Skip to content

MCP servers › io.github.KI-Klub-Werder-e-V › openverein

MCP server · registry snapshot 2026-11-04 · last tested 2026-11-04

openverein MCP server

Registry name io.github.KI-Klub-Werder-e-V/openverein

by KI-Klub-Werder-e-V · GitHub account (the registry's namespace rule)repository: same ownerSource ↗Website ↗

Club management for German e.V. clubs: members, fees, invoices, events and member portal. — the publisher's description

5 of 5 record checks metversion 0.1.1TypeScriptstreamable HTTP

Summary

io.github.KI-Klub-Werder-e-V/openverein is a remote MCP server listed in the official MCP registry at version 0.1.1, under the namespace of the GitHub account KI-Klub-Werder-e-V. Its linked repository, github.com/KI-Klub-Werder-e-V/openverein, belongs to the same GitHub account.

Record checks

5 of 5 record checks met · 4 do not apply

  • met: Registry entry is active and says how to run it
  • met: Source repository link opens
  • met: Repository is not archived
  • met: Code pushed to the repository in the 90 days before our check
  • met: Repository publishes a security policy (SECURITY.md)
  • not applicable: Package names its licence with a standard (SPDX) identifier
  • not applicable: The version the registry lists can be installed and is not withdrawn
  • not applicable: npm package carries build provenance (attestation)
  • not applicable: No known critical or high advisory in the package or its dependencies
  • Not ranked by downloads: a remote server publishes no download figure
  • Not ranked by stars: 0 stars (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Operate this server? Correct a fact · README badge · Run the checks yourself

Key facts

Runs
remote (hosted by the publisher)
Transport
streamable HTTP
Your own values
none declared (not a guarantee)
Sign-in
required
Repository
public
Last tested
2026-11-04

How a client gets in

OAuth sign-in; a client registration endpoint is published

Read from the server's public metadata on 2026-11-04 (openverein.ki-klub-werder.de), in our read-only connection; no tool was called. It may have changed since. How it is read

Tool list

Not read: The server required a sign-in before it would list anything, and we never use a credential its operator did not give us. Its operator can test it with their own credential, on their own machine, with our self-test command (/docs/selftest). So there is no tool-list size and no result from the three APIs.

Add to your client

How fresh this is

Live-tested
attempted, see below
Last tested
2026-11-04
Latest version
0.1.1, published 2026-11-04 (registry, as of the 2026-11-04 snapshot)
First listed version
2026-11-03 (earliest version still in the registry; older removed versions would be earlier)
Version history
2 versions listed, 2026-11-03 to 2026-11-04; 2 in the 90 days before the 2026-11-04 snapshot; 1 marked deprecated.
Most recent 2 versions
  • 0.1.1 · 2026-11-04
  • 0.1.0 · 2026-11-03 · deprecated
(versions still listed in the registry only)
Registry data
snapshot 2026-11-04
Package and repository
checked 2026-11-04
Engine
mcp-runtime-engine@0.1.0 · sdk@1.32.0

Dead or stale signals

None found in the records we hold

Looked for and not found: deprecated in the registry; repository link does not open; repository archived; no push in over 365 days. Does not apply: listed version cannot be installed or is withdrawn. Each line is a dated fact from a public record. It does not say whether the server still works, and a record can change after the date shown.

Changes since the last refresh

New in the registry: not in the list of 2026-11-03, listed on 2026-11-04 with version 0.1.1 (published 2026-11-04).

Source: the official MCP Registry list on 2026-11-03 and on 2026-11-04.

What it is

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

This entry needs values of your own (marked < > or { } in the config below), so there is no one-click link: paste the config and fill them in.

Claude Desktop or claude.ai
Settings → Connectors → Add custom connector, then paste:
https://{club_host}/mcp
Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
  "mcpServers": {
    "openverein": {
      "url": "https://{club_host}/mcp"
    }
  }
}
VS Code · .vscode/mcp.json
{
  "servers": {
    "openverein": {
      "type": "http",
      "url": "https://{club_host}/mcp"
    }
  }
}
Claude Code
claude mcp add --transport http openverein "https://{club_host}/mcp"
Cline · cline_mcp_settings.json (Cline CLI: ~/.cline/data/settings/; in the editor: MCP Servers → Configure → Configure MCP Servers)
{
  "mcpServers": {
    "openverein": {
      "type": "streamableHttp",
      "url": "https://{club_host}/mcp",
      "disabled": false,
      "autoApprove": []
    }
  }
}
Gemini CLI · ~/.gemini/settings.json, or .gemini/settings.json in a project
{
  "mcpServers": {
    "openverein": {
      "httpUrl": "https://{club_host}/mcp"
    }
  }
}
OpenAI Codex · ~/.codex/config.toml, or .codex/config.toml in a trusted project
[mcp_servers.openverein]
url = "https://{club_host}/mcp"
Zed · Zed settings file (command: zed: open settings file)
{
  "context_servers": {
    "openverein": {
      "url": "https://{club_host}/mcp"
    }
  }
}
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 --server-url "https://{club_host}/mcp" --transport http
  • The URL contains parts in { } that the entry marks as variables; replace them with your own values.
  • The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
  • Zed's docs we read on 2026-10-26 describe remote servers by URL and do not name the transport.
  • The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21; Cline, Gemini CLI, OpenAI Codex and Zed 2026-10-26). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry checks an entry when it is published (each new version), and nothing re-checks it on a schedule. A difference below is about the listing, not a judgement of the publisher.

Registry saysWe foundResultSource · date
Remote endpoint {club_host}/mcpEndpoint answered and asked for sign-inmatchesour test · 2026-11-04
No credential declared as requiredRequired sign-indiffersour test · 2026-11-04
Repository github.com/KI-Klub-Werder-e-V/openvereinOpens publiclymatchesapi.github.com · 2026-11-04

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace
io.github.KI-Klub-Werder-e-V
GitHub owner
an organization (KI-Klub-Werder-e-V)
Repository
github.com/KI-Klub-Werder-e-V/openverein
Stars
0
Repository age
0–30 days
Last push
0–30 days ago
Archived
no
Security policy
SECURITY.md

Source: the registry entry and api.github.com · 2026-11-04; security policy read from GitHub · 2026-11-04.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

5 of 5 record checks met · 4 do not apply

  • Not ranked by downloads: a remote server publishes no download figure
  • Not ranked by stars: 0 stars (ranked from 10)
  • MetRegistry entry is active and says how to run itActive, with a package or a remote address.
  • MetSource repository link opensThe linked GitHub repository is public.
  • MetRepository is not archivedNot archived.
  • MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
  • MetRepository publishes a security policy (SECURITY.md)SECURITY.md found.
  • Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
  • Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
  • Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
  • Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-11-04 (security policy 2026-11-04). No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating, and the same rules apply to every server. How each check works · Leaderboards · How we stay neutral

Common questions about io.github.KI-Klub-Werder-e-V/openverein

Answered from the data above

Who publishes io.github.KI-Klub-Werder-e-V/openverein?

The registry ties the namespace io.github.KI-Klub-Werder-e-V to the GitHub account KI-Klub-Werder-e-V; only its owner can publish under it. Its linked repository, github.com/KI-Klub-Werder-e-V/openverein, belongs to the same GitHub account. These are facts from the registry and GitHub, not a rating.

Is io.github.KI-Klub-Werder-e-V/openverein safe to install?

We do not rate servers as safe or unsafe. 5 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Does io.github.KI-Klub-Werder-e-V/openverein need an API key or sign-in?

It required sign-in on 2026-11-04. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.KI-Klub-Werder-e-V/openverein been security tested?

Partly. 1 of the 18 checks that apply to it was exercised. The server requires sign-in. We never use a credential its operator did not give us, so most checks could not run. ProtocolProbe publishes no security verdict for a named server.

Does io.github.KI-Klub-Werder-e-V/openverein publish a security policy?

Yes: its repository has a public security policy (github.com/ki-klub-werder-e-v/openverein/blob/HEAD/SECURITY.md). That is the publisher's statement, not permission for us to test the server, and we call none of its tools.

Where is the source code of io.github.KI-Klub-Werder-e-V/openverein?

In github.com/KI-Klub-Werder-e-V/openverein, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Needs the operator's credential

The server requires sign-in. We never use a credential its operator did not give us, so most checks could not run. No security score is given; a check we did not run is never counted as passed.

Why no live read-only session: The server required a sign-in before it would list anything, and we never use a credential its operator did not give us. Its operator can test it with their own credential, on their own machine, with our self-test command (/docs/selftest). — the server's own choice

The 18 checks at a glanceour test · 2026-11-04
  1. Inventory: not run · needs the operator's credential
  2. Hidden instructions: not run · needs the operator's credential
  3. Real execution: not run · needs the operator's credential
  4. Secret leak: not run · needs the operator's credential
  5. Internal addresses: not run · needs the operator's credential
  6. Unconfirmed changes: not run · needs the operator's credential
  7. Bad input: not run · needs the operator's credential
  8. Model requests: not run · needs the operator's credential
  9. Sensitive questions: not run · needs the operator's credential
  10. Folder boundary: not run · needs the operator's credential
  11. Log leaks: not run · needs the operator's credential
  12. Hidden content: not run · needs the operator's credential
  13. Fake assistant turns: not run · needs the operator's credential
  14. Token passthrough: not run · needs the operator's credential
  15. Token audience: not run · needs the operator's credential
  16. Sign-in redirect: not run · our policy
  17. Consent handling: not testable from outside
  18. Sign-in metadata: exercised

1 exercised17 not run (reason given)0 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 1 of the 18 checks that apply to it was exercised. We do not publish security-check outcomes for named servers. These 18 checks are separate from the record checks at the top of this page, which read public records only.

Exercised · 1
  • 18Sign-in metadata
    oauth-url-scheme
    Checks the published sign-in metadata for unsafe URLs.exercised
Not run, with the reason · 17
  • 1Inventory
    tool-list
    Reads the declared tools, resources and prompts.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 2Hidden instructions
    description-poisoning
    Looks for hidden instructions in tool descriptions.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 3Real execution
    real-execution
    Calls a tool and checks what really happens.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 4Secret leak
    canary-leak
    Plants a fake secret and checks whether it leaks.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 5Internal addresses
    ssrf
    Checks whether a tool can be steered to internal addresses.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 6Unconfirmed changes
    write-without-confirmation
    Checks whether tools that change data act without asking.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 7Bad input
    error-handling
    Sends bad input and watches how the server answers.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 8Model requests
    sampling
    Checks whether the server asks the client's model to act for it.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 9Sensitive questions
    elicitation-sensitive-data
    Checks whether the server asks users for sensitive data.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 10Folder boundary
    root-boundary
    Checks whether the server reaches outside the folders it was given.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 11Log leaks
    logging-side-channel
    Checks whether log messages carry data they should not.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 12Hidden content
    audience-hiding
    Checks resources that hide content from the user.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 13Fake assistant turns
    fake-assistant-turn
    Checks prompts that pose as the assistant's own words.The server requires sign-in, and we never use a credential its operator did not give us.not run · needs the operator's credential
  • 14Token passthrough
    token-passthrough
    Checks whether the server forwards a user's token to other services.Needs a real token issued by the server's own sign-in service, which only its operator can give us.not run · needs the operator's credential
  • 15Token audience
    token-audience-validation
    Checks whether tokens meant for another service are accepted.Needs a real token issued by the server's own sign-in service, which only its operator can give us.not run · needs the operator's credential
  • 16Sign-in redirect
    open-redirect
    Checks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
  • 17Consent handling
    confused-deputy
    Checks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Source: our own test, 2026-11-04, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

  1. 0 msStarted a session with the server's remote endpoint
  2. The server asked for sign-in before listing anything.
  3. 1,837 msFinished: 1 check exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified
pending: added in a later update
listed 2026-11-04; not classified yet
Pricing modelAI-classified
pending: added in a later update
the website is not read yet
Programming language
api.github.com · 2026-11-04
Hosting type
registry · 2026-11-04
MCP capability
not checked
not read (no session)
Transport
streamable HTTP
registry · 2026-11-04
Required credentials
none declared
registry · 2026-11-04 · no declaration is not a guarantee
Package registry
does not apply
remote-only server: no package is shipped, so there is no package registry
Freshness
0–30 days
registry updatedAt · 2026-11-04
Lifecycle status
registry · 2026-11-04
License class
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Integrity hash
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Signature / provenance
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Dependency advisories
does not apply
ships no package, so there are no dependencies to audit
Popularity
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Publisher signals
owner: an organization · repository age: 0–30 days · stars: 0–9
api.github.com · 2026-11-04
Maintenance
api.github.com · 2026-11-04
Environment
the publisher's infrastructure
where it runs, from the hosting type · 2026-11-04

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.KI-Klub-Werder-e-V/openverein: MCP server record.” Data checked 2026-11-04. https://protocolprobe.com/mcp/servers/io.github.KI-Klub-Werder-e-V/openverein

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

ProtocolProbe: 5 of 5 record checks met

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.KI-Klub-Werder-e-V/openverein)](https://protocolprobe.com/mcp/servers/io.github.KI-Klub-Werder-e-V/openverein)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology