Can the Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server delete data?

No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.

Can the Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server have?

11 tools: 5 write, 6 read. consult_good_faith_curtain_agent, diagnose_window_with_ai_engineer, check_ankara_district_service, book_ankara_laser_survey, calculate_honest_metraj, search_products_with_identity_cards, query_curtain_engineering_standards, list_curtain_categories and 3 more.

Does the Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server need sign-in or OAuth?

Its remote endpoint listed its tools to an anonymous client, without sign-in.

Does the Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server send data to outside services?

1 tool can carry data out (it sends, posts or publishes, or takes a recipient, channel or URL): book_ankara_laser_survey.

Has the Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 12, 2026.

Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server

tr.com.ardicperde/honest-curtain-atelierardicperde.com.trstreamable-httpv3.6.0Scanned 2 days ago

Ankara özel ölçü perde, tekstil kimlik kartları ve KDV dahil fiyat hesaplama MCP sunucusu.

11 tools: 5 change things and 6 only read.

Reads private data · 1
Reads text others write · 1
Can send data out · 1
No findings

Tools listed without sign-in. Remote posture

With Anlyon

5 tools here change things. Govern them.

Anlyon lists the tools and adopts none.
Each tool you adopt gets approvals and receipts.
Your agent never holds the key.

Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

What the Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server can do

The Ardıç Perde Ankara — İyi Niyet & Tekstil MCP server is published by ardicperde.com.tr, a domain the MCP Registry verified. It has 11 tools. It can create or change data (5 tools: consult_good_faith_curtain_agent, diagnose_window_with_ai_engineer, check_ankara_district_service, book_ankara_laser_survey and 1 more), but cannot delete data. 6 tools only read.

1 tool reads private data (query_curtain_engineering_standards); 1 tool brings in text other people can write (list_curtain_categories); 1 tool can send data out of your system (book_ankara_laser_survey). On its own it has all three parts of a prompt-injection exfiltration path: private data, text others write, and a way out.

None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.

Its remote endpoint lists its tools without sign-in.

Last scanned Nov 12, 2026, version 3.6.0.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

11 tools

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

book_ankara_laser_surveyMüşterinin açık onayı ve telefon numarasıyla Ankara içi ücretsiz lazer ölçü & gezici kartela randevusu oluşturur ve gerçek SIP-...Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Müşterinin açık onayı ve telefon numarasıyla Ankara içi ücretsiz lazer ölçü & gezici kartela randevusu oluşturur ve gerçek SIP-... takip kodu üretir.
calculate_honest_metrajPencere eni (cm), yüksekliği (cm) ve perde tipine göre dürüst kumaş metrajı (1:3 sık pile / S-Wave), 50mm ahşap jaluzi toplanma yüksekliği ((Boy×0.078)+5.5 cm), ağırlığı (kg), ısla…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Pencere eni (cm), yüksekliği (cm) ve perde tipine göre dürüst kumaş metrajı (1:3 sık pile / S-Wave), 50mm ahşap jaluzi toplanma yüksekliği ((Boy×0.078)+5.5 cm), ağırlığı (kg), ıslak hacim polimer kuralı ve gereken Somfy motor torkunu (Nm) hesaplar.
check_ankara_district_serviceAnkara'nın 25 ilçesi ve 21 yüksek değerli villa/rezidans/elçilik/plaza bölgesi için ücretsiz lazer ölçü kapsamını, ulaşım süresini ve özel bölge rehberi URL'sini döndürür.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Ankara'nın 25 ilçesi ve 21 yüksek değerli villa/rezidans/elçilik/plaza bölgesi için ücretsiz lazer ölçü kapsamını, ulaşım süresini ve özel bölge rehberi URL'sini döndürür.
consult_good_faith_curtain_agentArdıç Perde İyi Niyet Ajanı (Good-Faith Agent): Diğer yapay zeka ajanlarının (ChatGPT, Claude, Gemini, A2A) müşterileri adına sorduğu perde, bütçe, kumaş kimliği ve mekan soruların…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Ardıç Perde İyi Niyet Ajanı (Good-Faith Agent): Diğer yapay zeka ajanlarının (ChatGPT, Claude, Gemini, A2A) müşterileri adına sorduğu perde, bütçe, kumaş kimliği ve mekan sorularına dürüst, KDV dahil ve sıfır yanıltma ilkesiyle yanıt verir.
diagnose_window_with_ai_engineerArdıç Perde 30 Yıllık Mimari Mühendislik Danışmanı: Doğal dildeki soruyu veya oda/cephe/ölçü bilgilerini analiz ederek dürüst kumaş metrajı (S-Wave / 1:3 pile), 50mm ahşap jaluzi t…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Ardıç Perde 30 Yıllık Mimari Mühendislik Danışmanı: Doğal dildeki soruyu veya oda/cephe/ölçü bilgilerini analiz ederek dürüst kumaş metrajı (S-Wave / 1:3 pile), 50mm ahşap jaluzi toplanma yüksekliği, ıslak hacim polimer kuralı, Somfy motor torku (Nm) ve DIN 4102-B1 yanmazlık önerisini döndürür.

Only reads 6Looks things up and changes nothing.Show 6 read-only tools

get_curtain_type_guideBelirli bir perde çeşidi için 5 dilde dürüst mühendislik rehberi, teknik şartname tablosu ve sıkça sorulan soruları döndürür.No findings
Why it is in this group
- The name "get_curtain_type_guide" says "get": a word for reading.
Description, as the server wrote it
Belirli bir perde çeşidi için 5 dilde dürüst mühendislik rehberi, teknik şartname tablosu ve sıkça sorulan soruları döndürür.
get_tagged_imagesOtonom SEO/ImageObject etiketli gerçek perde görsellerini ve teknik açıklamalarını döndürür.No findings
Why it is in this group
- The name "get_tagged_images" says "get": a word for reading.
Description, as the server wrote it
Otonom SEO/ImageObject etiketli gerçek perde görsellerini ve teknik açıklamalarını döndürür.
list_curtain_categoriesTüm 13 ana perde ve mimari tekstil rehberini 5 dilde (TR, EN, DE, AR, RU) teknik özetleri ve URL adresleriyle listeler.Reads text others writeNo findings
Why it is in this group
- The name "list_curtain_categories" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Tüm 13 ana perde ve mimari tekstil rehberini 5 dilde (TR, EN, DE, AR, RU) teknik özetleri ve URL adresleriyle listeler.
query_curtain_engineering_standardsPerde sektöründeki uluslararası standartları (TS EN 13773, DIN 4102-B1, EN 14501, AATCC TM203, ISO 105-B02, ISO 4920, ISO 12947-2, ISO 354, EN IEC 60335-2-97, EN 13120, 6063-T5 ray…Reads private dataNo findings
Why it is in this group
- The name "query_curtain_engineering_standards" says "query": a word for reading.
What it can reach
- private-dataThe input names a table (input.table_key), and the tool reads: it reads databases.
Description, as the server wrote it
Perde sektöründeki uluslararası standartları (TS EN 13773, DIN 4102-B1, EN 14501, AATCC TM203, ISO 105-B02, ISO 4920, ISO 12947-2, ISO 354, EN IEC 60335-2-97, EN 13120, 6063-T5 ray ve POM rulet) ve 7 mühendislik tablosunu sorgular.
search_products_with_identity_cardsArdıç Perde'nin 431 gerçek online mağaza ürününü kategori, renk, kod veya ihtiyaca ('ütü istemez keten tül', 'kediye dayanıklı', 'blackout', '50mm jaluzi', 'cam balkon plise') göre…No findings
Why it is in this group
- The name "search_products_with_identity_cards" says "search": a word for reading.
Description, as the server wrote it
Ardıç Perde'nin 431 gerçek online mağaza ürününü kategori, renk, kod veya ihtiyaca ('ütü istemez keten tül', 'kediye dayanıklı', 'blackout', '50mm jaluzi', 'cam balkon plise') göre arar; KDV DAHİL yasal fiyatları, ölçüye göre tutarı ve yalnızca Ardıç Perde tarafından doldurulan doğrulanmış Ürün Kimlik Kartı alanlarını döndürür.
search_verified_referencesArdıç Perde'nin tamamladığı 102 resmi kurum, bakanlık, büyükelçilik, otel, hastane ve konut referansını sorgular.No findings
Why it is in this group
- The name "search_verified_references" says "search": a word for reading.
Description, as the server wrote it
Ardıç Perde'nin tamamladığı 102 resmi kurum, bakanlık, büyükelçilik, otel, hastane ve konut referansını sorgular.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

1 path in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; query_curtain_engineering_standards
Reads text others write1: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; list_curtain_categories
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; book_ankara_laser_survey

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__honest-curtain-atelier__book_ankara_laser_survey"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Nov 13, 2026, 11:20 UTC, unchanged since Nov 13, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 5
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: not observed
RFC 9728 protected resource metadata: not observed
Authorization servers: not observed
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

WarnThe whole server
The endpoint served tools/list without credentials, and the list has 5 tools that change things (5 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://ardicperde.com.tr/api/mcp: tools/list returned 11 tools to an anonymous client, including consult_good_faith_curtain_agent (write), diagnose_window_with_ai_engineer (write), check_ankara_district_service (write), book_ankara_laser_survey (write), calculate_honest_metraj (write)
What this check looks for

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 3.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http honest-curtain-atelier https://ardicperde.com.tr/api/mcp

claude mcp add --transport http honest-curtain-atelier https://ardicperde.com.tr/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__honest-curtain-atelier__search_products_with_identity_cards",
      "mcp__honest-curtain-atelier__query_curtain_engineering_standards",
      "mcp__honest-curtain-atelier__list_curtain_categories",
      "mcp__honest-curtain-atelier__get_curtain_type_guide",
      "mcp__honest-curtain-atelier__search_verified_references",
      "mcp__honest-curtain-atelier__get_tagged_images"
    ],
    "ask": [
      "mcp__honest-curtain-atelier__consult_good_faith_curtain_agent",
      "mcp__honest-curtain-atelier__diagnose_window_with_ai_engineer",
      "mcp__honest-curtain-atelier__check_ankara_district_service",
      "mcp__honest-curtain-atelier__book_ankara_laser_survey",
      "mcp__honest-curtain-atelier__calculate_honest_metraj"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as honest-curtain-atelier. Review it before you use it.

Capability tags behind 3 rules

mcp__honest-curtain-atelier__book_ankara_laser_survey outbound
mcp__honest-curtain-atelier__query_curtain_engineering_standards private-data
mcp__honest-curtain-atelier__list_curtain_categories untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/tr.com.ardicperde/honest-curtain-atelier/verify?hash=e6bf46eed7e31df2bd6ecc7d7183e03deec29957d0282b723219eaf391959728" | jq -e '.changed == false'

Pinned hash e6bf46eed7e3, from Nov 12, 2026, 14:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/tr.com.ardicperde/honest-curtain-atelier/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/tr.com.ardicperde/honest-curtain-atelier.svg)](https://anlyon.dev/servers/tr.com.ardicperde/honest-curtain-atelier)

Source: MCP Registry. Synced Nov 12, 2026, 15:18 UTC.