Can the UK Data: US politics and government MCP server delete data?

No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.

Can the UK Data: US politics and government MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the UK Data: US politics and government MCP server have?

5 tools: 2 write, 3 read. executive_order_by_number, us_shutdown_now, federal_register_document, us_government_operating_status and opm_status_history.

Does the UK Data: US politics and government MCP server need sign-in or OAuth?

Its remote endpoint listed its tools to an anonymous client, without sign-in.

Does the UK Data: US politics and government MCP server send data to outside services?

None of its tools sends, posts or publishes, or takes a recipient, channel or URL.

Has the UK Data: US politics and government MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 7, 2026.

UK Data: US politics and government MCP server

uk.co.reliness/us-politics-governmentreliness.co.ukstreamable-httpv1.5.0Scanned 8 days ago

US government records: presidential actions, Congress votes and members, federal operating status

5 tools: 2 change things and 3 only read.

Reads private data · 1
Reads text others write · 5
Can send data out · 0
No findings

Tools listed without sign-in. Remote posture

With Anlyon

2 tools here change things. Govern them.

Anlyon lists the tools and adopts none.
Each tool you adopt gets approvals and receipts.
Your agent never holds the key.

Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

What the UK Data: US politics and government MCP server can do

The UK Data: US politics and government MCP server is published by reliness.co.uk, a domain the MCP Registry verified. It has 5 tools. It can create or change data (2 tools: executive_order_by_number and us_shutdown_now), but cannot delete data. 3 tools only read.

1 tool reads private data (federal_register_document); 5 tools bring in text other people can write (executive_order_by_number, federal_register_document, us_government_operating_status and 2 more).

None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.

Its remote endpoint lists its tools without sign-in.

Last scanned Nov 7, 2026, version 1.5.0.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

5 tools

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

executive_order_by_numberLooks up one US executive order by its EO number (for example 14148) and returns its title, signing and publication dates, Federal Register citation, president and official govinfo…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Looks up one US executive order by its EO number (for example 14148) and returns its title, signing and publication dates, Federal Register citation, president and official govinfo PDF. For anyone who sees an EO number in the news or a court filing and wants to know what it is, without guessing. Source: the Federal Register (FederalRegister.gov API), which covers orders published from 1994 onward; older orders are not found here. (cost: 1 credit)
Annotations the server declares
- title: executive order by number
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
us_shutdown_nowIs the US government shut down right now?Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Is the US government shut down right now? Answers yes or no from the US Office of Personnel Management's current operating status, flagging a lapse in appropriations and telling a partial lapse (only some agencies unfunded) apart from a full one, with OPM's exact wording and when the notice was posted. It reflects OPM's posted status only: it does not forecast funding deadlines, and during a lapse each agency decides which staff keep working. (cost: 1 credit)
Annotations the server declares
- title: us shutdown now
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 3Looks things up and changes nothing.Show 3 read-only tools

federal_register_documentFetches one Federal Register document by its document number (for example 2025-02006): type, agencies, publication and signing dates, FR citation, effective date, comment deadline,…Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
What it can reach
- private-dataThe name "federal_register_document" says "document": it reads documents.
- private-dataThe description's first sentence says "fetch" and "document": it reads documents.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "fetch" and "comment": it reads comments, which other people can write.
Description, as the server wrote it
Fetches one Federal Register document by its document number (for example 2025-02006): type, agencies, publication and signing dates, FR citation, effective date, comment deadline, docket and the official govinfo PDF. For compliance teams, lawyers and researchers who have the document number from a notice, docket or URL and want the primary record rather than a secondary summary. Source: the Federal Register (FederalRegister.gov API). It needs the document number: it does not resolve a page citation such as 90 FR 8443, and it does not return the full text (follow html_url or pdf_url). (cost: 1 credit)
Annotations the server declares
- title: federal register document
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
opm_status_historyWhen did OPM last close federal offices or allow early departure?Reads text others writeNo findings
Why it is in this group
- The name "opm_status_history" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
When did OPM last close federal offices or allow early departure? Lists the US Office of Personnel Management's past operating status postings for the Washington, DC area, newest first: closures, delayed arrivals, early departures, unscheduled leave or telework days and lapses in appropriations, each with the date it applied to and when it was posted and replaced. Useful for HR, payroll and contractor questions. Ordinary open days are mostly not listed, and the online history covers recent years only. (cost: 1 credit)
Annotations the server declares
- title: opm status history
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
us_government_operating_statusAre federal offices open today?Reads text others writeNo findings
Why it is in this group
- The name "us_government_operating_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Are federal offices open today? Returns the US Office of Personnel Management's current operating status for the federal government in the Washington, DC area (open, delayed arrival, early departure, closed, unscheduled leave or telework allowed, or a lapse in appropriations), with the date it applies to and OPM's guidance for employees. Useful for federal workers, contractors and visitors on snow days and funding deadlines. It covers the DC area only; agencies elsewhere set their own local status, and it does not cover individual agency closures. (cost: 1 credit)
Annotations the server declares
- title: us government operating status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; federal_register_document
Reads text others write5: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; executive_order_by_number
federal_register_document
opm_status_history
us_government_operating_status
us_shutdown_now
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Nov 14, 2026, 12:24 UTC, unchanged since Nov 7, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 2
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: not observed
RFC 9728 protected resource metadata: not observed
Authorization servers: not observed
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

WarnThe whole server
The endpoint served tools/list without credentials, and the list has 2 tools that change things (2 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://ukdata.reliness.co.uk/mcp/us-politics-government: tools/list returned 5 tools to an anonymous client, including executive_order_by_number (write), us_shutdown_now (write)
What this check looks for

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.5.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http us-politics-government https://ukdata.reliness.co.uk/mcp/us-politics-government

claude mcp add --transport http us-politics-government https://ukdata.reliness.co.uk/mcp/us-politics-government

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__us-politics-government__federal_register_document",
      "mcp__us-politics-government__us_government_operating_status",
      "mcp__us-politics-government__opm_status_history"
    ],
    "ask": [
      "mcp__us-politics-government__executive_order_by_number",
      "mcp__us-politics-government__us_shutdown_now"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as us-politics-government. Review it before you use it.

Capability tags behind 5 rules

mcp__us-politics-government__executive_order_by_number untrusted-input
mcp__us-politics-government__federal_register_document private-data, untrusted-input
mcp__us-politics-government__us_government_operating_status untrusted-input
mcp__us-politics-government__us_shutdown_now untrusted-input
mcp__us-politics-government__opm_status_history untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/uk.co.reliness/us-politics-government/verify?hash=3493343e7c7adb3f98141a6247c7b8ca35250e8a6d549e69e172ed29b1d9b17e" | jq -e '.changed == false'

Pinned hash 3493343e7c7a, from Nov 7, 2026, 00:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/uk.co.reliness/us-politics-government/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/uk.co.reliness/us-politics-government.svg)](https://anlyon.dev/servers/uk.co.reliness/us-politics-government)

Source: MCP Registry. Synced Nov 7, 2026, 00:18 UTC.