Realtime Sports API
REMOTE · WWW.REALTIMESPORTSAPI.COM
Scores, play-by-play, schedules, box scores and odds: NFL, college football, NBA, MLB, NHL, soccer
Available components
Last scanned (16 hours ago)
Scores higher than 68% of remote servers
Reachable. Last reached 16 Oct 2026.
Category Entertainment and Games
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability57
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 5492 tokens (~392/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management36
- Stability check failed: schema churn in the 12 days we've observed: 0 tool removals, 0 breaking changes, 1 auth/transport breaks, 0 additions. See how to fix → Fail
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 92% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 14 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 29 to 32.
- 13 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 22 to 26.
- 12 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 16 to 22.
- 10 Oct 26 +2
No change was recorded against any check on this day. Stability & Change Management went from 2 to 16.
- 6 Oct 26 −4
- Stability: unverified → fail ▼ security
- Authorization: fail → partial ▲ security
- The server rewrote its instructions, which are the text every model session reads security
- 4 Oct 26 +38
- Transport: unverified → pass ▲ security
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Authorization: Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token. security
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Schema quality: excellent functional
- First check of Destructive annotations: pass functional
- First check of Tool coverage: 92 functional
- First check of Schema quality: fail functional
- 3 Oct 26 36
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 16 Oct 2026 · Probed https://www.realtimesportsapi.com/api/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.realtimesportsapi.com | CN=YR1,O=Let's Encrypt,C=US | 21 Sept 2026 | 20 Dec 2026 | RSA 2048 | SHA256-RSA | 585d9b65f2de65e4c9b779e713f7aa359ff |
| SANs: *.realtimesportsapi.com, realtimesportsapi.com | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.realtimesportsapi.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| realtimesportsapi.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | origin-when-cross-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.realtimesportsapi.com/api/mcp | Verified | 200 | |
| http (plaintext) | http://www.realtimesportsapi.com/api/mcp | HTTPS enforced | 308 | https://www.realtimesportsapi.com/api/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_box_score Box score ~390
Team totals and player statistics for a game (basketball, soccer, baseball, football). Not available before kickoff.
| Name | Type | Req | Description |
|---|---|---|---|
| event_id | string | yes | Event (game) id from get_live_events, get_events or get_schedule. |
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
get_event Game details ~396
Full details for one game: teams, score, status, venue, season/week, broadcasts, officials.
| Name | Type | Req | Description |
|---|---|---|---|
| event_id | string | yes | Event (game) id from get_live_events, get_events or get_schedule. |
| include_odds | boolean | – | – |
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
get_events Current scoreboard ~405
The league's current scoreboard window: recent, live and upcoming games. For specific dates or weeks use get_schedule.
| Name | Type | Req | Description |
|---|---|---|---|
| detail | string | – | compact (default) returns the key fields per game; full returns the complete v1 event objects. |
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| limit | integer | – | Max games (default 50). |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
get_injuries Injury report ~391
Current injury report grouped by team (empty in the off-season). Pass team_id for that team's complete report.
| Name | Type | Req | Description |
|---|---|---|---|
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| sport | string | yes | Sport slug. |
| team_id | string | – | Team id from list_teams or from an event's homeTeam/awayTeam. |
No output schema declared.
No examples provided.
get_live_events Live games ~422
Games in progress right now for a league, with score, period/clock and status. Empty list when nothing is live. Data is typically 20-30 s behind live play.
| Name | Type | Req | Description |
|---|---|---|---|
| detail | string | – | compact (default) returns the key fields per game; full returns the complete v1 event objects. |
| include_odds | boolean | – | Attach current betting odds when available. |
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
get_news League news ~389
Latest news headlines for a league (optionally one team), with links.
| Name | Type | Req | Description |
|---|---|---|---|
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| limit | integer | – | – |
| sport | string | yes | Sport slug. |
| team_id | string | – | Team id from list_teams or from an event's homeTeam/awayTeam. |
No output schema declared.
No examples provided.
get_odds Betting odds ~391
Current spread, moneyline and total for a game from a single source book. Returns null when no odds are available.
| Name | Type | Req | Description |
|---|---|---|---|
| event_id | string | yes | Event (game) id from get_live_events, get_events or get_schedule. |
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
get_plays Play-by-play ~431
Play-by-play for a game, oldest first, paginated. Use a larger limit (up to 300 here) to get more plays per call; check pagination.hasNextPage.
| Name | Type | Req | Description |
|---|---|---|---|
| event_id | string | yes | Event (game) id from get_live_events, get_events or get_schedule. |
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| limit | integer | – | Plays per page (default 50). |
| page | integer | – | Page number (default 1). |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
get_schedule Schedule ~507
Games in a date range (start_date/end_date, YYYY-MM-DD, at most 31 days, US Eastern calendar days like most US schedules) or, for NFL and college football, a season week (season + week). Up to 200 games.
| Name | Type | Req | Description |
|---|---|---|---|
| detail | string | – | compact (default) returns the key fields per game; full returns the complete v1 event objects. |
| end_date | – | – | Last day, YYYY-MM-DD (US Eastern). Defaults to start_date. |
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| season | integer | – | Season year, used with week. |
| season_type | integer | – | 1 preseason, 2 regular (default), 3 postseason. |
| sport | string | yes | Sport slug. |
| start_date | string | – | First day, YYYY-MM-DD (US Eastern). |
| week | integer | – | Week number (NFL / college football only). |
No output schema declared.
No examples provided.
get_team Team details ~379
One team: names, record, standing summary, venue.
| Name | Type | Req | Description |
|---|---|---|---|
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| sport | string | yes | Sport slug. |
| team_id | string | yes | Team id from list_teams or from an event's homeTeam/awayTeam. |
No output schema declared.
No examples provided.
get_team_roster Team roster ~379
Current roster for a team, grouped by position.
| Name | Type | Req | Description |
|---|---|---|---|
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| sport | string | yes | Sport slug. |
| team_id | string | yes | Team id from list_teams or from an event's homeTeam/awayTeam. |
No output schema declared.
No examples provided.
list_leagues List leagues ~55
List the leagues this API monitors live, with the sport and league slugs every other tool needs. 29 leagues monitored live: NFL, college football, NBA, men's college basketball, MLB, NHL and 23 soccer competitions.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_teams Teams ~383
Teams in a league (paginated; college football has 800+ teams across divisions).
| Name | Type | Req | Description |
|---|---|---|---|
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| limit | integer | – | Teams per page (default 50). |
| page | integer | – | – |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
search_athletes Search athletes ~382
Find players by name within a league; returns athlete ids and teams.
| Name | Type | Req | Description |
|---|---|---|---|
| league | string | yes | League slug. Monitored leagues (sport/league): football/nfl (NFL), football/college-football (College Football), basketball/nba (NBA), basketball/mens-college-basketball (Men's College Basketball), b… |
| limit | integer | – | – |
| query | string | yes | Player name, e.g. "mahomes". |
| sport | string | yes | Sport slug. |
No output schema declared.
No examples provided.
How do I install the Realtime Sports API MCP server?
Realtime Sports API is a hosted endpoint at https://www.realtimesportsapi.com/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.realtimesportsapi.com
claude mcp add --transport http ahunter135-realtime-sports-api 'https://www.realtimesportsapi.com/api/mcp'
What is the Realtime Sports API MCP server?
Realtime Sports API is an MCP server listed in the public MCP registry as io.github.ahunter135/realtime-sports-api. Scores, play-by-play, schedules, box scores and odds: NFL, college football, NBA, MLB, NHL, soccer. This page covers its hosted endpoint (https://www.realtimesportsapi.com/api/mcp).
Is the Realtime Sports API MCP server safe to use?
Realtime Sports API scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Realtime Sports API MCP server expose?
Realtime Sports API exposes 14 tools: list_leagues, get_live_events, get_events, get_event, get_plays, and 9 more. Their descriptions and schemas cost roughly 5,300 tokens of context every time the server is loaded.
Does the Realtime Sports API MCP server require authentication?
No. We connected to Realtime Sports API without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Realtime Sports API MCP server still maintained?
Realtime Sports API is still listed as active in the MCP registry. We last reached this channel on 16 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.