io.github.arturogarrido/claudinho
NPM · @CLAUDINHO/MCP · SCANNED AUG 3
Live 2026 World Cup scores, fixtures & standings for your AI agent. No keys. Unofficial fan project.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to arturogarrido/claudinho). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 0 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability0
- Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified
Stability & Change Management0
- Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified
Tool Coverage0
- Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.Unverified
Capabilities0
- Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.Unverified
Unverified: 4 categories
Categories scored 0 because our sandbox run of this package has not given us the schema these checks need to read. That is a gap on our side rather than a finding about the package, and we only credit what we can confirm, so the score stands at 0 until the capture succeeds. We are working through the fleet, so this normally clears without any action from you. How we score packages →
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @claudinho/mcp
claude mcp add arturogarrido-claudinho -- npx -y @claudinho/mcp
codex mcp add arturogarrido-claudinho -- npx -y @claudinho/mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"arturogarrido-claudinho": {
"type": "local",
"command": [
"npx",
"-y",
"@claudinho/mcp"
],
"enabled": true
}
}
} openclaw mcp add arturogarrido-claudinho --command npx --arg -y --arg @claudinho/mcp
mcp_servers:
arturogarrido-claudinho:
command: "npx"
args: ["-y", "@claudinho/mcp"] {
"mcpServers": {
"arturogarrido-claudinho": {
"command": "npx",
"args": [
"-y",
"@claudinho/mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 −33
- Stability: 0.23 → unverified ▼ security
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Package version: 0.8.19 → 0.9.4 functional
- 2 Aug 26 +40
- Install scripts: unverified → pass ▲ security
- Provenance: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- The attested source repository moved: arturogarrido/claudinho security
- Dependency health: unverified → partial ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Licence: MIT functional
- 1 Aug 26 +7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 −18
- Malware scan: pass → unverified ▼ security
- 27 Jul 26 50
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/@claudinho/[email protected]
Provenance verified
Ecosystem: npm · Outcome: verified
Reason: verified
- Source repo:
- arturogarrido/claudinho
- Certificate issuer:
- https://token.actions.githubusercontent.com
- Certificate SAN:
- https://github.com/arturogarrido/claudinho/.github/workflows/publish.yml@refs/tags/v0.9.4
- Rekor log index:
- 2333875246
- Predicate type:
- https://slsa.dev/provenance/v1
- Subject digest:
- sha512:c4414f89a4e15ab0185bcf40ff8b350ec1e5cf4915a87a36ad9e17087311fc82d6a64870e373a6d16e1b02b82545db9f0866a90f06cc4019c053e36ba
- Discovery method:
- attestation_endpoint
Dependencies 95 packages
95 packages in the resolved dependency tree · 95 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
get_bracket Knockout bracket ~183
Knockout bracket from the Round of 32 through the final, with live scores overlaid. Group slots project from live standings once a group has started; winner slots need a confirmed FT result. Pass an optional stage (R32, R16, QF, SF, 3P, F) to filter one round. Falls back to structure-only when live data is unavailable.
| Name | Type | Req | Description |
|---|---|---|---|
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| stage | string | — | Knockout round to show (omit for the full bracket) |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| degraded | boolean | — | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| source | string|null | — | — |
| standingsDegraded | boolean | — | — |
| view | — | yes | — |
No examples provided.
get_live Live matches ~137
Only matches in play right now — each with current score and minute (empty when nothing is live). Use during matches for in-play state; for a full day's schedule including upcoming and finished, use get_today. tz/lang/flavor affect formatting only.
| Name | Type | Req | Description |
|---|---|---|---|
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | — |
| degraded | boolean | yes | — |
| matches | array | yes | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| source | string|null | yes | — |
| truncated | boolean | yes | — |
No examples provided.
get_market_signal Prediction-market signal ~253
Read-only prediction-market signals for a match (by id), a team's current-or-next fixture, or a date (default: today). Returns market-implied percentages with attribution; complete:false means the provider read was incomplete, not that no signal exists. Shown only before and during a match — finished matches have no market read. Informational only — relay the numbers factually; do not add betting, trading, or 'value' advice, and do not invent links.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | — | Date as YYYY-MM-DD (default: today) for all that day's signals |
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| matchId | string | — | Match id (most specific) |
| team | string | — | 3-letter team code, e.g. MEX — resolves to the team's in-play match when one is live, else their next fixture |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| complete | boolean | — | False when the market provider did not complete every relevant read |
| count | number | — | — |
| date | string | — | — |
| degraded | boolean | — | — |
| informationalOnly | boolean | yes | — |
| matchId | string|null | — | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| signal | — | — | — |
| signals | array | — | — |
| team | string | — | — |
| truncated | boolean | — | — |
No examples provided.
get_match Match detail ~166
One match by its id, with live score/minute overlaid when it's in play. Optional prediction-market enrichment carries marketComplete; false means the read was incomplete, not that no signal exists. Get the id from get_today or get_live; to find a team's match without an id, use get_next_fixture. tz/lang/flavor affect formatting.
| Name | Type | Req | Description |
|---|---|---|---|
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| id | string | yes | Match id |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| degraded | boolean | — | — |
| marketComplete | boolean | — | False when optional market enrichment did not check this fixture |
| marketSignal | — | — | — |
| match | — | yes | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| source | string|null | — | — |
No examples provided.
get_next_fixture Next fixture for a team ~169
A team's next match, live-resolved: a confirmed knockout tie (Round of 32 onward) is read from the live overlay, group fixtures from the bundled schedule. Use a 3-letter code, e.g. MEX, BRA, USA. Falls back to the bundled schedule if the provider is unreachable.
| Name | Type | Req | Description |
|---|---|---|---|
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| team | string | yes | 3-letter team code, e.g. MEX |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| degraded | boolean | yes | — |
| fixture | — | yes | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| source | string|null | yes | — |
| team | string | yes | — |
No examples provided.
get_share_snippet Shareable match snippet ~409
A polished, copy-pasteable card (plain text) for a match (matchId), a team's next fixture (team), a group's standings table (group, e.g. "A"), the knockout bracket (bracket: true), a date (default: today), or live matches (live: true). Returns the ready-to-paste snippet plus structured data — hand the snippet text to the user verbatim. marketComplete:false is stated inside the card as an incomplete optional read. No links; it carries a non-affiliation disclaimer, and any market line stays informational only.
| Name | Type | Req | Description |
|---|---|---|---|
| bracket | boolean | — | Knockout bracket card (use with optional knockoutStage) |
| date | string | — | Date as YYYY-MM-DD (default: today) |
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| group | string | — | Group letter A–L for a standings card, e.g. A |
| includeHashtag | boolean | — | Include the #VibingLaVidaLoca tag (default true) |
| includeInstallLine | boolean | — | Include the "Try it: …" run cue (default true) |
| includeMarkets | boolean | — | Include the reliable market line when available (default true) |
| knockoutStage | string | — | Filter the bracket card to one round |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| live | boolean | — | Snapshot of matches in play right now |
| matchId | string | — | Match id (most specific) |
| style | string | — | social (default, full card) or compact (one line per match) |
| team | string | — | 3-letter team code for that team's next fixture, e.g. MEX |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | — | — |
| degraded | boolean | — | — |
| group | string | — | — |
| informationalOnly | boolean | — | — |
| kind | string | yes | — |
| marketComplete | boolean | — | False when optional market enrichment did not check every relevant fixture |
| marketSignals | object | — | — |
| matches | array | — | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| snippet | string | — | — |
| source | string|null | — | — |
| stage | string | — | — |
| style | string | — | — |
| tables | — | — | — |
| target | string | — | — |
| team | string | — | — |
| truncated | boolean | — | — |
| view | — | — | — |
No examples provided.
get_standings Group standings ~186
Live cumulative group standings — pass a group letter A–L, or omit for all 12. Returns ranked rows (team, played, W/D/L, goal difference, points). Use get_today for fixtures/scores and get_next_fixture for one team. If unavailable, the default World Cup scope returns a roster at zero; competitions without a compatible bundled roster return no tables. Both are flagged degraded.
| Name | Type | Req | Description |
|---|---|---|---|
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| group | string | — | Group letter A–L (omit for all) |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| degraded | boolean | yes | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| source | string|null | yes | — |
| tables | — | yes | — |
No examples provided.
get_team Resolve a team ~164
Resolve a nation name or 3-letter code to its FIFA code, flag, and group. Fuzzy and forgiving: accepts "Mexico", "mex", "USA", "DR Congo", "Türkiye"/"Turkey", "Holland", etc. Use this FIRST to turn a user's team name into the code the other tools need (get_next_fixture, get_standings, get_market_signal, get_share_snippet). Returns the single confident match (team), plus candidates (matches) when the query is ambiguous (e.g. "south" → South Africa, South Korea). Offline — reads the bundled roster, never the network.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Team name or 3-letter code, e.g. "Mexico", "MEX", "DR Congo" |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | — |
| matches | array | yes | — |
| query | string | yes | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| team | — | yes | — |
No examples provided.
get_today Today's matches ~210
All fixtures for a date (default: today), with live score and minute overlaid on any match in play. Optional prediction-market enrichment carries marketComplete; false means the read was incomplete, not that no signal exists. Use this for a whole day's card; for only in-play matches use get_live, for one team's match use get_next_fixture, for a single match's detail use get_match. Kickoffs render in tz; lang localizes dates, attribution, and commentary (en/es/pt/fr); flavor sets commentary tone.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | — | Date as YYYY-MM-DD (default: today) |
| flavor | string | — | Commentary flair: off, subtle, full (default: full) |
| lang | string | — | Locale for dates, provider attribution, and commentary: en, es, pt, fr (the summary scaffold stays English; other locales fall back to en) |
| tz | string | — | IANA timezone for kickoff times, e.g. America/Mexico_City |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | — |
| date | string | yes | — |
| degraded | boolean | yes | — |
| marketComplete | boolean | — | False when optional market enrichment did not check every relevant fixture |
| marketSignals | object | — | — |
| matches | array | yes | — |
| responseTruncated | boolean | — | — |
| responseTruncation | string | — | — |
| source | string|null | yes | — |
| truncated | boolean | yes | — |
No examples provided.