Booqer
REMOTE · BOOQER.AI
Verified Booqer shops. A keyless consult is confirmed when the slot is open.
Available components
Last scanned (22 hours ago)
Scores higher than 52% of remote servers
Reachable. Last reached 4 Nov 2026.
Category CRM and Sales
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (request_booking). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability39
- 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Fail
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2075 tokens (~230/item across 9 items; 8 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management47
- Stability observed for 14 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 26 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 24 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 22 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 21 Oct 26 59
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://booqer.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=booqer.ai | CN=YR1,O=Let's Encrypt,C=US | 13 Oct 2026 | 11 Jan 2027 | RSA 2048 | SHA256-RSA | 67d0f3504dc10422b5f13c1698c5a290519 |
| SANs: booqer.ai, www.booqer.ai | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of booqer.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 1814, 3799 | 8, 8 | Verified |
| booqer.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://booqer.ai/mcp | Verified | 200 | |
| http (plaintext) | http://booqer.ai/mcp | HTTPS enforced | 308 | https://booqer.ai/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_availability Check availability ~253
Use this when the user wants to check availability for a local home-service appointment before booking. Lists the open 30-minute slots for one shop and one date. Booked and blocked times are left out. Each start and end is ISO-8601 with an offset. The shop timezone is America/New_York. date is YYYY-MM-DD, or start is an ISO-8601 timestamp. offering selects that shop's rules from get_business. Does not reserve a slot. Rate limited per IP and per shop.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Calendar date in the shop timezone, America/New_York. Format YYYY-MM-DD. Example: 2026-10-21. Provide date or start. |
| offering | string | – | Service id from get_business. Example: project_consult. |
| shop_id | string | yes | Enrolled shop id from search_businesses. Examples: florida-pole-barn, florida-security-concepts, booqer-demo-shop. |
| start | string | – | ISO-8601 timestamp with an offset. Example: 2026-10-20T14:00:00-04:00. At least 2 hours ahead and no more than 21 days ahead. |
Structured output declared, but exposes no named fields.
No examples provided.
get_booking_status Booking status ~83
Use this when the user wants to check the status of a local home-service appointment. status is confirmed, pending, canceled, or failed. No customer name, phone, or email.
| Name | Type | Req | Description |
|---|---|---|---|
| request_id | string | yes | Booking id returned by request_booking. UUID. Example: 11111111-1111-4111-8111-111111111111. |
Structured output declared, but exposes no named fields.
No examples provided.
get_business Get a business ~122
Use this when the user wants to read one enrolled local home-service business and search_businesses or resolve_business already returned its id. Returns one enrolled shop as JSON: id, brand, legal_name, page, booking_url, phone when published, sms, services as id and name, hours, timezone, verification status and verify_url, and booking_rules and emergency_phone when that shop has them.
| Name | Type | Req | Description |
|---|---|---|---|
| shop_id | string | yes | Enrolled shop id from search_businesses. Examples: florida-pole-barn, florida-security-concepts, booqer-demo-shop. |
| Name | Type | Req | Description |
|---|---|---|---|
| booking_url | string | – | Booking page URL. |
| hours | string | – | Published hours for this shop. |
| id | string | yes | Shop id. |
| services | array | – | Published services, each with id and name. |
| timezone | string | – | IANA timezone for the hours and slots. |
No examples provided.
request_booking Request a consult ~724
Use this when the user wants to book a local home-service appointment and has already chosen an open time. Confirms a free consult when the slot is open. Calling this again with the same details can create a second booking; if unsure, check get_booking_status first. Requires consent: before calling, show the user the consent text in the consent field and get their agreement. Also requires a name, a valid email, and a problem description. service_address is optional for a phone consult and required for an on-site visit. Disposable, reserved, and blocked email domains are rejected. job_summary falls back to problem. service_area is inferred from the address or city, otherwise the shop city. A phone consult accepts a street, a city and ZIP, or a PO Box. An on-site visit needs a street address. Shop-specific booking rules and emergency_phone come from get_business. offering is an id from get_business. start is an ISO-8601 timestamp, for example 2026-10-20T14:00:00-04:00. The start is at least 2 hours ahead and no more than 21 days ahead. A start outside that window names the field start. Returns status confirmed, a cancel link, and verify_url when the signed receipt is ready. The receipt page does not show the customer. An optional idempotency_key repeats the same result for that shop. Rate limited per IP and per shop, with a per-shop daily cap.
| Name | Type | Req | Description |
|---|---|---|---|
| consent | boolean | yes | Required. Before you call this tool, show the user this exact text and get their agreement: "I agree to Booqer's Terms and Privacy Policy and consent to Booqer sharing my request with this shop so th… |
| string | yes | Customer email on a real domain. Example: ada@gmail.com. Disposable and example.com addresses are rejected. | |
| idempotency_key | string | – | Optional key of 8 to 80 letters, numbers, dots, underscores, colons, or hyphens. A repeat with the same key and shop returns the first booking instead of creating another. |
| job_summary | string | – | Short job summary. Falls back to problem when omitted. |
| name | string | yes | Customer name. Example: Ada Lovelace. |
| offering | string | yes | Service id from get_business. Example: project_consult. |
| phone | string | – | Customer phone. Example: 3525550100. Optional. |
| problem | string | yes | What is wrong, in the customer's words. Example: Gate will not close. |
| service_address | string | – | Street, city and ZIP, or PO Box. Optional for a phone consult. Required for an on-site visit. Example: 100 Demo Drive, Clermont FL 34711. |
| service_area | string | – | City or county. Inferred from the address when omitted. Example: Clermont. |
| shop_id | string | yes | Enrolled shop id from search_businesses. Examples: florida-pole-barn, florida-security-concepts, booqer-demo-shop. |
| start | string | yes | ISO-8601 timestamp with an offset. Example: 2026-10-20T14:00:00-04:00. At least 2 hours ahead and no more than 21 days ahead. |
Structured output declared, but exposes no named fields.
No examples provided.
request_service Request a quote ~145
Use this when the user wants to open a quote form for a local home-service business rather than book a confirmed appointment time. Opens the quote widget for one enrolled business. business_id is the provider_business_id from the business feed. shop_id is accepted when business_id is empty. The widget is ui://widget/request-service.html. This call does not store a request and does not confirm a booking. It is rate-limited.
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | Enrolled business id from search_businesses. Example: florida-pole-barn. |
| shop_id | string | – | Enrolled shop id. Used only when business_id is empty. Example: florida-security-concepts. |
Structured output declared, but exposes no named fields.
No examples provided.
resolve_business Resolve a business ~122
Use this when the user wants to resolve one enrolled local home-service business from a domain, a place, or a phone number. An ambiguous match is refused. Returns that one identity. No phone, email, or street address is returned.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | – | Business website domain. Example: floridapolebarn.com. |
| phone | string | – | Published phone number. Example: (352) 282-0692. |
| place | string | – | City or county. Example: Orange County. Refuses a place that matches more than one shop. |
| Name | Type | Req | Description |
|---|---|---|---|
| business_name | string | – | Brand name when the match is verified. |
| enrolled | boolean | yes | True when the business is in the Booqer directory. |
| identity_match | string | yes | verified, none, or ambiguous. |
No examples provided.
search_businesses Search businesses ~182
Use this when the user wants to find a local home-service business or appointment: plumber, HVAC, electrician, gate, fence, or security install, pole barn, or builder. Searches the Booqer directory of enrolled home-service businesses by name, category, service, location, or phone. Coverage is limited to enrolled businesses (currently Florida pole barn and gate/security). Returns id, name, domain, booking URL, and booking status. A trade that is not enrolled returns no businesses and the message says no shop is available. A city outside a business's service area is left out. booqer-demo-shop is omitted unless the query is that shop's exact name or id.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | What the user wants found. Examples: "pole barn Clermont", "gate repair Winter Garden", "plumber Orlando". At least 2 characters. |
| Name | Type | Req | Description |
|---|---|---|---|
| available | boolean | – | False when no shop is available. |
| businesses | array | yes | Matching businesses. Empty when none are enrolled for that search. |
| message | string | – | Says no shop is available when the list is empty. |
No examples provided.
submit_service_request Submit a service request ~307
Sends the user's quote request (name, email, optional phone, service location, preferred time) to the chosen business. Called by the quote form only.
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | Enrolled business id. Example: florida-pole-barn. |
| consent | boolean | yes | Required. Before you call this tool, show the user this exact text and get their agreement: "I agree to Booqer's Terms and Privacy Policy and consent to Booqer sharing my request with this shop so th… |
| string | yes | Customer email on a real domain. Example: ada@gmail.com. | |
| name | string | yes | Customer name. Example: Ada Lovelace. |
| offering | string | yes | Service id from get_business. Example: project_consult. |
| phone | string | – | Customer phone. Optional when an email is present. Example: 3525550100. |
| service_address | string | – | Street address. Optional for a phone consult. Required for an on-site visit. Example: 100 Demo Drive, Clermont FL 34711. |
| start | string | yes | Preferred time as an ISO-8601 timestamp. Example: 2026-10-21T14:00:00-04:00. |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the Booqer MCP server?
Booqer is a hosted endpoint at https://booqer.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · booqer.ai
claude mcp add --transport http ai-booqer-booqer 'https://booqer.ai/mcp'
What is the Booqer MCP server?
Booqer is an MCP server listed in the public MCP registry as ai.booqer/booqer. Verified Booqer shops. A keyless consult is confirmed when the slot is open. This page covers its hosted endpoint (https://booqer.ai/mcp).
Is the Booqer MCP server safe to use?
Booqer scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Booqer MCP server expose?
Booqer exposes 8 tools: search_businesses, get_business, resolve_business, check_availability, request_booking, and 3 more. Their descriptions and schemas cost roughly 1,938 tokens of context every time the server is loaded.
Does the Booqer MCP server require authentication?
No. We connected to Booqer without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Booqer MCP server still maintained?
Booqer is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.