MCP servers › io.github.bck-stack › sitecheck-health-travel
MCP server · registry snapshot 2026-10-24 · last tested 2026-10-24
io.github.bck-stack/sitecheck-health-travel
121 pay-per-call agent tools: health care, drug, provider and travel data tools. x402 — the publisher's description
Summary
io.github.bck-stack/sitecheck-health-travel is a remote MCP server listed in the official MCP registry at version 1.0.1. On 2026-10-24 ProtocolProbe connected to it in read-only mode and read its inventory: 121 tools, 0 resources and 0 prompts.
Record checks
1 of 2 record checks met · 7 do not apply
- met: Registry entry is active and says how to run it
- not met: Source repository link opens
- not applicable: Repository is not archived
- not applicable: Code pushed to the repository in the 90 days before our check
- not applicable: Repository publishes a security policy (SECURITY.md)
- not applicable: Package names its licence with a standard (SPDX) identifier
- not applicable: The version the registry lists can be installed and is not withdrawn
- not applicable: npm package carries build provenance (attestation)
- not applicable: No known critical or high advisory in the package or its dependencies
From public records, not a safety rating. Each check with its reason
Key facts
- Runs
- remote (hosted by the publisher)
- Transport
- streamable HTTP
- Sign-in
- none needed to open a session
- Tools
- 121
- Last tested
- 2026-10-24
How fresh this is
- Live-tested
- yes, a real session (not a text-only review)
- Last tested
- 2026-10-24
- Mode
- read-only (no tool calls)
- Latest version
- 1.0.1, published 2026-10-24 (registry, as of the 2026-10-24 snapshot)
- First listed version
- 2026-10-23 (earliest version still in the registry; older removed versions would be earlier)
- Version history
- 2 versions listed, 2026-10-23 to 2026-10-24; 2 in the 90 days before the 2026-10-24 snapshot.(versions still listed in the registry only)
Most recent 2 versions
1.0.1· 2026-10-241.0.0· 2026-10-23
- Registry data
- snapshot 2026-10-24
- Package and repository
- checked 2026-10-24
- Engine
- mcp-runtime-engine@0.1.0 · sdk@1.32.0
Changes since the last refresh
New in the registry: not in the list of 2026-10-23, listed on 2026-10-24 with version 1.0.1 (published 2026-10-24).
Source: the official MCP Registry list on 2026-10-23 and on 2026-10-24.
What it is
What does this server offer?
Observed inventoryNone of its 121 tools are described as changing anything. For 121 the reading was uncertain, so no mark is shown.
- health_pubmed_abstracts
“PubMed search (NCBI E-utilities): matching articles with PMID, title, authors, journal, publication date and DOI.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“PubMed search terms, 2 to 200 characters”maxstring“How many results, 1 to 20 (default 5)”
- health_clinical_trials_gov
“ClinicalTrials.gov study search (API v2): NCT ID, title, status, phase, start and completion dates, sponsor, conditions, interventions, enrollment and primary outcome.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Search term (condition, drug, sponsor), 2 to 200 characters”maxstring“How many studies, 1 to 10 (default 5)”
- health_fda_orange_book
“FDA Drugs@FDA approved applications (openFDA) by active ingredient: application number, sponsor, brand names, dosage form, marketing status and Orange Book therapeutic equivalence (TE) code.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
ingredientstringrequired“Active ingredient name, letters and spaces, 2 to 60 characters”maxstring“How many applications, 1 to 10 (default 5)”
- health_fda_purple_book
“FDA Purple Book licensed biological products matching a name (brand or proper name, e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
namestringrequired“Brand or proper (nonproprietary) name, or BLA number (required)”limitstring“Products to return, 1 to 100 (default 25)”
- health_fda_drug_shortages
“FDA drug shortage listings (openFDA): generic name, availability status (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Generic drug name, letters and spaces, 2 to 60 characters”maxstring“How many listings, 1 to 10 (default 5)”
- health_fda_medical_device_510k
“FDA 510(k) premarket notifications (openFDA): K-number, device name, applicant, decision (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Device name words, letters, digits and spaces, 2 to 60 characters”maxstring“How many clearances, 1 to 10 (default 5)”
- health_fda_recalls_enforcement
“FDA drug recall enforcement reports (openFDA) matching a product word: recall number, class I/II/III, status, recalling firm, reason, product description and dates.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Product word, letters and spaces, 2 to 60 characters”maxstring“How many reports, 1 to 10 (default 5)”
- health_fda_adverse_events_faers
“FDA FAERS drug adverse event reports (openFDA) for a generic drug name: report ID, receive date, seriousness, patient age and sex, drugs and reported reactions.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
drugstringrequired“Generic drug name, letters and spaces, 2 to 60 characters”maxstring“How many reports, 1 to 10 (default 5)”
- health_ema_human_medicines
“European Medicines Agency (EMA) centrally authorised human medicines (EMA bulk JSON, updated twice a day): name, EMA product number, status, active substance, ATC code, therapeutic indication, first …”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Medicine name or active substance, letters, digits and spaces, 2 to 60 characters”maxstring“How many medicines, 1 to 20 (default 5)”
- health_ema_shortages_safety
“European Medicines Agency (EMA) human medicine supply shortages (EMA shortages JSON): medicine, INN, shortage status, affected forms, availability of alternatives, start and expected resolution dates.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Medicine or INN words, letters, spaces and hyphens, 2 to 60 characters”maxstring“How many shortages, 1 to 20 (default 5)”
- health_who_global_health_stats
“WHO Global Health Observatory values for one country and one indicator (OData API): indicator name, year, sex or group breakdown, value with uncertainty interval.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
countrystringrequired“ISO 3166-1 alpha-3 country code, e.g.”indicatorstring“WHO indicator code, letters, digits and underscores (default WHOSIS_000001)”maxstring“How many rows, 1 to 20 (default 5)”
- health_cdc_wonder_mortality
“CDC/NCHS leading causes of death by US state and year (data.cdc.gov open data): cause, deaths and age-adjusted death rate per 100,000.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
statestringrequired“US state name as in the dataset, e.g.”yearstring“Four-digit year, optional”maxstring“How many rows, 1 to 50 (default 10)”
Show 88 more tools
- health_npi_provider_registry
“CMS NPPES NPI Registry search: NPI number, name, credential, status, taxonomy (specialty code and description) and practice location.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
last_namestringrequired“Provider last name, letters, spaces, apostrophes and hyphens, 2 to 60 characters”first_namestring“Provider first name, optional”statestring“Two-letter US state code, optional”maxstring“How many records, 1 to 10 (default 5)”
- health_physician_compare_cms
“CMS Medicare Doctors and Clinicians file: clinician NPI, name, credential, specialty, medical school, graduation year and practice location, by last name and optional state.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
last_namestringrequired“Clinician last name, letters, spaces, apostrophes and hyphens, 2 to 60 characters”statestring“Two-letter state code, optional”maxstring“How many records, 1 to 20 (default 5)”
- health_hospitallink_cms_ratings
“CMS Hospital General Information (data.cms.gov): hospital name, city, type, ownership, emergency services, overall star rating (1-5, when CMS publishes one) and counts of measures better, no differen…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
statestringrequired“Two-letter US state code, e.g.”maxstring“How many hospitals, 1 to 50 (default 10)”
- health_rxnorm_concept_id
“NIH RxNorm concept lookup (RxNav): RxCUI identifiers for a drug name with each concept's name and term type (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
namestringrequired“Drug or ingredient name, letters, digits, spaces and hyphens, 2 to 100 characters”maxstring“How many concepts, 1 to 5 (default 3)”
- health_mesh_biomedical_thesaurus
“NLM MeSH (Medical Subject Headings) descriptor for an exact heading: MeSH ID, label, entry terms (synonyms) and allowable subheadings (qualifiers).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
headingstringrequired“Exact MeSH heading, letters, digits, spaces, commas, hyphens and parentheses, 2 to 100 characters”
- health_icd10_cm_diagnosis
“ICD-10-CM diagnosis code search (NLM Clinical Tables, CDC code set): matching codes and their official names, with the total match count.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
termstringrequired“Words to search in code names, 2 to 60 characters”maxstring“How many codes, 1 to 20 (default 10)”
- health_cpt_hcpcs_procedure
“HCPCS Level II billing code search (CMS code set, via NLM Clinical Tables): code and short description for procedures, supplies and drugs, with total match count.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
termstringrequired“Words to search in HCPCS descriptions, 2 to 60 characters”maxstring“How many codes, 1 to 20 (default 10)”
- health_loinc_laboratory_codes
“Regenstrief LOINC laboratory and clinical test codes (via NLM Clinical Tables): LOINC number and long common name matching a term, with total match count.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
termstringrequired“Words to search in LOINC names, 2 to 60 characters”maxstring“How many codes, 1 to 20 (default 10)”
- health_cms_medicare_part_d
“CMS Medicare Part D prescriber rows (by provider and drug): prescriber NPI, name, specialty, state, drug name, claims, 30-day fills and total drug cost.”
Publisher declares: read-only yes · open-world yes
4 inputs
npistring“10-digit prescriber NPI, optional (use this or generic)”genericstring“Generic drug name, letters and spaces, optional”statestring“Two-letter state code, optional”maxstring“How many rows, 1 to 20 (default 5)”
- health_medicare_inpatient_drg
“CMS Medicare inpatient hospital averages per MS-DRG (data.cms.gov, fee-for-service Part A): hospital name, state, DRG code and description, discharges, average submitted charge, average total payment…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
drgstringrequired“3-digit MS-DRG code, e.g.”statestring“Two-letter state code, optional”maxstring“How many rows, 1 to 20 (default 5)”
- health_open_payments_cms
“CMS Open Payments (Sunshine Act) general payments from drug and device makers to US physicians, prescribers and teaching hospitals for a program year (2019-2025): company, recipient (name, type, NPI,…”
Publisher declares: read-only yes · open-world yes
8 inputs
companystring“Paying company name start, e.g.”lastNamestring“Recipient's last name, e.g.”npistring“Recipient's 10-digit NPI”statestring“Recipient's 2-letter state”productstring“Drug or device name start, e.g.”yearstring“Program year 2019 to 2025 (default 2025)”limitstring“Records to return, 1 to 100 (default 25)”pagestring“Page number from 1 (default 1)”
- health_nih_reporter_grants
“NIH RePORTER funded research projects matching a text search (NIH RePORTER API v2): project number, title, fiscal year, award amount, lead organization and principal investigators.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Search words, letters, digits and spaces, 2 to 100 characters”maxstring“How many projects, 1 to 20 (default 5)”
- health_daily_med_label_spl
“NLM DailyMed drug label listings (structured product labeling) matching a drug name: title with labeler, set ID, label version, published date and total match count.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
drugstringrequired“Drug name, letters, digits, spaces and hyphens, 2 to 60 characters”maxstring“How many labels, 1 to 10 (default 5)”
- health_dea_controlled_substances
“DEA controlled substance schedules (21 CFR 1308.11-1308.15, via eCFR): substance name and DEA Controlled Substances Code Number for schedule I to V table entries matching a name.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
substancestringrequired“Substance name words, letters, spaces and hyphens, 3 to 60 characters”maxstring“How many matches, 1 to 20 (default 10)”
- health_state_medical_board_ny
“New York medical board disciplinary actions (NYS DOH Board for Professional Medical Conduct open data since 1990): search physicians and physician or specialist assistants by license number or name f…”
Publisher declares: read-only yes · open-world yes
6 inputs
licenseNumberstring“NY license number, e.g.”lastNamestring“Last name (exact, case-insensitive)”firstNamestring“First name starts with”sincestring“Only actions on/after this date, YYYY-MM-DD”limitstring“Actions, 1 to 100 (default 20), newest first”offsetstring“Skip this many (paging)”
- health_state_medical_board_fl
“Florida health-care license verification (Department of Health, MQA): search by name (and city) or license number within a board (medicine, osteopathic, nursing, dentistry, pharmacy, psychology...): …”
Publisher declares: read-only yes · open-world yes
6 inputs
lastNamestring“Practitioner last name (or use licenseNumber)”firstNamestring“Optional first name”licenseNumberstring“License number, e.g.”boardstring“Board: acupuncture, athletic training, chiropractic medicine, clinical laboratory personnel, dentistry, hearing aid specialists, massage therapy, medicine, nat…”citystring“Optional city”statusstring“active (default: practicing statuses), inactive or all”
- health_state_medical_board_tx
“Texas Medical Board license verification and disciplinary status from TMB open data (data.texas.gov, daily): physicians, PAs, acupuncturists and other TMB licenses.”
Publisher declares: read-only yes · open-world yes
10 inputs
licenseNumberstring“TMB license number, e.g.”lastNamestring“Last name (exact, case-insensitive)”firstNamestring“First name starts with”citystring“Practice city”specialtystring“Specialty contains (filled mainly for medical radiologic technologist and medical physicist licenses, e.g.”licenseTypestring“License type contains, e.g.”activeOnlystring“true (default) = currently licensed only”disciplinedstring“true = only licensees with a current board action”limitstring“Results, 1 to 100 (default 20)”offsetstring“Skip this many (paging)”
- health_nursing_licensure_nursys
“Registered nurse license verification for Texas (a Nurse Licensure Compact state) from the Texas Board of Nursing's open data: license number, name, status, status and expiry dates, issue date, origi…”
Publisher declares: read-only yes · open-world yes
7 inputs
licenseNumberstring“Texas RN license number, e.g.”lastNamestring“Last name (exact, case-insensitive)”firstNamestring“First name starts with”countystring“Texas county of residence, e.g.”currentOnlystring“true = only CURRENT licenses”limitstring“Results, 1 to 100 (default 20)”offsetstring“Skip this many (paging)”
- health_dental_board_verify
“Dental license verification from official state open data: Colorado (dentists and hygienists, with discipline history) and Illinois (dentists, specialists, hygienists, sedation permits, controlled-su…”
Publisher declares: read-only yes · open-world yes
8 inputs, 1 required
statestringrequired“CO or IL”licenseNumberstring“State license number”lastNamestring“Last name (exact, case-insensitive)”firstNamestring“First name starts with”citystring“City”activeOnlystring“true (default for name/city searches) = active licenses only”limitstring“Results, 1 to 100 (default 20)”offsetstring“Skip this many (paging)”
- health_veterinary_license_db
“Veterinarian license verification from official state open data — Colorado (DORA, VET licenses with degrees and discipline history) and Illinois (IDFPR: licensed veterinarians, controlled-substance l…”
Publisher declares: read-only yes · open-world yes
8 inputs, 1 required
statestringrequired“CO or IL”licenseNumberstring“State license number”lastNamestring“Last name (exact, case-insensitive)”firstNamestring“First name starts with”citystring“City”activeOnlystring“true (default for name/city searches) = active licenses only”limitstring“Results, 1 to 100 (default 20)”offsetstring“Skip this many (paging)”
- health_chEMBL_bioactive_molecules
“EMBL-EBI ChEMBL molecule search: ChEMBL ID, preferred name, maximum clinical phase, molecule type, molecular weight, canonical SMILES, first approval year and ATC codes.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Molecule name or term, letters, digits, spaces and hyphens, 2 to 100 characters”maxstring“How many molecules, 1 to 20 (default 5)”
- health_pubchem_chemical_cid
“NIH PubChem compound lookup by name (PUG REST): PubChem CID, title, molecular formula, molecular weight and IUPAC name for the best match.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
namestringrequired“Compound name, letters, digits, spaces, commas, hyphens and parentheses, 2 to 100 characters”
- health_drugbank_interaction
“Drug-drug interaction text from the FDA label (openFDA) of drug A that mentions drug B: matching sentences from the label's drug interactions section, with label set ID and effective date.”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
drugstringrequired“Generic name of drug A, letters and spaces, 2 to 60 characters”withstringrequired“Generic name of drug B to look for in A's label, letters and spaces, 2 to 60 characters”
- health_kegg_pathway_genes
“KEGG human pathway (KEGG REST, flat file): pathway name, class, description and the genes in it (KEGG gene ID, symbol and description).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
pathwaystringrequired“Five-digit human KEGG pathway number, e.g.”maxstring“How many genes, 1 to 100 (default 20)”
- health_uniprot_protein_knowledge
“UniProt reviewed (Swiss-Prot) human protein entries for a gene symbol: accession, protein name, gene, sequence length and the curated function summary.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
genestringrequired“Human gene symbol, letters, digits and hyphens, 2 to 20 characters”maxstring“How many entries, 1 to 5 (default 1)”
- health_clinvar_genetic_variants
“NCBI ClinVar variants for a human gene symbol: VCV accession, variant type, germline clinical significance (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
genestringrequired“Human gene symbol, letters, digits and hyphens, 2 to 20 characters”maxstring“How many variants, 1 to 10 (default 5)”
- health_genbank_nucleotide_seq
“NCBI GenBank nucleotide record search (nuccore): accession with version, title, sequence length, organism, molecule type and last update date.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
termstringrequired“Accession or search term, letters, digits, spaces, brackets, dots, hyphens, 2 to 100 characters”maxstring“How many records, 1 to 10 (default 5)”
- health_dbSNP_polymorphisms
“NCBI dbSNP short variant record by rs number: variant type, placement (sequence and position), reference and alternate sequence, and study allele frequencies (e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
rsidstringrequired“dbSNP rs number, e.g.”
- health_orphanet_rare_diseases
“Orphanet rare disease by ORPHAcode (Orphadata open data, CC BY 4.0): preferred name, synonyms, disorder group and typology, and associated genes with association type.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
orphastringrequired“ORPHAcode number, 1 to 8 digits, e.g.”
- health_gwas_catalog_associations
“EMBL-EBI GWAS Catalog genome-wide association hits for a gene symbol (REST API v2): reported trait, EFO trait, SNP and locus, p-value, odds ratio or beta, study accession and PubMed ID.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
genestringrequired“Gene symbol, letters, digits and hyphens, 2 to 20 characters”maxstring“How many associations, 1 to 10 (default 5)”
- health_reactome_biological_paths
“Reactome curated human biological pathways matching a term (Reactome ContentService, CC BY 4.0): stable ID, pathway name, whether it is a disease pathway and a short summary.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Search words, letters, digits and spaces, 2 to 60 characters”maxstring“How many pathways, 1 to 20 (default 5)”
- health_string_protein_networks
“STRING protein-protein interaction partners for a human gene (STRING API, CC BY 4.0): partner gene name, combined confidence score (0-1) and evidence scores for experiments, databases and text mining.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
genestringrequired“Human gene symbol, letters, digits and hyphens, 2 to 20 characters”maxstring“How many partners, 1 to 20 (default 10)”
- health_cell_line_depmap_cancer
“Cancer cell line lookup with DepMap IDs, from Cellosaurus (SIB, the reference cell line knowledge base): find a line by name (e.g.”
Publisher declares: read-only yes · open-world yes
5 inputs
namestring“Cell line name, e.g.”accessionstring“Cellosaurus accession, e.g.”depmapIdstring“DepMap ID, e.g.”diseasestring“Disease text, e.g.”limitstring“Results for disease search, 1 to 50 (default 10)”
- health_clinical_pharmacogenetics
“CPIC pharmacogenetics guidelines (api.cpicpgx.org) for a gene symbol: guideline name, genes covered, guideline version, and ClinPGx link.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
genestringrequired“Gene symbol, letters, digits and hyphens, 2 to 20 characters”maxstring“How many guidelines, 1 to 20 (default 10)”
- health_fda_device_gudid
“FDA AccessGUDID device record by Device Identifier (DI, the GS1/GUDID number on a device label): brand, company, model, description, GMDN term, MRI safety status, sterile and single-use flags.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
distringrequired“Device Identifier, 8 to 14 digits”
- health_mammography_facility_fda
“FDA MQSA certified mammography facilities in one US state (FDA public search): facility name, phone, city, ZIP and FDA facility ID.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
statestringrequired“Two-letter US state code, e.g.”maxstring“How many facilities, 1 to 50 (default 10)”
- health_clia_laboratory_finder
“CMS CLIA-certified clinical laboratories in one US state (Provider of Services File, latest quarterly release): CLIA provider number, lab name, city, street address, phone, certification date and pro…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
statestringrequired“Two-letter US state code, e.g.”maxstring“How many labs, 1 to 50 (default 10)”
- health_mental_health_samhsa
“SAMHSA FindTreatment substance use and mental health treatment facilities near a latitude and longitude (FindTreatment.gov locator export): facility name, address, phone, website, miles from the poin…”
Publisher declares: read-only yes · open-world yes
4 inputs, 2 required
latstringrequired“Latitude, -90 to 90”lngstringrequired“Longitude, -180 to 180”radiusMilesstring“Search radius in miles, 1 to 100 (default 25)”maxstring“How many facilities, 1 to 20 (default 5)”
- health_blood_center_accreditation
“AABB-accredited facilities from AABB's public lists: blood banks, transfusion services and blood centers, immunohematology and molecular labs, perioperative and out-of-hospital transfusion, cord bloo…”
Publisher declares: read-only yes · open-world yes
5 inputs
typestring“blood-bank, immunohematology-reference, molecular-testing, perioperative, out-of-hospital-transfusion, cord-blood, hpc, somatic-cell, cell-therapy-services, dn…”statestring“US state / province code, e.g.”countrystring“Country code as AABB lists it, e.g.”qstring“Word in the facility name”limitstring“Facilities, 1 to 500 (default 100)”
- health_covid19_cdc_wastewater
“CDC National Wastewater Surveillance System (NWSS) sampling sites in one US state (data.cdc.gov): wastewater plant, county, population served, 15-day detection proportion, percentile and sample dates.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
statestringrequired“US state name as in the dataset, e.g.”maxstring“How many sites, 1 to 50 (default 10)”
- health_fluview_influenza_cdc
“CDC FluView weekly influenza-like illness (ILI) and weighted ILI for the US or a region (served via Delphi Epidata, which mirrors CDC FluView): epiweek, ILI %, weighted ILI %, patient and provider co…”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
regionstringrequired“'nat' for US national, or a state code like 'vt' (lowercase letters, 2 to 5 characters)”epiweekFromstringrequired“First epiweek, YYYYWW, e.g.”epiweekTostringrequired“Last epiweek, YYYYWW, at most 12 weeks after the first”
- health_usps_prescription_ship
“US rules for mailing prescription drugs from the official texts, section by section with citations: USPS Publication 52 section 453 (definitions, mailer responsibility, what may be mailed, packaging …”
Publisher declares: read-only yes · open-world yes
3 inputs
sourcestring“usps = Publication 52 §453, dea = 21 CFR Part 1306, all (default)”querystring“Optional words that must all appear in the section title or text, e.g.”sectionstring“Optional exact section number, e.g.”
- health_indian_health_service_ihs
“Indian Health Service, tribal and urban Indian health facilities from IHS's official map: filter by state, IHS Area, city, name or service (dental, pharmacy, behavioral health, urgent care...).”
Publisher declares: read-only yes · open-world yes
6 inputs
statestring“Two-letter state code, e.g.”areastring“IHS Area: ALASKA, ALBUQUERQUE, BEMIDJI, BILLINGS, CALIFORNIA, GREAT PLAINS, NASHVILLE, NAVAJO, OKLAHOMA CITY, PHOENIX, PORTLAND, TUCSON”citystring“City name”qstring“Words in the facility name”servicestring“dental, pharmacy, behavioral-health, womens-health, emergency, urgent-care”limitstring“Facilities, 1 to 500 (default 50)”
- health_medicare_advantage_star
“Official CMS Medicare Star Ratings for Medicare Advantage (Part C) and Part D contracts from the newest Star Ratings Data Tables: contract number, organization type, contract and marketing name, pare…”
Publisher declares: read-only yes · open-world yes
6 inputs
contractstring“Contract number, e.g.”parentstring“Text in parent organization / contract / marketing name, e.g.”orgTypestring“Organization type contains, e.g.”minStarsstring“Minimum overall (or Part D for PDPs) rating, e.g.”limitstring“Contracts, 1 to 200 (default 50)”offsetstring“Skip this many (paging)”
- health_formulary_coverage_lookup
“Medicare Part D drug coverage from CMS monthly formulary files, current and next plan year: for a drug (name or RxCUI), in one plan, across a state's plans or over every formulary: coverage per stren…”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
drugstringrequired“Drug name (generic or brand, e.g.”planstring“Optional plan id CONTRACT-PLAN[-SEGMENT], e.g.”statestring“Optional 2-letter state: list the plans sold there with this drug's coverage”yearstring“Plan (contract) year, e.g.”limitinteger“Max plans in a state listing, 1-100 (default 20)”
- health_health_insurance_exchange
“ACA Health Insurance Marketplace (HealthCare.gov) overview for a US ZIP code from CMS's QHP Landscape data: number of plans and insurers, plans per metal level, the cheapest plan of each metal level …”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
zipstringrequired“5-digit US ZIP code”countystring“Optional 5-digit county FIPS when the ZIP spans several counties”agestring“Applicant age 0-120 (default 40); premiums are published for 0-14, 18, 21, 27, 30, 40, 50 and 60”yearstring“Plan year (only the year CMS publishes now)”
- health_hhs_hipaa_breach_portal
“HIPAA breaches affecting 500+ people from the HHS Office for Civil Rights portal (last 24 months, under investigation): entity name, state, entity type, individuals affected, submission date, breach …”
Publisher declares: read-only yes · open-world yes
6 inputs
statestring“Optional 2-letter state, e.g.”entityTypestring“Optional words of the entity type, e.g.”breachTypestring“Optional words of the breach type, e.g.”minIndividualsstring“Optional minimum number of individuals affected”namestring“Optional part of the covered entity name”limitstring“Rows to return, 1 to 100 (default 50)”
- health_clinical_evidence_cochrane
“Cochrane systematic reviews of health interventions, found through PubMed (journal Cochrane Database Syst Rev): PMID, title, publication date and DOI for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Search words, letters, digits, spaces and hyphens, 2 to 100 characters”maxstring“How many reviews, 1 to 10 (default 5)”
- health_usp_monographs_standards
“USP Reference Standards catalog search (official USP Store): total matches and per item the catalog number, name, package size, CAS number, chemical name, molecular formula, category (e.g.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
querystringrequired“Substance, CAS number or catalog number, e.g.”limitnumber“Results to return, 1-50 (default 20)”offsetnumber“Results to skip for paging (default 0)”
- health_cosmetics_inci_ingredients
“Cosmetic ingredient lookup by INCI name: INCI name, cosmetic functions (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
namestringrequired“INCI or common ingredient name, e.g.”limitstring“Ingredients to return, 1 to 25 (default 10)”
- health_eu_cosing_cosmetics
“EU cosmetics regulatory status for a substance name: matching Annex II (prohibited), III (restricted), IV (colorants), V (preservatives) and VI (UV filters) entries of Regulation (EC) No 1223/2009 fr…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
namestringrequired“Substance or INCI name, e.g.”limitstring“Entries to return, 1 to 25 (default 10)”
- health_osha_occupational_health
“OSHA Permissible Exposure Limits (Table Z-1, 29 CFR 1910.1000, read from eCFR): chemical name, CAS number, 8-hour TWA in ppm and mg/m3, and notes such as ceiling or see-other-section.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
chemicalstringrequired“Chemical name words, letters, spaces, commas and hyphens, 3 to 60 characters”maxstring“How many chemicals, 1 to 20 (default 5)”
- travel_booking_com_hotels
“Hotels featured on a Booking.com city page (e.g.”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
countrystringrequired“Two-letter country code as in Booking.com city URLs, e.g.”citystringrequired“City as in Booking.com city URLs, e.g.”currencystring“Three-letter currency code for prices (default USD)”
- travel_plugshare
“EV charging stations near a point.”
Publisher declares: read-only yes · open-world yes
4 inputs, 2 required
latstringrequired“Latitude -90 to 90”lonstringrequired“Longitude -180 to 180”radiusstring“Search radius in metres, 100 to 10000 (default 2000)”limitstring“Max stations, 1 to 50 (default 10)”
- travel_autotrader
“Vehicle listings from AutoTrader.ca (Canada; the US and UK AutoTrader sites block datacenter traffic): up to 20 per page with title, year, make, model, trim, price in CAD, AutoTrader's price label, m…”
Publisher declares: read-only yes · open-world yes
5 inputs
makestring“Make as in AutoTrader.ca URLs, e.g.”modelstring“Model as in AutoTrader.ca URLs, e.g.”provincestring“Province code: ab, bc, mb, nb, nl, ns, nt, nu, on, pe, qc, sk, yt (optional)”citystring“City, e.g.”pagestring“Result page, 1 to 50 (default 1)”
- travel_carfax
“CARFAX used-car listings by body style or price ceiling (optionally near a US ZIP): total matches and 24 cars per page with VIN, year, make, model, trim, mileage, price, value badge, history flags (o…”
Publisher declares: read-only yes · open-world yes
4 inputs
bodyTypestring“suv, sedan, pickup, coupe, convertible, hatchback, minivan, wagon (or use maxPrice)”maxPricenumber“Price ceiling instead of body type: 1000, 2000, 3000, 4000, 5000, 10000, 15000, 20000, 25000, 30000, 35000, 50000”zipstring“Optional US ZIP code to search near”pagenumber“Result page 1-50 (default 1)”
- travel_agoda
“Top hotels in a city from Agoda's city guide page (no dates needed): about 10 properties with Agoda hotel ID, name, star rating, area, amenities (Wi-Fi, parking, breakfast, pool …), review score out …”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
citystringrequired“Agoda city slug: <city>-<2-letter country>, e.g.”limitstring“Hotels, 1 to 20 (default 20)”
- travel_rome2rio
“Rome2Rio ways to travel between two places: the headline count ('11 ways to travel...') and the top options shown first (train, bus, flight, rideshare, car, ferry...) with label (Best, Cheapest, Fast…”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
fromstringrequired“Origin place, e.g.”tostringrequired“Destination place, e.g.”
- travel_carvana
“Carvana used cars for a make (and optional model): year, make, model, trim (from the listing text), color, mileage, price (USD), VIN, Carvana stock id, image and link, about 20 per page (page 1 to 20…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
makestringrequired“Car make, e.g.”modelstring“Optional model, e.g.”pagestring“Results page 1 to 20 (default 1)”
- travel_hotel_booking_sites_direct_hotel_websites
“KAYAK hotel prices for a city (KAYAK compares booking sites and hotel websites): the city's lowest nightly price headline and KAYAK's 'best hotels' list (usually ~16) with name, star rating, street a…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
citystringrequired“City name, e.g.”
- travel_carmax
“CarMax used cars for a make (and optional model): stock number, VIN, year, make, model, trim, body, price, original price and price-drop flag, mileage, colors, drivetrain, engine, MPG, store name/cit…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
makestringrequired“Car make, e.g.”modelstring“Optional model, e.g.”
- travel_flightradar24_live_flights
“Live aircraft inside a lat/lon box from the public Flightradar24 feed: callsign, position, altitude (ft), speed (kts), heading, aircraft type, registration, origin/destination airport codes and on-gr…”
Publisher declares: read-only yes · open-world yes
5 inputs, 4 required
northstringrequired“Top edge latitude -90 to 90”southstringrequired“Bottom edge latitude -90 to 90, below north”weststringrequired“Left edge longitude -180 to 180”eaststringrequired“Right edge longitude -180 to 180”limitstring“Max flights returned, 1 to 200 (default 50)”
- travel_flightaware_public_tracker
“Public FlightAware flight page for one flight number: airline, aircraft type, origin and destination airports (IATA, name), status (e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
identstringrequired“Flight number such as UAL956 (2 to 8 letters and digits)”
- travel_skyscanner
“Skyscanner flight prices from its public route page (Skyscanner codes, e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
fromstringrequired“Skyscanner origin code: 3-letter airport (ist, jfk) or 4-letter city code (lond, nyca, pari)”tostringrequired“Skyscanner destination code, e.g.”
- travel_fipe_brazil_vehicle_prices
“Brazilian FIPE reference price for one car: brand, model, model year, fuel, FIPE code and reference month, from the public FIPE API.”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
brandstringrequired“FIPE brand code, digits only (e.g.”modelstringrequired“FIPE model code, digits only (e.g.”yearstringrequired“FIPE year code like 1985-1 (year and fuel code)”
- travel_booking_com_reviews
“Booking.com guest reviews featured on a city page (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
countrystringrequired“Two-letter country code as in Booking.com city URLs, e.g.”citystringrequired“City as in Booking.com city URLs, e.g.”
- travel_booking_com
“Booking.com hotel price guide for a city (e.g.”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
countrystringrequired“Two-letter country code as in Booking.com city URLs, e.g.”citystringrequired“City as in Booking.com city URLs, e.g.”currencystring“Three-letter currency code (default USD)”
- travel_autonation
“AutoNation cars for sale (new and used) for a make and optional model: VIN, condition, year, make/model, trim, mileage, AutoNation 1Price (USD), store name, stock status, distance and vehicle page li…”
Publisher declares: read-only yes · open-world yes
2 inputs
makestring“Car make, e.g.”modelstring“Optional model, e.g.”
- travel_nhtsa_vehicle_recalls
“US NHTSA safety recalls for a make, model and model year: campaign number, component, summary, report date and remedy flags, as published by NHTSA.”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
makestringrequired“Vehicle make, e.g.”modelstringrequired“Vehicle model, e.g.”yearstringrequired“Model year, 1950 to 2100”
- travel_kayak
“KAYAK flight route overview between two city or airport codes (e.g.”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
fromstringrequired“Origin IATA city or airport code, e.g.”tostringrequired“Destination IATA city or airport code, e.g.”insightsstring“Include route insight answers: true (default) or false”
- travel_trivago
“trivago hotel prices for a destination: the hotels trivago lists for a city search (usually ~35) with name, location note, lowest price shown per night, guest rating out of 10 with review count, star…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
citystringrequired“Destination, e.g.”
- travel_nhtsa_vpic_vehicle_decoder
“Decodes a VIN with NHTSA vPIC: make, manufacturer, model, model year, trim, vehicle type, plant city/state/country and the check-digit message.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
vinstringrequired“17-character VIN (letters I, O, Q not allowed)”
- travel_airbnb
“Airbnb stays for a place and dates (first results page, usually 18): listing id, name, type, total price for the stay in the chosen currency (and original price when discounted), rating out of 5 with…”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
locationstringrequired“Place, e.g.”checkinstring“Check-in date YYYY-MM-DD (optional; Airbnb picks flexible dates without it)”checkoutstring“Check-out date YYYY-MM-DD (needed with checkin)”adultsstring“Adults, 1 to 16 (default 1)”currencystring“Three-letter currency code (default USD)”
- travel_hostelworld
“Hostels in a city as listed on Hostelworld's public city page (up to 30, Hostelworld's own order): name, address, coordinates, guest rating out of 10 with review count, lowest 'from' price per night …”
Publisher declares: read-only yes · open-world yes
4 inputs, 3 required
continentstringrequired“One of europe, asia, africa, north-america, south-america, oceania, central-america”countrystringrequired“Country as in Hostelworld URLs, e.g.”citystringrequired“City as in Hostelworld URLs, e.g.”limitstring“Hostels to return, 1 to 30 (default 30)”
- travel_nhtsa_vehicle_complaints
“US NHTSA owner-filed vehicle complaints for a make, model and model year: incident date, components, summary, crash/fire flags and injury counts.”
Publisher declares: read-only yes · open-world yes
4 inputs, 3 required
makestringrequired“Vehicle make, e.g.”modelstringrequired“Vehicle model, e.g.”yearstringrequired“Model year, 1950 to 2100”limitstring“Max complaints returned, 1 to 50 (default 10)”
- travel_momondo
“momondo flight prices from its public route page for two cities (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
fromstringrequired“Origin city as in momondo URLs, e.g.”tostringrequired“Destination city as in momondo URLs, e.g.”
- travel_amtrak_train_tracker
“Live Amtrak train status from Amtrak's Track Your Train map feed: train number, route, origin/destination, state (Predeparture/Active/Completed), current GPS position, speed (mph), heading, last upda…”
Publisher declares: read-only yes · open-world yes
5 inputs
trainNumstring“Train number, e.g.”routestring“Route name contains, e.g.”stationstring“Only trains stopping at this station code, e.g.”statestring“Active, Predeparture or Completed”limitstring“Trains, 1 to 200 (default 20)”
- travel_wikivoyage_articles
“Search English Wikivoyage travel guide articles: title, short snippet with HTML removed, word count, last-edit page id and article URL, plus the total hit count.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
qstringrequired“Search words, 2 to 100 characters”limitstring“Max results, 1 to 20 (default 5)”
- travel_google_flights
“One-way flight options with prices from Google Flights for a route and date (IATA codes, e.g.”
Publisher declares: read-only yes · open-world yes
5 inputs, 3 required
fromstringrequired“Origin airport or city IATA code, e.g.”tostringrequired“Destination airport or city IATA code, e.g.”datestringrequired“Departure date YYYY-MM-DD, today or later (required)”nonstopOnlystring“true to keep only nonstop flights”limitstring“Flights to return, 1 to 50 (default 20)”
- travel_data_wa_gov_electric_vehicle
“Washington State Department of Licensing registered electric vehicles (BEV and plug-in hybrid): make, model, model year, EV type, electric range, city, county and ZIP.”
Publisher declares: read-only yes · open-world yes
2 inputs
citystring“City name, letters and spaces, 2 to 60 characters (optional)”limitstring“Max vehicles, 1 to 100 (default 10)”
- travel_carsdirect_vehicle
“CarsDirect used-car listings near a US ZIP code (optionally one make and model): vehicle name, year, make, model, condition, mileage, exterior and interior colour, price (USD), dealer name with dista…”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
zipstringrequired“US ZIP code, e.g.”makestring“Optional make slug, e.g.”modelstring“Optional model slug (needs make), e.g.”pagenumber“Result page 1-10 (default 1)”
- travel_hk_mtr_realtime
“Hong Kong MTR realtime next-train arrivals at one station on one line, from the Hong Kong government open data feed: direction, destination platform, minutes to next train (ttnt) and scheduled time.”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
linestringrequired“MTR line code, e.g.”stastringrequired“Station code on that line, e.g.”
- travel_seat61_routes
“Seat61 train route guide for a city pair (e.g.”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
fromstringrequired“Origin city, e.g.”tostringrequired“Destination city, e.g.”tablesstring“Tables to return, 1 to 10 (default 3)”
- travel_mbta_realtime
“Live MBTA Boston vehicle positions for one route (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
routestringrequired“MBTA route id, letters/digits/hyphens, 1 to 20 characters”limitstring“Max vehicles, 1 to 100 (default 20)”
- travel_septa_train_view
“Live SEPTA regional rail train positions from the public TrainView feed: train number, line, destination, current and next stop, heading, minutes late and track.”
Publisher declares: read-only yes · open-world yes
1 input
limitstring“Max trains returned, 1 to 200 (default 50)”
- travel_korn_ferry_tour_leaderboard
“Korn Ferry Tour leaderboard for the current or most recent tournament (or the event on a given date): tournament name, dates and status, then each player's place, name, country, score to par, round s…”
Publisher declares: read-only yes · open-world yes
2 inputs
datestring“Optional YYYY-MM-DD to get the event played that week (default: current or most recent)”limitstring“Players to return, 1 to 156 (default 25)”
- travel_google_hotels_price
“Lowest nightly hotel prices for a city and stay dates from Google Hotels' public results page (about 18-20 hotels, Google's order): hotel name, 'prices starting from' amount, currency as Google shows…”
Publisher declares: read-only yes · open-world yes
4 inputs, 3 required
placestringrequired“City or area, e.g.”checkinstringrequired“Check-in date YYYY-MM-DD, today or later (required)”checkoutstringrequired“Check-out date YYYY-MM-DD, after check-in, at most 30 nights (required)”limitstring“Hotels to return, 1 to 40 (default 20)”
- travel_google_travel
“Google Travel hotels and vacation rentals for a place (about 20, Google's order): name, type, lowest price and currency (Google picks currency by server region), deal flag and % below usual, guest ra…”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
placestringrequired“City or area, e.g.”checkinstring“Check-in YYYY-MM-DD (optional, with checkout)”checkoutstring“Check-out YYYY-MM-DD (optional, with checkin)”limitstring“Properties to return, 1 to 40 (default 20)”
Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 121 tools are listed. Read 2026-10-24.
How well are its tools described?
Features #4 and #5
How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.
Descriptions
AI reading of each description
No AI reading was available for this server's tools (the two runs did not agree, or the listing was not reviewed).
Counted from the listing
- Parameters with a description
- 100% of 350
- Tools with a description
- 100% of 121
- Typical description length
- 418 characters
The tool set
Counted from the listing
- Tools
- 121
- Size of the list
- about 33,374 tokens for an agent to load (characters ÷ 4)
- Naming
- 119 of 121 names use snake_case
AI reading: easy to mix up
No pair found.
The AI items cover 0 of 121 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.
How do I add it to my client?
Config from the registry entry
From the remote endpoint (Streamable HTTP)
We connected to this URL on 2026-10-24 (a read-only session: no tool was called).
Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.
Claude Desktop or claude.ai
Settings → Connectors → Add custom connector, then paste: https://api.healthtravel-api.workers.dev/mcp
Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
"mcpServers": {
"sitecheck-health-travel": {
"url": "https://api.healthtravel-api.workers.dev/mcp"
}
}
}VS Code · .vscode/mcp.json
{
"servers": {
"sitecheck-health-travel": {
"type": "http",
"url": "https://api.healthtravel-api.workers.dev/mcp"
}
}
}VS Code (command line) · Bash or zsh terminal (macOS, Linux)
code --add-mcp '{"name":"sitecheck-health-travel","type":"http","url":"https://api.healthtravel-api.workers.dev/mcp"}'Claude Code
claude mcp add --transport http sitecheck-health-travel https://api.healthtravel-api.workers.dev/mcp
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.healthtravel-api.workers.dev/mcp --transport http
- The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
- The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.
Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.
Does the registry listing match what we found?
Feature #6The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.
| Registry says | We found | Result | Source · date |
|---|---|---|---|
| Remote endpoint api.healthtravel-api.workers.dev/mcp | Session opened | matches | our test · 2026-10-24 |
| No credential declared as required | Opened a session without any credential | matches | our test · 2026-10-24 |
Choosing
Record checks
Public records · not a safety rating1 of 2 record checks met · 7 do not apply
- MetRegistry entry is active and says how to run itActive, with a package or a remote address.
- Not metSource repository link opensThe registry entry gives no repository link.
- Does not applyRepository is not archivedNo public GitHub repository to read.
- Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
- Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
- Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
- Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
- Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
- Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.
Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-24. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards
Common questions about io.github.bck-stack/sitecheck-health-travel
Answered from the data aboveDoes io.github.bck-stack/sitecheck-health-travel need an API key or sign-in?
It opened a session without any credential on 2026-10-24. The registry entry declares no required credential; no declaration is not a guarantee.
Has io.github.bck-stack/sitecheck-health-travel been security tested?
Partly. 2 of the 14 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.
Found this page useful?
Anonymous · no sign-inA quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.
Compare with another server
Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.
Security testing
What did we test, and what did we leave out?
18 checks · features #1, #2
Not probed (we call no server's tools)
We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.
- Inventory: exercised
- Hidden instructions: exercised
- Real execution: not run · our policy
- Secret leak: not run · nothing to check it against
- Internal addresses: not run · our policy
- Unconfirmed changes: not run · our policy
- Bad input: not run · our policy
- Model requests: not run · nothing to check it against
- Sensitive questions: not run · nothing to check it against
- Folder boundary: not run · our policy
- Log leaks: not run · nothing to check it against
- Hidden content: not run · nothing to check it against
- Fake assistant turns: not applicable
- Token passthrough: not applicable
- Token audience: not applicable
- Sign-in redirect: not run · our policy
- Consent handling: not testable from outside
- Sign-in metadata: not applicable
2 exercised12 not run (reason given)4 not applicable
Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.
- 1Inventory
tool-listReads the declared tools, resources and prompts.exercised - 2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised
- 3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy - 11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against - 12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against - 16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy - 17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside
- 13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable - 14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable - 15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable - 18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.No sign-in (OAuth) metadata is published, so there are no sign-in addresses to check.not applicable
Source: our own test, 2026-10-24, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.
What happened during the test?
Feature #8
The steps in order, as the test record holds them.
- 0 msStarted a read-only session with the server's remote endpoint
- 467 msConnected after 0 redirects. No credential was sent or needed.
- Read the inventory: 121 tools, 0 resources, 0 prompts.
- 1,415 msFinished: 2 checks exercised.
Reference
How is it classified?
18 fields
One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.
“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.
Cite or correct this page
Sources and corrections
Suggested citation
ProtocolProbe. “io.github.bck-stack/sitecheck-health-travel: MCP server record.” Data checked 2026-10-24. https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-health-travel
Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.
As JSON: this record in the API · API documentation.
Badge for your README
[](https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-health-travel)
It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.
Something wrong, or is this yours?
If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.
Write to hello@protocolprobe.com · corrections log · methodology