# `uk.co.reliness/code-utilities` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/uk.co.reliness/code-utilities
- JSON: https://anlyon.dev/api/v1/servers/uk.co.reliness/code-utilities
- Version: 1.5.0 (active)
- Publisher: uk.co.reliness (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-11-07T12:17:38.664Z

Title and description, as the publisher wrote them:

```untrusted-server-text
UK Data: Code utilities
Deterministic string, list and number routines: palindromes, sorting, searching, validation, merging
```

Scanned 2026-11-07T12:18:07.766Z over streamable-http.

**32 tools: 2 do something that can't be undone, 11 change things and 19 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 2 | ask |
| Changes things | write | 11 | ask |
| Only reads | read | 19 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__code-utilities__min_meeting_rooms` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__code-utilities__binary_addition` `mcp__code-utilities__binary_search` `mcp__code-utilities__can_attend_meetings` `mcp__code-utilities__count_bits` `mcp__code-utilities__find_duplicate_number` `mcp__code-utilities__find_equilibrium_index` `mcp__code-utilities__find_first_non_repeating_char` `mcp__code-utilities__find_kth_smallest` `mcp__code-utilities__find_longest_word` `mcp__code-utilities__find_majority_element` `mcp__code-utilities__find_max_subarray_sum` `mcp__code-utilities__find_minimum_rotated_sorted_array` `mcp__code-utilities__find_missing_number` `mcp__code-utilities__find_n_largest` `mcp__code-utilities__find_next_greater_element` `mcp__code-utilities__find_pairs_with_sum` `mcp__code-utilities__find_peak_element` `mcp__code-utilities__flatten_list` `mcp__code-utilities__is_anagram` `mcp__code-utilities__is_palindrome` `mcp__code-utilities__is_perfect_square` `mcp__code-utilities__is_power` `mcp__code-utilities__is_rotation` `mcp__code-utilities__is_sum_of_cubes` `mcp__code-utilities__is_valid_ip_address` `mcp__code-utilities__is_valid_parentheses` `mcp__code-utilities__merge_dictionaries` `mcp__code-utilities__merge_sorted_lists` `mcp__code-utilities__min_meeting_rooms` `mcp__code-utilities__reverse_string` `mcp__code-utilities__sort_numbers` `mcp__code-utilities__validate_sudoku` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

- **warn** Annotations that disagree with the tool in `merge_dictionaries` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "merge_dictionaries" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "merge_dictionaries" says "merge": a word for a change that another call does not undo.
```

- **warn** Annotations that disagree with the tool in `binary_addition` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "binary_addition" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "add": a word for a change.
```

- **warn** Annotations that disagree with the tool in `merge_sorted_lists` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "merge_sorted_lists" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "merge_sorted_lists" says "merge": a word for a change that another call does not undo.
```


## Can't be undone (2)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `merge_dictionaries`

- The name "merge_dictionaries" says "merge": a word for a change that another call does not undo.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Merges two dictionaries into a single dictionary, with values from the second dictionary overwriting those from the first for duplicate keys. (cost: 1 credit)
```

### `merge_sorted_lists`

- The name "merge_sorted_lists" says "merge": a word for a change that another call does not undo.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Merges two sorted lists into a single sorted list maintaining ascending order. Returns the merged sorted list. (cost: 1 credit)
```

## Changes things (11)

Creates or changes something that can be changed back. Claude Code: ask.

### `binary_addition`

- The description's first verb is "add": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Adds two binary numbers represented as strings and returns the sum as a binary string. Performs binary arithmetic with carry propagation. (cost: 1 credit)
```

### `can_attend_meetings`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Determines if a person can attend all meetings given a list of time intervals by checking for overlapping time slots. Returns true if no meetings conflict, false otherwise. (cost: 1 credit)
```

### `is_anagram`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if two words are anagrams by comparing if they contain the same characters with the same frequencies, ignoring case and whitespace. (cost: 1 credit)
```

### `is_palindrome`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a string is a valid palindrome, considering only alphanumeric characters and ignoring case and spaces. (cost: 1 credit)
```

### `is_perfect_square`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a number is a perfect square (i.e., the square of an integer). (cost: 1 credit)
```

### `is_power`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a given number is an exact integer power of a specified base. Returns true if num = base^k for some non-negative integer k, false otherwise. (cost: 1 credit)
```

### `is_rotation`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if one string is a rotation of another string by verifying if str1 appears in str2 concatenated with itself. Returns true if str1 is a rotation of str2, false otherwise. (cost: 1 credit)
```

### `is_sum_of_cubes`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a number equals the sum of the cubes of its digits (e.g., 153 = 1³ + 5³ + 3³). Returns true if the condition holds, false otherwise. (cost: 1 credit)
```

### `is_valid_parentheses`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a string contains properly balanced and nested parentheses, brackets, and braces. Returns true if every opening symbol has a matching closing symbol in the correct order. (cost: 1 credit)
```

### `reverse_string`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Reverses the order of characters in a given string, returning the string backwards. (cost: 1 credit)
```

### `sort_numbers`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Sorts a list of numbers in ascending order using a deterministic sorting algorithm. (cost: 1 credit)
```

## Only reads (19)

Looks things up and changes nothing. Claude Code: allow.

### `binary_search`

- The name "binary_search" says "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Performs binary search on a sorted list to find the index of a target value, returning -1 if not found. (cost: 1 credit)
```

### `count_bits`

- The name "count_bits" says "count": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Counts the number of set bits (1's) in the binary representation of a non-negative integer. (cost: 1 credit)
```

### `find_duplicate_number`

- The name "find_duplicate_number" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the duplicate number in a list of integers where exactly one number appears more than once. Returns the duplicate value. (cost: 1 credit)
```

### `find_equilibrium_index`

- The name "find_equilibrium_index" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the equilibrium index in an array where the sum of elements to the left equals the sum of elements to the right. Returns -1 if no such index exists. (cost: 1 credit)
```

### `find_first_non_repeating_char`

- The name "find_first_non_repeating_char" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the first character in a string that appears only once. Returns null if all characters repeat. (cost: 1 credit)
```

### `find_kth_smallest`

- The name "find_kth_smallest" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the kth smallest number in an unsorted list (1-indexed, where k=1 returns the smallest element). (cost: 1 credit)
```

### `find_longest_word`

- The name "find_longest_word" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds and returns the longest word in a given text string. If multiple words have the same maximum length, returns the first occurrence. (cost: 1 credit)
```

### `find_majority_element`

- The name "find_majority_element" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the majority element in a list that appears more than ⌊n/2⌋ times using Boyer-Moore voting algorithm. Returns the majority element if it exists, null otherwise. (cost: 1 credit)
```

### `find_max_subarray_sum`

- The name "find_max_subarray_sum" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the maximum sum of any contiguous subarray using Kadane's algorithm. (cost: 1 credit)
```

### `find_minimum_rotated_sorted_array`

- The name "find_minimum_rotated_sorted_array" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the minimum element in a rotated sorted array using binary search. The array was originally sorted in ascending order then rotated at some pivot point. (cost: 1 credit)
```

### `find_missing_number`

- The name "find_missing_number" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the missing number in a sequence of integers from 0 to n where exactly one number is missing. Uses sum formula or XOR method. (cost: 1 credit)
```

### `find_n_largest`

- The name "find_n_largest" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the n largest numbers from a list and returns them in descending order. (cost: 1 credit)
```

### `find_next_greater_element`

- The name "find_next_greater_element" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
For each element in a list, finds the next greater element to its right. Returns -1 if no greater element exists. (cost: 1 credit)
```

### `find_pairs_with_sum`

- The name "find_pairs_with_sum" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds all unique pairs of integers in a list that sum to a specified target value. Returns pairs as arrays. (cost: 1 credit)
```

### `find_peak_element`

- The name "find_peak_element" says "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds a peak element in a list where an element is greater than its neighbors. Returns the index of any peak element found. (cost: 1 credit)
```

### `flatten_list`

- The name "flatten_list" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Flattens a nested list structure into a single-level list by recursively extracting all elements regardless of nesting depth. (cost: 1 credit)
```

### `is_valid_ip_address`

- The description's first verb is "validate": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Validates whether a string is a properly formatted IPv4 address with four octets (0-255) separated by dots. (cost: 1 credit)
```

### `min_meeting_rooms`

- The description's first verb is "find": a word for reading.
- Tag private-data: The name "min_meeting_rooms" says "meeting": it reads calendars. The description's first sentence says "find" and "meeting": it reads calendars.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds the minimum number of meeting rooms required to accommodate all meetings given their time intervals. Uses interval scheduling algorithm. (cost: 1 credit)
```

### `validate_sudoku`

- The name "validate_sudoku" says "validate": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a 9x9 Sudoku board is valid by verifying that each row, column, and 3x3 sub-grid contains no duplicate digits 1-9. Returns true if valid, false otherwise. (cost: 1 credit)
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `code-utilities`:

```json
{
  "permissions": {
    "allow": [
      "mcp__code-utilities__is_valid_ip_address",
      "mcp__code-utilities__find_max_subarray_sum",
      "mcp__code-utilities__find_kth_smallest",
      "mcp__code-utilities__count_bits",
      "mcp__code-utilities__binary_search",
      "mcp__code-utilities__min_meeting_rooms",
      "mcp__code-utilities__find_next_greater_element",
      "mcp__code-utilities__find_pairs_with_sum",
      "mcp__code-utilities__find_n_largest",
      "mcp__code-utilities__find_minimum_rotated_sorted_array",
      "mcp__code-utilities__flatten_list",
      "mcp__code-utilities__find_first_non_repeating_char",
      "mcp__code-utilities__find_equilibrium_index",
      "mcp__code-utilities__find_missing_number",
      "mcp__code-utilities__find_longest_word",
      "mcp__code-utilities__find_peak_element",
      "mcp__code-utilities__find_duplicate_number",
      "mcp__code-utilities__validate_sudoku",
      "mcp__code-utilities__find_majority_element"
    ],
    "ask": [
      "mcp__code-utilities__merge_dictionaries",
      "mcp__code-utilities__reverse_string",
      "mcp__code-utilities__binary_addition",
      "mcp__code-utilities__is_palindrome",
      "mcp__code-utilities__sort_numbers",
      "mcp__code-utilities__is_perfect_square",
      "mcp__code-utilities__is_valid_parentheses",
      "mcp__code-utilities__is_anagram",
      "mcp__code-utilities__is_power",
      "mcp__code-utilities__can_attend_meetings",
      "mcp__code-utilities__is_rotation",
      "mcp__code-utilities__is_sum_of_cubes",
      "mcp__code-utilities__merge_sorted_lists"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__code-utilities__is_valid_ip_address`: untrusted-input
- `mcp__code-utilities__find_max_subarray_sum`: untrusted-input
- `mcp__code-utilities__merge_dictionaries`: untrusted-input
- `mcp__code-utilities__find_kth_smallest`: untrusted-input
- `mcp__code-utilities__count_bits`: untrusted-input
- `mcp__code-utilities__binary_search`: untrusted-input
- `mcp__code-utilities__reverse_string`: untrusted-input
- `mcp__code-utilities__min_meeting_rooms`: private-data, untrusted-input
- `mcp__code-utilities__find_next_greater_element`: untrusted-input
- `mcp__code-utilities__binary_addition`: untrusted-input
- `mcp__code-utilities__is_palindrome`: untrusted-input
- `mcp__code-utilities__sort_numbers`: untrusted-input
- `mcp__code-utilities__find_pairs_with_sum`: untrusted-input
- `mcp__code-utilities__is_perfect_square`: untrusted-input
- `mcp__code-utilities__find_n_largest`: untrusted-input
- `mcp__code-utilities__is_valid_parentheses`: untrusted-input
- `mcp__code-utilities__find_minimum_rotated_sorted_array`: untrusted-input
- `mcp__code-utilities__flatten_list`: untrusted-input
- `mcp__code-utilities__is_anagram`: untrusted-input
- `mcp__code-utilities__find_first_non_repeating_char`: untrusted-input
- `mcp__code-utilities__find_equilibrium_index`: untrusted-input
- `mcp__code-utilities__find_missing_number`: untrusted-input
- `mcp__code-utilities__is_power`: untrusted-input
- `mcp__code-utilities__find_longest_word`: untrusted-input
- `mcp__code-utilities__can_attend_meetings`: untrusted-input
- `mcp__code-utilities__is_rotation`: untrusted-input
- `mcp__code-utilities__find_peak_element`: untrusted-input
- `mcp__code-utilities__find_duplicate_number`: untrusted-input
- `mcp__code-utilities__is_sum_of_cubes`: untrusted-input
- `mcp__code-utilities__validate_sudoku`: untrusted-input
- `mcp__code-utilities__find_majority_element`: untrusted-input
- `mcp__code-utilities__merge_sorted_lists`: untrusted-input

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-11-08T06:19:57.228Z, unchanged since 2026-11-08T06:19:57.228Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `13` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `none` |
| Authorization servers | `none` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `not observed` |
| Client ID metadata documents | `not observed` |

- **high** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes))

```untrusted-server-text
The endpoint served tools/list without credentials, and the list has 13 tools that change things (2 irreversible, 11 write). Whether a call also works without credentials was not tested: tools are never called.

https://ukdata.reliness.co.uk/mcp/code-utilities: tools/list returned 32 tools to an anonymous client, including merge_dictionaries (irreversible), merge_sorted_lists (irreversible), reverse_string (write), binary_addition (write), is_palindrome (write) and 8 more
```