# `kr.co.knockwatch/coin-check` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/kr.co.knockwatch/coin-check
- JSON: https://anlyon.dev/api/v1/servers/kr.co.knockwatch/coin-check
- Version: 1.0.1 (active)
- Publisher: kr.co.knockwatch (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-11-03T08:18:45.507Z

Title and description, as the publisher wrote them:

```untrusted-server-text
KnockWatch
Public signal records and exchange alerts for Upbit KRW coins, from KnockWatch (Korean).
```

Scanned 2026-11-03T07:19:03.794Z over streamable-http.

**5 tools: 5 change things.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 5 | ask |
| Only reads | read | 0 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | none |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

No check matched anything in these tool definitions.


## Changes things (5)

Creates or changes something that can be changed back. Claude Code: ask.

### `check_coin`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
업비트 원화 마켓 코인 하나의 노크워치 공개 기록을 보여 드립니다. 최근 30일 공개 신호와 그 후 시장 대비 결과, 지금 업비트 유의 종목 표시와 주의 표시, 거래지원 종료와 출금 마감 일정, 최근 30일 바이낸스 상장폐지와 모니터링 태그 공지, 원화 마켓 상장 30일 이내인지, 빙산 매도벽 대상인지를 알려 드립니다.
Public KnockWatch record for one Upbit KRW-market coin: recent signals with outcomes, Upbit warning and caution flags, delisting and withdrawal dates, Binance notices.
```

### `facts`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
노크워치가 이미 공개한 숫자를 한 줄씩 모았습니다. 신호별 과거 데이터 결과와 거래소 경보 사례를 기간, 출처와 함께 보여 드립니다.
Statistics KnockWatch has already published, with period and source.
```

### `recent_signals`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
노크워치가 공개한 최근 신호를 최신순으로 보여 드립니다. 9시 윗꼬리와 빙산 매도벽의 알림 시각, 코인, 그 후 시장 대비 결과입니다. 공개 채널 요약에 올라간 알림만 보여 드려 유료 즉시 알림보다 늦습니다.
Latest public KnockWatch signals with outcomes vs. the market, shown after the public channel digest.
```

### `signal_guide`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
노크워치 신호마다 어떤 코인을 알려 드리는지, 어디에 참고하는지, 한계와 알림 시작일을 보여 드립니다.
What each KnockWatch signal shows, its limits and alert start date.
```

### `signal_record`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
신호별 누적 결과를 'N건 중 M건 시장보다 낮았음'으로 보여 드립니다. 오픈 전 과거 데이터 결과와 오픈 후 실제 알림 결과를 기간과 함께 나눠 보여 드리며 숫자는 knockwatch.co.kr/record와 같습니다.
Cumulative outcomes per signal, the same numbers as knockwatch.co.kr/record.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `coin-check`:

```json
{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__coin-check__check_coin",
      "mcp__coin-check__recent_signals",
      "mcp__coin-check__signal_record",
      "mcp__coin-check__signal_guide",
      "mcp__coin-check__facts"
    ],
    "deny": []
  }
}
```