# `uk.co.reliness/maths-statistics` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/uk.co.reliness/maths-statistics
- JSON: https://anlyon.dev/api/v1/servers/uk.co.reliness/maths-statistics
- Version: 1.5.0 (active)
- Publisher: uk.co.reliness (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-11-07T12:18:07.766Z

Title and description, as the publisher wrote them:

```untrusted-server-text
UK Data: Maths and statistics
Averages, spread, chi-square, regression, primes, factorials, probability, areas and distances
```

Scanned 2026-11-07T12:18:58.843Z over streamable-http.

**22 tools: 21 change things and 1 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 21 | ask |
| Only reads | read | 1 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__maths-statistics__average` `mcp__maths-statistics__calculate_area` `mcp__maths-statistics__calculate_clock_angle` `mcp__maths-statistics__calculate_distance` `mcp__maths-statistics__calculate_median` `mcp__maths-statistics__calculate_standard_deviation` `mcp__maths-statistics__chi_square_independence_test` `mcp__maths-statistics__cosine_similarity` `mcp__maths-statistics__create_histogram` `mcp__maths-statistics__dice_roll_probability` `mcp__maths-statistics__euclidean_distance` `mcp__maths-statistics__factorial` `mcp__maths-statistics__fibonacci` `mcp__maths-statistics__greatest_common_divisor` `mcp__maths-statistics__is_power_of_two` `mcp__maths-statistics__is_prime` `mcp__maths-statistics__least_common_multiple` `mcp__maths-statistics__linear_regression_prediction` `mcp__maths-statistics__permutation_count` `mcp__maths-statistics__polygon_area_shoelace` `mcp__maths-statistics__probability_consecutive_rolls` `mcp__maths-statistics__solve_quadratic` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

- **warn** Annotations that disagree with the tool in `fibonacci` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "fibonacci" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "generate": a word for a change.
```

- **warn** Annotations that disagree with the tool in `create_histogram` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "create_histogram" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "create_histogram" says "create": a word for a change.
```


## Changes things (21)

Creates or changes something that can be changed back. Claude Code: ask.

### `average`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the arithmetic mean (average) of a list of numbers by summing all values and dividing by the count. (cost: 1 credit)
```

### `calculate_area`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the area of geometric shapes including circle (πr²), triangle (½×base×height), rectangle (length×width), and square (side²). Returns area in square units. (cost: 1 credit)
```

### `calculate_clock_angle`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the smaller angle in degrees between the hour and minute hands of an analog clock given the time. Returns angle between 0 and 180 degrees. (cost: 1 credit)
```

### `calculate_distance`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the great-circle distance between two geographic points using the Haversine formula. Returns distance in kilometers, miles, or nautical miles. (cost: 1 credit)
```

### `calculate_median`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the median (middle value) of a list of numbers. For even-length lists, returns the average of the two middle values. (cost: 1 credit)
```

### `calculate_standard_deviation`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the population standard deviation of a list of numbers using the standard formula: sqrt(Σ(x - μ)² / N). (cost: 1 credit)
```

### `chi_square_independence_test`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Performs a Chi-Square test for independence on a 2x2 contingency table. Returns the chi-square statistic, p-value, and whether to reject the null hypothesis at the given significance level. (cost: 1 credit)
```

### `cosine_similarity`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the cosine similarity between two vectors, returning a value between -1 and 1 where 1 indicates identical direction. (cost: 1 credit)
```

### `create_histogram`

- The name "create_histogram" says "create": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Creates a histogram by counting the frequency of data points falling into specified bins or ranges. Returns the frequency count for each bin. (cost: 1 credit)
```

### `dice_roll_probability`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the probability of rolling a specific sum with a given number of dice, each with a specified number of faces. (cost: 1 credit)
```

### `euclidean_distance`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Computes the Euclidean distance between two points in a 2D plane using the formula: sqrt((x2-x1)² + (y2-y1)²). (cost: 1 credit)
```

### `factorial`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the factorial of a non-negative integer n, which is the product of all positive integers less than or equal to n. Returns n! = n × (n-1) × ... × 1. (cost: 1 credit)
```

### `fibonacci`

- The description's first verb is "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Generates the first n numbers in the Fibonacci sequence, where each number is the sum of the two preceding ones, starting with 0 and 1. (cost: 1 credit)
```

### `greatest_common_divisor`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Computes the greatest common divisor (GCD) of two non-negative integers using the Euclidean algorithm. (cost: 1 credit)
```

### `is_power_of_two`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a number is a power of two (2^n for some non-negative integer n). (cost: 1 credit)
```

### `is_prime`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Checks if a positive integer is a prime number (only divisible by 1 and itself). Returns false for numbers less than 2. (cost: 1 credit)
```

### `least_common_multiple`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Computes the least common multiple (LCM) of two positive integers using the relationship LCM(a,b) = (a × b) / GCD(a,b). (cost: 1 credit)
```

### `linear_regression_prediction`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Predicts the y-value for a given x-value using simple linear regression (least squares method) fitted to the provided data points. (cost: 1 credit)
```

### `polygon_area_shoelace`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the area of a polygon given its vertices using the shoelace formula (also known as the surveyor's formula). (cost: 1 credit)
```

### `probability_consecutive_rolls`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the probability of rolling a specific value consecutively for a given number of rolls on a die with specified sides using the formula (1/num_sides)^num_rolls. Returns probability as a decimal between 0 and 1. (cost: 1 credit)
```

### `solve_quadratic`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Computes the real and complex roots of a quadratic equation ax² + bx + c = 0 using the quadratic formula. Returns both roots or indicates if no real solutions exist. (cost: 1 credit)
```

## Only reads (1)

Looks things up and changes nothing. Claude Code: allow.

### `permutation_count`

- The name "permutation_count" says "count": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Calculates the number of permutations P(n,k) = n!/(n-k)! representing ordered arrangements of k elements selected from n elements. Returns the count as an integer. (cost: 1 credit)
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `maths-statistics`:

```json
{
  "permissions": {
    "allow": [
      "mcp__maths-statistics__permutation_count"
    ],
    "ask": [
      "mcp__maths-statistics__is_power_of_two",
      "mcp__maths-statistics__dice_roll_probability",
      "mcp__maths-statistics__polygon_area_shoelace",
      "mcp__maths-statistics__cosine_similarity",
      "mcp__maths-statistics__greatest_common_divisor",
      "mcp__maths-statistics__linear_regression_prediction",
      "mcp__maths-statistics__least_common_multiple",
      "mcp__maths-statistics__calculate_median",
      "mcp__maths-statistics__euclidean_distance",
      "mcp__maths-statistics__fibonacci",
      "mcp__maths-statistics__chi_square_independence_test",
      "mcp__maths-statistics__create_histogram",
      "mcp__maths-statistics__calculate_clock_angle",
      "mcp__maths-statistics__factorial",
      "mcp__maths-statistics__calculate_distance",
      "mcp__maths-statistics__calculate_area",
      "mcp__maths-statistics__calculate_standard_deviation",
      "mcp__maths-statistics__average",
      "mcp__maths-statistics__is_prime",
      "mcp__maths-statistics__solve_quadratic",
      "mcp__maths-statistics__probability_consecutive_rolls"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__maths-statistics__is_power_of_two`: untrusted-input
- `mcp__maths-statistics__dice_roll_probability`: untrusted-input
- `mcp__maths-statistics__polygon_area_shoelace`: untrusted-input
- `mcp__maths-statistics__cosine_similarity`: untrusted-input
- `mcp__maths-statistics__greatest_common_divisor`: untrusted-input
- `mcp__maths-statistics__linear_regression_prediction`: untrusted-input
- `mcp__maths-statistics__least_common_multiple`: untrusted-input
- `mcp__maths-statistics__calculate_median`: untrusted-input
- `mcp__maths-statistics__euclidean_distance`: untrusted-input
- `mcp__maths-statistics__fibonacci`: untrusted-input
- `mcp__maths-statistics__chi_square_independence_test`: untrusted-input
- `mcp__maths-statistics__create_histogram`: untrusted-input
- `mcp__maths-statistics__calculate_clock_angle`: untrusted-input
- `mcp__maths-statistics__factorial`: untrusted-input
- `mcp__maths-statistics__calculate_distance`: untrusted-input
- `mcp__maths-statistics__calculate_area`: untrusted-input
- `mcp__maths-statistics__calculate_standard_deviation`: untrusted-input
- `mcp__maths-statistics__average`: untrusted-input
- `mcp__maths-statistics__is_prime`: untrusted-input
- `mcp__maths-statistics__solve_quadratic`: untrusted-input
- `mcp__maths-statistics__permutation_count`: untrusted-input
- `mcp__maths-statistics__probability_consecutive_rolls`: untrusted-input

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-11-08T06:21:59.593Z, unchanged since 2026-11-08T06:21:59.593Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `21` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `none` |
| Authorization servers | `none` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `not observed` |
| Client ID metadata documents | `not observed` |

- **warn** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes))

```untrusted-server-text
The endpoint served tools/list without credentials, and the list has 21 tools that change things (21 write). Whether a call also works without credentials was not tested: tools are never called.

https://ukdata.reliness.co.uk/mcp/maths-statistics: tools/list returned 22 tools to an anonymous client, including is_power_of_two (write), dice_roll_probability (write), polygon_area_shoelace (write), cosine_similarity (write), greatest_common_divisor (write) and 16 more
```