Nadveo — book air-conditioning service
REMOTE · NADVEO.COM
Find air-conditioning service companies and book a visit: prices, free times, error-code hints.
Available components
Last scanned (9 hours ago)
Scores higher than 46% of remote servers
Reachable. Last reached 18 Oct 2026.
Category Workflow Automation
Recent critical change
Authorization (12 Oct 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (cancel_request). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability59
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1840 tokens (~204/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 93% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Oct 26 −9
- Authorization: partial → fail ▼ critical
- The server rewrote its instructions, which are the text every model session reads security
- New tool “cancel_request”, which the server declares destructive security
- Tool “find_companies” rewrote its description, which is the text the model reads security
- Tool coverage: 100% → 93% ▼ functional
- Schema quality: pass → fail ▼ functional
- New tool “book_appointment” functional
- New tool “check_availability” functional
- New tool “company_info” functional
- New tool “diagnose” functional
- New tool “get_quote” functional
- New tool “get_request_status” functional
- New tool “list_services” functional
- “find_companies” added an optional parameter “district” cosmetic
- “find_companies” added an optional parameter “service” cosmetic
- “find_companies” reworded the description of “city” cosmetic
- 9 Oct 26 70
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Probed https://nadveo.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=nadveo.com | CN=YE2,O=Let's Encrypt,C=US | 25 Sept 2026 | 24 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 6240cf73be08113a2e8256ba13dd0a5501b |
| SANs: *.nadveo.com, nadveo.com | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of nadveo.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| nadveo.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://nadveo.com/mcp | Verified | 200 | |
| http (plaintext) | http://nadveo.com/mcp | HTTPS enforced | 301 | https://nadveo.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
book_appointment Book the visit ~448
At the company chosen from find_companies (pass its `company`). Books the visit at a free time from check_availability. Only after the client confirmed the service, the time, the address and the price. The company messages the client (WhatsApp, or e-mail when given). Returns the request number and a token for get_request_status / cancel_request. Repeating the same call (same idempotency_key or the same data) returns the same booking.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Where the work is done: street, building, apartment, city. |
| answers | object | – | Answers to the service's questions: { question_id: option_id | [option_ids] | number | text }. Use the ids from list_services. |
| client_accepted_disclaimer | boolean | – | Needed with diagnosis: the client agreed it is a hint, not a diagnosis. |
| client_email | string | – | Optional: messages go to this e-mail instead of WhatsApp. |
| client_name | string | yes | – |
| client_phone | string | yes | With the country code, e.g. +971 50 123 4567. |
| company | string | yes | The company: the `company` of a find_companies result. |
| diagnosis | object | – | Optional: { brand, code } from diagnose — the technician sees it. |
| district | string | – | When company_info lists service_zones: the client's district as its zone id (e.g. "dubai:jlt"), or "other" when it is not in the list. |
| idempotency_key | string | – | Optional, 8–100 of A-Z a-z 0-9 _ -: the same key never books twice. |
| lang | string | – | Language for names and labels: ru, es, en, ar, pt, fr, de, it, tr, id, vi, th. Default en. |
| service | string | yes | The service key from list_services. |
| slot_id | integer | yes | A slot_id from check_availability. |
| units | integer | – | How many units (air conditioners…) — only for services that count units. Default 1. |
No output schema declared.
No examples provided.
cancel_request Cancel a booking ~69
At the company chosen from find_companies (pass its `company`). Cancels the booking (only when the client asked to). Needs the token from book_appointment.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | The company: the `company` of a find_companies result. |
| token | string | yes | – |
No output schema declared.
No examples provided.
check_availability Free times ~181
At the company chosen from find_companies (pass its `company`). Free start times for the service (with these answers and units — they set how long the work takes) over the next days, from tomorrow. Each time has a slot_id for book_appointment. Times are the company's local time.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | object | – | Answers to the service's questions: { question_id: option_id | [option_ids] | number | text }. Use the ids from list_services. |
| company | string | yes | The company: the `company` of a find_companies result. |
| days | integer | – | How many days ahead to look. Default 7. |
| service | string | yes | The service key from list_services. |
| units | integer | – | How many units (air conditioners…) — only for services that count units. Default 1. |
No output schema declared.
No examples provided.
company_info About the company ~131
At the company chosen from find_companies (pass its `company`). The company: name, country and city, currency, languages, contacts, clients' rating, the districts it serves (main: fast arrival; secondary: next day or a call-out fee), today's date in its time zone and its booking page.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | The company: the `company` of a find_companies result. |
| lang | string | – | Language for names and labels: ru, es, en, ar, pt, fr, de, it, tr, id, vi, th. Default en. |
No output schema declared.
No examples provided.
diagnose Hint by the error code ~267
At the company chosen from find_companies (pass its `company`). A preliminary hint by the air conditioner's brand and the error code on its display: the probable cause (a breakdown type) and the company's starting price for it. It is not a diagnosis. Before giving it, tell the client it is an automatic hint, that the technician confirms the cause and the final price on site, and get their agreement — then pass client_accepted_disclaimer: true (also to book_appointment with the diagnosis). Brands: daikin, mitsubishi_electric, lg, samsung, gree, midea, panasonic, carrier, haier, tcl, other.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | yes | Brand key (see the description), or "other". |
| client_accepted_disclaimer | boolean | yes | The client agreed that this is an automatic hint, not a diagnosis. |
| code | string | yes | The code on the display, e.g. U4, E1, CH05. |
| company | string | yes | The company: the `company` of a find_companies result. |
| lang | string | – | Language for names and labels: ru, es, en, ar, pt, fr, de, it, tr, id, vi, th. Default en. |
No output schema declared.
No examples provided.
find_companies Find a company ~211
Service companies in the Nadveo catalog, filtered by country (ISO code, e.g. AE), city, district, service and name, best first. Each has its districts (main: fast arrival; secondary: next day or a call-out fee), "from" prices, the next free day and clients' rating.
| Name | Type | Req | Description |
|---|---|---|---|
| city | string | – | The city, e.g. Dubai, Abu Dhabi, Sharjah (part of the name is enough). |
| country | string | – | ISO 3166 code, e.g. AE, MX, ID, TH, VN. |
| district | string | – | The client's district in that city, e.g. "JLT", "Dubai Marina", "Al Nahda" (part of the name is enough). |
| query | string | – | Part of the company name. |
| service | string | – | maintenance = cleaning and service; repair = repairs and gas recharge; installation. |
| trade | string | – | hvac = air conditioning and heating. |
No output schema declared.
No examples provided.
get_quote Price for these answers ~182
At the company chosen from find_companies (pass its `company`). Checks the client's answers and gives the price and the duration. If an answer is missing or wrong, "problem" says which question.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | object | – | Answers to the service's questions: { question_id: option_id | [option_ids] | number | text }. Use the ids from list_services. |
| company | string | yes | The company: the `company` of a find_companies result. |
| lang | string | – | Language for names and labels: ru, es, en, ar, pt, fr, de, it, tr, id, vi, th. Default en. |
| service | string | yes | The service key from list_services. |
| units | integer | – | How many units (air conditioners…) — only for services that count units. Default 1. |
No output schema declared.
No examples provided.
get_request_status Status of a booking ~74
At the company chosen from find_companies (pass its `company`). Where a booking stands: status, time, technician (once assigned), price. Needs the token from book_appointment.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | The company: the `company` of a find_companies result. |
| token | string | yes | – |
No output schema declared.
No examples provided.
list_services Services, prices and questions ~137
At the company chosen from find_companies (pass its `company`). Every service with its starting price, how long it takes, whether it can be booked, and the questions the client answers (they set the price and the time). Questions may depend on an earlier answer (shown_if). "unknown_allowed" means "?" is a valid answer.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | The company: the `company` of a find_companies result. |
| lang | string | – | Language for names and labels: ru, es, en, ar, pt, fr, de, it, tr, id, vi, th. Default en. |
No output schema declared.
No examples provided.
How do I install the Nadveo — book air-conditioning service MCP server?
Nadveo — book air-conditioning service is a hosted endpoint at https://nadveo.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · nadveo.com
claude mcp add --transport http com-nadveo-service-booking 'https://nadveo.com/mcp'
What is the Nadveo — book air-conditioning service MCP server?
Nadveo — book air-conditioning service is an MCP server listed in the public MCP registry as com.nadveo/service-booking. Find air-conditioning service companies and book a visit: prices, free times, error-code hints. This page covers its hosted endpoint (https://nadveo.com/mcp).
Is the Nadveo — book air-conditioning service MCP server safe to use?
Nadveo — book air-conditioning service scores 64 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Nadveo — book air-conditioning service MCP server expose?
Nadveo — book air-conditioning service exposes 9 tools: company_info, list_services, get_quote, check_availability, diagnose, and 4 more. Their descriptions and schemas cost roughly 1,700 tokens of context every time the server is loaded.
Does the Nadveo — book air-conditioning service MCP server require authentication?
No. We connected to Nadveo — book air-conditioning service without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Nadveo — book air-conditioning service MCP server still maintained?
Nadveo — book air-conditioning service is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.