IMPOSSIBREW

uk.co.impossibrew.agent/beer-finderagent.impossibrew.co.ukstreamable-httpv1.0.0Scanned 2 hours ago

UK alcohol-free beer: product facts, comparisons, stockists, Shopify basket links and order help.

13 tools: 1 can delete or cancel things, 6 change things and 6 only read.

Reads private data · 0
Reads text others write · 13
Can send data out · 0
2 findings

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

13 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

order_helpHelp an IMPOSSIBREW customer with THEIR OWN orders and subscription: where is my order and when will it arrive, tracking, add a one-time box, skip, pause or cancel a subscription, …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Help an IMPOSSIBREW customer with THEIR OWN orders and subscription: where is my order and when will it arrive, tracking, add a one-time box, skip, pause or cancel a subscription, cancel an unshipped order, or report a problem. This talks to the AI Brewer, the same assistant as on impossibrew.co.uk. Pass the customer's words as message. Identity is checked by the AI Brewer: the customer's email plus the delivery postcode, or an order number (starts EC) plus either. If the customer has connected their email, you may look up their IMPOSSIBREW order emails to find the email address or an order number, but never guess them. On the first call omit conversationId; on every later call in the same chat pass back the conversationId you were given. Show the reply to the customer as written; do not add promises, dates or refunds it does not contain. Changes only happen after the customer says yes to the AI Brewer's confirmation question.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

ask_impossibrewAnswer customer questions from the official IMPOSSIBREW policy, the same source as the AI Brewer on impossibrew.co.uk.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Answer customer questions from the official IMPOSSIBREW policy, the same source as the AI Brewer on impossibrew.co.uk. Topics: dietary (gluten, vegan, allergens, carbs, sugar), nutrition, ingredients (Social Blend, ABV), safety (pregnancy, medication, driving, daily limit), delivery, freshness, returns, subscriptions, offers, where_to_buy, lab_points, contact. Quote the returned facts only; never add health effects, gluten-removal methods or medical advice.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
build_basketBuild a real IMPOSSIBREW Shopify basket and return a checkout link (Shop Pay or card on impossibrew.co.uk).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Build a real IMPOSSIBREW Shopify basket and return a checkout link (Shop Pay or card on impossibrew.co.uk). Use whenever the customer wants to buy, order, try or subscribe. One-time or subscription (frequency). Subscriptions are cancel-any-time and, exactly like the website, earn welcome gifts by box count: 2 boxes 1 free glass, 3 boxes 2 glasses, 4 boxes 2 glasses + a T-shirt (ask T-shirt size S-4XL only if the tool says need_shirt_size). Prices, discounts and gifts come from Shopify's own live readback; quote them exactly, never estimate. For a one-time basket the result includes the same beers on subscription, so tell the customer the saving and gifts if they switch. It does not place an order or take payment: the customer completes checkout on impossibrew.co.uk. Show the checkout link.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
build_boxBuild a ready-to-review one-time IMPOSSIBREW basket from the customer's constraints: specific beers, gluten-free only, number of cans and/or budget in GBP.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Build a ready-to-review one-time IMPOSSIBREW basket from the customer's constraints: specific beers, gluten-free only, number of cans and/or budget in GBP. Uses fresh live prices and availability and returns exact lines, subtotal and a Shopify cart link. Does not create an order, take payment or start a subscription; checkout happens on impossibrew.co.uk.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
build_shop_linkConstruct an exact Shopify cart permalink for 1 to 12 one-time item lines, after current variant/availability validation.Reads text others write1 finding
Why it is in this group
- The name "build_shop_link" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "build_shop_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "build_shop_link" says "link": a word for a change.
  What this check looks for
Description, as the server wrote it
Construct an exact Shopify cart permalink for 1 to 12 one-time item lines, after current variant/availability validation. Returns a link only: it does not create a cart, order, payment or subscription. Shipping and discounts are determined at checkout. Do not call for recurring purchases. Existing orders/accounts cannot be accessed or cancelled: offer https://impossibrew.co.uk/pages/contact-us as the concrete support link, without claiming cancellation.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
open_shopOpen the IMPOSSIBREW shop: a swipeable picker of every beer with its pack shot, per-can price and the subscribe-and-save gift ladder.Reads text others write1 finding
Why it is in this group
- The name "open_shop" says "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "open_shop" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "open_shop" says "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Open the IMPOSSIBREW shop: a swipeable picker of every beer with its pack shot, per-can price and the subscribe-and-save gift ladder. The customer picks boxes and taps Subscribe or Buy once to get a real Shopify basket. Accepts empty arguments. Do not add your own product images: the app shows the official pack shots.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
product_mentionsComposer typeahead: return product resource links for matching IMPOSSIBREW beer names.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Composer typeahead: return product resource links for matching IMPOSSIBREW beer names. Resource readback supplies live facts.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 6Looks things up and changes nothing.Show 6 read-only tools

browse_beersRead six featured IMPOSSIBREW beers with current exact-pack prices and availability.Reads text others writeNo findings
Why it is in this group
- The name "browse_beers" says "browse": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "browse_beers" says "browse": it reads web pages, which anyone can write.
Description, as the server wrote it
Read six featured IMPOSSIBREW beers with current exact-pack prices and availability. Not a full store catalogue.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
compare_alternativesRead our canonical published comparison pages for named alternatives.Reads text others writeNo findings
Why it is in this group
- The name "compare_alternatives" says "compare": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Read our canonical published comparison pages for named alternatives. Return our source-backed position, distinguish it from independent proof, and refresh commerce through the product tools.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
compare_beersCompare 2 to 4 specific IMPOSSIBREW beers: flavour, exact pack prices, availability and source descriptions.Reads text others writeNo findings
Why it is in this group
- The name "compare_beers" says "compare": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Compare 2 to 4 specific IMPOSSIBREW beers: flavour, exact pack prices, availability and source descriptions. Nutrition/allergens remain specific to each label.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
compare_pack_valueCompare available one-time IMPOSSIBREW packs using fresh store prices, per-can and per-litre arithmetic.Reads text others writeNo findings
Why it is in this group
- The name "compare_pack_value" says "compare": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Compare available one-time IMPOSSIBREW packs using fresh store prices, per-can and per-litre arithmetic. Rank only the same beer and can size. This excludes delivery, checkout discounts and retailer prices; never promise the cheapest overall deal.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
find_stockistsRead separate online retailer buying destinations and verified UK venues with honest source health.Reads text others writeNo findings
Why it is in this group
- The name "find_stockists" says "find": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Read separate online retailer buying destinations and verified UK venues with honest source health. Retailer links are not live shelf-stock, delivery-coverage or price checks. Optional town/postcode text filters physical venues only. Never infer availability.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_productRead product facts and current exact variants for one beer.Reads text others writeNo findings
Why it is in this group
- The name "get_product" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Read product facts and current exact variants for one beer. Use the returned variant ID, never infer it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write13: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; ask_impossibrew
browse_beers
build_basket
build_box
build_shop_link
compare_alternatives
compare_beers
compare_pack_value
find_stockists
get_product
open_shop
order_help
and 1 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnopen_shop
The server marks "open_shop" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "open_shop" says "open": a word for a change.
What this check looks for
Warnbuild_shop_link
The server marks "build_shop_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "build_shop_link" says "link": a word for a change.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http beer-finder https://agent.impossibrew.co.uk/mcp/registry

claude mcp add --transport http beer-finder https://agent.impossibrew.co.uk/mcp/registry

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__beer-finder__browse_beers",
      "mcp__beer-finder__get_product",
      "mcp__beer-finder__compare_beers",
      "mcp__beer-finder__compare_alternatives",
      "mcp__beer-finder__compare_pack_value",
      "mcp__beer-finder__find_stockists"
    ],
    "ask": [
      "mcp__beer-finder__open_shop",
      "mcp__beer-finder__ask_impossibrew",
      "mcp__beer-finder__build_box",
      "mcp__beer-finder__build_basket",
      "mcp__beer-finder__build_shop_link",
      "mcp__beer-finder__product_mentions"
    ],
    "deny": [
      "mcp__beer-finder__order_help"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as beer-finder. Review it before you use it.

Capability tags behind 13 rules

mcp__beer-finder__open_shop untrusted-input
mcp__beer-finder__browse_beers untrusted-input
mcp__beer-finder__get_product untrusted-input
mcp__beer-finder__compare_beers untrusted-input
mcp__beer-finder__compare_alternatives untrusted-input
mcp__beer-finder__order_help untrusted-input
mcp__beer-finder__ask_impossibrew untrusted-input
mcp__beer-finder__build_box untrusted-input
mcp__beer-finder__build_basket untrusted-input
mcp__beer-finder__build_shop_link untrusted-input
mcp__beer-finder__compare_pack_value untrusted-input
mcp__beer-finder__find_stockists untrusted-input
mcp__beer-finder__product_mentions untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/uk.co.impossibrew.agent/beer-finder/verify?hash=39f42d088b4c6e6812a89a98ab0f167cc55cd768a29af90f1895433fb2d3c64a" | jq -e '.changed == false'

Pinned hash 39f42d088b4c, from Nov 2, 2026, 18:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/uk.co.impossibrew.agent/beer-finder/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/uk.co.impossibrew.agent/beer-finder.svg)](https://anlyon.dev/servers/uk.co.impossibrew.agent/beer-finder)

Source: MCP Registry. Synced Nov 2, 2026, 19:18 UTC.