# `uk.co.reliness/uk-parliament-legislation` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/uk.co.reliness/uk-parliament-legislation
- JSON: https://anlyon.dev/api/v1/servers/uk.co.reliness/uk-parliament-legislation
- Version: 1.5.0 (active)
- Publisher: uk.co.reliness (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-11-07T00:18:15.184Z

Title and description, as the publisher wrote them:

```untrusted-server-text
UK Data: UK Parliament bills and SIs
Where a UK bill, treaty or statutory instrument is in Parliament: stages, sponsors, amendments
```

Scanned 2026-11-07T00:19:19.536Z over streamable-http.

**9 tools: 9 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 0 | ask |
| Only reads | read | 9 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__uk-parliament-legislation__bill_documents` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__uk-parliament-legislation__acts_recent_royal_assent` `mcp__uk-parliament-legislation__bill_amendments` `mcp__uk-parliament-legislation__bill_documents` `mcp__uk-parliament-legislation__bill_search` `mcp__uk-parliament-legislation__bill_stages_timeline` `mcp__uk-parliament-legislation__bill_status` `mcp__uk-parliament-legislation__bills_recently_updated` `mcp__uk-parliament-legislation__statutory_instrument_search` `mcp__uk-parliament-legislation__treaty_search` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

No check matched anything in these tool definitions.


## Only reads (9)

Looks things up and changes nothing. Claude Code: allow.

### `acts_recent_royal_assent`

- The description's first verb is "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Lists bills that have received Royal Assent and become Acts of Parliament, most recent first, with the Royal Assent date and the Act's title. For compliance, HR and legal teams who need to hear about new Acts quickly. Source: UK Parliament Bills API. It covers UK Parliament Acts only, not commencement dates or statutory instruments, and does not show the Act text (see legislation.gov.uk). (cost: 1 credit)
```

### `bill_amendments`

- The description's first verb is "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Lists the amendments tabled at one stage of a UK bill, with the clause or schedule targeted, the amendment wording, its sponsors and the decision recorded (agreed, negatived, withdrawn, not moved). For public affairs teams and campaigners tracking whether an amendment got through. Source: UK Parliament Bills API. Needs the bill ID and a stage_id from bill_stages_timeline; can filter by decision or a word in the amendment, and pages with skip. Decisions are null until Parliament records them. (cost: 1 credit)
```

### `bill_documents`

- The description's first verb is "list": a word for reading.
- Tag private-data: The name "bill_documents" says "document": it reads documents. The description's first sentence says "list" and "document": it reads documents.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "list" and "web": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
Lists the documents published for a UK bill, newest first: bill texts, explanatory notes, amendment papers, impact assessments, delegated powers memoranda and committee reports, with direct PDF and web links. For lawyers and policy staff after the latest bill text or notes. Source: UK Parliament Bills API. It returns links, not the document text; pair it with a URL or PDF reader to read one. (cost: 1 credit)
```

### `bill_search`

- The name "bill_search" says "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds UK Parliament bills whose title matches a keyword, newest-updated first so current bills come before old ones, with each bill's ID, type, current stage and house, whether it became an Act, and a link to its Parliament page. For journalists, landlords, campaigners and students asking "is there a bill about X". Source: UK Parliament Bills API, which covers recent parliamentary sessions; older bills may be missing. It matches bill titles only, not bill text, and does not cover Scottish, Welsh or Northern Ireland legislatures. (cost: 1 credit)
```

### `bill_stages_timeline`

- The description's first verb is "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Lists every stage a UK bill has been through or has scheduled, in order, with the house and each sitting date: first and second reading, committee, report, third reading, Lords stages, consideration of amendments, Royal Assent. Saves researchers and public affairs teams from piecing together a bill's passage by hand. Source: UK Parliament Bills API. It gives dates, not debate content or votes; each stage_id can be passed to bill_amendments. (cost: 1 credit)
```

### `bill_status`

- The name "bill_status" says "status": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Shows where one UK bill is now: its current stage and house with sitting dates, whether it has become an Act, been withdrawn or defeated, its long title and its sponsoring members and departments. Answers "where is the X bill now", "has it passed" and "who introduced it". Source: UK Parliament Bills API. Needs the bill ID from bill_search; it does not predict when a bill will pass. (cost: 1 credit)
```

### `bills_recently_updated`

- The description's first verb is "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Lists the UK Parliament bills whose records changed most recently, with current stage, house, upcoming or latest sitting dates and status. A quick "what is moving through Parliament" view for public affairs teams and journalists. Source: UK Parliament Bills API. Ordered by when Parliament last updated the bill record, which usually but not always reflects new parliamentary activity. (cost: 1 credit)
```

### `statutory_instrument_search`

- The name "statutory_instrument_search" says "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds statutory instruments (regulations and orders) laid before the UK Parliament by words in their name, with the procedure they follow (for example draft affirmative or negative), laying dates in each House, made date and SI number where issued. For compliance and legal teams asking what regulations were just laid on a topic and how Parliament will deal with them. Source: UK Parliament Statutory Instruments API. It covers laying and procedure, not the regulation text (see legislation.gov.uk). (cost: 1 credit)
```

### `treaty_search`

- The name "treaty_search" says "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Finds treaties laid before the UK Parliament by keyword, with the treaty name, command paper number, treaty series citation, signed and laid dates, lead department, whether the scrutiny period has concluded so the Government can ratify, and any scheduled debate. For trade lawyers, exporters and academics checking UK treaty scrutiny under the Constitutional Reform and Governance Act 2010. Source: UK Parliament Treaties API. It does not give treaty text beyond a GOV.UK link. (cost: 1 credit)
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `uk-parliament-legislation`:

```json
{
  "permissions": {
    "allow": [
      "mcp__uk-parliament-legislation__bill_search",
      "mcp__uk-parliament-legislation__bill_status",
      "mcp__uk-parliament-legislation__bill_stages_timeline",
      "mcp__uk-parliament-legislation__bill_documents",
      "mcp__uk-parliament-legislation__bill_amendments",
      "mcp__uk-parliament-legislation__bills_recently_updated",
      "mcp__uk-parliament-legislation__acts_recent_royal_assent",
      "mcp__uk-parliament-legislation__treaty_search",
      "mcp__uk-parliament-legislation__statutory_instrument_search"
    ],
    "ask": [],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__uk-parliament-legislation__bill_search`: untrusted-input
- `mcp__uk-parliament-legislation__bill_status`: untrusted-input
- `mcp__uk-parliament-legislation__bill_stages_timeline`: untrusted-input
- `mcp__uk-parliament-legislation__bill_documents`: private-data, untrusted-input
- `mcp__uk-parliament-legislation__bill_amendments`: untrusted-input
- `mcp__uk-parliament-legislation__bills_recently_updated`: untrusted-input
- `mcp__uk-parliament-legislation__acts_recent_royal_assent`: untrusted-input
- `mcp__uk-parliament-legislation__treaty_search`: untrusted-input
- `mcp__uk-parliament-legislation__statutory_instrument_search`: untrusted-input

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-11-14T12:24:13.181Z, unchanged since 2026-11-07T05:23:37.026Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `0` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `none` |
| Authorization servers | `none` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `not observed` |
| Client ID metadata documents | `not observed` |