# `si.fourzerotwo/environment` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/si.fourzerotwo/environment - JSON: https://anlyon.dev/api/v1/servers/si.fourzerotwo/environment - Version: 1.0.0 (active) - Publisher: si.fourzerotwo (domain proven to the MCP Registry) - Runs: remote (streamable-http) - Sign-in to list tools: none - Metadata from the official MCP Registry, synced 2026-10-21T18:54:53.226Z Title and description, as the publisher wrote them: ```untrusted-server-text Environment & energy UK river levels and rainfall, bathing waters, flood warnings, weather, earthquakes and the GB… ``` Scanned 2026-10-21T19:20:33.651Z over streamable-http. **64 tools: 3 do something that can't be undone, 57 change things and 4 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 3 | ask | | Changes things | write | 57 | ask | | Only reads | read | 4 | allow | ## Exfil surface No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data. | Tag | Meaning | Tools | | --- | --- | --- | | private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none | | untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__environment__bathing-water__near` `mcp__environment__bathing-water__search` `mcp__environment__bathing-water__site` `mcp__environment__earthquakes__count` `mcp__environment__earthquakes__event` `mcp__environment__earthquakes__m25-day` `mcp__environment__earthquakes__m45-week` `mcp__environment__earthquakes__near` `mcp__environment__earthquakes__significant-week` `mcp__environment__gb-electricity__acceptances-latest` `mcp__environment__gb-electricity__capacity-forecast` `mcp__environment__gb-electricity__demand-daily` `mcp__environment__gb-electricity__demand-forecast` `mcp__environment__gb-electricity__demand-forecast-14d` `mcp__environment__gb-electricity__demand-forecast-52w` `mcp__environment__gb-electricity__demand-outturn` `mcp__environment__gb-electricity__demand-peak` `mcp__environment__gb-electricity__frequency` `mcp__environment__gb-electricity__generation-history` `mcp__environment__gb-electricity__generation-now` `mcp__environment__gb-electricity__generation-today` `mcp__environment__gb-electricity__indicated-forecast` `mcp__environment__gb-electricity__interconnector-list` `mcp__environment__gb-electricity__interconnectors` `mcp__environment__gb-electricity__margin-forecast` `mcp__environment__gb-electricity__market-index` `mcp__environment__gb-electricity__outage` `mcp__environment__gb-electricity__outages` `mcp__environment__gb-electricity__surplus-forecast` `mcp__environment__gb-electricity__system-prices` `mcp__environment__gb-electricity__temperature` `mcp__environment__gb-electricity__warnings` `mcp__environment__gb-electricity__wind-forecast` `mcp__environment__gb-electricity__wind-forecast-peak` `mcp__environment__gb-electricity__wind-solar` `mcp__environment__global-weather__forecast` `mcp__environment__global-weather__forecast-complete` `mcp__environment__global-weather__moon` `mcp__environment__global-weather__ocean` `mcp__environment__global-weather__sun` `mcp__environment__uk-flood__flood-area` `mcp__environment__uk-flood__flood-areas-near` `mcp__environment__uk-flood__rainfall-near` `mcp__environment__uk-flood__river-stations` `mcp__environment__uk-flood__severe-warnings` `mcp__environment__uk-flood__station` `mcp__environment__uk-flood__station-history` `mcp__environment__uk-flood__station-latest` `mcp__environment__uk-flood__stations-near` `mcp__environment__uk-flood__tide-gauges` `mcp__environment__uk-flood__warnings` `mcp__environment__uk-flood__warnings-near` `mcp__environment__uk-rivers__latest` `mcp__environment__uk-rivers__rainfall-near` `mcp__environment__uk-rivers__readings` `mcp__environment__uk-rivers__search` `mcp__environment__uk-rivers__station` `mcp__environment__uk-rivers__stations-near` `mcp__environment__us-weather__alerts-active` `mcp__environment__us-weather__alerts-point` `mcp__environment__us-weather__forecast` `mcp__environment__us-weather__forecast-hourly` `mcp__environment__us-weather__points` `mcp__environment__us-weather__station-latest` | | outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | `mcp__environment__gb-electricity__market-index` `mcp__environment__gb-electricity__outages` `mcp__environment__gb-electricity__wind-solar` | ## Findings - **warn** Annotations that disagree with the tool in `gb-electricity__outages` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "gb-electricity__outages" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back. ``` - **warn** Annotations that disagree with the tool in `gb-electricity__wind-solar` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "gb-electricity__wind-solar" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back. ``` - **warn** Annotations that disagree with the tool in `gb-electricity__market-index` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "gb-electricity__market-index" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back. ``` ## Can't be undone (3) Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask. ### `gb-electricity__market-index` - The input addresses people (input.to): what it sends cannot be taken back. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. - Tag outbound: The input takes a destination (input.to): what the tool writes goes there. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Market Index Data: half-hourly wholesale price (£/MWh) and volume between two dates. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `gb-electricity__outages` - The input addresses people (input.to): what it sends cannot be taken back. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. - Tag outbound: The input takes a destination (input.to): what the tool writes goes there. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Outage and unavailability messages published between two times (ids; fetch each with outage). Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `gb-electricity__wind-solar` - The input addresses people (input.to): what it sends cannot be taken back. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. - Tag outbound: The input takes a destination (input.to): what the tool writes goes there. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Actual or estimated wind (on/offshore) and solar generation between two dates. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ## Changes things (57) Creates or changes something that can be changed back. Claude Code: ask. ### `bathing-water__near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Designated bathing waters within a radius (default 25 km) of a UK postcode or point, nearest first, with classification and pollution risk. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `bathing-water__site` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One bathing water: classification and year, pollution-risk forecast, latest sample date, water company and profile link. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `earthquakes__event` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Full detail for one earthquake by USGS event id. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `earthquakes__m25-day` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Magnitude 2.5+ earthquakes worldwide in the past day. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `earthquakes__m45-week` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Magnitude 4.5+ earthquakes worldwide in the past 7 days. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `earthquakes__near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Earthquakes within a radius of a point since a date. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `earthquakes__significant-week` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Significant earthquakes worldwide in the past 7 days. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__acceptances-latest` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Most recent bid-offer acceptances issued by the system operator. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `gb-electricity__capacity-forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Forecast available generation capacity by fuel type for the next two weeks. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `gb-electricity__demand-daily` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Total national demand per day, recent days. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__demand-forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Half-hourly national and transmission demand forecast for the next day. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__demand-forecast-14d` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Daily peak demand forecast for the next two weeks. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__demand-forecast-52w` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Weekly peak demand forecast for the year ahead. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__demand-outturn` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Initial national and transmission demand, half-hourly, last ~2 days. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__demand-peak` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Daily peak transmission demand. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__frequency` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Grid frequency (Hz) every 15 seconds, last hour. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__generation-history` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Half-hourly generation by fuel type, recent history. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `gb-electricity__generation-now` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Current GB generation by fuel type (MW and %), latest 5-minute reading and last half hour / 24 hours. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__generation-today` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Actual generation by production type over the last 24 hours (solar, wind, nuclear, gas…). Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__indicated-forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Day-ahead indicated demand, generation, imbalance and margin. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__interconnectors` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Latest half-hourly flows on each interconnector (France, Norway, Netherlands, Belgium, Ireland, Denmark…), newest first. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `gb-electricity__margin-forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Daily operating margin forecast (OCNMFD2), days 2–14. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__outage` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One outage notice: plant, fuel, normal/available capacity, cause and event window. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__surplus-forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Daily generating plant surplus forecast, days 2–14. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__system-prices` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text System sell/buy price and net imbalance volume for every settlement period of a day. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `gb-electricity__temperature` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Daily GB average temperature against seasonal reference values (drives demand). Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__warnings` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text System operator warnings and notices (margin notices, SO-SO trades, electricity capacity warnings). Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__wind-forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Current wind generation forecast, half-hourly, for the next ~2 days. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__wind-forecast-peak` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Forecast peak wind generation for each day. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `global-weather__forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Hourly-then-6-hourly forecast for ~9 days: temperature, wind, cloud, precipitation, symbol. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `global-weather__forecast-complete` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Full forecast including humidity, pressure, fog, UV and precipitation ranges. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `global-weather__moon` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Moonrise, moonset and moon phase for a point and date. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `global-weather__ocean` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Wave height and direction, sea temperature and currents (Nordic and North Sea waters). Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `global-weather__sun` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Sunrise, sunset and solar noon for a point and date. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `uk-flood__flood-area` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Description, river or sea and polygon reference for one flood area. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `uk-flood__flood-areas-near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Flood alert and warning areas within a radius of a point. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-flood__rainfall-near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Rainfall stations near a point. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-flood__river-stations` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Monitoring stations on a named river. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-flood__severe-warnings` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Only severe flood warnings (danger to life) and flood warnings currently in force. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-flood__station` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Location, river, typical range and measures for one monitoring station. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `uk-flood__station-history` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Readings from a station since a date-time (max 4 weeks back). Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `uk-flood__station-latest` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Latest readings from every measure at a station. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-flood__stations-near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text River level, flow, tidal and rainfall monitoring stations near a point. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-flood__tide-gauges` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Every tidal level monitoring station in England. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `uk-flood__warnings` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Every flood alert and warning currently in force in England. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-flood__warnings-near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Flood alerts and warnings in force within a radius of a point. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-rivers__latest` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text The latest reading for each measure of a type (level, flow, rainfall or groundwater) at a station. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-rivers__rainfall-near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text The nearest rain gauges to a postcode or point with their latest rainfall totals. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `uk-rivers__readings` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Recent 15-minute readings (or daily means) for one type at a station, up to 7 days, newest first. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `uk-rivers__station` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text One station: river, location, catchment area, date opened and its measures. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `uk-rivers__stations-near` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text River level, flow, rainfall and groundwater stations within a radius (default 10 km, max 25) of a postcode or point, nearest first. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `us-weather__alerts-active` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Weather alerts in force for a US state or marine area. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `us-weather__alerts-point` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Weather alerts in force at a lat,lon. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `us-weather__forecast` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Twice-daily forecast periods for a grid square. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `us-weather__forecast-hourly` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Hourly forecast for a grid square. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `us-weather__points` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Forecast office, grid and nearby stations for a US lat,lon. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `us-weather__station-latest` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Latest observed conditions at a weather station. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ## Only reads (4) Looks things up and changes nothing. Claude Code: allow. ### `bathing-water__search` - The name "bathing-water__search" says "search": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Find bathing waters by name or district, and/or by classification (e.g. every "poor" site). Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `earthquakes__count` - The name "earthquakes__count" says "count": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text How many earthquakes match a time and magnitude window. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `gb-electricity__interconnector-list` - The name "gb-electricity__interconnector-list" says "list": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Every GB interconnector and the bidding zone it connects to. Free within the daily allowance, then $0.0005 USDC per call via x402. ``` ### `uk-rivers__search` - The name "uk-rivers__search" says "search": a word for reading. - Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. Description, as the server wrote it: ```untrusted-server-text Search hydrology stations by station or river name. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `environment`: ```json { "permissions": { "allow": [ "mcp__environment__bathing-water__search", "mcp__environment__earthquakes__count", "mcp__environment__gb-electricity__interconnector-list", "mcp__environment__uk-rivers__search" ], "ask": [ "mcp__environment__bathing-water__near", "mcp__environment__bathing-water__site", "mcp__environment__earthquakes__significant-week", "mcp__environment__earthquakes__m45-week", "mcp__environment__earthquakes__m25-day", "mcp__environment__earthquakes__near", "mcp__environment__earthquakes__event", "mcp__environment__gb-electricity__generation-now", "mcp__environment__gb-electricity__generation-today", "mcp__environment__gb-electricity__generation-history", "mcp__environment__gb-electricity__interconnectors", "mcp__environment__gb-electricity__demand-outturn", "mcp__environment__gb-electricity__demand-daily", "mcp__environment__gb-electricity__demand-peak", "mcp__environment__gb-electricity__demand-forecast", "mcp__environment__gb-electricity__demand-forecast-14d", "mcp__environment__gb-electricity__demand-forecast-52w", "mcp__environment__gb-electricity__wind-forecast", "mcp__environment__gb-electricity__wind-forecast-peak", "mcp__environment__gb-electricity__indicated-forecast", "mcp__environment__gb-electricity__capacity-forecast", "mcp__environment__gb-electricity__margin-forecast", "mcp__environment__gb-electricity__surplus-forecast", "mcp__environment__gb-electricity__system-prices", "mcp__environment__gb-electricity__acceptances-latest", "mcp__environment__gb-electricity__frequency", "mcp__environment__gb-electricity__temperature", "mcp__environment__gb-electricity__warnings", "mcp__environment__gb-electricity__outages", "mcp__environment__gb-electricity__outage", "mcp__environment__gb-electricity__wind-solar", "mcp__environment__gb-electricity__market-index", "mcp__environment__global-weather__forecast-complete", "mcp__environment__global-weather__sun", "mcp__environment__global-weather__moon", "mcp__environment__global-weather__ocean", "mcp__environment__global-weather__forecast", "mcp__environment__uk-flood__warnings", "mcp__environment__uk-flood__warnings-near", "mcp__environment__uk-flood__severe-warnings", "mcp__environment__uk-flood__flood-area", "mcp__environment__uk-flood__station", "mcp__environment__uk-flood__station-latest", "mcp__environment__uk-flood__station-history", "mcp__environment__uk-flood__rainfall-near", "mcp__environment__uk-flood__tide-gauges", "mcp__environment__uk-flood__river-stations", "mcp__environment__uk-flood__flood-areas-near", "mcp__environment__uk-flood__stations-near", "mcp__environment__uk-rivers__stations-near", "mcp__environment__uk-rivers__station", "mcp__environment__uk-rivers__latest", "mcp__environment__uk-rivers__readings", "mcp__environment__uk-rivers__rainfall-near", "mcp__environment__us-weather__points", "mcp__environment__us-weather__forecast", "mcp__environment__us-weather__forecast-hourly", "mcp__environment__us-weather__alerts-active", "mcp__environment__us-weather__alerts-point", "mcp__environment__us-weather__station-latest" ], "deny": [] } } ``` Capability tags behind the rules (a read tagged outbound is asked about): - `mcp__environment__bathing-water__near`: untrusted-input - `mcp__environment__bathing-water__site`: untrusted-input - `mcp__environment__bathing-water__search`: untrusted-input - `mcp__environment__earthquakes__significant-week`: untrusted-input - `mcp__environment__earthquakes__m45-week`: untrusted-input - `mcp__environment__earthquakes__m25-day`: untrusted-input - `mcp__environment__earthquakes__near`: untrusted-input - `mcp__environment__earthquakes__count`: untrusted-input - `mcp__environment__earthquakes__event`: untrusted-input - `mcp__environment__gb-electricity__generation-now`: untrusted-input - `mcp__environment__gb-electricity__generation-today`: untrusted-input - `mcp__environment__gb-electricity__generation-history`: untrusted-input - `mcp__environment__gb-electricity__interconnectors`: untrusted-input - `mcp__environment__gb-electricity__interconnector-list`: untrusted-input - `mcp__environment__gb-electricity__demand-outturn`: untrusted-input - `mcp__environment__gb-electricity__demand-daily`: untrusted-input - `mcp__environment__gb-electricity__demand-peak`: untrusted-input - `mcp__environment__gb-electricity__demand-forecast`: untrusted-input - `mcp__environment__gb-electricity__demand-forecast-14d`: untrusted-input - `mcp__environment__gb-electricity__demand-forecast-52w`: untrusted-input - `mcp__environment__gb-electricity__wind-forecast`: untrusted-input - `mcp__environment__gb-electricity__wind-forecast-peak`: untrusted-input - `mcp__environment__gb-electricity__indicated-forecast`: untrusted-input - `mcp__environment__gb-electricity__capacity-forecast`: untrusted-input - `mcp__environment__gb-electricity__margin-forecast`: untrusted-input - `mcp__environment__gb-electricity__surplus-forecast`: untrusted-input - `mcp__environment__gb-electricity__system-prices`: untrusted-input - `mcp__environment__gb-electricity__acceptances-latest`: untrusted-input - `mcp__environment__gb-electricity__frequency`: untrusted-input - `mcp__environment__gb-electricity__temperature`: untrusted-input - `mcp__environment__gb-electricity__warnings`: untrusted-input - `mcp__environment__gb-electricity__outages`: untrusted-input, outbound - `mcp__environment__gb-electricity__outage`: untrusted-input - `mcp__environment__gb-electricity__wind-solar`: untrusted-input, outbound - `mcp__environment__gb-electricity__market-index`: untrusted-input, outbound - `mcp__environment__global-weather__forecast-complete`: untrusted-input - `mcp__environment__global-weather__sun`: untrusted-input - `mcp__environment__global-weather__moon`: untrusted-input - `mcp__environment__global-weather__ocean`: untrusted-input - `mcp__environment__global-weather__forecast`: untrusted-input - `mcp__environment__uk-flood__warnings`: untrusted-input - `mcp__environment__uk-flood__warnings-near`: untrusted-input - `mcp__environment__uk-flood__severe-warnings`: untrusted-input - `mcp__environment__uk-flood__flood-area`: untrusted-input - `mcp__environment__uk-flood__station`: untrusted-input - `mcp__environment__uk-flood__station-latest`: untrusted-input - `mcp__environment__uk-flood__station-history`: untrusted-input - `mcp__environment__uk-flood__rainfall-near`: untrusted-input - `mcp__environment__uk-flood__tide-gauges`: untrusted-input - `mcp__environment__uk-flood__river-stations`: untrusted-input - `mcp__environment__uk-flood__flood-areas-near`: untrusted-input - `mcp__environment__uk-flood__stations-near`: untrusted-input - `mcp__environment__uk-rivers__stations-near`: untrusted-input - `mcp__environment__uk-rivers__search`: untrusted-input - `mcp__environment__uk-rivers__station`: untrusted-input - `mcp__environment__uk-rivers__latest`: untrusted-input - `mcp__environment__uk-rivers__readings`: untrusted-input - `mcp__environment__uk-rivers__rainfall-near`: untrusted-input - `mcp__environment__us-weather__points`: untrusted-input - `mcp__environment__us-weather__forecast`: untrusted-input - `mcp__environment__us-weather__forecast-hourly`: untrusted-input - `mcp__environment__us-weather__alerts-active`: untrusted-input - `mcp__environment__us-weather__alerts-point`: untrusted-input - `mcp__environment__us-weather__station-latest`: untrusted-input ## Remote posture What an anonymous client saw at the remote endpoint, last 2026-10-22T15:13:33.757Z, unchanged since 2026-10-22T15:13:33.757Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture | Fact | Observed | | --- | --- | | Reachable | `yes` | | HTTP status of an anonymous initialize | `200` | | tools/list served without credentials | `yes` | | Tools that change things, listed without credentials | `60` | | Protocol version | `2025-06-18` | | WWW-Authenticate on 401 | `not observed` | | resource_metadata in WWW-Authenticate | `none` | | RFC 9728 protected resource metadata | `none` | | Authorization servers | `none` | | Legacy HTTP+SSE transport | `no` | | Dynamic client registration | `not observed` | | Client ID metadata documents | `not observed` | - **high** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes)) ```untrusted-server-text The endpoint served tools/list without credentials, and the list has 60 tools that change things (3 irreversible, 57 write). Whether a call also works without credentials was not tested: tools are never called. https://fourzerotwo.si/mcp/v/environment: tools/list returned 64 tools to an anonymous client, including gb-electricity__outages (irreversible), gb-electricity__wind-solar (irreversible), gb-electricity__market-index (irreversible), bathing-water__near (write), bathing-water__site (write) and 55 more ```