Skip to content
anlyon.devby Anlyon

Dolby Cinema Tracker

xyz.dolbycinematracker/dolby-cinema-trackerdolbycinematracker.xyzstreamable-httpv1.0.0Scanned

AMC Dolby Cinema, IMAX and PRIME showtimes, ticket drops, alerts and a release planner.

30 tools: 4 can delete or cancel things, 1 do something that can't be undone, 11 change things and 14 only read.

Tools: 4 delete, 1 irreversible, 11 write, 14 read.
  • Reads private data · 2
  • Reads text others write · 6
  • Can send data out · 0
  • 1 finding

Anlyon alternative

16 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

30 tools

Deletes or cancels 4Claude Code: deny
  • cancel_booking_requestCancel only a still-queued request at its current revision.1 finding

    Why it is in this group

    • The name "cancel_booking_request" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "cancel_booking_request" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "cancel_booking_request" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel only a still-queued request at its current revision. Cannot cancel a claimed request, a booked ticket or any protected ticket.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • delete_alertPermanently delete only the connected owner's alert.No findings

    Why it is in this group

    • The name "delete_alert" says "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently delete only the connected owner's alert. This does not cancel the subscription. Requires alerts:write and a paid plan.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • delete_reminderDelete only your reminder and expire any still-pending delivery.No findings

    Why it is in this group

    • The name "delete_reminder" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete only your reminder and expire any still-pending delivery. Does not alter tickets or follows.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • revoke_this_tokenImmediately and permanently revoke the current agent token.No findings

    Why it is in this group

    • The name "revoke_this_token" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Immediately and permanently revoke the current agent token. Future calls with it fail; only a human can issue a replacement. Does not cancel billing.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Can't be undone 1Claude Code: ask
  • request_bookingOnly call when the human explicitly asks to queue a booking.No findings

    Why it is in this group

    • The name "request_booking" says "request": a word for a change.
    • The input addresses people (input.flexibility.dateWindow.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Only call when the human explicitly asks to queue a booking. Supply a selected showing OR complete flexibility and a stable clientKey for retries. Creates intent only, never a booking, charge or AMC call. BRIDGE alone executes and enforces zero-only.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 11Claude Code: ask
  • create_alertCreate a movie follow with theatre IDs, formats, triggers and cadence using the website's validation and limits.No findings

    Why it is in this group

    • The name "create_alert" says "create": a word for a change.
    Description, as the server wrote it
    Create a movie follow with theatre IDs, formats, triggers and cadence using the website's validation and limits. Requires alerts:write and a paid plan. Email needs explicit human consent and confirmation; payment is not delivery consent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • pause_alertPause only the connected owner's alert.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Pause only the connected owner's alert. Requires alerts:write and a paid plan.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • resume_alertResume only the connected owner's paused alert.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Resume only the connected owner's paused alert. Requires alerts:write and a paid plan; no paused-period backlog is sent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • set_format_preferenceSet default format order and explicit 3D permission.No findings

    Why it is in this group

    • The name "set_format_preference" says "set": a word for a change.
    Description, as the server wrote it
    Set default format order and explicit 3D permission. Never books or modifies protected tickets.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • set_reminderRemind before an already booked planner ticket, or at an explicit human-selected on-sale/first-showing date and time for a known movie.No findings

    Why it is in this group

    • The name "set_reminder" says "set": a word for a change.
    Description, as the server wrote it
    Remind before an already booked planner ticket, or at an explicit human-selected on-sale/first-showing date and time for a known movie. Movie dates are supplied facts, never predictions. Uses an existing owned Following alert's confirmed email/registered push, and respects quiet hours even for on-sale. Does not book or create notification consent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • set_tierSet top, want, maybe, skip, seen or declined using existing rules.No findings

    Why it is in this group

    • The name "set_tier" says "set": a word for a change.
    Description, as the server wrote it
    Set top, want, maybe, skip, seen or declined using existing rules. Top protects booked tickets; lowering a tier never removes protection. Does not create a booking request.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • start_subscriptionFor a person without an account: create a pending agent connection and a Stripe-hosted Checkout link.Reads text others writeNo findings

    Why it is in this group

    • The name "start_subscription" says "start": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    For a person without an account: create a pending agent connection and a Stripe-hosted Checkout link. Show the URL to the human; only they can confirm payment on Stripe. Keep the returned token private. Do not call repeatedly or for an existing subscriber.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • update_alertUpdate a saved follow's theatres, formats, triggers or cadence without changing omitted preferences.No findings

    Why it is in this group

    • The name "update_alert" says "update": a word for a change.
    Description, as the server wrote it
    Update a saved follow's theatres, formats, triggers or cadence without changing omitted preferences. Only the connected owner's alert can be edited. Requires an entitled owner and alerts:write.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • update_notification_settingsPartially update the connected owner's channel toggles, quiet hours or digest schedule.No findings

    Why it is in this group

    • The name "update_notification_settings" says "update": a word for a change.
    Description, as the server wrote it
    Partially update the connected owner's channel toggles, quiet hours or digest schedule. Only supplied fields change; omitted fields retain their current stored values. Requires alerts:write and an entitled owner. Enabling email does not bypass email opt-in/confirmation or browser permission.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 14Show 14 read-only tools
  • find_double_featuresFind same-theatre movie pairs for one theatre and date using the site's pairing engine.No findings

    Why it is in this group

    • The name "find_double_features" says "find": a word for reading.
    Description, as the server wrote it
    Find same-theatre movie pairs for one theatre and date using the site's pairing engine. Travel, runtime and trailer estimates are not guarantees; this never books tickets.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • find_theatresFind active collected AMC theatres by name/city, ZIP and radius in miles.No findings

    Why it is in this group

    • The name "find_theatres" says "find": a word for reading.
    Description, as the server wrote it
    Find active collected AMC theatres by name/city, ZIP and radius in miles. Theatre capabilities do not establish an individual showing's format.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_best_showingsRank existing showings at the owner's home theatres with the same planner eligibility, protected ticket conflicts and format preferences.Reads text others writeNo findings

    Why it is in this group

    • The name "get_best_showings" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "ticket": it reads issues, which other people can write.
    Description, as the server wrote it
    Rank existing showings at the owner's home theatres with the same planner eligibility, protected ticket conflicts and format preferences. Returns the whole ranking (at most 600, flagged truncated), never paged. Does not queue or book.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_capacityRead planner capacity, not live AMC eligibility.No findings

    Why it is in this group

    • The name "get_capacity" says "get": a word for reading.
    Description, as the server wrote it
    Read planner capacity, not live AMC eligibility. Private-beta owners only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_movieGet the collected movie record by movie ID or slug.No findings

    Why it is in this group

    • The name "get_movie" says "get": a word for reading.
    Description, as the server wrote it
    Get the collected movie record by movie ID or slug. Use search_showtimes for its showings.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_notification_settingsRead the connected owner's email/push preferences, timezone, quiet hours and digest schedule.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_notification_settings" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "read" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "read" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Read the connected owner's email/push preferences, timezone, quiet hours and digest schedule. Requires read scope.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_planRead your private-beta plan, protected booked tickets, requests and as-planned capacity.Reads text others writeNo findings

    Why it is in this group

    • The name "get_plan" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "read" and "ticket": it reads issues, which other people can write.
    Description, as the server wrote it
    Read your private-beta plan, protected booked tickets, requests and as-planned capacity. Never creates booking intent.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_pricingRead the current configured alerts price.No findings

    Why it is in this group

    • The name "get_pricing" says "get": a word for reading.
    Description, as the server wrote it
    Read the current configured alerts price. Public facts are free. Payment always requires a human to open and confirm a Stripe-hosted Checkout URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_subscription_statusCheck whether the connected owner's alerts subscription is active, including before payment or after expiry.No findings

    Why it is in this group

    • The name "get_subscription_status" says "get": a word for reading.
    Description, as the server wrote it
    Check whether the connected owner's alerts subscription is active, including before payment or after expiry. Does not charge or modify billing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_agent_tokensList connection IDs, names and scopes for this owner, never token secrets.Reads private dataNo findings

    Why it is in this group

    • The name "list_agent_tokens" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "secret": it reads secrets.
    Description, as the server wrote it
    List connection IDs, names and scopes for this owner, never token secrets. Requires read scope. Only the human's owner key can create or revoke other connections.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_alertsList only the connected owner's saved follows and their current status.No findings

    Why it is in this group

    • The name "list_alerts" says "list": a word for reading.
    Description, as the server wrote it
    List only the connected owner's saved follows and their current status. Requires read scope.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_dropsFind newly observed premium showings or new on-sale evidence since an absolute ISO time, with IDs, movieTitle, theatreName, theatreCity, theatreState and formatLabel.No findings

    Why it is in this group

    • The name "list_drops" says "list": a word for reading.
    Description, as the server wrote it
    Find newly observed premium showings or new on-sale evidence since an absolute ISO time, with IDs, movieTitle, theatreName, theatreCity, theatreState and formatLabel. On-sale movie aggregates retain their nested evidence; top-level theatre/format displays identify firstBookableEvidence, or are null when unknown. This is collected evidence, not a complete real-time feed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_remindersList only your reminders and their configured delivery source.No findings

    Why it is in this group

    • The name "list_reminders" says "list": a word for reading.
    Description, as the server wrote it
    List only your reminders and their configured delivery source. Requires alerts:write.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_showtimesFind collected showtimes by movie, theatre, ZIP and radius (miles), format or date range.No findings

    Why it is in this group

    • The name "search_showtimes" says "search": a word for reading.
    Description, as the server wrote it
    Find collected showtimes by movie, theatre, ZIP and radius (miles), format or date range. Each row preserves IDs and includes movieTitle, theatreName, theatreCity, theatreState and the observed formatLabel; unknown display facts are null. Prices and coverage are observations, not guarantees; confirm with AMC.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data2
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write6
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warncancel_booking_request

    The server marks "cancel_booking_request" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "cancel_booking_request" says "cancel": a word for removing or ending something.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http dolby-cinema-tracker https://dolbycinematracker.xyz/mcp
claude mcp add --transport http dolby-cinema-tracker https://dolbycinematracker.xyz/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__dolby-cinema-tracker__list_reminders",
      "mcp__dolby-cinema-tracker__get_plan",
      "mcp__dolby-cinema-tracker__get_capacity",
      "mcp__dolby-cinema-tracker__get_best_showings",
      "mcp__dolby-cinema-tracker__search_showtimes",
      "mcp__dolby-cinema-tracker__list_drops",
      "mcp__dolby-cinema-tracker__get_movie",
      "mcp__dolby-cinema-tracker__find_theatres",
      "mcp__dolby-cinema-tracker__find_double_features",
      "mcp__dolby-cinema-tracker__get_pricing",
      "mcp__dolby-cinema-tracker__get_subscription_status",
      "mcp__dolby-cinema-tracker__list_alerts",
      "mcp__dolby-cinema-tracker__get_notification_settings",
      "mcp__dolby-cinema-tracker__list_agent_tokens"
    ],
    "ask": [
      "mcp__dolby-cinema-tracker__set_reminder",
      "mcp__dolby-cinema-tracker__set_tier",
      "mcp__dolby-cinema-tracker__set_format_preference",
      "mcp__dolby-cinema-tracker__request_booking",
      "mcp__dolby-cinema-tracker__create_checkout_link",
      "mcp__dolby-cinema-tracker__create_billing_portal_link",
      "mcp__dolby-cinema-tracker__create_alert",
      "mcp__dolby-cinema-tracker__update_alert",
      "mcp__dolby-cinema-tracker__pause_alert",
      "mcp__dolby-cinema-tracker__resume_alert",
      "mcp__dolby-cinema-tracker__update_notification_settings",
      "mcp__dolby-cinema-tracker__start_subscription"
    ],
    "deny": [
      "mcp__dolby-cinema-tracker__delete_reminder",
      "mcp__dolby-cinema-tracker__cancel_booking_request",
      "mcp__dolby-cinema-tracker__delete_alert",
      "mcp__dolby-cinema-tracker__revoke_this_token"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as dolby-cinema-tracker. Review it before you use it.

Capability tags behind 7 rules
  • mcp__dolby-cinema-tracker__get_plan untrusted-input
  • mcp__dolby-cinema-tracker__get_best_showings untrusted-input
  • mcp__dolby-cinema-tracker__create_checkout_link untrusted-input
  • mcp__dolby-cinema-tracker__create_billing_portal_link untrusted-input
  • mcp__dolby-cinema-tracker__get_notification_settings private-data, untrusted-input
  • mcp__dolby-cinema-tracker__list_agent_tokens private-data
  • mcp__dolby-cinema-tracker__start_subscription untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/xyz.dolbycinematracker/dolby-cinema-tracker/verify?hash=0eedaab899f03f7169d4f472650bdcfb0a7149c73a8baad8a26d40398efa32e3" | jq -e '.changed == false'

Pinned hash 0eedaab899f0, from Nov 4, 2026, 08:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/xyz.dolbycinematracker/dolby-cinema-tracker/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for xyz.dolbycinematracker/dolby-cinema-tracker
[![anlyon.dev](https://anlyon.dev/badge/xyz.dolbycinematracker/dolby-cinema-tracker.svg)](https://anlyon.dev/servers/xyz.dolbycinematracker/dolby-cinema-tracker)

Source: MCP Registry. Synced Nov 4, 2026, 08:18 UTC.