MCP servers › io.github.OneWave-AI › gillby
MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23
io.github.OneWave-AI/gillby
Florida marine conditions, forecasts, tides, hazards and coastal places for AI agents. — the publisher's description
Summary
io.github.OneWave-AI/gillby is a remote MCP server listed in the official MCP registry at version 1.0.1. On 2026-10-23 ProtocolProbe connected to it in read-only mode and read its inventory: 118 tools, 1 resource and 0 prompts.
Record checks
4 of 5 record checks met · 4 do not apply
- met: Registry entry is active and says how to run it
- met: Source repository link opens
- met: Repository is not archived
- met: Code pushed to the repository in the 90 days before our check
- not met: Repository publishes a security policy (SECURITY.md)
- not applicable: Package names its licence with a standard (SPDX) identifier
- not applicable: The version the registry lists can be installed and is not withdrawn
- not applicable: npm package carries build provenance (attestation)
- not applicable: No known critical or high advisory in the package or its dependencies
- Not ranked by downloads: a remote server publishes no download figure
- Not ranked by stars: 0 stars (ranked from 10)
From public records, not a safety rating. Each check with its reason · Is it safe to install?
Key facts
- Runs
- remote (hosted by the publisher)
- Transport
- streamable HTTP
- Sign-in
- none needed to open a session
- Repository
- public
- Tools
- 118
- Described as changing data
- 8 of 118 toolsAI-classified
- Topic
- data-and-databasesAI-classified
- Last tested
- 2026-10-23
Observed fact
This server accepted a session without any credential and lists 8 tools whose name or declaration suggests they change data (delete_my_place, delete_my_trip, save_my_place, save_my_trip, update_my_notification_settings and 3 more). That is our reading of the names; we did not call them. Source: our connection, 2026-10-23.
Worth knowing before you connect it
- 8 tools are described as changing something (delete_my_place, delete_my_trip, …): our AI model's reading of the descriptions, not something we tested, and the server opened a session without any credential. We did not call them.
Each line comes from a section below, with its source and date.
How fresh this is
- Live-tested
- yes, a real session (not a text-only review)
- Last tested
- 2026-10-23
- Mode
- read-only (no tool calls)
- Latest version
- 1.0.1, published 2026-10-19 (registry, as of the 2026-10-23 snapshot)
- First listed version
- 2026-10-18 (earliest version still in the registry; older removed versions would be earlier)
- Version history
- 2 versions listed, 2026-10-18 to 2026-10-19; 2 in the 90 days before the 2026-10-23 snapshot.(versions still listed in the registry only)
Most recent 2 versions
1.0.1· 2026-10-191.0.0· 2026-10-18
- Registry data
- snapshot 2026-10-23
- Package and repository
- checked 2026-10-23
- Engine
- mcp-runtime-engine@0.1.0 · sdk@1.32.0
Changes since the last refresh
New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 1.0.1 (published 2026-10-19).
Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.
What it is
What does this server offer?
Observed inventory8 of 118 tools are described as changing something (creating, editing, deleting, sending or running).
- check_route_conditionsreads or searches
“Weather and marine conditions at up to five ordered spot IDs.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Compare current conditions for up to five verified comma-separated spot IDs.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- delete_my_placedeletesdescribed as changing data
“Delete a saved place.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
- delete_my_tripdeletesdescribed as changing data
“Delete a saved trip.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
“Search published anchorages by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- find_beachesreads or searches
“Search published beaches by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- find_boat_rampsreads or searches
“Search published boat ramps by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“Search published dive sites by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- find_fuel_docksreads or searches
“Search published fuel docks by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- find_inletsreads or searches
“Search published inlets by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“Search published marinas by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- find_piersreads or searches
“Search published piers by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
Show 88 more tools
- find_reefsreads or searches
“Search published reefs by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- find_waterfront_diningreads or searches
“Search published waterfront restaurants by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- find_wrecksreads or searches
“Search published wrecks by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_activity_scoresreads or searches
“Hourly published activity scores with reasons and vetoes.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_air_temperaturereads or searches
“Air temperature for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_algae_reportsreads or searches
“Reported algae samples from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_beach_bacteriareads or searches
“Beach bacteria samples for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“A single boat record from the library.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
“A short headline + <=60-word body written from the live data (numbers validated against the fact sheet; falls back to a template when no model is available).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
- get_california_coveragereads or searches
“Explain California API/MCP beta coverage, sources and missing capabilities.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- get_california_lakereads or searches
“On-demand lake weather with wind/gusts kt, air F and source-dated gauge measurements.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
- get_california_protected_areasreads or searches
“Paginated CDFW protected-area boundary geometry from a dated archive.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_california_riverreads or searches
“Get source-dated USGS river flow cfs, local gauge height ft and water temperature F where available, plus weather.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
- get_california_surfreads or searches
“Get an on-demand California surf outlook for a forecastSupported spot ID from list_california_spots.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Fetch a public camera JPEG with source timestamp metadata.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
camIdstringrequired
- get_canal_dischargesreads or searches
“Canal discharge and freshwater releases from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_chlorophyllreads or searches
“Satellite chlorophyll and water color from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_chopreads or searches
“Boat ride and chop (use get_chop_history for past trends) for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_chop_historyreads or searches
“Gillby's native 0-10 chop series: the latest 72 hours publicly, up to 31 days with a free Gillby account (OAuth sign-in); daily mean/max, coverage and 7-day trends.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_cloud_coverreads or searches
“Cloud cover for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_coastal_sensorsreads or searches
“SECOORA coastal sensor observations from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“The full conditions bundle for a named spot: current waves (ft, s, deg FROM), wind (kt), tide (ft MLLW), water temp (F), activity scores with reasons, 7-day hourly forecast, hi/lo tides, best windows…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_coral_heatreads or searches
“Coral heat stress and bleaching outlook from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_currentsreads or searches
“Predicted inlet currents for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Published dataset inventory and verified spot coverage; distinguishes unavailable data.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
“The latest payload of one dataset from list_datasets, including sharks and jellyfish.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
pathobjectrequiredqueryobject
- get_departure_windowsreads or searches
“Published best windows filtered by activity.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_depthreads or searches
“Actual NOAA ENC chart depth and optional DEM depth at a Florida coordinate, with charted hazards, channel context and restriction zones.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_derelict_vesselsreads or searches
“Reported derelict vessels from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_fish_killsreads or searches
“Reported fish kills from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_fishing_heatmapreads or searches
“Published state-isolated Florida and California fishing evidence (state defaults to florida; California default species california-halibut): dated NOAA commercial catches and research/community occur…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_fishing_insightsreads or searches
“Published state-isolated Florida and California fishing evidence (state defaults to florida; California default species california-halibut): dated NOAA commercial catches and research/community occur…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_fishing_recordsreads or searches
“Published state-isolated Florida and California fishing evidence (state defaults to florida; California default species california-halibut): dated NOAA commercial catches and research/community occur…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_florida_lakesreads or searches
“Florida USGS lake monitoring inventory, levels with original vertical datum, temperature and storage where measured; historical stations and stale readings identified from the published agency datase…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_florida_riversreads or searches
“Florida NOAA river and water gauges, observed readings and separate forecast summaries from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“Hourly forecast for a spot (or lat+lon) starting at `time` (default now) for `hours` hours: waves, swell/wind-wave split, wind, gusts, tide, current, precip/thunder chance, and go/caution/nogo scores…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_gulf_streamreads or searches
“Approximate Gulf Stream edge for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Active NWS marine/coastal alerts (small craft, rip current, high surf, special marine, waterspout...) plus water hazards for a spot or lat+lon: rip current risk, red tide (FWC samples), bacteria (FDO…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“Rolls up whether the ingest worker is running, which feed families (ndbc, coops, nws, openmeteo, goes19, coastwatch...) have stale sources, government dataset status and the GLM lightning feed.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“Read stored observations or forecast history for source and var.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_hurricane_historyreads or searches
“Search 26 completed seasons of NOAA NHC HURDAT2 best-track history (2000–2025), Atlantic and eastern/central Pacific.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_hurricanesreads or searches
“Active NHC tropical cyclones in the Atlantic and eastern/central Pacific.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_jellyfish_observationsreads or searches
“Published Florida jellyfish, box jellyfish and man-of-war observations from OBIS and iNaturalist, with observation dates, uncertainty, observer credits and licenses.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_king_tidereads or searches
“King tide forecast for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_lake_okeechobeereads or searches
“Lake Okeechobee stage and releases from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_lightningreads or searches
“GOES-19 GLM lightning.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_marine_alertsreads or searches
“Active and upcoming alerts for a spot, retaining start/end times and source links.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_my_notification_settingsreads or searches
“Read notification preferences and actual delivery availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- get_my_placereads or searches
“Read one saved place.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
“Read saved vessel, preferences and notification settings.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- get_my_tripreads or searches
“Read one saved trip.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
- get_my_vesselreads or searches
“Requires OAuth login to your Gillby account.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- get_navigation_noticesreads or searches
“USCG local notices to mariners from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“Actual buoy and station observations for a spot with timestamps.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_park_alertsreads or searches
“Coastal national park alerts and closures from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_parking_guidesreads or searches
“Discover checked Florida or California launch/trailer and beach parking guides.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Look up a published coastal POI by its exact ID.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Read source-linked details for a published Florida boat ramp, marina, fuel dock or waterfront restaurant by exact POI ID returned by a place search.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_point_conditionsreads or searches
“Same bundle as get_conditions for an arbitrary point inside Florida coverage, including the Keys and Everglades.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_pollution_noticesreads or searches
“Pollution incident notices from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_pressurereads or searches
“Air pressure for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_protected_areasreads or searches
“Marine protected areas from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_rainreads or searches
“Rain forecast probability and amount for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_rainfall_historyreads or searches
“Observed daily precipitation from NOAA NCEI GHCN-Daily at one of six selected Florida airport stations, not archived forecasts.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_red_tidereads or searches
“Red tide samples for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_release_updatesreads or searches
“Read the current Gillby release version, date, supported MCP protocol and dated changes shared by the API and MCP.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
- get_rip_riskreads or searches
“Rip current risk for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_sargassumreads or searches
“Local sargassum risk for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_sargassum_outlookreads or searches
“Sargassum research product availability from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_shark_researchreads or searches
“Published Florida shark research occurrences with observation dates, location uncertainty, source credits and licenses.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
“Fresh, stale, unavailable and QC-rejected sources used by spot conditions.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“A single spot record plus now.scores (go/caution/nogo per activity for the current hour) when the worker has scored it.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
pathobjectrequired
“NWS surf zone forecast for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_temperature_frontsreads or searches
“Satellite sea temperature fronts from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_thunder_forecastreads or searches
“Thunderstorm forecast for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Predicted high and low tides (ft above MLLW, NOAA CO-OPS) for the next `days` days at a spot or lat+lon, the hourly tide height curve and inlet current (kt, + flood / - ebb), plus sunrise/sunset and …”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_usgs_waterreads or searches
“USGS flow, local gauge height, salinity and water temperature from the published agency dataset, with source and availability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- get_uv_forecastreads or searches
“UV forecast for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Atmospheric visibility for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_water_clarityreads or searches
“Satellite water clarity for a verified spot.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_water_temperaturereads or searches
“Water temperature for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_wave_modelsreads or searches
“Published wave-model series and model spread for a spot; absent models stay unavailable.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_wavesreads or searches
“Wave height, period and swell for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
- get_windreads or searches
“Wind and gusts for a verified spot over the next hours.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input, 1 required
queryobjectrequired
“Boats with published specs (LOA, beam, draft, deadrise, weight, hull type, fuel, cruise speed) and their sources.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- list_bridgesreads or searches
“Search published bridges by name or west,south,east,north bbox.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- list_california_facilitiesreads or searches
“Paginated dated State Parks boating-facility source records.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
- list_california_lakesreads or searches
“List California lake IDs, model point coordinates and gauge references.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
queryobject
Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 118 tools are listed. Read 2026-10-23.
How well are its tools described?
Features #4 and #5
How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.
Descriptions
AI reading of each description
- Says what the tool does
- 100% of 118 tools
- Says what it returns
- 100% of 118 tools
- States limits, defaults or errors
- 35% of 105 tools
- Says when to use it
- 3% of 118 tools
- Items covered per tool
- 2.5 of 4 on average
Counted from the listing
- Parameters with a description
- 0% of 112
- Tools with a description
- 100% of 118
- Typical description length
- 484 characters
The tool set
Counted from the listing
- Tools
- 118
- Size of the list
- about 68,964 tokens for an agent to load (characters ÷ 4)
- Naming
- 118 of 118 names use snake_case
AI reading: easy to mix up
No pair found.
The AI items cover 118 of 118 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.
How do I add it to my client?
Config from the registry entry
From the remote endpoint (Streamable HTTP)
We connected to this URL on 2026-10-23 (a read-only session: no tool was called).
Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.
Claude Desktop or claude.ai
Settings → Connectors → Add custom connector, then paste: https://www.gillby.com/mcp
Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
"mcpServers": {
"gillby": {
"url": "https://www.gillby.com/mcp"
}
}
}VS Code · .vscode/mcp.json
{
"servers": {
"gillby": {
"type": "http",
"url": "https://www.gillby.com/mcp"
}
}
}VS Code (command line) · Bash or zsh terminal (macOS, Linux)
code --add-mcp '{"name":"gillby","type":"http","url":"https://www.gillby.com/mcp"}'Claude Code
claude mcp add --transport http gillby https://www.gillby.com/mcp
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 --server-url https://www.gillby.com/mcp --transport http
- The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
- The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.
Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.
Does the registry listing match what we found?
Feature #6The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.
| Registry says | We found | Result | Source · date |
|---|---|---|---|
| Remote endpoint www.gillby.com/mcp | Session opened | matches | our test · 2026-10-23 |
| No credential declared as required | Opened a session without any credential | matches | our test · 2026-10-23 |
| Repository github.com/OneWave-AI/gillby-mcp | Opens publicly | matches | api.github.com · 2026-10-23 |
Who made it?
Feature #7 · lineage
Facts about the publisher. We do not turn them into a trust score.
- Namespace
- io.github.OneWave-AI
- GitHub owner
- an organization (OneWave-AI)
- Repository
- github.com/OneWave-AI/gillby-mcp
- Stars
- 0
- Repository age
- 0–30 days
- Last push
- 0–30 days ago
- Archived
- no
- Security policy
- none found (we looked for SECURITY.md in the repository and in its owner’s .github repository)
Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.
Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.
Choosing
Record checks
Public records · not a safety rating4 of 5 record checks met · 4 do not apply
- Not ranked by downloads: a remote server publishes no download figure
- Not ranked by stars: 0 stars (ranked from 10)
- MetRegistry entry is active and says how to run itActive, with a package or a remote address.
- MetSource repository link opensThe linked GitHub repository is public.
- MetRepository is not archivedNot archived.
- MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
- Not metRepository publishes a security policy (SECURITY.md)No SECURITY.md in the places GitHub reads it from.
- Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
- Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
- Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
- Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.
Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards
Common questions about io.github.OneWave-AI/gillby
Answered from the data aboveIs io.github.OneWave-AI/gillby safe to install?
We do not rate servers as safe or unsafe. 4 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. 8 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.
Does io.github.OneWave-AI/gillby need an API key or sign-in?
It opened a session without any credential on 2026-10-23. The registry entry declares no required credential; no declaration is not a guarantee.
Has io.github.OneWave-AI/gillby been security tested?
Partly. 4 of the 15 checks that apply to it were exercised. It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security verdict is published before verification.
What can io.github.OneWave-AI/gillby do?
It lists 118 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data, delete and generate content. We did not call any tool, so this describes the text, not the behaviour.
Can io.github.OneWave-AI/gillby change or delete data?
8 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.
Does io.github.OneWave-AI/gillby publish a security policy?
We found no SECURITY.md in its repository (root, .github/ or docs/) or in its owner's .github repository.
Where is the source code of io.github.OneWave-AI/gillby?
In github.com/OneWave-AI/gillby-mcp, which opens publicly.
Found this page useful?
Anonymous · no sign-inA quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.
Similar servers
Same topic · AI-read
- co.firecms/mcpFireCMS Cloudalso has tools that creates or changes data, deletes, generates content, reads or searchescompare with this one
- io.github.AtomGraph/web-algebraWeb Algebraalso has tools that creates or changes data, deletes, generates content, reads or searchescompare with this one
- io.github.Autario/autario-mcpalso has tools that creates or changes data, deletes, generates content, reads or searchescompare with this one
- io.github.FoodXDevelopment/foodblock-mcpalso has tools that creates or changes data, deletes, generates content, reads or searchescompare with this one
- io.github.pipeworx-io/sports-game-oddsSports Game Oddsalso has tools that creates or changes data, deletes, generates content, reads or searchescompare with this one
- io.github.pipeworx-io/ted-euTed Eualso has tools that creates or changes data, deletes, generates content, reads or searchescompare with this one
Active servers whose topic is also “data-and-databases” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.
Compare with another server
Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.
Security testing
What did we test, and what did we leave out?
18 checks · features #1, #2
Open without sign-in
It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.
- Inventory: exercised
- Hidden instructions: exercised
- Real execution: not run · our policy
- Secret leak: not run · nothing to check it against
- Internal addresses: not run · our policy
- Unconfirmed changes: not run · our policy
- Bad input: not run · our policy
- Model requests: not run · nothing to check it against
- Sensitive questions: not run · nothing to check it against
- Folder boundary: not run · our policy
- Log leaks: not run · nothing to check it against
- Hidden content: exercised
- Fake assistant turns: not applicable
- Token passthrough: not applicable
- Token audience: not applicable
- Sign-in redirect: not run · our policy
- Consent handling: not testable from outside
- Sign-in metadata: exercised
4 exercised11 not run (reason given)3 not applicable
Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 4 of the 15 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.
- 1Inventory
tool-listReads the declared tools, resources and prompts.exercised - 2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised - 12Hidden content
audience-hidingChecks resources that hide content from the user.exercised - 18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.exercised
- 3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy - 17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside
- 13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable - 14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable - 15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.
What happened during the test?
Feature #8
The steps in order, as the test record holds them.
- 0 msStarted a read-only session with the server's remote endpoint
- 1,193 msConnected after 0 redirects. No credential was sent or needed.
- Read the inventory: 118 tools, 1 resource, 0 prompts.
- 5,448 msFinished: 4 checks exercised.
Reference
How is it classified?
18 fields
One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.
“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.
Cite or correct this page
Sources and corrections
Suggested citation
ProtocolProbe. “io.github.OneWave-AI/gillby: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.OneWave-AI/gillby
Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.
As JSON: this record in the API · API documentation.
Badge for your README
[](https://protocolprobe.com/mcp/servers/io.github.OneWave-AI/gillby)
It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.
Something wrong, or is this yours?
If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.
Write to hello@protocolprobe.com · corrections log · methodology