Google Maps MCP
REMOTE · MCP.WONDEL.AI
Google Maps places: local search, place details, reviews, and turn-by-turn directions.
Available components
Last scanned (48 minutes ago)
Scores higher than 43% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Maps and Location
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability49
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2568 tokens (~642/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (25% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
- Stability: unverified → 0.03 ▲ functional
- 2 Nov 26 55
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.wondel.ai/google-maps/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=wondel.ai | CN=WE1,O=Google Trust Services,C=US | 23 Oct 2026 | 21 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 5d95ed90e58a72d50e0abf92b4ea9de1 |
| SANs: wondel.ai, mcp.wondel.ai, *.mcp.wondel.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.wondel.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 1814, 3799 | 8, 8 | Verified |
| wondel.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.wondel.ai/google-maps/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.wondel.ai/google-maps/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
google_local_search Search Google Local (SerpAPI) ~423
Search the Google Local pack via SerpAPI — the local business listings Google shows for a query. Returns local_results, each with title, rating, reviews, type, address, phone and the place identifiers (place_id / data_id / data_cid) that feed google_maps_reviews. Provide a query q and optionally a location (or a pre-encoded uule). Paginate with start (+20 per page).
| Name | Type | Req | Description |
|---|---|---|---|
| device | string | – | Device to emulate: 'desktop' (default), 'tablet' or 'mobile'. |
| gl | string | – | Country code for the search, e.g. 'us', 'uk', 'de'. |
| google_domain | string | – | Google domain to use, e.g. 'google.com', 'google.co.uk'. |
| hl | string | – | Language code, e.g. 'en', 'es', 'fr', 'pt-br'. |
| location | string | – | Geographic origin of the search — a SerpAPI canonical city-level name, e.g. 'Warsaw,Masovian Voivodeship,Poland'. For a small town or a district, put the place in q instead. Mutually exclusive with u… |
| ludocid | string | – | Google CID of a business listing, to scope results to that place. |
| no_cache | boolean | – | Force a fresh SerpAPI fetch and bypass this server's result cache. Default false. |
| q | string | yes | Search query, e.g. 'Coffee' or 'Pizza near Central Park'. |
| start | integer | – | Result offset for pagination (0-based); ~20 results per page, so use 20, 40, …. |
| tbs | string | – | Advanced search parameters not otherwise supported, passed through as a raw tbs string. |
| uule | string | – | Google-encoded location string (an alternative to location). Mutually exclusive with location. |
| zero_trace | boolean | – | Enterprise-only ZeroTrace mode: don't store search params/metadata on SerpAPI. Default false. |
No output schema declared.
No examples provided.
google_maps_directions Get Google Maps Directions (SerpAPI) ~693
Get directions between two points via SerpAPI. Provide a start point (one of start_addr, start_coords 'lat,lon', or start_data_id) and an end point (one of end_addr, end_coords, or end_data_id) — the data_ids come from google_maps_search results. Returns the route(s) with distance, duration and step-by-step legs. Shape the route with travel_mode (driving/transit/walking/…), avoid, and time. Result shape: { source, fetchedAt, query, search_metadata, search_parameters, places_info: [{ address, data_id, gps_coordinates }], durations: [{ travel_mode, duration, formatted_duration }], directions: [...] } — the list key is `directions`. Each direction: { travel_mode, via, distance (meters), duration (seconds), formatted_distance, formatted_duration, typical_duration_range, extensions, trips: [{ travel_mode, title, distance, duration, formatted_distance, formatted_duration, details: [{ title, action, distance, duration }] }] } plus, for transit, start_time, end_time, arrive_around, cost, currency; a Flight entry has only { travel_mode, icon, flight }.
| Name | Type | Req | Description |
|---|---|---|---|
| avoid | string | – | Comma-separated route features to avoid: 'highways', 'tolls', 'ferries'. |
| distance_unit | – | – | Distance unit: 0=km, 1=miles. |
| end_addr | string | – | Ending address, e.g. 'Dallas, TX'. Provide one of end_addr/end_coords/end_data_id. |
| end_coords | string | – | Ending GPS coordinates as 'lat,lon'. |
| end_data_id | string | – | Place data id of the ending point (from a google_maps_search result). |
| gl | string | – | Country code, e.g. 'us', 'uk', 'de'. |
| hl | string | – | Language code, e.g. 'en', 'es', 'fr'. |
| no_cache | boolean | – | Force a fresh SerpAPI fetch and bypass this server's result cache. Default false. |
| prefer | string | – | Comma-separated transit preferences (travel_mode=3 only): 'bus', 'subway', 'train', 'tram_light_rail'. |
| route | – | – | Transit route option (travel_mode=3 only): 2=Fewer transfers, 3=Less walking, 4=Wheelchair accessible. |
| start_addr | string | – | Starting address, e.g. 'Austin, TX'. Provide one of start_addr/start_coords/start_data_id. |
| start_coords | string | – | Starting GPS coordinates as 'lat,lon', e.g. '30.1974,-97.6663'. |
| start_data_id | string | – | Place data id of the starting point (from a google_maps_search result). |
| time | string | – | Departure/arrival time: 'depart_at:<unix>', 'arrive_by:<unix>', or 'last_available' (transit only). |
| travel_mode | – | – | Travel mode: 6=Best (default), 0=Driving, 1=Cycling, 2=Walking, 3=Transit, 4=Flight, 9=Two-wheeler. |
| zero_trace | boolean | – | Enterprise-only ZeroTrace mode: don't store search params/metadata on SerpAPI. Default false. |
| Name | Type | Req | Description |
|---|---|---|---|
| directions | array | – | – |
| durations | – | – | – |
| fetchedAt | string | yes | – |
| places_info | – | – | – |
| query | object | yes | – |
| search_metadata | – | – | – |
| search_parameters | – | – | – |
| source | string | yes | – |
No examples provided.
google_maps_reviews Get Google Maps Reviews (SerpAPI) ~488
Fetch the reviews of a Google Maps place via SerpAPI. Provide exactly one of place_id, data_id or data_cid — all come from google_maps_search or google_local_search results. A digit-only id (the `place_id` that google_local_search returns is a Google CID) is accepted in any of the three fields and resolved to the Maps data_id automatically via one place lookup. Returns reviews (author, rating, text, date) plus the topics you can filter by. Paginate with next_page_token from the previous response.
| Name | Type | Req | Description |
|---|---|---|---|
| data_cid | string | – | Google CID of the place — the digit-only `place_id` google_local_search returns. Resolved to the Maps data_id via one place lookup. Provide exactly one of place_id, data_id or data_cid. |
| data_id | string | – | Google Maps data_id of the place ('0x…:0x…' from google_maps_search). Provide exactly one of place_id, data_id or data_cid. |
| hl | string | – | Language code, e.g. 'en', 'es', 'fr', 'pt-br'. |
| next_page_token | string | – | Pagination token from the previous response, to fetch the next page of reviews. |
| no_cache | boolean | – | Force a fresh SerpAPI fetch and bypass this server's result cache. Default false. |
| num | integer | – | Number of reviews per page, 1-20 — only honoured together with next_page_token, topic_id or query; the initial page always returns 8 and the parameter is dropped there. |
| place_id | string | – | Google Maps place_id of the place ('ChIJ…' from google_maps_search). A digit-only value is treated as a Google CID and resolved automatically. Provide exactly one of place_id, data_id or data_cid. |
| query | string | – | Filter/search reviews by free text. Mutually exclusive with topic_id. |
| sort_by | string | – | Review sort order: 'qualityScore' (most relevant, default), 'newestFirst', 'ratingHigh', 'ratingLow'. |
| topic_id | string | – | Filter reviews by a topic id (from a prior response). Mutually exclusive with query. |
| zero_trace | boolean | – | Enterprise-only ZeroTrace mode: don't store search params/metadata on SerpAPI. Default false. |
No output schema declared.
No examples provided.
google_maps_search Search Google Maps (SerpAPI) ~864
Search Google Maps via SerpAPI. type=search (default) returns a list of places for a query q — paginate with start (+20 per page). type=place returns the full details of a single place identified by place_id or data_cid (both obtainable from a prior search result). Center the map with ll ('@lat,lon,zoomz') or lat/lon/z. The place_id / data_cid in results feed google_maps_reviews.
| Name | Type | Req | Description |
|---|---|---|---|
| data_cid | string | – | Google Maps CID (data_cid) of a specific place (from a prior search result). Use with type=place; also feeds google_maps_reviews. |
| gl | string | – | Country code for the search, e.g. 'us', 'uk', 'de'. |
| google_domain | string | – | Google domain to use, e.g. 'google.com'. |
| hl | string | – | Language code, e.g. 'en', 'es', 'fr', 'pt-br'. |
| lat | number | – | Latitude of the map center (used with lon; alternative to ll). |
| ll | string | – | Map center as '@lat,lon,zoomz' (latitude, longitude, zoom), e.g. '@40.7455096,-74.0083012,14z'. Zoom recommended 3z-15z. |
| location | string | – | Geographic origin of the search — a SerpAPI canonical city-level name, e.g. 'Warsaw,Masovian Voivodeship,Poland'. For a small town or a district, put the place in q instead. SerpAPI requires z or m a… |
| lon | number | – | Longitude of the map center (used with lat; alternative to ll). |
| m | integer | – | Alternative map scale parameter, 1-15028132 (an alternative to the zoom level). |
| max_price | integer | – | Maximum price-level filter for places. |
| min_price | integer | – | Minimum price-level filter for places. |
| min_rating | string | – | Minimum star-rating filter. Must be a string like '4.0' (a number such as 4.0 stringifies to '4' and breaks the filter). |
| nearby | boolean | – | Search nearby the given coordinates. Default false. |
| no_cache | boolean | – | Force a fresh SerpAPI fetch and bypass this server's result cache. Default false. |
| open_at_hour | integer | – | Filter to places open at a given hour, 0-23. Use with open_on_day. Mutually exclusive with open_state. |
| open_on_day | string | – | Filter to places open on a given day (mon-sun). Combine with open_at_hour. Mutually exclusive with open_state. |
| open_state | string | – | Open-state filter: 'now' = open now, '24h' = open 24 hours. Mutually exclusive with open_on_day/open_at_hour. |
| place_id | string | – | Google Maps place_id of a specific place — an opaque string like 'ChIJ…' from a google_maps_search result. A digit-only id is a Google CID (what google_local_search calls place_id) and is sent as dat… |
| q | string | – | Search query, e.g. 'Coffee' or 'Restaurants'. Required for a search (type=search) unless place_id/data_cid is given. |
| start | integer | – | Result offset for pagination (0-based); 20 results per page, so use 20, 40, …. |
| type | string | – | 'search' (default) returns a list of places for q; 'place' returns details for a single place (requires place_id or data_cid). |
| z | integer | – | Map zoom level, 3-30 (higher = more zoomed in). Used with lat/lon or location; defaults to 14 when either is given without z or m. |
| zero_trace | boolean | – | Enterprise-only ZeroTrace mode: don't store search params/metadata on SerpAPI. Default false. |
No output schema declared.
No examples provided.
How do I install the Google Maps MCP server?
Google Maps MCP is a hosted endpoint at https://mcp.wondel.ai/google-maps/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.wondel.ai
claude mcp add --transport http ai-wondel-google-maps 'https://mcp.wondel.ai/google-maps/mcp'
What is the Google Maps MCP server?
Google Maps MCP is listed in the public MCP registry as ai.wondel/google-maps. Google Maps places: local search, place details, reviews, and turn-by-turn directions. This page covers its hosted endpoint (https://mcp.wondel.ai/google-maps/mcp).
Is the Google Maps MCP server safe to use?
Google Maps MCP scores 57 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Google Maps MCP server expose?
Google Maps MCP exposes 4 tools: google_local_search, google_maps_search, google_maps_reviews, google_maps_directions. Their descriptions and schemas cost roughly 2,468 tokens of context every time the server is loaded.
Does the Google Maps MCP server require authentication?
No. We connected to Google Maps MCP without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Google Maps MCP server still maintained?
Google Maps MCP is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.