Slowhop MCP
REMOTE · MCP.WONDEL.AI
Slow stays on Slowhop.com, mostly in Poland: cabins, agritourism, glamping, guesthouses, PLN prices.
Available components
Last scanned (9 hours ago)
Scores higher than 43% of remote servers
Reachable. Last reached 5 Nov 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 2 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability44
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2578 tokens (~1289/item across 2 items; 2 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (50% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 3 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
- Stability: unverified → 0.03 ▲ functional
- 2 Nov 26 54
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.wondel.ai/slowhop/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=wondel.ai | CN=WE1,O=Google Trust Services,C=US | 23 Oct 2026 | 21 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 5d95ed90e58a72d50e0abf92b4ea9de1 |
| SANs: wondel.ai, mcp.wondel.ai, *.mcp.wondel.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.wondel.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 1814, 3799 | 8, 8 | Verified |
| wondel.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.wondel.ai/slowhop/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.wondel.ai/slowhop/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
slowhop_place Get one Slowhop place ~820
Full details of one slowhop.com place: type, summary, highlights and the host's description (Polish), address and coordinates, setting, rating and recent reviews, every unit (house/room/tent: capacity, area, rooms and beds, pets accepted), check-in/out times and quiet hours, house rules, pets policy (kinds accepted, limit, rules), who it suits, food and kitchen, amenities (comfort, kitchen, garden, wellness included, extra-paid extras with prices), internet, nearby activities/restaurants/shops/sights with distances, getting there, fees, discounts (last-/first-minute, long stay, children), payment and cancellation terms, the lowest upcoming price and photos. With date_from/date_to it also prices the stay for the party with Slowhop's own calculator: whether it is bookable (free, minimum stay met, the group and pets fit), the exact total and per-night price in the place's currency (PLN in Poland) with a breakdown, the units used and a booking link. Get the slug from slowhop_search. Fetched live from Slowhop's own JSON API (typically well under 1 s via direct fetch; more when it falls back to an unblocker). Result: { source, fetchedAt, place: { id, slug, name, url, type, currency, summary, highlights, description, texts, location, rating, reviews_count, recent_reviews, host, max_guests, min_age, units, rent_type, check_in, check_out, quiet_hours, flexible_check_in, pets, house_rules, for_whom, food, amenities, internet, nearby, getting_there, fees, discounts, payment, lowest_price, instant_booking, photos }, stay?: { date_from, date_to, nights, adults, children_ages, pets, available, price, price_per_night, currency, breakdown: { nightly_rates, last_minute_discount, first_minute_discount, children_discount, children_fee, cleaning_fee, pets_fee }, meal_plan, min_nights, units, booking_url, calculator_quote?, note? } }. `stay.price` is the total for the whole stay and party (nightly rates after discounts + children's, cleaning and pet fees); `stay.available` is true, fal…
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | Adults. Default 2. |
| children_ages | array | – | Each child's age in years (0–17), e.g. [4, 9] for two children — prices depend on ages. Default none. |
| date_from | string | – | Check-in date, YYYY-MM-DD — pass with date_to to price the stay. |
| date_to | string | – | Check-out date, YYYY-MM-DD, after date_from. |
| no_cache | boolean | – | Force a fresh fetch and bypass this server's result cache (5 min). Default false. |
| pets | array | – | The animals coming along, one entry each: 'small_dog', 'medium_dog', 'big_dog', 'cat' (e.g. ['big_dog', 'cat']). Also limits results to places that accept them. Default none. |
| place | string | yes | The place's slug from slowhop_search (e.g. '6639-dom-na-mazurach-sasek-wielki'), its slowhop.com URL (…/pl/miejsca/<slug>.html), or its numeric id. |
No output schema declared.
No examples provided.
slowhop_search Search Slowhop slow stays (cabins, agritourism, glamping) ~1,658
Search slowhop.com, the Polish marketplace of 'slow' stays: houses and cabins in nature, agritourism, guesthouses, glamping, tiny houses and apartments with character, mostly in Poland (some in Czechia, Slovakia, Italy, Croatia…). Filter by place (region, town, country or a landscape word), check-in/check-out dates and party — adults, children's ages, pets (with dates only places free for that party are returned, priced for it) — plus Slowhop's own filters (by a lake, by the sea, in the mountains, sauna, hot tub, breakfast, pets welcome…), a nightly price range and last-/first-minute deals; sort by recommendation or price. Returns one page (24 by default) in Slowhop's order; pass a listing's `slug` to slowhop_place for the description, units, house rules, pets policy and the exact price breakdown. Fetched live from Slowhop's own JSON API (typically well under 1 s via direct fetch; more when it falls back to an unblocker). Result shape: { source, fetchedAt, query, search_url, resolved_place: { name, kind, radius_km? } | null, alternatives?, stay: { date_from, date_to, nights } | null, guests: { adults, children_ages, pets }, total_count, page, total_pages, count, listings: [...], note? } — the list key is `listings`; `total_count` counts matches across all pages (use `page` for more). Each listing: { available, restriction, id, slug, name, url, type, type_key, city, region, country, summary, price, price_per_night, price_per_night_before_discount, currency, cheapest_dates, meal_plan, max_guests, units_for_party, rating, reviews_count, instant_booking, only_on_slowhop, for_whom, host, image }. Prices are numbers in the listing's `currency` — PLN for places in Poland, usually EUR abroad — for the WHOLE party, never per person. WITH date_from + date_to: `price_per_night` is Slowhop's nightly price for this party averaged over the stay (it already includes cleaning, pet and children's fees) and `price` = price_per_night × nights, the total for the whole stay (within a f…
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | Adults. Default 2. |
| children_ages | array | – | Each child's age in years (0–17), e.g. [4, 9] for two children — prices depend on ages. Default none. |
| date_from | string | – | Check-in date, YYYY-MM-DD, today or later. Pass together with date_to; without dates prices are the lowest upcoming 'from' prices and availability is not checked. |
| date_to | string | – | Check-out date, YYYY-MM-DD, after date_from (at most 60 nights). |
| filters | array | – | Slowhop's own filter ids. Alternatives of one kind match ANY — settings, types, who-for, accepted pets, the wellness facilities sauna/wooden_bath/pool/jacuzzi/bathtube/massages — while different kind… |
| first_minute | boolean | – | Only first-minute (early booking) deals. Default false. |
| last_minute | boolean | – | Only last-minute deals. Default false. |
| limit | integer | – | Places per page, 1–48. Default 24. |
| no_cache | boolean | – | Force a fresh fetch and bypass this server's result cache (5 min). Default false. |
| page | integer | – | Results page, 1-based. Default 1. |
| pets | array | – | The animals coming along, one entry each: 'small_dog', 'medium_dog', 'big_dog', 'cat' (e.g. ['big_dog', 'cat']). Also limits results to places that accept them. Default none. |
| place | string | – | Where, resolved by Slowhop's own autocomplete: a region ('Mazury', 'Bieszczady', 'Kaszuby', 'Tatry', 'Roztocze', 'Toskania'), a town ('Zakopane', 'Kazimierz Dolny' — searched within radius_km), a cou… |
| price_max | number | – | Maximum nightly price for the whole party, in PLN (Slowhop converts foreign prices). |
| price_min | number | – | Minimum nightly price for the whole party, in PLN (Slowhop converts foreign prices). |
| radius_km | integer | – | Around a town only: search radius in km (default: the site's own, 20 km for a town). |
| sort | string | – | 'recommended' (Slowhop's order, default), 'price_asc' or 'price_desc' (by nightly price). |
| Name | Type | Req | Description |
|---|---|---|---|
| alternatives | – | – | – |
| count | number | yes | – |
| fetchedAt | string | yes | – |
| guests | – | – | – |
| listings | array | yes | – |
| note | – | – | – |
| page | number | yes | – |
| query | object | yes | – |
| resolved_place | – | – | – |
| search_url | string | yes | – |
| source | string | yes | – |
| stay | – | – | – |
| total_count | – | – | – |
| total_pages | – | – | – |
No examples provided.
How do I install the Slowhop MCP server?
Slowhop MCP is a hosted endpoint at https://mcp.wondel.ai/slowhop/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.wondel.ai
claude mcp add --transport http ai-wondel-slowhop 'https://mcp.wondel.ai/slowhop/mcp'
What is the Slowhop MCP server?
Slowhop MCP is listed in the public MCP registry as ai.wondel/slowhop. Slow stays on Slowhop.com, mostly in Poland: cabins, agritourism, glamping, guesthouses, PLN prices. This page covers its hosted endpoint (https://mcp.wondel.ai/slowhop/mcp).
Is the Slowhop MCP server safe to use?
Slowhop MCP scores 56 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Slowhop MCP server expose?
Slowhop MCP exposes 2 tools: slowhop_search, slowhop_place. Their descriptions and schemas cost roughly 2,478 tokens of context every time the server is loaded.
Does the Slowhop MCP server require authentication?
No. We connected to Slowhop MCP without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Slowhop MCP server still maintained?
Slowhop MCP is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.