Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center"> <img src="logo.png" alt="POS.DO MCP Server" width="200" height="200"/>
Discovery of 356K+ restaurants across 20 countries via the Model Context Protocol.
POS.DO is a discovery platform with global coverage of restaurants — names, addresses, reviews, photos, opening hours, cuisines, neighbourhoods, cultural context, and real-time availability with time-based offers. This MCP server exposes that catalogue to AI agents over the Model Context Protocol.
Idempotency-Key header)This is a proxy repository. The MCP endpoint runs at https://pos.do/mcp and is operated by EZZYPUSH SL. No local installation of the server is required — agents just point at the URL.
Add to claude_desktop_config.json:
{
"mcpServers": {
"pos-do": {
"url": "https://pos.do/mcp"
}
}
}Restart Claude Desktop. The 7 tools below become available.
Most MCP clients accept a remote HTTP server entry of the same shape. For Cursor:
{
"mcp.servers": {
"pos-do": {
"url": "https://pos.do/mcp",
"transport": "http"
}
}
}curl -sS -X POST https://pos.do/mcp \
-H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'| Tool | Purpose | Docs |
|---|---|---|
search_restaurants | Search restaurants in a city, with cuisine/price/feature filters | docs |
get_restaurant_details | Full profile for a restaurant by slug | docs |
get_restaurant_reviews | Paginated reviews with star and date filters | docs |
get_flow_offers | Today's time-based discount slots for a restaurant | docs |
book_flow_reservation | Reserve a seat at a Flow-discounted slot | docs |
find_restaurants_near_landmark | Restaurants within walking distance of a famous landmark | docs |
get_cultural_context_around_restaurant | Monuments, museums, parks near a restaurant (Wikidata) | docs |
Full tool inventory with inputSchema is served live at /.well-known/mcp.json.
https://pos.do/mcphttps://pos.do/.well-known/mcp.json — official MCP discovery (full tools[] with inputSchema)https://pos.do/.well-known/webmcp.json — webmcp.link manifesthttps://pos.do/.well-known/mcp/server-card.json — Smithery-style server cardhttps://pos.do/mcp/manifest.json — aliasThe server runs in anonymous tier by default. No API key required.
| Tier | Per minute | Per day |
|---|---|---|
| Anonymous (default) | 60 req/min per IP | 10,000 req/day per IP |
| Reservation attempts | 10/min per IP | 5/day per email |
Higher-rate API keys are available on request — open an issue.
For idempotent reservations, send an Idempotency-Key HTTP header (any UUID or stable client-side key). Replays within 24 h return the original reservation instead of creating a duplicate.
See docs/data-coverage.md for per-country counts and source attributions.
Stable. Backwards-compatible changes only at this point. Breaking changes will be announced via CHANGELOG.md and bumped to 2.x.
Apache License 2.0 — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.