SITEBORNE Utility Network
by siteborne.net · remote · no sign-in to list tools · v0.1.0 · published by net.siteborne
Machine-native utility network: verified evidence services for autonomous agents.
10 tools: 6 do something that can't be undone, 2 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone6Claude Code: ask: see these tools
- Changes things2Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
13 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http utility https://utility.siteborne.net/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "siteborne_retrieve_verified_web_context" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "siteborne_retrieve_verified_web_context" says "retrieve": a word for reading.
The server marks "siteborne_retrieve_verified_web_context_v3_candidate" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "siteborne_retrieve_verified_web_context_v3_candidate" says "retrieve": a word for reading.
The description is 2,109 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ns: normalized, source-attributed web context with verification and PCC evidence."
The description mentions "credentials".
What this check looks forMatched text
description: "...ytes) or document_url (a public URL, no credentials). ocr_permission must be true before im..."
The input schema at properties.document_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.document_url.description: "...xactly one reference mode and never put credentials in this URL."
The description is 2,141 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...idence, integrity/provenance findings, and PCC verification—not an uploaded file."
Show 7 more findingsShow fewer
The description is 2,088 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...overall verification verdict, and PCC evidence—not newly gathered source content."
The description is 2,109 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ns: normalized, source-attributed web context with verification and PCC evidence."
The description mentions "credentials".
What this check looks forMatched text
description: "...ytes) or document_url (a public URL, no credentials). ocr_permission must be true before im..."
The input schema at properties.document_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.document_url.description: "...xactly one reference mode and never put credentials in this URL."
The description is 2,141 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...idence, integrity/provenance findings, and PCC verification—not an uploaded file."
The description is 2,088 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...overall verification verdict, and PCC evidence—not newly gathered source content."
The description mentions "credential".
What this check looks forMatched text
description: "...service tool). Behavior: read-only and credential-independent; it does not perform paid e..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
10 tools
Can't be undone 6Claude Code: ask
siteborne_build_company_evidence_graphBuild a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals.No findings
Why it is in this group
- The input carries an amount (input.maximum_authorized_price.amount) and a currency, so it moves money.
Description, as the server wrote it Build a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals. Use when: the request needs entity-level evidence synthesized across sources. Do not use when: one URL is the subject (use siteborne_retrieve_verified_web_context), one document is the subject (use siteborne_extract_document_evidence_json), or an existing agent output needs evaluation (use siteborne_verify_agent_output). Parameters: authoritative identifiers (cik, lei, isin, cusip, figi) resolve entities more reliably than company_name, ticker or domain alone, and combining them reduces ambiguity; requested_field_groups narrows provider work; maximum_authorized_price only constrains payment and never widens scope. Behavior: open-world: a paid request queries public data providers over the network and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: exact price of $0.0312 USD per request; the payment challenge requires that amount and the charge settles at exactly that amount. Failure: input that fails schema validation is rejected before any payment challenge; provider or service unavailability returns a structured MCP error. Returns: a company evidence graph with provenance, completeness, verification, and PCC context—not a raw webpage or document extraction.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
siteborne_build_company_evidence_graph_v3_candidateBuild a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals.No findings
Why it is in this group
- The input carries an amount (input.maximum_authorized_price.amount) and a currency, so it moves money.
Description, as the server wrote it Build a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals. Use when: the request needs entity-level evidence synthesized across sources. Do not use when: one URL is the subject (use siteborne_retrieve_verified_web_context), one document is the subject (use siteborne_extract_document_evidence_json), or an existing agent output needs evaluation (use siteborne_verify_agent_output). Parameters: authoritative identifiers (cik, lei, isin, cusip, figi) resolve entities more reliably than company_name, ticker or domain alone, and combining them reduces ambiguity; requested_field_groups narrows provider work; maximum_authorized_price only constrains payment and never widens scope. Behavior: open-world: a paid request queries public data providers over the network and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: exact price of $0.0312 USD per request; the payment challenge requires that amount and the charge settles at exactly that amount. Failure: input that fails schema validation is rejected before any payment challenge; provider or service unavailability returns a structured MCP error. Returns: a company evidence graph with provenance, completeness, verification, and PCC context—not a raw webpage or document extraction.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
siteborne_extract_document_evidence_jsonExtract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL.3 findings
Why it is in this group
- The input carries an amount (input.maximum_authorized_price.amount) and a currency, so it moves money.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...ytes) or document_url (a public URL, no credentials). ocr_permission must be true before im..."
- Info
The input schema at properties.document_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.document_url.description: "...xactly one reference mode and never put credentials in this URL."
- Info
The description is 2,141 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...idence, integrity/provenance findings, and PCC verification—not an uploaded file."
Description, as the server wrote it Extract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL. Use when: the source of truth is a PDF or supported image and the desired result is evidence JSON. Do not use when: a webpage alone is sufficient (use siteborne_retrieve_verified_web_context), company-wide public evidence is needed (use siteborne_build_company_evidence_graph), or an existing agent response needs evaluation (use siteborne_verify_agent_output). Parameters: provide exactly one reference mode: artifact_reference (an authorized stored artifact), upload_reference (a prior SITEBORNE upload handle, not document bytes) or document_url (a public URL, no credentials). ocr_permission must be true before image-based content is read by OCR, and OCR pages bill at the OCR tier; extraction_request.extract_tables and table_extraction_request request table extraction, and pages with tables bill at the table tier; declared_page_count and page_range are bounded by the page limit below; maximum_authorized_price only constrains payment. Behavior: open-world: a paid request may read governed artifact storage or fetch a public document URL, calls the document provider, and persists payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: upto pricing: the payment challenge authorizes a maximum of $0.19 USD per job; the actual charge is measured per processed page (native-text $0.0098, OCR $0.0156, table $0.0238 per page, the highest applicable tier per page) and never exceeds the authorization. The authorization is a ceiling, not the charge. Documents are limited to 10 pages per job. Failure: schema-invalid input is rejected before any payment challenge; a document over the page limit, an unreadable or encrypted document, or an unavailable provider returns a structured MCP error. Returns: extracted document evidence, integrity/provenance findings, and PCC verification—not an uploaded file.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
siteborne_extract_document_evidence_json_v3_candidateExtract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL.3 findings
Why it is in this group
- The input carries an amount (input.maximum_authorized_price.amount) and a currency, so it moves money.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...ytes) or document_url (a public URL, no credentials). ocr_permission must be true before im..."
- Info
The input schema at properties.document_url.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.document_url.description: "...xactly one reference mode and never put credentials in this URL."
- Info
The description is 2,141 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...idence, integrity/provenance findings, and PCC verification—not an uploaded file."
Description, as the server wrote it Extract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL. Use when: the source of truth is a PDF or supported image and the desired result is evidence JSON. Do not use when: a webpage alone is sufficient (use siteborne_retrieve_verified_web_context), company-wide public evidence is needed (use siteborne_build_company_evidence_graph), or an existing agent response needs evaluation (use siteborne_verify_agent_output). Parameters: provide exactly one reference mode: artifact_reference (an authorized stored artifact), upload_reference (a prior SITEBORNE upload handle, not document bytes) or document_url (a public URL, no credentials). ocr_permission must be true before image-based content is read by OCR, and OCR pages bill at the OCR tier; extraction_request.extract_tables and table_extraction_request request table extraction, and pages with tables bill at the table tier; declared_page_count and page_range are bounded by the page limit below; maximum_authorized_price only constrains payment. Behavior: open-world: a paid request may read governed artifact storage or fetch a public document URL, calls the document provider, and persists payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: upto pricing: the payment challenge authorizes a maximum of $0.19 USD per job; the actual charge is measured per processed page (native-text $0.0098, OCR $0.0156, table $0.0238 per page, the highest applicable tier per page) and never exceeds the authorization. The authorization is a ceiling, not the charge. Documents are limited to 10 pages per job. Failure: schema-invalid input is rejected before any payment challenge; a document over the page limit, an unreadable or encrypted document, or an unavailable provider returns a structured MCP error. Returns: extracted document evidence, integrity/provenance findings, and PCC verification—not an uploaded file.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
siteborne_verify_agent_outputEvaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence.1 finding
Why it is in this group
- The description's first verb is "evaluate": a word for a change.
- The input carries an amount (input.maximum_authorized_price.amount) and a currency, so it moves money.
Findings
- Info
The description is 2,088 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...overall verification verdict, and PCC evidence—not newly gathered source content."
Description, as the server wrote it Evaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence. Use when: the caller already has an output and needs a governed verification verdict. Do not use when: evidence must first be gathered from a company (use siteborne_build_company_evidence_graph), URL (use siteborne_retrieve_verified_web_context), or document (use siteborne_extract_document_evidence_json), or independent reproduction of the output is required (not available). Parameters: verification_mode must be standard; independent_reproduction is defined but unavailable and is rejected before any payment challenge, never downgraded to standard. required_schema must fit SITEBORNE JSON Schema Profile 1 or the request is rejected before payment; minimum_score sets the acceptance threshold; maximum_authorized_price only constrains payment and never relaxes verification policy. Behavior: closed-world: standard mode evaluates only the supplied claims, requirements, output and evidence with no outbound retrieval, and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. The verification policy and verdict rules do not depend on price or maximum_authorized_price. This service is currently production-disabled and rejects execution. Economics: exact price of $0.017 USD per request in standard mode; the payment challenge requires that amount and the charge settles at exactly that amount. independent_reproduction mode has a governed price of $0.049 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: an unsupported or oversized required_schema, schema-invalid input and unavailable modes are rejected before any payment challenge; a failed verification is a normal fail or conditional verdict, not an error. Returns: claim-level and deterministic-check results, an overall verification verdict, and PCC evidence—not newly gathered source content.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
siteborne_verify_agent_output_v3_candidateEvaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence.1 finding
Why it is in this group
- The description's first verb is "evaluate": a word for a change.
- The input carries an amount (input.maximum_authorized_price.amount) and a currency, so it moves money.
Findings
- Info
The description is 2,088 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...overall verification verdict, and PCC evidence—not newly gathered source content."
Description, as the server wrote it Evaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence. Use when: the caller already has an output and needs a governed verification verdict. Do not use when: evidence must first be gathered from a company (use siteborne_build_company_evidence_graph), URL (use siteborne_retrieve_verified_web_context), or document (use siteborne_extract_document_evidence_json), or independent reproduction of the output is required (not available). Parameters: verification_mode must be standard; independent_reproduction is defined but unavailable and is rejected before any payment challenge, never downgraded to standard. required_schema must fit SITEBORNE JSON Schema Profile 1 or the request is rejected before payment; minimum_score sets the acceptance threshold; maximum_authorized_price only constrains payment and never relaxes verification policy. Behavior: closed-world: standard mode evaluates only the supplied claims, requirements, output and evidence with no outbound retrieval, and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. The verification policy and verdict rules do not depend on price or maximum_authorized_price. This service is currently production-disabled and rejects execution. Economics: exact price of $0.017 USD per request in standard mode; the payment challenge requires that amount and the charge settles at exactly that amount. independent_reproduction mode has a governed price of $0.049 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: an unsupported or oversized required_schema, schema-invalid input and unavailable modes are rejected before any payment challenge; a failed verification is a normal fail or conditional verdict, not an error. Returns: claim-level and deterministic-check results, an overall verification verdict, and PCC evidence—not newly gathered source content.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Changes things 2Claude Code: ask
siteborne_retrieve_verified_web_contextRetrieve and verify evidence from one public web URL using direct HTTP retrieval.2 findings
Why it is in this group
- The name "siteborne_retrieve_verified_web_context" says "retrieve": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Info
The description is 2,109 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ns: normalized, source-attributed web context with verification and PCC evidence."
- Warn
The server marks "siteborne_retrieve_verified_web_context" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "siteborne_retrieve_verified_web_context" says "retrieve": a word for reading.
Description, as the server wrote it Retrieve and verify evidence from one public web URL using direct HTTP retrieval. Use when: the request is specifically about the content and provenance of a URL. Do not use when: evidence must be synthesized for a company (use siteborne_build_company_evidence_graph), extracted from an authorized document (use siteborne_extract_document_evidence_json), checked against an existing output contract (use siteborne_verify_agent_output), or the page requires JavaScript rendering (rendered retrieval is not available). Parameters: retrieval_mode must be direct; rendered is defined but unavailable and is rejected before any payment challenge, never substituted with direct retrieval. output_mode structured needs buyer_schema and field_selectors to be meaningful; redirect_policy and max_redirects bound redirect following; max_content_size bounds returned bytes; maximum_authorized_price only constrains payment and never changes retrieval scope. Behavior: open-world: a paid request performs bounded outbound HTTP retrieval of the target URL through a safe-egress boundary (private and loopback destinations are refused) and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. Retrieval admission follows the governed runtime rate policy; no fixed public per-origin rate is promised. This service is currently production-disabled and rejects execution. Economics: exact price of $0.008 USD per request in direct mode; the payment challenge requires that amount and the charge settles at exactly that amount. rendered mode has a governed price of $0.029 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: schema-invalid input and unavailable modes are rejected before any payment challenge; target-site errors, timeouts and unavailable retrieval return a structured MCP error and are never answered with a substitute result. Returns: normalized, source-attributed web context with verification and PCC evidence.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
siteborne_retrieve_verified_web_context_v3_candidateRetrieve and verify evidence from one public web URL using direct HTTP retrieval.2 findings
Why it is in this group
- The name "siteborne_retrieve_verified_web_context_v3_candidate" says "retrieve": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Info
The description is 2,109 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ns: normalized, source-attributed web context with verification and PCC evidence."
- Warn
The server marks "siteborne_retrieve_verified_web_context_v3_candidate" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "siteborne_retrieve_verified_web_context_v3_candidate" says "retrieve": a word for reading.
Description, as the server wrote it Retrieve and verify evidence from one public web URL using direct HTTP retrieval. Use when: the request is specifically about the content and provenance of a URL. Do not use when: evidence must be synthesized for a company (use siteborne_build_company_evidence_graph), extracted from an authorized document (use siteborne_extract_document_evidence_json), checked against an existing output contract (use siteborne_verify_agent_output), or the page requires JavaScript rendering (rendered retrieval is not available). Parameters: retrieval_mode must be direct; rendered is defined but unavailable and is rejected before any payment challenge, never substituted with direct retrieval. output_mode structured needs buyer_schema and field_selectors to be meaningful; redirect_policy and max_redirects bound redirect following; max_content_size bounds returned bytes; maximum_authorized_price only constrains payment and never changes retrieval scope. Behavior: open-world: a paid request performs bounded outbound HTTP retrieval of the target URL through a safe-egress boundary (private and loopback destinations are refused) and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. Retrieval admission follows the governed runtime rate policy; no fixed public per-origin rate is promised. This service is currently production-disabled and rejects execution. Economics: exact price of $0.008 USD per request in direct mode; the payment challenge requires that amount and the charge settles at exactly that amount. rendered mode has a governed price of $0.029 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: schema-invalid input and unavailable modes are rejected before any payment challenge; target-site errors, timeouts and unavailable retrieval return a structured MCP error and are never answered with a substitute result. Returns: normalized, source-attributed web context with verification and PCC evidence.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 2Claude Code: allow
siteborne_get_quoteBuild a canonical x402 payment quote for one SITEBORNE service and exact request input.No findings
Why it is in this group
- The name "siteborne_get_quote" says "get": a word for reading.
Description, as the server wrote it Build a canonical x402 payment quote for one SITEBORNE service and exact request input. Use when: an agent needs the governed price, payee, network, asset, resource, expiry, and payment requirement before deciding whether to invoke a paid service. Do not use when: evidence work is required now (use the matching siteborne_build_company_evidence_graph, siteborne_retrieve_verified_web_context, siteborne_extract_document_evidence_json, or siteborne_verify_agent_output tool), or only availability is needed (use siteborne_get_service_health). Parameters: scheme must be the one scheme the service is offered under (company_evidence_graph.v2 exact, web_context_verified.v2 exact, document_evidence_json.v2 upto, verify_agent_output.v2 exact, company_evidence_graph.v3 exact, web_context_verified.v3 exact, document_evidence_json.v3 upto, verify_agent_output.v3 exact); any other scheme is rejected with scheme_not_offered. input is hashed, so the quote binds only that exact request. Behavior: quote-only and read-only; it hashes the proposed input, and does not execute the underlying paid service, verify payment, call a provider, create a Workflow, or settle. Economics: free of charge. The returned amount is the exact price, or for upto an authorized maximum whose actual_amount is null because the real charge is measured at settlement and never exceeds it. Failure: a mode that has a governed price but is unavailable returns retrieval_mode_unavailable or verification_mode_unavailable and no quote; a quote expires at expires_at. Returns: an expiring input-bound quote with its x402 payment requirement and the canonical economics block.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
siteborne_get_service_healthReport MCP server readiness and production-enable status for each SITEBORNE service.1 finding
Why it is in this group
- The name "siteborne_get_service_health" says "get": a word for reading.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...service tool). Behavior: read-only and credential-independent; it does not perform paid e..."
Description, as the server wrote it Report MCP server readiness and production-enable status for each SITEBORNE service. Use when: an agent must check protocol availability, tool count, or whether a service is currently production-enabled before selecting a paid tool. Do not use when: a quote is needed (use siteborne_get_quote) or company, web, document, or agent-output evidence work is required (use the corresponding SITEBORNE service tool). Behavior: read-only and credential-independent; it does not perform paid evidence work, create quotes, verify payment, call providers, write service state, create Workflows, or settle. Economics: free of charge; it never issues a payment challenge. Failure: it depends on no provider, so it does not fail because a provider is unavailable. Returns: the server and protocol versions plus truthful local, production, and external-publication status for all four evidence services.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http utility https://utility.siteborne.net/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__utility__siteborne_get_quote",
"mcp__utility__siteborne_get_service_health"
],
"ask": [
"mcp__utility__siteborne_build_company_evidence_graph",
"mcp__utility__siteborne_retrieve_verified_web_context",
"mcp__utility__siteborne_extract_document_evidence_json",
"mcp__utility__siteborne_verify_agent_output",
"mcp__utility__siteborne_build_company_evidence_graph_v3_candidate",
"mcp__utility__siteborne_retrieve_verified_web_context_v3_candidate",
"mcp__utility__siteborne_extract_document_evidence_json_v3_candidate",
"mcp__utility__siteborne_verify_agent_output_v3_candidate"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as utility. Review it before you use it.