AsterNym
REMOTE · ASTERNYM.COM · SCANNED SEP 27
Birth charts for agents: BaZi, Chinese and Western zodiac, numerology. Keyless and read-only.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability62
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1652 tokens (~275/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
- Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
How do I install the AsterNym MCP server?
AsterNym is a hosted endpoint at https://asternym.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · asternym.com
claude mcp add --transport http com-asternym-asternym 'https://asternym.com/mcp'
{
"mcpServers": {
"com-asternym-asternym": {
"url": "https://asternym.com/mcp"
}
}
} {
"servers": {
"com-asternym-asternym": {
"type": "http",
"url": "https://asternym.com/mcp"
}
}
} [mcp_servers.com-asternym-asternym] url = "https://asternym.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-asternym-asternym": {
"type": "remote",
"url": "https://asternym.com/mcp",
"enabled": true
}
}
} openclaw mcp add com-asternym-asternym --url 'https://asternym.com/mcp' --transport streamable-http
mcp_servers:
com-asternym-asternym:
url: "https://asternym.com/mcp" {
"McpServers": {
"com-asternym-asternym": {
"Transport": "http",
"Url": "https://asternym.com/mcp"
}
}
} assistant mcp add com-asternym-asternym -t streamable-http -u 'https://asternym.com/mcp'
{
"mcpServers": {
"com-asternym-asternym": {
"type": "http",
"url": "https://asternym.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 27 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 23 Sept 26 0
- Schema quality: 1371 → 1652 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- Server version: 1.2.0 → 1.3.0 functional
- New tool “asternym_natal” functional
- 22 Sept 26 70
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 27 Sept 2026 · Probed https://asternym.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.asternym.com | CN=YR2,O=Let's Encrypt,C=US | 12 Aug 2026 | 10 Nov 2026 | RSA 2048 | SHA256-RSA | 5c82c88610ee67ce161df2f02a71f41bd64 |
| SANs: *.asternym.com, asternym.com | ||||||
| CN=YR2,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | 4ebd24947e24d394802d84a52fd5b319 |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of asternym.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| asternym.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com; img-src 'self' data: blob: https://*.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://checkout.stripe.com; worker-src 'self'; manifest-src 'self' |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), payment=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://asternym.com/mcp | Verified | 200 | |
| http (plaintext) | http://asternym.com/mcp | HTTPS enforced | 308 | https://asternym.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
asternym_bazi The BaZi Four Pillars alone, with hidden stems and ten gods. ~227
Pillars, day master, hidden stems (藏干) with their ten gods (十神), element counts, dominant and missing elements, na yin, the twelve stages and the void branches. The year turns at Li Chun, not at 1 January or Lunar New Year. Without a time there is no hour pillar and the response says so. The same thing over HTTP: POST https://asternym.com/api/v1/bazi.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Optional: the name of the agent or product calling. Logged for usage counts; never required, never verified. |
| date | string | yes | Local civil date, YYYY-MM-DD. Required. |
| sexCategory | string | – | Echoed back. Only the luck-pillar cycle reads it, and this endpoint does not return luck pillars. |
| time | string | – | Local clock time, HH:MM. Omit if unknown; nothing is assumed and noon is never substituted. |
| tz | string | – | IANA time zone, e.g. Asia/Singapore. Required when lat and lng are given. |
No output schema declared.
No examples provided.
asternym_bazi_hours Every BaZi double-hour of one civil date, optionally ranked by element. ~232
The twelve 時辰 of a day, each with its hour pillar, hidden stems, ten god and the element counts of the whole chart at that hour. The 23:00-00:00 slot is returned separately as lateZi: from 23:00 the hour pillar has already turned to the next day's 子 (早子時) while the day pillar has not, so it differs from the 00:00-01:00 slot on the same date. These are the Chinese double-hours, not the Western planetary hours. The same thing over HTTP: POST https://asternym.com/api/v1/bazi/hours.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Optional: the name of the agent or product calling. Logged for usage counts; never required, never verified. |
| date | string | yes | Local civil date, YYYY-MM-DD. Required. |
| element | string | – | Optional: rank the hours by how much of this element the chart carries. |
| tz | string | – | IANA time zone, e.g. Asia/Singapore. Required when lat and lng are given. |
No output schema declared.
No examples provided.
asternym_natal The Western natal chart: planets, houses, angles, nodes and aspects. ~281
Ten planets with sign, degree, whole-sign house and retrograde flag; the Ascendant, midheaven and their opposites; the twelve whole-sign houses; the mean lunar nodes; the five major aspects with orb and whether each is applying or separating; plus stelliums, retrogrades and the Moon's phase. Tropical zodiac, geocentric apparent positions, astronomy-engine. This is the one endpoint that requires lat, lng and tz: the angles and houses are a place on the Earth meeting the sky. A time is optional, and without one the angles and houses are null rather than taken from noon, and the Moon is a noon estimate the notes warn about. The same thing over HTTP: POST https://asternym.com/api/v1/natal.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Optional: the name of the agent or product calling. Logged for usage counts; never required, never verified. |
| date | string | yes | Local civil date, YYYY-MM-DD. Required. |
| lat | number | yes | Decimal degrees. |
| lng | number | yes | Decimal degrees. |
| time | string | – | Local clock time, HH:MM. Omit if unknown; nothing is assumed and noon is never substituted. |
| tz | string | yes | IANA time zone, e.g. Asia/Singapore. Required when lat and lng are given. |
No output schema declared.
No examples provided.
asternym_numerology Life Path and birthday number, plus the name numbers when a name is sent. ~170
Pythagorean numerology: Life Path, birthday number and its components, and with a name the expression, soul urge, personality, cornerstone, capstone and hidden passion. Master numbers are kept where the position allows. The same thing over HTTP: POST https://asternym.com/api/v1/numerology.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Optional: the name of the agent or product calling. Logged for usage counts; never required, never verified. |
| date | string | yes | Local civil date, YYYY-MM-DD. Required. |
| name | string | – | Optional given name. Without it the name numbers are omitted rather than guessed. Used and discarded; never stored. |
| surname | string | – | Optional surname, used with the given name where the method uses the full name. |
No output schema declared.
No examples provided.
asternym_reading A whole reading from a birth date, and optionally a time and place. ~182
Sun sign, Chinese animal and element, BaZi day master and pillars, Life Path and the AsterNym identity, from the same engine as every page on the site. The same thing over HTTP: POST https://asternym.com/api/v1/reading.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Optional: the name of the agent or product calling. Logged for usage counts; never required, never verified. |
| date | string | yes | Local civil date, YYYY-MM-DD. Required. |
| lat | number | – | Decimal degrees. |
| lng | number | – | Decimal degrees. |
| time | string | – | Local clock time, HH:MM. Omit if unknown; nothing is assumed and noon is never substituted. |
| tz | string | – | IANA time zone, e.g. Asia/Singapore. Required when lat and lng are given. |
No output schema declared.
No examples provided.
asternym_zodiac Both zodiacs: the Western sun sign and the Chinese animal. ~213
The Sun's sign from its apparent ecliptic longitude, with a cusp reported rather than resolved by assuming noon, and the Chinese animal, element and polarity with the Lunar New Year boundary. Note the two calendars differ on purpose: the Chinese year here turns at Lunar New Year, while the BaZi year pillar turns at Li Chun. The same thing over HTTP: POST https://asternym.com/api/v1/zodiac.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Optional: the name of the agent or product calling. Logged for usage counts; never required, never verified. |
| date | string | yes | Local civil date, YYYY-MM-DD. Required. |
| lat | number | – | Decimal degrees. |
| lng | number | – | Decimal degrees. |
| time | string | – | Local clock time, HH:MM. Omit if unknown; nothing is assumed and noon is never substituted. |
| tz | string | – | IANA time zone, e.g. Asia/Singapore. Required when lat and lng are given. |
No output schema declared.
No examples provided.
What is the AsterNym MCP server?
AsterNym is an MCP server listed in the public MCP registry as com.asternym/asternym. Birth charts for agents: BaZi, Chinese and Western zodiac, numerology. Keyless and read-only. This page covers its hosted endpoint (https://asternym.com/mcp).
Is the AsterNym MCP server safe to use?
AsterNym scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the AsterNym MCP server expose?
AsterNym exposes 6 tools: asternym_reading, asternym_bazi, asternym_bazi_hours, asternym_numerology, asternym_zodiac, asternym_natal. Their descriptions and schemas cost roughly 1,305 tokens of context every time the server is loaded.
Does the AsterNym MCP server require authentication?
No. We connected to AsterNym without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the AsterNym MCP server still maintained?
AsterNym is still listed as active in the MCP registry. We last reached this channel on 27 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.