MCP servers › ai.gosummer › summer
MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23
ai.gosummer/summer
Telehealth support for Claude, Codex and Cursor: investigate cases and connect your tools. — the publisher's description
Summary
ai.gosummer/summer is a remote MCP server listed in the official MCP registry at version 0.1.3. On 2026-10-23 ProtocolProbe connected to it in read-only mode and read its inventory: 117 tools, 0 resources and 1 prompt.
Record checks
4 of 5 record checks met · 4 do not apply
- met: Registry entry is active and says how to run it
- met: Source repository link opens
- met: Repository is not archived
- met: Code pushed to the repository in the 90 days before our check
- not met: Repository publishes a security policy (SECURITY.md)
- not applicable: Package names its licence with a standard (SPDX) identifier
- not applicable: The version the registry lists can be installed and is not withdrawn
- not applicable: npm package carries build provenance (attestation)
- not applicable: No known critical or high advisory in the package or its dependencies
- Not ranked by downloads: a remote server publishes no download figure
- Not ranked by stars: 0 stars (ranked from 10)
From public records, not a safety rating. Each check with its reason · Is it safe to install?
Key facts
- Runs
- remote (hosted by the publisher)
- Transport
- streamable HTTP
- Sign-in
- none needed to open a session
- Repository
- public
- Tools
- 117
- Described as changing data
- 50 of 117 toolsAI-classified
- Mainly works on
- files and code on the machine it runs on; accounts and data in outside web servicesAI-classified
- Topic
- science-health-and-educationAI-classified
- Last tested
- 2026-10-23
Observed fact
This server accepted a session without any credential and lists 50 tools whose name or declaration suggests they change data (summer_github_sources_save, summer_github_sources_sync, summer_github_connection_disconnect, summer_support_policy_update, summer_saved_replies_save and 45 more). That is our reading of the names; we did not call them. Source: our connection, 2026-10-23.
Worth knowing before you connect it
- 50 tools are described as changing something (summer_github_sources_save, summer_github_sources_sync, summer_github_connection_disconnect, …): our AI model's reading of the descriptions, not something we tested, and the server opened a session without any credential. We did not call them.
Each line comes from a section below, with its source and date.
How fresh this is
- Live-tested
- yes, a real session (not a text-only review)
- Last tested
- 2026-10-23
- Mode
- read-only (no tool calls)
- Latest version
- 0.1.3, published 2026-10-21 (registry, as of the 2026-10-23 snapshot)
- First listed version
- 2026-10-21 (earliest version still in the registry; older removed versions would be earlier)
- Version history
- 3 versions listed, all on 2026-10-21; 3 in the 90 days before the 2026-10-23 snapshot.(versions still listed in the registry only)
Most recent 3 versions
0.1.3· 2026-10-210.1.2· 2026-10-210.1.1· 2026-10-21
- Registry data
- snapshot 2026-10-23
- Package and repository
- checked 2026-10-22
- Engine
- mcp-runtime-engine@0.1.0 · sdk@1.32.0
Changes since the last refresh
New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 0.1.3 (published 2026-10-21).
Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.
What it is
What does this server offer?
Observed inventoryWhat it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on; accounts and data in outside web services.
50 of 117 tools are described as changing something (creating, editing, deleting, sending or running). For 1 the reading was uncertain, so no mark is shown.
- summer_github_connection_readreads or searches
“Read the company GitHub installation, selected repositories/folders and cached commit status.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_github_connection_startdoes something else
“Get the Summer browser URL for a company administrator to install and authorize the read-only GitHub App.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_github_repositories_listreads or searches
“List repositories available to this company GitHub installation.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
companystringrequiredenvironmentstringrequiredpageinteger
- summer_github_folders_listreads or searches
“Browse repository folders at a branch or commit before selecting access.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
6 inputs, 5 required
companystringrequiredenvironmentstringrequiredrepositoryIdintegerrequiredrepositorystringrequiredrefstringrequiredpathstring
- summer_github_sources_savecreates or changes datadescribed as changing data
“Choose repository branches/commits and allowed folders.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
companystringrequiredenvironmentstringrequiredexpected_versionintegerrequiredsourcesarrayrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_github_sources_synccreates or changes datadescribed as changing data
“Refresh the selected repository code cache once from GitHub.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
companystringrequiredenvironmentstringrequiredsource_idstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_github_sources_readreads or searches
“List cached source paths, or read one cached file with path.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs, 3 required
companystringrequiredenvironmentstringrequiredsource_idstringrequiredpathstringoffsetinteger
- summer_github_connection_disconnectdeletesdescribed as changing data
“Disconnect this company/environment GitHub source access and remove its cached archives.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
companystringrequiredenvironmentstringrequiredexpected_versionintegerrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_support_policy_readreads or searches
“Read business hours, holidays, response commitments and scheduled policy revisions.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired
- summer_support_policy_updatecreates or changes datadescribed as changing data
“Save business hours and response commitments with the expected revision and an effective date.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
8 inputs, 7 required
companystringrequiredexpectedRevisionintegerrequiredcalendarobjectrequiredcommitmentsarrayrequiredpauseOnCustomerWaitbooleanrequiredeffectiveAtstring or nullrequiredreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_saved_replies_listreads or searches
“Read company saved replies, optionally including retired replies.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
companystringrequiredretiredboolean or string
- summer_saved_replies_savecreates or changes datadescribed as changing data
“Create, edit, retire or restore a saved reply with its expected revision and reason.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
8 inputs, 7 required
companystringrequiredidstringrequiredexpectedRevisionintegerrequirednamestringrequiredbodystringrequiredretiredbooleanrequiredreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
Show 88 more tools
- summer_saved_replies_historyreads or searches
“Read original revisions of a saved reply.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredreplystringrequired
- summer_saved_views_listreads or searches
“Read this person's saved inbox views and shared company views.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired
- summer_saved_views_savecreates or changes datadescribed as changing data
“Save a personal or shared inbox view.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 6 required
companystringrequiredkindstringrequiredidstringrequirednamestringrequiredquerystringrequiredsharedbooleanrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_saved_views_deletedeletesdescribed as changing data
“Remove an owned inbox view, retaining the database's ownership checks.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
companystringrequiredkindstringrequiredidstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_quality_scenarios_listreads or searches
“Read quality scenarios, assessments and current outcomes.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired
- summer_quality_scenarios_getreads or searches
“Read one scenario and its saved assessments.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredscenariostringrequired
- summer_quality_scenarios_savecreates or changes datadescribed as changing data
“Create, revise or retire a quality scenario, with expected revision and reason.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
8 inputs, 7 required
companystringrequiredkindstringrequiredidstringrequiredexpectedRevisionintegerrequiredretiredbooleanrequiredreasonstringrequiredfieldsobjectrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_quality_assessments_savecreates or changes datadescribed as changing data
“Record an evidence-backed assessment or correction.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
11 inputs, 10 required
companystringrequiredkindstringrequiredidstringrequiredscenarioIdstringrequiredrunKindstringrequiredrunReferencestringrequiredoutcomestringrequiredchecksobjectrequirednotesstringrequiredcorrectsstring or nullrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_quality_corrections_listreads or searches
“Read evidence-backed corrections to previous quality assessments.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired
- summer_privacy_requests_listreads or searches
“Read privacy export/deletion requests, status and original event history.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired
- summer_privacy_requests_createcreates or changes datadescribed as changing data
“File an export or deletion request for human review.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
9 inputs, 8 required
companystringrequiredkindstringrequiredidstringrequiredrequestKindstringrequiredsubjectKindstringrequiredsubjectLabelstringrequiredscopearrayrequiredreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_work_routing_readreads or searches
“Read eligible teammates and automatic owner/reviewer routing settings.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired
- summer_work_routing_updatecreates or changes datadescribed as changing data
“Save automatic owner/reviewer routing with the expected version.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 6 required
companystringrequiredversionintegerrequiredissue_modestringrequiredreview_modestringrequiredissue_membersarrayrequiredreview_membersarrayrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_cases_assignment_readreads or searches
“Read a case's issue owner, plan reviewer and eligible teammates.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 3 required
companystringrequiredenvironmentstringrequiredcasestringrequired
- summer_cases_assignment_updatecreates or changes datadescribed as changing data
“Assign an issue owner or plan reviewer with the previous owner as a conflict check.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 6 required
companystringrequiredenvironmentstringrequiredcasestringrequiredrequestIdstring or nullrequiredmemberIdstring or nullrequiredpreviousstring or nullrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_reports_creditsreads or searches
“Read all-time and month-to-date credits, pending reservations and monthly usage in the company timezone.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_reports_service_metricsreads or searches
“Read current response and resolution metrics in the company timezone.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_reports_deliveryreads or searches
“Read delivery attempts, failures and recorded results.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_reports_commitmentsreads or searches
“Read outstanding customer promises and unfinished work.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_agent_exclusions_listreads or searches
“Read the company's sender exclusions and original edit history.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_messenger_conversations_listreads or searches
“Search and filter the complete Messenger inbox, including visitor conversations without Ops cases.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
8 inputs, 2 required
companystringrequiredenvironmentstringrequiredcursorstringlimitintegerqstringsortstringfilterstringconversationstring
- summer_messenger_conversations_getreads or searches
“Read original Messenger messages with saved human sender_display_name, contact form details, read receipts and attachments without marking the chat read.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
7 inputs, 3 required
companystringrequiredenvironmentstringrequiredconversationstringrequiredafterintegerreceipt_afterintegerfile_idstringviewstring
- summer_pharmacy_calls_settings_readreads or searches
“Read demo pharmacy-call voice, vocabulary and change history.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_pharmacy_calls_settings_updatecreates or changes datadescribed as changing data
“Save the demo pharmacy-call voice and vocabulary with the expected revision.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
6 inputs, 5 required
companystringrequiredenvironmentstringrequiredrevisionintegerrequiredvoice_idstring or nullrequiredvocabularyarrayrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_imports_intercom_listreads or searches
“Read Intercom migration previews, saved progress, counts, errors and Summer inbox destinations.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequiredenvironmentstringrequired
- summer_imports_intercom_previewcreates or changes datadescribed as changing data
“Check the saved Intercom key against a workspace and preview contact/conversation counts.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 4 required
companystringrequiredenvironmentstringrequiredinstallationstringrequiredworkspacestringrequiredregionstringmatch_accountsbooleanidempotency_keystring“Reuse the same key when retrying the same change”
- summer_imports_intercom_controlcreates or changes datadescribed as changing data
“Start, pause, resume or rescan an Intercom migration with its current version.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 5 required
companystringrequiredenvironmentstringrequiredimportstringrequiredexpected_versionintegerrequiredactionstringrequiredkeep_syncbooleanidempotency_keystring“Reuse the same key when retrying the same change”
- summer_imports_intercom_profilesreads or searches
“Search imported Summer profiles and their original conversation references.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs, 3 required
companystringrequiredenvironmentstringrequiredworkspacestringrequiredqstringoffsetinteger
- summer_client_statusreads or searches
“Check live Summer MCP/API versions, old client warnings and the seven-day discovery refresh interval.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs
cli_versionstringmcp_versionstringlast_checked_atstring“ISO 8601 time with an offset, for example 2026-10-01T00:00:00Z”
- summer_account_mereads or searches
“Show the signed-in person, Summer access status and this connection's grant.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- summer_account_companies_listreads or searches
“List companies the person can access and whether this connection includes each one.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- summer_account_access_request_readreads or searches
“Read the person's Summer access request.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- summer_account_access_request_submitcreates or changes datadescribed as changing data
“Submit or update a Summer access request.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
company_namestringrequirednotestringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_account_connections_listreads or searches
“List this person's agent connections, grants, last use and expiry.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- summer_account_connections_revokedeletesdescribed as changing data
“Revoke one of this person's agent connections immediately.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 1 required
connectionstringrequiredreasonstringidempotency_keystring“Reuse the same key when retrying the same change”
- summer_guides_getreads or searches
“Read the company's editable guidebook, draft articles, assets and publication state.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_guides_savecreates or changes datadescribed as changing data
“Create or edit guidebook details at the expected version.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
companystringrequired“Summer company ID”expected_versionintegerrequiredsettingsobjectrequiredreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_guides_articles_getreads or searches
“Read an editable guide article and its current knowledge revision.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”articlestringrequired
- summer_guides_articles_savecreates or changes datadescribed as changing data
“Create or edit a Markdown customer article with source references and managed asset IDs.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
13 inputs, 11 required
companystringrequired“Summer company ID”articlestringrequiredexpected_revisionintegerrequiredslugstringrequiredtitlestringrequiredsummarystringrequiredtopicstringrequiredcontentstringrequiredasset_idsarrayrequiredsource_urlstringrequiredverified_atstring or nullreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_guides_previewreads or searches
“Read the exact current draft, article revisions and authenticated preview URL before publishing.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_guides_authoringreads or searches
“Read the company's reviewed guide-authoring brief, draft article references and publication state.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_guides_publishcreates or changes datadescribed as changing data
“Publish the exact selected article revisions and ready media to the company's customer help center.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
companystringrequired“Summer company ID”expected_versionintegerrequiredarticlesarrayrequiredreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_guides_unpublishdeletesdescribed as changing data
“Remove the company's guide and release media from Summer's public serving path at the expected version.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
companystringrequired“Summer company ID”expected_versionintegerrequiredreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_guides_historyreads or searches
“Read the company's guide edits, upload and publication history.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_guides_hosting_getreads or searches
“Read the optional custom guide domain, DNS instructions and verified HTTPS status.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_guides_hosting_savecreates or changes datadescribed as changing data
“Save or remove a custom guide hostname at the expected version.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
companystringrequired“Summer company ID”expected_versionintegerrequiredhostnamestring or nullrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_guides_hosting_verifycreates or changes datadescribed as changing data
“Check the saved domain's DNS ownership, attach it through Summer's hosting connection and verify HTTPS.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
companystringrequired“Summer company ID”expected_versionintegerrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_assets_listreads or searches
“List the company's private guide media, metadata and upload status.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_assets_getreads or searches
“Read one guide asset, checksum and resumable chunk receipts.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”assetstringrequired
- summer_assets_uploads_createcreates or changes datadescribed as changing data
“Start or recover a private resumable Markdown, image, video, PDF or caption upload from metadata.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
12 inputs, 9 required
companystringrequired“Summer company ID”idstringrequiredfilenamestringrequiredmedia_typestringrequiredbyte_lengthintegerrequiredsha256stringrequiredalt_textstringrequiredcaptionstringrequiredprovenancestringrequiredtranscriptstringposter_asset_idstring or nullidempotency_keystring“Reuse the same key when retrying the same change”
- summer_assets_uploads_completecreates or changes datadescribed as changing data
“Verify the original size, content signature and SHA-256 against saved private bytes, then mark a guide upload ready.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
companystringrequired“Summer company ID”assetstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_assets_editcreates or changes datadescribed as changing data
“Edit guide media captions, alt text, provenance, transcript or poster at the expected version, or retire unused media.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
11 inputs, 7 required
companystringrequired“Summer company ID”assetstringrequiredexpected_versionintegerrequiredalt_textstringrequiredcaptionstringrequiredprovenancestringrequiredtranscriptstringposter_asset_idstring or nullretiredbooleanreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_company_capabilitiesreads or searches
“What this connection can do here, with a reason for everything unavailable.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_company_setup_statusreads or searches
“Saved, verified, pending, unavailable and enabled state for each setup item.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_capability_checks_listreads or searches
“Read the same operational capability checklist, results, discovery paths and review history shown in Summer.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_capability_checks_getreads or searches
“Read one capability, its concrete test, evidence and latest 20 review records.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 3 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”capabilitystringrequired
- summer_capability_checks_savecreates or changes datadescribed as changing data
“Edit a capability expectation or add a business-specific custom_ capability with a reason.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 6 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”capabilitystringrequiredexpected_versionintegerrequired“Current version you expect; 0 when the resource does not exist yet”definitionobjectrequirednotesstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_capability_checks_reportcreates or changes datadescribed as changing data
“Record the setup agent's capability assessment with original evidence and the path Summer can discover and use.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
9 inputs, 7 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”capabilitystringrequiredexpected_versionintegerrequired“Current version you expect; 0 when the resource does not exist yet”statestringrequirednotesstringrequiredevidencestringrequiredfulfillmentobjectidempotency_keystring“Reuse the same key when retrying the same change”
- summer_capability_checks_testruns code or commandsdescribed as changing data
“Request a read-only Summer capability test on an authorized sample case.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
6 inputs, 5 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”capabilitystringrequiredexpected_versionintegerrequired“Current version you expect; 0 when the resource does not exist yet”case_idstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_company_settings_readreads or searches
“Read company-wide settings.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_company_settings_updatecreates or changes datadescribed as changing data
“Update company-wide settings with the expected version.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 6 required
companystringrequired“Summer company ID”namestringrequiredtimezonestringrequiredworkflowstringrequirednotestringrequiredexpected_versionintegerrequired“Current version you expect; 0 when the resource does not exist yet”idempotency_keystring“Reuse the same key when retrying the same change”
- summer_integrations_listreads or searches
“List provider integrations, their categories, required fields and saved metadata.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”searchstringcategorystringconnectionstring
- summer_integrations_savecreates or changes datadescribed as changing data
“Save a custom integration's description, setup instructions and credential field names.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
9 inputs, 6 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”integrationstringrequiredexpected_versionintegerrequired“Current version you expect; 0 when the resource does not exist yet”namestringrequireddescriptionstringinstructionsstringfieldsarrayrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_integrations_setup_promptreads or searches
“Prepare an integration-specific MCP setup prompt and Codex or Claude Code app links.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
7 inputs, 3 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”namestringrequireddescriptionstringinstructionsstringidstringfieldsarray
- summer_credentials_listreads or searches
“List saved credential names, sources and versions.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_credentials_setcreates or changes datadescribed as changing data
“Save one selected credential value or Doppler reference.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 5 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”namestringrequired“Credential variable name, for example STRIPE_READ_KEY”sourcestringrequired“doppler saves a reference; local_value returns a CLI handoff”secret_namestring“Doppler secret name, for source=doppler”expected_versionintegerrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_knowledge_listreads or searches
“List current company knowledge documents.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 1 required
companystringrequired“Summer company ID”querystringoffsetinteger
- summer_knowledge_createcreates or changes datadescribed as changing data
“Upload a new company knowledge document with original revision history.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 5 required
companystringrequired“Summer company ID”idstringrequired“Knowledge document ID”pathstringrequiredcontentstringrequiredtagsarrayreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_knowledge_getreads or searches
“Read one company knowledge document and its current revision.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”documentstringrequired“Knowledge document ID”
- summer_knowledge_historyreads or searches
“Read the edit history of a company knowledge document.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
companystringrequired“Summer company ID”documentstringrequired“Knowledge document ID”offsetinteger
- summer_knowledge_editcreates or changes datadescribed as changing data
“Edit an existing company knowledge document with the expected revision and a reason.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 6 required
companystringrequired“Summer company ID”documentstringrequired“Knowledge document ID”revisionintegerrequiredcontentstringrequiredstatusstringrequiredreasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_installations_listreads or searches
“List Messenger installations in this environment.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_messenger_installations_createcreates or changes datadescribed as changing data
“Create an installation with a client-chosen ID.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
5 inputs, 4 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”idstringrequired“New installation ID chosen by the client, so a retry cannot create a duplicate”settingsobjectrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_installations_updatecreates or changes datadescribed as changing data
“Update installation settings with the expected version.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
6 inputs, 5 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”installationstringrequiredexpected_versionintegerrequiredsettingsobjectrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_installations_rotate_keycreates or changes datadescribed as changing data
“Issue a new signing key.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”installationstringrequiredexpected_versionintegerrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_assistant_readreads or searches
“Read assistant settings per installation and whether the managed runtime is enabled.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_messenger_leads_listreads or searches
“Read consented website leads for this company and environment.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”beforestring
- summer_messenger_assistant_updatecreates or changes datadescribed as changing data
“Update assistant instructions and escalation permission with the expected revision.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
6 inputs, 5 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”installationstringrequiredrevisionintegerrequiredsettingsobjectrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_voice_readreads or searches
“Read voice chat settings per installation, the voice services and their voices, published help article count and the voice assistant's update status.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_messenger_voice_updatecreates or changes datadescribed as changing data
“Update voice chat settings with the expected revision.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
6 inputs, 5 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”installationstringrequiredrevisionintegerrequiredsettingsobjectrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_email_readreads or searches
“Read support email addresses: the private forwarding address, the one DNS record to add, whether mail has arrived, sending status, Gmail forwarding codes and emails that need a look.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 2 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”
- summer_messenger_email_createcreates or changes datadescribed as changing data
“Add a support email address.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
6 inputs, 4 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”support_addressstringrequired“The address customers already write to, such as support@example.com.”display_namestringrequired“Sender name customers see on replies.”installation_idstring“Messenger installation whose inbox the emails join.”idempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_email_updatecreates or changes datadescribed as changing data
“Change the sender name or turn a support email address on or off, with the expected version.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
7 inputs, 4 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”channelstringrequiredversionintegerrequireddisplay_namestringenabledbooleanidempotency_keystring“Reuse the same key when retrying the same change”
- summer_messenger_email_checkreads or searches
“Check forwarding, the DNS record and sending status for one support email address now.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 3 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”channelstringrequired
- summer_slack_identity_readreads or searches
“Read the support name and avatar shown on Summer's approved Slack replies, whether the Slack install allows them, and the change history.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_slack_identity_updatecreates or changes datadescribed as changing data
“Set the support name and avatar on Summer's approved Slack replies, with the expected revision and a reason.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
6 inputs, 5 required
companystringrequired“Summer company ID”revisionintegerrequired“Current revision from slack.identity.read; 0 before the first save.”display_namestring or nullrequired“Support name shown on replies, such as the company's support team name.”avatar_urlstring or nullrequired“Public https image link for the reply avatar.”reasonstringrequiredidempotency_keystring“Reuse the same key when retrying the same change”
- summer_company_team_readreads or searches
“List company members and pending invitations.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
companystringrequired“Summer company ID”
- summer_messenger_conversations_assistantcreates or changes datadescribed as changing data
“Pause the assistant in one conversation so a person can take over, or ask it to resume.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
companystringrequired“Summer company ID”environmentstringrequired“Environment that owns the resource”conversationstringrequiredpausedbooleanrequiredidempotency_keystring“Reuse the same key when retrying the same change”
Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 117 tools are listed. Read 2026-10-23.
How well are its tools described?
Features #4 and #5
How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.
Descriptions
AI reading of each description
- Says what the tool does
- 100% of 117 tools
- Says what it returns
- 78% of 116 tools
- States limits, defaults or errors
- 0% of 117 tools
- Says when to use it
- 0% of 117 tools
- Items covered per tool
- 1.8 of 4 on average
Counted from the listing
- Parameters with a description
- 38% of 519
- Tools with a description
- 100% of 117
- Typical description length
- 132 characters
The tool set
Counted from the listing
- Tools
- 117
- Size of the list
- about 42,752 tokens for an agent to load (characters ÷ 4)
- Naming
- 117 of 117 names use snake_case
AI reading: easy to mix up
No pair found.
The AI items cover 117 of 117 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.
How do I add it to my client?
Config from the registry entry
From the remote endpoint (Streamable HTTP)
We connected to this URL on 2026-10-23 (a read-only session: no tool was called).
Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.
Claude Desktop or claude.ai
Settings → Connectors → Add custom connector, then paste: https://api.gosummer.ai/mcp
Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
"mcpServers": {
"summer": {
"url": "https://api.gosummer.ai/mcp"
}
}
}VS Code · .vscode/mcp.json
{
"servers": {
"summer": {
"type": "http",
"url": "https://api.gosummer.ai/mcp"
}
}
}VS Code (command line) · Bash or zsh terminal (macOS, Linux)
code --add-mcp '{"name":"summer","type":"http","url":"https://api.gosummer.ai/mcp"}'Claude Code
claude mcp add --transport http summer https://api.gosummer.ai/mcp
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.gosummer.ai/mcp --transport http
- The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
- The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.
Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.
Does the registry listing match what we found?
Feature #6The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.
| Registry says | We found | Result | Source · date |
|---|---|---|---|
| Remote endpoint api.gosummer.ai/mcp | Session opened | matches | our test · 2026-10-23 |
| No credential declared as required | Opened a session without any credential | matches | our test · 2026-10-23 |
| Repository github.com/compound-technologies/summer-mcp | Opens publicly | matches | api.github.com · 2026-10-22 |
Who made it?
Feature #7 · lineage
Facts about the publisher. We do not turn them into a trust score.
- Namespace
- ai.gosummer
- GitHub owner
- an organization (compound-technologies)
- Repository
- github.com/compound-technologies/summer-mcp
- Stars
- 0
- Repository age
- 0–30 days
- Last push
- 0–30 days ago
- Archived
- no
- Security policy
- none found (we looked for SECURITY.md in the repository and in its owner’s .github repository)
Source: the registry entry and api.github.com · 2026-10-22; security policy read from GitHub · 2026-10-23.
Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.
Choosing
Record checks
Public records · not a safety rating4 of 5 record checks met · 4 do not apply
- Not ranked by downloads: a remote server publishes no download figure
- Not ranked by stars: 0 stars (ranked from 10)
- MetRegistry entry is active and says how to run itActive, with a package or a remote address.
- MetSource repository link opensThe linked GitHub repository is public.
- MetRepository is not archivedNot archived.
- MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
- Not metRepository publishes a security policy (SECURITY.md)No SECURITY.md in the places GitHub reads it from.
- Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
- Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
- Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
- Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.
Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-22. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards
Common questions about ai.gosummer/summer
Answered from the data aboveIs ai.gosummer/summer safe to install?
We do not rate servers as safe or unsafe. 4 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. 50 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.
Does ai.gosummer/summer need an API key or sign-in?
It opened a session without any credential on 2026-10-23. The registry entry declares no required credential; no declaration is not a guarantee.
Has ai.gosummer/summer been security tested?
Partly. 3 of the 16 checks that apply to it were exercised. It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security verdict is published before verification.
What can ai.gosummer/summer do?
It lists 117 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data, delete, run code or commands and do something else. We did not call any tool, so this describes the text, not the behaviour.
Can ai.gosummer/summer change or delete data?
50 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.
Does ai.gosummer/summer publish a security policy?
We found no SECURITY.md in its repository (root, .github/ or docs/) or in its owner's .github repository.
Where is the source code of ai.gosummer/summer?
In github.com/compound-technologies/summer-mcp, which opens publicly.
Found this page useful?
Anonymous · no sign-inA quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.
Similar servers
Same topic · AI-read
- org.brainkb/brainkbalso has tools that creates or changes data, deletes, runs code or commands, does something else, reads or searchescompare with this one
- io.github.haison8x/geogebra-mcpalso has tools that creates or changes data, deletes, runs code or commands, does something else, reads or searchescompare with this one
- io.github.thinkfiveable/fiveable-ap-teachersFiveable for AP Teachersalso has tools that creates or changes data, deletes, runs code or commands, does something else, reads or searchescompare with this one
- io.github.nietus/anki-mcpAnkialso has tools that creates or changes data, deletes, does something else, reads or searchescompare with this one
- io.github.marcorusc/BioMASSBioMASS ODE Model Builderalso has tools that creates or changes data, deletes, runs code or commands, reads or searchescompare with this one
- io.github.marcorusc/NeKoNeKo Biological Network Builderalso has tools that creates or changes data, deletes, does something else, reads or searchescompare with this one
Active servers whose topic is also “science-health-and-education” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.
Compare with another server
Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.
Security testing
What did we test, and what did we leave out?
18 checks · features #1, #2
Open without sign-in
It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.
- Inventory: exercised
- Hidden instructions: exercised
- Real execution: not run · our policy
- Secret leak: not run · nothing to check it against
- Internal addresses: not run · our policy
- Unconfirmed changes: not run · our policy
- Bad input: not run · our policy
- Model requests: not run · nothing to check it against
- Sensitive questions: not run · nothing to check it against
- Folder boundary: not run · our policy
- Log leaks: not run · nothing to check it against
- Hidden content: not run · nothing to check it against
- Fake assistant turns: not run · an error was returned
- Token passthrough: not applicable
- Token audience: not applicable
- Sign-in redirect: not run · our policy
- Consent handling: not testable from outside
- Sign-in metadata: exercised
3 exercised13 not run (reason given)2 not applicable
Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 3 of the 16 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.
- 1Inventory
tool-listReads the declared tools, resources and prompts.exercised - 2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised - 18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.exercised
- 3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against - 13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server returned an error when its prompts were read.not run · an error was returned - 16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy - 17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside
- 14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable - 15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.
What happened during the test?
Feature #8
The steps in order, as the test record holds them.
- 0 msStarted a read-only session with the server's remote endpoint
- 2,578 msConnected after 0 redirects. No credential was sent or needed.
- Read the inventory: 117 tools, 0 resources, 1 prompt.
- 6,859 msFinished: 3 checks exercised.
Reference
How is it classified?
18 fields
One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.
“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.
Cite or correct this page
Sources and corrections
Suggested citation
ProtocolProbe. “ai.gosummer/summer: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/ai.gosummer/summer
Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.
As JSON: this record in the API · API documentation.
Badge for your README
[](https://protocolprobe.com/mcp/servers/ai.gosummer/summer)
It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.
Something wrong, or is this yours?
If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.
Write to hello@protocolprobe.com · corrections log · methodology