# `si.fourzerotwo/health` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/si.fourzerotwo/health - JSON: https://anlyon.dev/api/v1/servers/si.fourzerotwo/health - Version: 1.0.0 (active) - Publisher: si.fourzerotwo (domain proven to the MCP Registry) - Runs: remote (streamable-http) - Sign-in to list tools: none - Metadata from the official MCP Registry, synced 2026-10-21T18:54:53.226Z Title and description, as the publisher wrote them: ```untrusted-server-text Health & medicines Clinical trials, RxNorm drug lookups, FDA drug and device data, PubMed and NHS organisations. ``` Scanned 2026-10-21T19:32:04.971Z over streamable-http. **29 tools: 24 change things and 5 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 0 | ask | | Changes things | write | 24 | ask | | Only reads | read | 5 | allow | ## Findings - **warn** Annotations that disagree with the tool in `nhs-organisations__organisation` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "nhs-organisations__organisation" read-only (readOnlyHint: true), and its own name, description or input give the class "write". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input takes a statement or command to run (input.code), which can change anything it can reach. ``` - **warn** Annotations that disagree with the tool in `openfda__drug-labels` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "openfda__drug-labels" read-only (readOnlyHint: true), and its own name, description or input give the class "write". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "openfda__drug-labels" says "label": a word for a change. ``` ## Changes things (24) Creates or changes something that can be changed back. Claude Code: ask. ### `clinical-trials__recruiting` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Studies recruiting (or about to) for a condition in a city, region or country, with the matching trial sites. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `clinical-trials__stats` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text How many registered studies for a condition are recruiting, active, completed, terminated or withdrawn. A few free samples a day, then $0.003 USDC per call via x402. ``` ### `clinical-trials__study` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text One study: title, status, phase, conditions, interventions, sponsor, enrolment, dates, eligibility basics, primary outcomes, countries, whether results are posted. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `nhs-organisations__organisation` - The input takes a statement or command to run (input.code), which can change anything it can reach. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Name, status, address, phone/website, roles and relationships (commissioner, operator, geography) for one ODS code. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `nhs-organisations__roles` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Every ODS role code with its name, and the friendly aliases search accepts. Free within the daily allowance, then $0.0005 USDC per call via x402. ``` ### `openfda__device-510k` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Premarket 510(k) clearances. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__device-events` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text MAUDE medical device adverse event reports. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__device-recalls` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Medical device recalls. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__drug-adverse-events` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text FAERS adverse event reports for a drug. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__drug-labels` - The name "openfda__drug-labels" says "label": a word for a change. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Structured prescribing information: indications, dosage, warnings, interactions. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__drug-ndc` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text National Drug Code directory entries. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__drug-recalls` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Drug recall enforcement reports. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__drugs-fda` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text FDA approval history (Drugs@FDA) for an application or brand. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__food-adverse-events` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text CAERS reports for foods, supplements and cosmetics. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `openfda__food-recalls` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Food recall enforcement reports. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `pubmed__summary` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Title, authors, journal, date and DOI for comma-separated PubMed ids. A few free samples a day, then $0.002 USDC per call via x402. ``` ### `rxnorm__approximate` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Ranked RxNorm candidates for a misspelled or partial drug name. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `rxnorm__drugs` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Every clinical drug, branded drug and pack for an ingredient or brand name, grouped by RxNorm term type. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `rxnorm__ndc` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text National Drug Code (10 or 11 digits) to its RxNorm concept and status. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `rxnorm__ndcs` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Active National Drug Codes for an RxNorm clinical or branded drug. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `rxnorm__properties` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Name, synonym, term type and active/obsolete status of an RxCUI. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `rxnorm__related` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Ingredients, brand names, dose forms and clinical/branded drugs related to an RxCUI. Free within the daily allowance, then $0.002 USDC per call via x402. ``` ### `rxnorm__rxcui` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Exact (normalised) match of a drug name to its RxNorm concept id(s). Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `rxnorm__spelling` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Correctly spelled RxNorm drug names close to the input. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ## Only reads (5) Looks things up and changes nothing. Claude Code: allow. ### `clinical-trials__search` - The name "clinical-trials__search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Find studies by condition, intervention (drug/device), location, sponsor or free text, optionally filtered by status and phase. Free within the daily allowance, then $0.003 USDC per call via x402. ``` ### `nhs-organisations__search` - The name "nhs-organisations__search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Find NHS organisations by name, postcode (or district) and role: gp, pharmacy, trust, trust-site, icb, dental, optical, care-home, hospice, or a role code. Free within the daily allowance, then $0.001 USDC per call via x402. ``` ### `pubmed__clinical-trials-search` - The name "pubmed__clinical-trials-search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text PubMed citations that are clinical trial reports for a query. A few free samples a day, then $0.002 USDC per call via x402. ``` ### `pubmed__pmc-search` - The name "pubmed__pmc-search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Free full-text article ids in PubMed Central. A few free samples a day, then $0.002 USDC per call via x402. ``` ### `pubmed__search` - The name "pubmed__search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text PubMed ids matching a query (supports PubMed query syntax). A few free samples a day, then $0.002 USDC per call via x402. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `health`: ```json { "permissions": { "allow": [ "mcp__health__clinical-trials__search", "mcp__health__nhs-organisations__search", "mcp__health__pubmed__search", "mcp__health__pubmed__pmc-search", "mcp__health__pubmed__clinical-trials-search" ], "ask": [ "mcp__health__clinical-trials__study", "mcp__health__clinical-trials__recruiting", "mcp__health__clinical-trials__stats", "mcp__health__nhs-organisations__organisation", "mcp__health__nhs-organisations__roles", "mcp__health__pubmed__summary", "mcp__health__rxnorm__rxcui", "mcp__health__rxnorm__approximate", "mcp__health__rxnorm__spelling", "mcp__health__rxnorm__drugs", "mcp__health__rxnorm__related", "mcp__health__rxnorm__properties", "mcp__health__rxnorm__ndc", "mcp__health__rxnorm__ndcs", "mcp__health__openfda__drug-adverse-events", "mcp__health__openfda__drug-recalls", "mcp__health__openfda__drug-ndc", "mcp__health__openfda__drugs-fda", "mcp__health__openfda__device-events", "mcp__health__openfda__device-recalls", "mcp__health__openfda__device-510k", "mcp__health__openfda__food-recalls", "mcp__health__openfda__food-adverse-events", "mcp__health__openfda__drug-labels" ], "deny": [] } } ```