Connect
8 clients · secrets stay placeholdersQuality 84 / 100good
protocol75 · weight 25
- warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a
protocol.statelessonly applies to 2026-07-28 servers
- pass
protocol.transportstreamable HTTP
- n/a
protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
- n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
- n/a
auth.secret_in_urlno templated URL
tool hygiene93 · weight 30
- pass
tools.descriptionsevery tool has a description
- pass
tools.description_lengthdescriptions are concise
- pass
tools.schemasevery tool has an object input schema
- pass
tools.annotations11 of 11 tools declare readOnlyHint or destructiveHint
- warn
tools.directory_hints3 of 11 tools declare all four hints; missing: get_product_image (destructiveHint, idempotentHint); get_shop_info (destructiveHint, idempotentHint); check_availability (destructiveHint, idempotentHint); …
- pass
tools.token_costabout 3,242 tokens to load every tool
- pass
tools.api_dumptools are not a one-to-one API dump
dependencies67 · weight 15
- pass
deps.known_vulnsno known advisory in 98 resolved packages
- fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
- pass
11 tools, about 3,242 tokens to load them all · tool set ab30c61e640b · checked 2026-10-20 16:30 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Trust 94 / 100
+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-43d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Official server.json
{
"name": "io.github.Severin2k/blumen-komander-mcp",
"title": "Blumen Komander München",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://mcp.blumen-verschicken.online/sse",
"type": "sse"
},
{
"url": "https://mcp.blumen-verschicken.online/mcp",
"type": "streamable-http"
}
],
"version": "1.2.0",
"packages": [
{
"version": "1.2.0",
"transport": {
"type": "stdio"
},
"identifier": "blumen-komander-mcp",
"registryType": "npm"
}
],
"repository": {
"url": "https://github.com/Severin2k/blumen-komander-mcp",
"source": "github"
},
"websiteUrl": "https://blumen-komander.de/ki-florist",
"description": "First German florist with a public MCP server. Search bouquets and order flowers via AI in Munich."
}