must be an active driver on the team. Sending twice notifies twice. Confirm with the user before calling. POST /ext-share-to-driver.

    Annotations the server declares

    • title: Share route to drivers
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 5Show 5 read-only tools
  • upper_get_capacity_fieldsThe workspace's five capacity-field slots (capacity1 - capacity5: label, unit, enabled) used for load planning.Reads text others writeNo findings

    Why it is in this group

    • The name "upper_get_capacity_fields" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The workspace's five capacity-field slots (capacity1 - capacity5: label, unit, enabled) used for load planning. GET /ext-get-capacity-fields.

    Annotations the server declares

    • title: Get capacity fields
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • upper_get_custom_fieldsThe workspace's five stop custom-field slots (custom1 - custom5: type, label, enabled, required) and which are enabled.Reads text others writeNo findings

    Why it is in this group

    • The name "upper_get_custom_fields" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The workspace's five stop custom-field slots (custom1 - custom5: type, label, enabled, required) and which are enabled. Needs the Custom fields feature in the Upper plan. GET /ext-get-custom-fields.

    Annotations the server declares

    • title: Get stop custom fields
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • upper_get_optimization_statusCheck whether a route is optimized: status is optimized, pending (still running) or not_optimized, plus the queue_id of the last job.Reads text others writeNo findings

    Why it is in this group

    • The name "upper_get_optimization_status" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Check whether a route is optimized: status is optimized, pending (still running) or not_optimized, plus the queue_id of the last job. Poll this after upper_optimize_route. GET /ext-optimization-status.

    Annotations the server declares

    • title: Get route optimization status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • upper_list_driversList the active drivers on the Upper team that owns the API token: id, name, email and phone.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "upper_list_drivers" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    List the active drivers on the Upper team that owns the API token: id, name, email and phone. Use the ids with upper_assign_drivers and upper_share_route_to_drivers. GET /ext-get-drivers.

    Annotations the server declares

    • title: List drivers
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • upper_list_stopsList the team's stops in optimized order: address, coordinates, contact, time window, duration, status, route_id and custom ids.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "upper_list_stops" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List the team's stops in optimized order: address, coordinates, contact, time window, duration, status, route_id and custom ids. Pass route_id for one route (optionally scheduled=true/false); pass unscheduled=true (without route_id) for stops not on any route; with no filter all active stops are returned. Upper has no paging, so this tool pages locally: `limit` stops (default 100, max 500) starting at `offset`; the reply says if more remain (truncated, next_offset). GET /ext-get-stops.

    Annotations the server declares

    • title: List stops
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

24 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data2
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write12
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__upper-route-planner__upper_create_stop"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http upper-route-planner https://upper-route-planner.usefulapi.io/mcp
claude mcp add --transport http upper-route-planner https://upper-route-planner.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__upper-route-planner__upper_list_drivers",
      "mcp__upper-route-planner__upper_list_stops",
      "mcp__upper-route-planner__upper_get_optimization_status",
      "mcp__upper-route-planner__upper_get_custom_fields",
      "mcp__upper-route-planner__upper_get_capacity_fields"
    ],
    "ask": [
      "mcp__upper-route-planner__upper_create_route",
      "mcp__upper-route-planner__upper_create_stop",
      "mcp__upper-route-planner__upper_share_route_to_drivers"
    ],
    "deny": [
      "mcp__upper-route-planner__upper_update_route",
      "mcp__upper-route-planner__upper_update_stop",
      "mcp__upper-route-planner__upper_assign_drivers",
      "mcp__upper-route-planner__upper_optimize_route"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as upper-route-planner. Review it before you use it.

Capability tags behind 12 rules
  • mcp__upper-route-planner__upper_list_drivers private-data, untrusted-input
  • mcp__upper-route-planner__upper_list_stops private-data, untrusted-input
  • mcp__upper-route-planner__upper_get_optimization_status untrusted-input
  • mcp__upper-route-planner__upper_get_custom_fields untrusted-input
  • mcp__upper-route-planner__upper_get_capacity_fields untrusted-input
  • mcp__upper-route-planner__upper_create_route untrusted-input
  • mcp__upper-route-planner__upper_update_route untrusted-input
  • mcp__upper-route-planner__upper_create_stop untrusted-input, outbound
  • mcp__upper-route-planner__upper_update_stop untrusted-input
  • mcp__upper-route-planner__upper_assign_drivers untrusted-input
  • mcp__upper-route-planner__upper_optimize_route untrusted-input
  • mcp__upper-route-planner__upper_share_route_to_drivers untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/upper-route-planner/verify?hash=86908a48c0e641ba061976765f75f2cd7adcbd9c84982f0db29fc4d8d7c7a862" | jq -e '.changed == false'

Pinned hash 86908a48c0e6, from Oct 25, 2026, 23:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/upper-route-planner/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.usefulapi/upper-route-planner
[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/upper-route-planner.svg)](https://anlyon.dev/servers/io.usefulapi/upper-route-planner)

Source: MCP Registry · repository. Synced Oct 25, 2026, 23:18 UTC.