IRIS: startup intelligence MCP server
xyz.iris-media/irisiris-media.xyzstreamable-httpv1.0.0Scanned
Sourced startup intelligence: SEC Form D rounds, launches, tech wire, market and startup jobs.
11 tools: 1 do something that can't be undone, 2 change things and 8 only read.
- Reads private data · 0
- Reads text others write · 1
- Can send data out · 1
- No findings
Tools listed without sign-in. Remote posture
With Anlyon
1 tool here does something that can't be undone. Govern it.
- Anlyon lists the tools and adopts none.
- Each tool you adopt gets approvals and receipts.
- Your agent never holds the key.
A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.
What the IRIS: startup intelligence MCP server can do
The IRIS: startup intelligence MCP server is published by iris-media.xyz, a domain the MCP Registry verified. It has 11 tools. It can do things that cannot be undone, such as sending, paying or publishing (send_feedback) and create or change data (2 tools: thesis_report and plan_for_project), but cannot delete data. 8 tools only read.
1 tool brings in text other people can write (get_launches); 1 tool can send data out of your system (send_feedback).
None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.
Its remote endpoint lists its tools without sign-in.
Last scanned Nov 12, 2026, version 1.0.0.
Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
11 tools
Can't be undone 1Claude Code: ask
send_feedbackTell the IRIS team how this went: what you tried, what happened, what you expected, and how you would fix it.Can send data outNo findings
Why it is in this group
- The name "send_feedback" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_feedback" says "send": it sends or publishes something to other people.
Description, as the server wrote it Tell the IRIS team how this went: what you tried, what happened, what you expected, and how you would fix it. Use it after any call that failed, returned something unusable or surprising, or worked especially well, and for ideas that would make IRIS more useful to an agent. Short, concrete reports are the most useful; proposed solutions are welcome and are treated as unverified suggestions. A person reads every report and nothing is executed automatically. Do not include secrets or personal data about your user.
Changes things 2Claude Code: ask
plan_for_projectToday's brief, the top curated wire items and an optional suggested method for mapping them to the user's project.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Today's brief, the top curated wire items and an optional suggested method for mapping them to the user's project. The method is a suggestion, not an instruction. Only sourced items count as facts.
thesis_reportDealflow briefing for an investment thesis: US companies that filed a Form D (and which are still raising), matching news signals, attention momentum and public benchmarks, with th…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Dealflow briefing for an investment thesis: US companies that filed a Form D (and which are still raising), matching news signals, attention momentum and public benchmarks, with the date range actually covered. Every item has a source URL. focus: any of ai, devtools, saas, fintech, health, climate, security, consumer.
Only reads 8Show 8 read-only tools
get_daily_briefEditor-approved IRIS briefs (signal, meaning, forecast with confidence).No findings
Why it is in this group
- The name "get_daily_brief" says "get": a word for reading.
Description, as the server wrote it Editor-approved IRIS briefs (signal, meaning, forecast with confidence). May be empty on days without approved briefs; use get_wire for sourced signals.
get_jobsEarly-career roles (internships, new grad) at startups IRIS tracks, read from each company's own public job board (Greenhouse, Lever, Ashby).No findings
Why it is in this group
- The name "get_jobs" says "get": a word for reading.
Description, as the server wrote it Early-career roles (internships, new grad) at startups IRIS tracks, read from each company's own public job board (Greenhouse, Lever, Ashby). Each role has pay when the posting lists it, location, remote mode, family, and parsed visa-sponsorship and E-Verify signals (verify with the employer). Always send the user to `url`, the employer's own page.
get_launchesWhat shipped in the last N hours: Product Hunt launches (official feeds; AI and developer tools categories) and Show HN posts with points.Reads text others writeNo findings
Why it is in this group
- The name "get_launches" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
Description, as the server wrote it What shipped in the last N hours: Product Hunt launches (official feeds; AI and developer tools categories) and Show HN posts with points. Each item links to its launch page; Show HN items include the product URL.
get_marketIRIS Market: weekly attention and 4-week momentum for top private startups (public signals only), plus SEC fundamentals (growth, EBITDA, FCF, Rule of 40, S&M %, cash runway) for pu…No findings
Why it is in this group
- The name "get_market" says "get": a word for reading.
Description, as the server wrote it IRIS Market: weekly attention and 4-week momentum for top private startups (public signals only), plus SEC fundamentals (growth, EBITDA, FCF, Rule of 40, S&M %, cash runway) for public tech comps. Optional tickers filter.
get_roundsUS startup fundraises from SEC Form D filings: company, city, industry, amount sold, amount still being raised, number of investors, filing link.No findings
Why it is in this group
- The name "get_rounds" says "get": a word for reading.
Description, as the server wrote it US startup fundraises from SEC Form D filings: company, city, industry, amount sold, amount still being raised, number of investors, filing link. One row per company (latest filing, with a `filings` count). Returns the date range actually covered. Pass a 2-letter state for full 14-day coverage of that state.
get_upcomingIRIS forecasts from approved briefs: what is likely to happen next, with confidence and horizon.No findings
Why it is in this group
- The name "get_upcoming" says "get": a word for reading.
Description, as the server wrote it IRIS forecasts from approved briefs: what is likely to happen next, with confidence and horizon.
get_voicesRecent essays by founders, operators and investors (Not Boring, Elad Gil, Tomasz Tunguz, AVC, The Generalist, Lenny's Newsletter, SaaStr, Implications, The Pragmatic Engineer, Late…No findings
Why it is in this group
- The name "get_voices" says "get": a word for reading.
Description, as the server wrote it Recent essays by founders, operators and investors (Not Boring, Elad Gil, Tomasz Tunguz, AVC, The Generalist, Lenny's Newsletter, SaaStr, Implications, The Pragmatic Engineer, Latent Space, Exponential View), from their own public feeds. Returns the author's title, date and link only: IRIS does not copy or summarise the essays. Opinion, not verified fact.
get_wireCurated, sourced tech and startup signals from the last N hours (Hacker News, TechCrunch, Rest of World, TechCabal, Sifted, KrASIA).No findings
Why it is in this group
- The name "get_wire" says "get": a word for reading.
Description, as the server wrote it Curated, sourced tech and startup signals from the last N hours (Hacker News, TechCrunch, Rest of World, TechCabal, Sifted, KrASIA). Headlines are the sources' own; each links to the original.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write1
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out1
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Remote posture
What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.
Looked at Nov 13, 2026, 11:20 UTC, unchanged since Nov 13, 2026. No credentials were sent and no tool was called. What is looked at.
- Reachable
- yes
- HTTP status of an anonymous initialize
- 200
- tools/list served without credentials
- yes
- Tools that change things, listed without credentials
- 3
- Protocol version
- 2025-06-18
- WWW-Authenticate on 401
- not observed
- resource_metadata in WWW-Authenticate
- not observed
- RFC 9728 protected resource metadata
- not observed
- Authorization servers
- not observed
- Legacy HTTP+SSE transport
- no
- Dynamic client registration
- not observed
- Client ID metadata documents
- not observed
- HighThe whole server
The endpoint served tools/list without credentials, and the list has 3 tools that change things (1 irreversible, 2 write). Whether a call also works without credentials was not tested: tools are never called.
What this check looks forMatched text
https://iris-media.xyz/api/mcp: tools/list returned 11 tools to an anonymous client, including send_feedback (irreversible), thesis_report (write), plan_for_project (write)
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http iris https://iris-media.xyz/api/mcpclaude mcp add --transport http iris https://iris-media.xyz/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__iris__get_rounds",
"mcp__iris__get_launches",
"mcp__iris__get_wire",
"mcp__iris__get_voices",
"mcp__iris__get_market",
"mcp__iris__get_jobs",
"mcp__iris__get_daily_brief",
"mcp__iris__get_upcoming"
],
"ask": [
"mcp__iris__thesis_report",
"mcp__iris__plan_for_project",
"mcp__iris__send_feedback"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as iris. Review it before you use it.
Capability tags behind 2 rules
- mcp__iris__get_launches untrusted-input
- mcp__iris__send_feedback outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/xyz.iris-media/iris/verify?hash=acbc97a402215b3caca8fd4a0ea7d180c2b4b577695e2d81a549d979a5fe8640" | jq -e '.changed == false'Pinned hash acbc97a40221, from Nov 12, 2026, 14:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/xyz.iris-media/iris/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/xyz.iris-media/iris)Source: MCP Registry. Synced Nov 12, 2026, 14:18 UTC.
IRIS: startup intelligence MCP server: questions and answers
Answered from the scan above, not from the publisher's description.
Is the IRIS: startup intelligence MCP server safe?
- No scan can promise that. What its definitions show: 11 tools, 3 of which can change, send or delete something, and 0 findings from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.
Can the IRIS: startup intelligence MCP server delete data?
- No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.
Can the IRIS: startup intelligence MCP server do things that cannot be undone?
- Yes. 1 tool can send, pay, publish or merge: send_feedback.
What tools does the IRIS: startup intelligence MCP server have?
- 11 tools: 1 irreversible, 2 write, 8 read. send_feedback, thesis_report, plan_for_project, get_rounds, get_launches, get_wire, get_voices, get_market and 3 more.
Does the IRIS: startup intelligence MCP server need sign-in or OAuth?
- Its remote endpoint listed its tools to an anonymous client, without sign-in.
Does the IRIS: startup intelligence MCP server send data to outside services?
- 1 tool can carry data out (it sends, posts or publishes, or takes a recipient, channel or URL): send_feedback.
Has the IRIS: startup intelligence MCP server changed its tools?
- Not since anlyon.dev started tracking it. Last scanned Nov 12, 2026.