# qrvote

> QR-code contests, surveys, quizzes and scavenger hunts: read results, manage your own.

- name: org.qrvote/qrvote
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 86/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/org.qrvote%2Fqrvote
- tools: https://api.protogrid.dev/v1/servers/org.qrvote%2Fqrvote/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "qrvote": {
      "type": "http",
      "url": "https://mcp.qrvote.org/mcp",
      "headers": {
        "Authorization": "Bearer ${QRVOTE_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${QRVOTE_TOKEN}`.

## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-99% +updated-23d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 86/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: 100 (weight 15)

- pass `auth.prm`: Protected Resource Metadata (RFC 9728) published
- pass `auth.as_metadata`: authorization server metadata reachable
- pass `auth.cimd`: Client ID Metadata Documents supported
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 15 of 15 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 14 of 15 tools declare all four hints; missing: draft_contest (destructiveHint, idempotentHint)
- pass `tools.token_cost`: about 4,389 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 12 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 15, about 4,389 tokens to load them all
- tool set hash: a9c75bc079034ac8218d6f2405180d45
- tools last changed: 2026-10-13T12:30:02.746Z
- badge: [![protogrid quality](https://protogrid.dev/badge/org.qrvote/qrvote.svg)](https://protogrid.dev/servers/org.qrvote/qrvote)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-13 `update_settings` changed (inputSchema)
- 2026-10-13 `create_contest` changed (inputSchema)
- 2026-10-13 `draft_contest` changed (inputSchema)
- 2026-09-29 `update_settings` changed (inputSchema)
- 2026-09-29 `create_contest` changed (inputSchema)
- 2026-09-29 `draft_contest` changed (inputSchema)
- 2026-09-29 `update_settings` changed (inputSchema)
- 2026-09-29 `draft_contest` changed (description)
  - before: Make a link that opens qrvote’s create form already filled in: name, entries or questions, rules, closing time, look. Give the link to the person: they check it and click Create (it needs a human check). Nothing is created until they do. To manage it afterwards, they can connect you at https://mcp.qrvote.org/mcp/organizer.
  - after: Make a link that opens QRvote’s create form already filled in: name, entries or questions, rules, closing time, look. Give the link to the person: they check it and click Create (it needs a human check). Nothing is created until they do. To manage it afterwards, they can connect you at https://mcp.qrvote.org/mcp/organizer.
- 2026-09-29 `create_contest` added
  - Create it now, on a signed-in connection with Manage (https://mcp.qrvote.org/mcp/organizer); up to 5 a day per connection. This connection can manage it straight away. You get its public link and a one-time claim link (valid 24 hours) for the person to open, which gives them the organizer dashboard; never ask for or share the organizer key. Without signing in, use draft_contest.
- 2026-09-29 `set_entry_photo` added
  - Give an entry (or hunt checkpoint) a photo from a public https image URL: JPEG, PNG or WebP, up to 3 MB. Hidden metadata (GPS, camera) is removed. Replaces any photo it had. Needs the organizer key.

Full history: https://api.protogrid.dev/v1/servers/org.qrvote%2Fqrvote/changes

## Remotes

- https://mcp.qrvote.org/mcp/organizer (streamable-http, auth oauth2, reachable true, uptime30d 0.9655172)
- https://mcp.qrvote.org/mcp (streamable-http, auth none, reachable true, uptime30d 0.98888886)

## Packages

_none_

## Tools (15)

- `add_entries`: Add entries (contests) or checkpoints (hunts) Needs the organizer key.
- `add_judge`: Contests: add a judge (judging must be on) The dashboard (getDashboard → judging.judges) then lists the judge with their private scorecard link key: https://qrvote.org/j/<slug>#<id>.<key>. Give it to that judge only. Needs the organizer key.
- `create_contest`: Create it now, on a signed-in connection with Manage (https://mcp.qrvote.org/mcp/organizer); up to 5 a day per connection. This connection can manage it straight away. You get its public link and a one-time claim link (valid 24 hours) for the person to open, which gives them the organizer dashboard; never ask for or share the organizer key. Without signing in, use draft_contest.
- `draft_contest`: Make a link that opens QRvote’s create form already filled in: name, entries or questions, rules, closing time, look. Give the link to the person: they check it and click Create (it needs a human check). Nothing is created until they do. To manage it afterwards, they can connect you at https://mcp.qrvote.org/mcp/organizer.
- `export_csv`: Download votes, survey responses or hunt players as CSV Needs the organizer key.
- `get_campaign`: A contest, survey or hunt as the public sees it Entries (contests), questions (surveys) or checkpoints (hunts; unfound ones show only their clue). Entry QR codes are never included when scanning is required. Public: no key needed.
- `get_dashboard`: Everything on the organizer dashboard Settings, entries with vote counts, ballot tickets, fairness signals (grouped, hashed), and survey or hunt data. Needs the organizer key.
- `get_results`: Results: vote tallies, survey totals, or a hunt leaderboard Public when the organizer made results visible; otherwise send the organizer key. Contests also return categoryResults (standings per award category) and, once voting has closed, judgeResults (each criterion averaged over the judges, summed). Written survey answers and individual judges' scores are never included here. Public; the organizer key also unlocks private results.
- `host_step`: Run a live quiz: start, reveal, next question, finish, or pause/resume its clock For quizzes with host = true. Body: { action: 'start' | 'reveal' | 'next' | 'finish' | 'pause' | 'resume' }. Steps must follow lobby → question → reveal → question … → done; anything else is 409. With hostSecs > 0 the quiz also moves on by itself (each question hostSecs seconds, each answer shown 8 s); pause/resume stop and restart that clock, and a step by hand restarts it. Needs the organizer key.
- `list_responses`: Survey responses, newest first (up to 500). Quizzes include each response's score. Needs the organizer key.
- `remove_judge`: Contests: remove a judge, their link and their scores Needs the organizer key.
- `set_answer_key`: Fix a quiz's answer key (allowed after people have answered; every score updates) Body: { answers: { <question id>: key | null } }. The key is an option index (single; yes/no uses 1 = yes, 0 = no), a list of option indexes (multi, all must match), or a list of accepted texts (short; case, accents and punctuation are ignored). null stops scoring that question. At least one question must stay scored. Needs the organizer key.
- `set_entry_photo`: Give an entry (or hunt checkpoint) a photo from a public https image URL: JPEG, PNG or WebP, up to 3 MB. Hidden metadata (GPS, camera) is removed. Replaces any photo it had. Needs the organizer key.
- `set_questions`: Surveys and quizzes: replace the questions (only until the first response) Body: { questions: [...] }, 1–50, in order; the whole list is replaced. Each: { type, prompt (≤300 chars), required?, options?, max?, answer?, id? }. type is single (pick one) or multi (pick any) with options (2–20 distinct texts), yesno, likert (disagree…agree), rating (max 5 or 10 stars), short or long (written). Quizzes: answer is the correct option index (single; yesno uses 1 = yes, 0 = no), a list of option indexes (multi), or a list of accepted texts (short); at least one question needs one. Send a question's id back to keep its picture. Refused with 409 once anyone has answered; the answer key can still be fixed with setAnswerKey. Needs the organizer key.
- `update_settings`: Change settings, or end / reopen voting Needs the organizer key.