# `wiki.radix/radix-wiki` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/wiki.radix/radix-wiki
- JSON: https://anlyon.dev/api/v1/servers/wiki.radix/radix-wiki
- Version: 4.0.0 (active)
- Publisher: wiki.radix (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:55:44.960Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Radix Wiki
Community-maintained knowledge base for Radix DLT — search, read, and contribute wiki pages.
```

Scanned 2026-10-21T19:21:46.973Z over streamable-http.

**17 tools: 3 can delete or cancel things, 4 change things and 10 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 3 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 4 | ask |
| Only reads | read | 10 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__radix-wiki__get_full_corpus` `mcp__radix-wiki__get_page_history` `mcp__radix-wiki__list_pages` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__radix-wiki__get_ideas_board` `mcp__radix-wiki__get_page_history` `mcp__radix-wiki__list_pages` `mcp__radix-wiki__login` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

- **warn** Annotations that disagree with the tool in `get_challenge` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "get_challenge" as not read-only (readOnlyHint: false), and its words say it reads.

annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "get_challenge" says "get": a word for reading.
```


## Deletes or cancels (3)

Removes, cancels or revokes something. Claude Code: deny.

### `delete_page`

- The name "delete_page" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Delete an article with its history and comments. Requires a ROLA bearer token. Its author may delete it; on a shared board (ideas), so may anyone who clears the bar to edit it. Locked pages, hub articles and the homepage cannot be deleted.
```

### `edit_page`

- The name "edit_page" says "edit": a word for a change.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Edit an existing Radix Wiki page. Requires a ROLA bearer token; see https://radix.wiki/AGENTS.md. Read the page with get_page and `blocks: true`, send the full revised block array, and pass its `version` as baseVersion: an edit made after someone else's is refused rather than written over it, so read again and reapply. The version bump, block-level diff, and revision entry are computed server-side. Needs a wallet holding at least 20,000 $XRD (ideas 10,000). Locked and author-only pages are rejected. Earns contribution points.
```

### `restore_revision`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Make an earlier revision the current page, written as a new revision. Requires a ROLA bearer token and passes the same gates as edit_page. Take the revision `id` from get_page_history.
```

## Changes things (4)

Creates or changes something that can be changed back. Claude Code: ask.

### `create_page`

- The name "create_page" says "create": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Create a new Radix Wiki page. Requires a ROLA bearer token; see https://radix.wiki/AGENTS.md for the challenge-sign-verify flow. Call get_categories first for a valid tagPath. Needs a wallet holding at least 10,000 $XRD (ecosystem 20,000, blog 50,000, ideas 10,000), a balance check that spends nothing. Earns contribution points.
```

### `get_challenge`

- The name "get_challenge" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Step 1 of writing to the wiki: a single-use ROLA challenge (5-minute expiry). The response spells out the exact recipe for the message your Ed25519 key must sign. You always sign with your OWN key — nothing here custodies anything. Takes no parameters.
```

### `login`

- Nothing in its name or description says what it does, so it is counted as a write.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Step 2: exchange the signed ROLA proof for a 7-day Bearer token — the same verification the human wallet flow runs. Send the returned token as an HTTP `Authorization: Bearer <token>` header on every later create_page / edit_page call; tool arguments never carry it.
```

### `upload_image`

- The name "upload_image" says "upload": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Upload an image and get back the URL the editor stores: put it in a content block as `<img src="…" alt="…">`, or pass it to create_page or edit_page as bannerImage. Requires a ROLA bearer token, as create_page does. Send the file base64-encoded, at most 3.4 MB before encoding (the whole request must stay under 4.5 MB), as JPEG, PNG, GIF, WebP, or AVIF. The format is read from the bytes, not from contentType or the name; the image is stored as WebP at most 1600px wide, without its metadata.
```

## Only reads (10)

Looks things up and changes nothing. Claude Code: allow.

### `get_categories`

- The name "get_categories" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
The category tree of the Radix Wiki, the cheapest way to orient before searching. Each node carries its `path` (a tagPath list_pages and search_wiki take), name, description, `pageCount` (pages filed at that path) and `pageCountDeep` (with every descendant). `tagPaths` lists every tag path that holds pages, including any the tree does not name.
```

### `get_full_corpus`

- The name "get_full_corpus" says "get": a word for reading.
- Tag private-data: The description's first sentence says "document": it reads documents.

Description, as the server wrote it:

```untrusted-server-text
The whole of the Radix Wiki as one text document, for bulk ingestion. Preflight first: sizeOnly=true returns the character count, a token estimate, the per-branch breakdown and the largest pages. Then pull it with `maxChars` (default 200000, max 1000000), or one branch at a time with `tagPath`. Truncation is page-aligned: `truncated`, `omittedPages` and `nextSkip` say where to resume (pass skip=nextSkip). For a handful of pages get_pages is cheaper.
```

### `get_ideas_board`

- The name "get_ideas_board" says "get": a word for reading.
- Tag untrusted-input: The description's first sentence says "get" and "discussion": it reads comments, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Get the RADIX Wiki Ideas Pipeline kanban: community proposals and Radix DAO tasks grouped into status columns (Discussion → Proposed → Approved → In Progress → Testing → Done), each card carrying its working group, category, priority, and assignee. Use this to follow DAO / project progress.
```

### `get_network_activity`

- The name "get_network_activity" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Daily Radix mainnet activity, one row per UTC day since Babylon (28 September 2023): transactions, active accounts, new accounts, components and resources created, NFTs minted, and fees, $XRD burned and royalties in $XRD. Summed from the Gateway transaction stream; counts cover user transactions only. Narrow with from/to. The same rows chart at /charts and download at /api/charts/activity?format=csv.
```

### `get_page`

- The name "get_page" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
One page of the Radix Wiki in full: its text, version, update date and metadata. Address it by `path` ("tag/path/slug", exactly the `path` or `url` a listing returns), or by `tagPath` + `slug`; a category's own path reads its hub article. Not a title. For 2 to 20 pages call get_pages, one round trip rather than N. A miss names the nearest pages, so a wrong guess is fixed in one retry. A page's URL with `.md` appended is its markdown. With `blocks: true`, `content` is the stored block array, ids and all, beside the page `id` and its whole `metadata`: read a page this way before editing it, and send its `version` back as the edit's baseVersion.
```

### `get_page_history`

- The name "get_page_history" says "get": a word for reading.
- Tag private-data: The description's first sentence says "message": it reads messages.
- Tag untrusted-input: The description's first sentence says "message": it reads messages, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
A page's revisions in the Radix Wiki, newest first: each one's `id`, version, change type, message, date and the blocks it changed. Address the page as get_page does. A revision `id` is what a restore takes, where this server has one. Defaults: limit 20 (max 100).
```

### `get_pages`

- The name "get_pages" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Batch read: 1 to 20 pages of the Radix Wiki in full in one call, which is how to read search or listing results. Pass `paths` as the listings return them. Paths that do not exist come back in `missing` rather than failing the call, anything past 20 in `remaining`, and pages past `maxChars` (default 250000) in `omitted` with their sizes.
```

### `get_recent_changes`

- The name "get_recent_changes" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Pages of the Radix Wiki edited within the last N days, newest first: what to poll when you are watching the wiki rather than reading it. Same rows as list_pages. Defaults: days 7 (max 30), limit 20 (max 50). `truncated: true` means the limit cut the list; raise it, or page through list_pages.
```

### `list_pages`

- The name "list_pages" says "list": a word for reading.
- Tag private-data: The description's first sentence says "browse" and "branch": it reads repositories.
- Tag untrusted-input: The description's first sentence says "browse": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
Browse the Radix Wiki by tag path rather than by keyword: every page under a branch, newest first by default. `tagPath` matches the branch and everything beneath it; omit it to walk the whole wiki. Sort by title for an A–Z pass. Same rows as search_wiki, with `totalPages`, `hasMore` and `nextPage`. Defaults: page 1, pageSize 20 (max 100).
```

### `search_wiki`

- The name "search_wiki" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Keyword search across the Radix Wiki: the first call when you know what you are looking for but not where it lives. Matches titles and body prose, ranked in four tiers: titles starting with the term, titles containing it, literal body hits, then English full-text hits by relevance, which stem words and drop stopwords. Not semantic: one distinctive word beats a sentence. Each row carries a `path`, its size in `chars` and a snippet windowed on the match. Feed the paths to get_pages in one call rather than looping get_page. Narrow with tagPath when a term is common. Defaults: page 1, pageSize 20 (max 50); keep paging while `hasMore` is true.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `radix-wiki`:

```json
{
  "permissions": {
    "allow": [
      "mcp__radix-wiki__search_wiki",
      "mcp__radix-wiki__get_page",
      "mcp__radix-wiki__get_pages",
      "mcp__radix-wiki__list_pages",
      "mcp__radix-wiki__get_categories",
      "mcp__radix-wiki__get_recent_changes",
      "mcp__radix-wiki__get_full_corpus",
      "mcp__radix-wiki__get_page_history",
      "mcp__radix-wiki__get_ideas_board",
      "mcp__radix-wiki__get_network_activity"
    ],
    "ask": [
      "mcp__radix-wiki__get_challenge",
      "mcp__radix-wiki__login",
      "mcp__radix-wiki__create_page",
      "mcp__radix-wiki__upload_image"
    ],
    "deny": [
      "mcp__radix-wiki__edit_page",
      "mcp__radix-wiki__restore_revision",
      "mcp__radix-wiki__delete_page"
    ]
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__radix-wiki__list_pages`: private-data, untrusted-input
- `mcp__radix-wiki__get_full_corpus`: private-data
- `mcp__radix-wiki__get_page_history`: private-data, untrusted-input
- `mcp__radix-wiki__get_ideas_board`: untrusted-input
- `mcp__radix-wiki__login`: untrusted-input

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-10-22T15:16:16.660Z, unchanged since 2026-10-22T15:16:16.660Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `7` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `none` |
| Authorization servers | `none` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `not observed` |
| Client ID metadata documents | `not observed` |

- **high** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes))

```untrusted-server-text
The endpoint served tools/list without credentials, and the list has 7 tools that change things (3 destructive, 4 write). Whether a call also works without credentials was not tested: tools are never called.

https://radix.wiki/api/mcp: tools/list returned 17 tools to an anonymous client, including edit_page (destructive), restore_revision (destructive), delete_page (destructive), get_challenge (write), login (write) and 2 more
```