Skip to content
anlyon.devby Anlyon

Up To Tech MCP server

tech.upto/up-to-techupto.techstreamable-httpv1.2.0Scanned

Pitch Yann Ravel-Sibillot's angel fund, book a meeting, and run the deal from terms to wire.

10 tools: 7 change things and 3 only read.

Tools: 0 delete, 0 irreversible, 7 write, 3 read.
  • Reads private data · 1
  • Reads text others write · 1
  • Can send data out · 2
  • No findings

Tools listed without sign-in. Remote posture

With Anlyon

7 tools here change things. Govern them.

  • Anlyon lists the tools and adopts none.
  • Each tool you adopt gets approvals and receipts.
  • Your agent never holds the key.
Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

Compare with similar serversMarkdownJSONReport this listing

What the Up To Tech MCP server can do

The Up To Tech MCP server is published by upto.tech, a domain the MCP Registry verified. It has 10 tools. It can create or change data (7 tools: draft_pitch, request_meeting, request_interview_call, propose_terms and 3 more), but cannot delete data. 3 tools only read.

1 tool reads private data (list_instruments); 1 tool brings in text other people can write (request_interview_call); 2 tools can send data out of your system (request_interview_call and provide_signer). On its own it has all three parts of a prompt-injection exfiltration path: private data, text others write, and a way out.

None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.

Its remote endpoint lists its tools without sign-in.

Last scanned Nov 8, 2026, version 1.2.0.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

10 tools

Changes things 7Claude Code: ask
  • draft_pitchSaves a pitch draft from what you know about the founders and returns a private link.No findings

    Why it is in this group

    • The description's first verb is "save": a word for a change.
    Description, as the server wrote it
    Saves a pitch draft from what you know about the founders and returns a private link. The founders open it, review every answer, and send it themselves. Leave unknown fields empty; never invent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • propose_termsPropose the terms of the investment on the founders' behalf: pick an instrument and give a value for each of its variables (amounts as plain numbers in euros, percentages as number…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Propose the terms of the investment on the founders' behalf: pick an instrument and give a value for each of its variables (amounts as plain numbers in euros, percentages as numbers). Inside Yann's ranges the terms are agreed immediately and the agreement goes out for signature; outside, you get the ranges back and can propose again, or Yann answers. Confirm the terms with the founders before calling.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • provide_bank_detailsAfter the agreement is signed: the company's IBAN, BIC and account holder name, so the investment can be wired from Up To Tech's account.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    After the agreement is signed: the company's IBAN, BIC and account holder name, so the investment can be wired from Up To Tech's account. Only the company's own account.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • provide_signerGive or correct the signer's details for the agreement: full name, email and mobile number of the founder who signs for the company.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a destination (input.phone): what the tool writes goes there.
    Description, as the server wrote it
    Give or correct the signer's details for the agreement: full name, email and mobile number of the founder who signs for the company. The signature is an advanced electronic signature with an identity check and an SMS code, so the mobile number must be the signer's.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • request_interview_callHave Yann's interviewing agent phone the founder for a 15-minute interview (the step after the memo).Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "request_interview_call" says "request": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.phone): what the tool writes goes there.
    Description, as the server wrote it
    Have Yann's interviewing agent phone the founder for a 15-minute interview (the step after the memo). Give the founder's mobile number in international format, and optionally the earliest time to call (ISO 8601). The founder must be expecting the call.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • request_meetingThe only way to book 30 minutes with Yann Ravel-Sibillot (Up To Tech): for a talk, a board role, a startup or anything else.No findings

    Why it is in this group

    • The name "request_meeting" says "request": a word for a change.
    Description, as the server wrote it
    The only way to book 30 minutes with Yann Ravel-Sibillot (Up To Tech): for a talk, a board role, a startup or anything else. Send who the person is and what they want to cover; you get the calendar link back to give them. Ask the person for anything you do not know; never invent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • review_documentThe full text of the agreement generated from the agreed terms (or a preview of the chosen instrument's template with the current proposal), so the founders can review it with thei…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The full text of the agreement generated from the agreed terms (or a preview of the chosen instrument's template with the current proposal), so the founders can review it with their agent before signing. The signed version is the one that binds, after the identity check.

    Annotations the server declares

    • readOnlyHint: true
Only reads 3Show 3 read-only tools
  • deal_statusWhere a pitch stands with Up To Tech (memo, phone interview, terms, signature, wire, done) and what the founders' agent should do next.No findings

    Why it is in this group

    • The name "deal_status" says "status": a word for reading.
    Description, as the server wrote it
    Where a pitch stands with Up To Tech (memo, phone interview, terms, signature, wire, done) and what the founders' agent should do next. Needs the deal token the founders received when they sent their pitch.

    Annotations the server declares

    • readOnlyHint: true
  • get_pitch_briefReturns what Up To Tech (a business angel) asks founders, and the rules for drafting a pitch.No findings

    Why it is in this group

    • The name "get_pitch_brief" says "get": a word for reading.
    Description, as the server wrote it
    Returns what Up To Tech (a business angel) asks founders, and the rules for drafting a pitch. Call this first.

    Annotations the server declares

    • readOnlyHint: true
  • list_instrumentsThe investment instruments the founders can choose from (BSA-AIR, SAFE, convertible note, priced round, non-binding term sheet), when each fits, their variables, and, with a deal t…Reads private dataNo findings

    Why it is in this group

    • The name "list_instruments" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "note": it reads notes.
    Description, as the server wrote it
    The investment instruments the founders can choose from (BSA-AIR, SAFE, convertible note, priced round, non-binding term sheet), when each fits, their variables, and, with a deal token, the acceptable range of every variable for this deal. Proposals inside the ranges are accepted on the spot.

    Annotations the server declares

    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

2 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 untrusted-input tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out2
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__up-to-tech__request_interview_call"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Nov 9, 2026, 07:20 UTC, unchanged since Nov 9, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
7
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
not observed
Authorization servers
not observed
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • WarnThe whole server

    The endpoint served tools/list without credentials, and the list has 7 tools that change things (7 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://upto.tech/mcp: tools/list returned 10 tools to an anonymous client, including draft_pitch (write), request_meeting (write), request_interview_call (write), propose_terms (write), review_document (write) and 2 more

    What this check looks for

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http up-to-tech https://upto.tech/mcp
claude mcp add --transport http up-to-tech https://upto.tech/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__up-to-tech__get_pitch_brief",
      "mcp__up-to-tech__deal_status",
      "mcp__up-to-tech__list_instruments"
    ],
    "ask": [
      "mcp__up-to-tech__draft_pitch",
      "mcp__up-to-tech__request_meeting",
      "mcp__up-to-tech__request_interview_call",
      "mcp__up-to-tech__propose_terms",
      "mcp__up-to-tech__review_document",
      "mcp__up-to-tech__provide_signer",
      "mcp__up-to-tech__provide_bank_details"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as up-to-tech. Review it before you use it.

Capability tags behind 3 rules
  • mcp__up-to-tech__request_interview_call untrusted-input, outbound
  • mcp__up-to-tech__list_instruments private-data
  • mcp__up-to-tech__provide_signer outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/tech.upto/up-to-tech/verify?hash=09c61e395be9e7bbe1632fcd666f6375868329cf13d6fe7a224a302745ce748b" | jq -e '.changed == false'

Pinned hash 09c61e395be9, from Nov 8, 2026, 16:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/tech.upto/up-to-tech/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for tech.upto/up-to-tech
[![anlyon.dev](https://anlyon.dev/badge/tech.upto/up-to-tech.svg)](https://anlyon.dev/servers/tech.upto/up-to-tech)

Source: MCP Registry. Synced Nov 8, 2026, 17:18 UTC.

Up To Tech MCP server: questions and answers

Answered from the scan above, not from the publisher's description.

Is the Up To Tech MCP server safe?

No scan can promise that. What its definitions show: 10 tools, 7 of which can change, send or delete something, and 0 findings from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.

Can the Up To Tech MCP server delete data?

No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.

Can the Up To Tech MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the Up To Tech MCP server have?

10 tools: 7 write, 3 read. draft_pitch, request_meeting, request_interview_call, propose_terms, review_document, provide_signer, provide_bank_details, get_pitch_brief and 2 more.

Does the Up To Tech MCP server need sign-in or OAuth?

Its remote endpoint listed its tools to an anonymous client, without sign-in.

Does the Up To Tech MCP server send data to outside services?

2 tools can carry data out (it sends, posts or publishes, or takes a recipient, channel or URL): request_interview_call and provide_signer.

Has the Up To Tech MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 8, 2026.