Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Extralingo

REMOTE · WWW.EXTRALINGO.COM

Search language schools abroad, compare courses, dates and prices, and request bookings.

+2 this week 81 Trust /100

Last scanned (3 hours ago)

Scores higher than 84% of remote servers

Reachable. Last reached 5 Nov 2026.

Category E-commerce

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security83
Transport & Reachability100
Schema Quality & AI Usability42
  • 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Fail
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 3286 tokens (~164/item across 20 items; 17 tools + 3 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 17 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 0
    • Stability: 0.97 → pass security
  • 1 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 30 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 26 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

  • 21 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

  • 20 Oct 26 +10
    • Transport: fail → pass ▲ security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://www.extralingo.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=extralingo.com CN=WE1,O=Google Trust Services,C=US 18 Sept 2026 17 Dec 2026 ECDSA 256 ECDSA-SHA256 e1d506d978ce2e30eb3df4110789c22
SANs: extralingo.com, *.extralingo.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of www.extralingo.com. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
extralingo.com. present 2371 13 Verified
www.extralingo.com. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains; preload
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), interest-cohort=(), payment=(self), fullscreen=(self)

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://www.extralingo.com/mcp Verified 200
http (plaintext) http://www.extralingo.com/mcp HTTPS enforced 301 https://www.extralingo.com/mcp
MCP tools · 17 exposed · ~2,875 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
ask_school_question ~210

Send a question to the school without a full trip configuration. Requires OAuth requests scope. Optional idempotency_key.

NameTypeReqDescription
configurationobject–Same shape as the Extralingo school-page configurator: startDate (YYYY-MM-DD), students[] with courseId, weeks, optional accommodationGroupId, mealType, extras.
contactobject–Optional first_name, last_name. Email always comes from the verified account.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
idempotencyKeystring–Optional alias of idempotency_key.
idempotency_keystring–Optional. Same semantics as create_booking (24 hour replay window).
messagestringyesStudent message to the school.
school_idintegeryesCraft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
trip_idstring–Optional trip_id from save_trip.
NameTypeReqDescription
kindstring–Lead type on success.
messagestring–Human-readable confirmation (not a booking confirmation).
newBookingIdinteger|null–Craft newBookings entry id when created.
redirectUrlstring|null–Extralingo /my URL for the student to follow the request, when available.
success–yes–

No examples provided.

calculate_trip_price ~215

Live checkout quote for a configuration. Not a booking. Call before create_booking and before telling the student a final price.

NameTypeReqDescription
configurationobject–Same shape as the Extralingo school-page configurator: startDate (YYYY-MM-DD), students[] with courseId, weeks, optional accommodationGroupId, mealType, extras.
country_codestring–Visitor country ISO 3166-1 alpha-2 (e.g. NL). Affects fee display where applicable.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
discountCodestring–Optional promotion or discount code.
localestring–Response language and site context. One of en, nl, da, sv.
school_idinteger–Craft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
trip_idstring–Optional saved trip id; when set, the quote may be stored on that trip.
NameTypeReqDescription
dataobject–Full pricing breakdown from the booking engine.
quoteobject–Human-oriented price summary.
success–yes–

No examples provided.

create_booking ~393

Submit an unpaid booking for a bookings_live school (same path as the website Book now flow). The school still confirms availability; Extralingo emails the student; down payment is due within 5 days of school confirmation via Extralingo only. Never tell the user they are confirmed or paid. Requires OAuth bookings scope (Bearer token). Optional idempotency_key replays the same payload within 24 hours.

NameTypeReqDescription
configurationobject–Same shape as the Extralingo school-page configurator: startDate (YYYY-MM-DD), students[] with courseId, weeks, optional accommodationGroupId, mealType, extras.
contactobject–Optional first_name, last_name, phone. Email always comes from the verified account; contact.email must match or be omitted.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
idempotencyKeystring–Optional alias of idempotency_key.
idempotency_keystring–Optional. Same key + same payload within 24 hours replays the original response; conflicting payload returns validation_failed.
phonestring–Student phone number (required).
phoneCountrystring–ISO 3166-1 alpha-2 country for the phone (e.g. NL).
privacyAcceptedboolean–Must be true when not using OAuth.
school_idinteger–Craft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
specialRequestsstring–Free-text notes for the school.
studentDetailsarray–Per-student details aligned with configuration.students (names, dates of birth, etc.).
termsAcceptedboolean–Must be true when not using OAuth (OAuth grants record acceptance).
trip_idstring–Optional trip_id from save_trip linking this booking to a draft.
NameTypeReqDescription
agent_must_tell_the_userarray––
bookingIdinteger|null–Craft booking id when returned by the booking engine.
bookingReferencestring|null––
redirectUrlstring|null––
statusstring–e.g. awaiting_school_confirmation.
studentMessagestring––
success–yes–

No examples provided.

email_trip ~135

Email continue_url (/s/{id}) to the verified account inbox. Requires OAuth trips scope. Rate-limited. Not a booking; you can share continue_url without emailing.

NameTypeReqDescription
emailstring–Optional. Must match the verified OAuth account email if sent. The link is always sent to that account.
firstNamestring–Optional salutation for the email body.
lastNamestring–Optional salutation for the email body.
localestring–Response language and site context. One of en, nl, da, sv.
trip_idstringyestrip_id from save_trip.
NameTypeReqDescription
continue_urlstring––
emailed_tostring–Verified account inbox that received the email.
messagestring––
success–yes–
trip_idstring––
trip_urlstring––
urlstring–Legacy alias of continue_url.

No examples provided.

get_accommodation_details ~171

One group from list_accommodations (group_id): type, room_types, meal/board options, distance, amenities, age and min-stay rules, and week prices for startDate and currency. Use after list_accommodations, before save_trip or calculate_trip_price, or to answer questions about one option. Week prices are indicative; call calculate_trip_price for a checkout total.

NameTypeReqDescription
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
group_idstringyesAccommodation group id from list_accommodations.
localestring–Response language and site context. One of en, nl, da, sv.
startDatestring–Course start calendar date (YYYY-MM-DD). Typically a Monday from list_starting_dates.
NameTypeReqDescription
groupobject–Accommodation group from GET /v3/accommodations/{id} (v2 grouping): labels, classification, room and meal options, facilities, rules, and pricing hints for the requested start date.
success–yes–

No examples provided.

get_course_details ~135

Details for one course id from list_courses (pricing rows, supplements, metadata).

NameTypeReqDescription
course_idstringyesCourse product id from list_courses.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
localestring–Response language and site context. One of en, nl, da, sv.
school_idintegeryesCraft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
startDatestring–Course start calendar date (YYYY-MM-DD). Typically a Monday from list_starting_dates.
NameTypeReqDescription
courseobject|null–Single course product with pricing rows and supplements for the requested start date.
success–yes–

No examples provided.

get_school ~128

School briefing: profile, cancellation policy, reviews, image URLs, bookings_live flag, and optional hero image for chat UI. Requires school_id from search_language_schools.

NameTypeReqDescription
include_hero_imageboolean–When true, structuredContent may include a compressed JPEG in MCP image content; hero_image is stripped from structuredContent after attach.
localestring–Response language and site context. One of en, nl, da, sv.
school_idintegeryesCraft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
NameTypeReqDescription
dataobject–School profile (title, url, city, country, bookings_live, reviews, images[]).
success–yes–

No examples provided.

get_school_filters ~54

Valid filter values for search_language_schools (languages, countries, cities, course types, and other facets).

NameTypeReqDescription
localestring–Response language and site context. One of en, nl, da, sv.
NameTypeReqDescription
dataobject–Facet lists keyed by filter name.
success–yes–

No examples provided.

get_trip ~44

Load a saved trip by trip_id from save_trip. Returns continue_url for website handoff with configuration restored.

NameTypeReqDescription
trip_idstringyestrip_id returned by save_trip.
NameTypeReqDescription
configurationobject––
continue_urlstring–Shareable Extralingo URL that restores configuration.
notestring––
school_idinteger–Craft school entry id.
school_namestring––
school_urlstring––
success–yes–
summarystring–Human-readable configuration summary for agents.
trip_idstring–Shareable trip id (/s/{id}).
trip_urlstring––
urlstring–Legacy alias of continue_url.

No examples provided.

list_accommodations ~156

Accommodation groups for a school. Use group ids in save_trip configuration (accommodationGroupId).

NameTypeReqDescription
country_codestring–Visitor country ISO 3166-1 alpha-2 (e.g. NL). Affects fee display where applicable.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
localestring–Response language and site context. One of en, nl, da, sv.
school_idintegeryesCraft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
startDatestring–Course start calendar date (YYYY-MM-DD). Typically a Monday from list_starting_dates.
NameTypeReqDescription
accommodation_categoriesarray–Same groups nested by category for display.
accommodation_groupsarray–Flat list of accommodation groups (id for get_accommodation_details / configuration).
allows_double_room_individual_bookingsboolean––
busy_school_monthsobject|null––
currencystring––
has_location_discountsboolean––
location_discountobject|null––
schoolobject|null––
start_datestring––
success–yes–

No examples provided.

list_courses ~160

Live course catalogue for a bookings_live school (course ids, weeks, prices). Use returned course ids inside save_trip configuration.

NameTypeReqDescription
country_codestring–Visitor country ISO 3166-1 alpha-2 (e.g. NL). Affects fee display where applicable.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
localestring–Response language and site context. One of en, nl, da, sv.
school_idintegeryesCraft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
startDatestring–Course start calendar date (YYYY-MM-DD). Typically a Monday from list_starting_dates.
NameTypeReqDescription
busy_school_monthsobject|null––
course_typesarray–Course types with nested courses[] (course ids, weeks, week prices).
currencystring––
has_location_discountsboolean––
location_discountobject|null––
pricing_ruleobject|null––
schoolobject|null–School metadata from the booking API.
start_datestring–Effective start date used for pricing (YYYY-MM-DD).
success–yes–

No examples provided.

list_starting_dates ~85

Allowed course start dates (typically Mondays) for a school. Use startDate values in list_courses and configuration.startDate.

NameTypeReqDescription
localestring–Response language and site context. One of en, nl, da, sv.
school_idintegeryesCraft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
NameTypeReqDescription
datesarray–Bookable course start dates (typically Mondays, YYYY-MM-DD strings).
success–yes–

No examples provided.

request_discussion ~263

Trip discussion: trip_id or school_id+configuration plus message. ask_school_question: question without a trip. request_quote: personal quote (comments) when not booking. School gets the config; Extralingo emails the verified account and coordinates replies. Returns kind, newBookingId, redirectUrl, message (not a booking). OAuth scope requests. Optional idempotency_key.

NameTypeReqDescription
configurationobject–Same shape as the Extralingo school-page configurator: startDate (YYYY-MM-DD), students[] with courseId, weeks, optional accommodationGroupId, mealType, extras.
contactobject–Optional first_name, last_name. Email always comes from the verified account.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
idempotencyKeystring–Optional alias of idempotency_key.
idempotency_keystring–Optional. Same semantics as create_booking (24 hour replay window).
messagestring–Student message to the school.
school_idinteger–Craft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
trip_idstring–Optional trip_id from save_trip.
NameTypeReqDescription
kindstring–Lead type on success.
messagestring–Human-readable confirmation (not a booking confirmation).
newBookingIdinteger|null–Craft newBookings entry id when created.
redirectUrlstring|null–Extralingo /my URL for the student to follow the request, when available.
success–yes–

No examples provided.

request_quote ~218

Ask the school for a personal quote when bookings_live is false or the student is not ready to book. Requires OAuth requests scope. Optional idempotency_key.

NameTypeReqDescription
commentsstring–Student message to the school.
configurationobject–Same shape as the Extralingo school-page configurator: startDate (YYYY-MM-DD), students[] with courseId, weeks, optional accommodationGroupId, mealType, extras.
contactobject–Optional first_name, last_name. Email always comes from the verified account.
currencystring–ISO 4217 currency for prices in this call. Usually EUR.
idempotencyKeystring–Optional alias of idempotency_key.
idempotency_keystring–Optional. Same semantics as create_booking (24 hour replay window).
school_idinteger–Craft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
trip_idstring–Optional trip_id from save_trip.
NameTypeReqDescription
kindstring–Lead type on success.
messagestring–Human-readable confirmation (not a booking confirmation).
newBookingIdinteger|null–Craft newBookings entry id when created.
redirectUrlstring|null–Extralingo /my URL for the student to follow the request, when available.
success–yes–

No examples provided.

save_trip ~205

Create or update a server-side trip draft. Returns trip_id, url, trip_url, and continue_url (/s/{id}) so the student can restore selections on Extralingo.com. Not a booking. Requires OAuth trips scope (Bearer token).

NameTypeReqDescription
configurationobject–Same shape as the Extralingo school-page configurator: startDate (YYYY-MM-DD), students[] with courseId, weeks, optional accommodationGroupId, mealType, extras.
emailstring–Optional student email for anonymous drafts. With OAuth, the verified account email is used.
localestring–Response language and site context. One of en, nl, da, sv.
school_idinteger–Craft CMS school entry id from search_language_schools hits (field school_id). Not the CRM UUID.
trip_idstring–Omit to create a new trip. Pass an existing trip_id from save_trip to update the same continue_url.
NameTypeReqDescription
configurationobject––
continue_urlstring–Shareable Extralingo URL that restores configuration.
notestring––
school_idinteger–Craft school entry id.
school_namestring––
school_urlstring––
success–yes–
summarystring–Human-readable configuration summary for agents.
trip_idstring–Shareable trip id (/s/{id}).
trip_urlstring––
urlstring–Legacy alias of continue_url.

No examples provided.

search_destinations ~103

Search cities, countries, and school names. Use before search_language_schools to resolve place names to slugs.

NameTypeReqDescription
languagestring–Optional language slug to restrict destinations (e.g. spanish).
limitinteger–Maximum results (1–20).
localestring–Response language and site context. One of en, nl, da, sv.
querystring–Destination or school name prefix. Empty returns popular destinations.
NameTypeReqDescription
hitsarray–Destination matches.
localestring––
querystring––
schoolsarray–Optional school name fallback hits.
success–yes–

No examples provided.

search_language_schools ~200

Search and rank language schools. Returns school_id, url, indicative from-price, and reviews. Prices are not a booking quote; call calculate_trip_price before quoting a total.

NameTypeReqDescription
citiesarray–City slug filters from get_school_filters.
citystring–Single city slug filter. Prefer cities[] for multiple.
countrystring–Country slug or name filter from get_school_filters.
course_typestring–Course type slug from get_school_filters (e.g. intensive, private).
languagestring–Language slug filter from get_school_filters (e.g. spanish, english).
limitinteger–Maximum schools to return (1–20).
localestring–Response language and site context. One of en, nl, da, sv.
querystring–Free-text search (school name, city, or keyword). Empty returns popular matches for the other filters.
NameTypeReqDescription
dataobject–Meilisearch-style payload with hits[] (school_id, title, url, city, country, pricing hints).
success–yes–

No examples provided.

Install

How do I install the Extralingo MCP server?

Extralingo is a hosted endpoint at https://www.extralingo.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · www.extralingo.com

# add to Claude Code
claude mcp add --transport http com-extralingo-extralingo 'https://www.extralingo.com/mcp'
Common questions

What is the Extralingo MCP server?

Extralingo is an MCP server listed in the public MCP registry as com.extralingo/extralingo. Search language schools abroad, compare courses, dates and prices, and request bookings. This page covers its hosted endpoint (https://www.extralingo.com/mcp).

Is the Extralingo MCP server safe to use?

Extralingo scores 81 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Extralingo MCP server expose?

Extralingo exposes 17 tools: search_language_schools, search_destinations, get_school_filters, get_school, list_courses, and 12 more. Their descriptions and schemas cost roughly 2,875 tokens of context every time the server is loaded.

Does the Extralingo MCP server require authentication?

No. We connected to Extralingo without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Extralingo MCP server still maintained?

Extralingo is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.