Perkadoo
REMOTE · MCP.PERKADOO.COM
Manage Perkadoo giveaways, streak programs and perks, plus verifiable draws and streak badges.
Available components
Last scanned (16 hours ago)
Scores higher than 85% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security81
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability83
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2908 tokens (~111/item across 26 items; 25 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management50
- Stability observed for 15 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 91% of tool parameters carry a description.Partial
- Structured output schemas are declared (4% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 25 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 26 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
- Supports UI / widget rendering.Pass
Checks we ran (13)
- TLS certificate
- Authorization
- HSTS header
- DNSSEC
- Transport
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
- Capabilities
Checks we could not complete (1)
These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.
- HTTPS in Endpoint SecurityHTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Schema quality: 2451 → 2908 ▼ functional
- New tool “draw_from_post” functional
- New tool “pick_random_numbers” functional
- New tool “spin_wheel” functional
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 +1
- Tool “read_post_comments” rewrote its description, which is the text the model reads security
- “read_post_comments” reworded the description of “link” cosmetic
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 +1
- Tool “update_giveaway” rewrote its description, which is the text the model reads security
- “create_giveaway” reworded the description of “entryPage” cosmetic
- “update_giveaway” reworded the description of “entryPage” cosmetic
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 26 Oct 26 0
- Tool “read_post_comments” rewrote its description, which is the text the model reads security
- 24 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.perkadoo.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=perkadoo.com | CN=WE1,O=Google Trust Services,C=US | 14 Oct 2026 | 12 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 926853b17a9becbf0e6c061223f3a0f1 |
| SANs: perkadoo.com, mcp.perkadoo.com, *.mcp.perkadoo.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.perkadoo.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| com. | DS published | 19718 | 13 | Verified |
| perkadoo.com. | No DS | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer resource_metadata="https://mcp.perkadoo.com/.well-known/oauth-protected-resource/mcp", scope="mcp"
Bearer resource_metadata="https://mcp.perkadoo.com/.well-known/oauth-protected-resource/mcp", scope="mcp"Protected resource metadata
| Document | https://mcp.perkadoo.com/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://mcp.perkadoo.com/mcp |
| Authorisation server | https://app.perkadoo.com/api/auth |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.perkadoo.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.perkadoo.com/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
build_prebuild_from_site Build my giveaway and streak from my site ~70
Give Doo your site's address. Doo reads it and builds your giveaway, daily streak and perks in your brand colors, then returns a private preview link. Nothing goes live until you make it yours from that page.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Your site's address, like yoursite.com. |
No output schema declared.
No examples provided.
check_in_streak_badge Check in to a streak badge ~93
Check in today on a Perkadoo Streak Badge with its private token. One check-in per day in the streak's time zone; checking in again the same day changes nothing. Missing a day starts the streak over.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | The streak's public slug, from its link /s/<slug>. |
| token | string | yes | The secret token from the private check-in link. |
No output schema declared.
No examples provided.
create_giveaway Create a giveaway ~329
Draft a hosted giveaway: prize, dates, draw, entry page, bonus entries and official rules. It starts as a draft with a preview link. A signed-in person approves it at dashboardUrl before it goes live; send them that link.
| Name | Type | Req | Description |
|---|---|---|---|
| brandId | string | yes | Brand ID, the project that runs the giveaway. |
| closesAt | string | yes | When entries close, as an ISO 8601 time. Must be after opensAt. |
| drawMethod | string | – | single: one winner. multiple: equal winners. placed: 1st, 2nd, 3rd… |
| entryPage | object | – | The hosted entry page's headline, description, image, brand color and bonuses. |
| language | string | – | The language entrants see: en or es. Left out, the language of the brand's country, else en. |
| name | string | yes | The giveaway's name, shown as its title. |
| opensAt | string | yes | When entries open, as an ISO 8601 time. |
| prizes | array | – | One prize per place for placed draws; otherwise the first prize goes to every winner. |
| rules | object | – | The official rules. sponsorCountry and countries default to the brand's own country. A person approves them before the giveaway goes live. |
| timezone | string | – | The time zone the official rules and dashboard use, e.g. Europe/London. Left out, the brand's own: from its site's country domain, then its saved zone. |
| winnerCount | integer | – | How many winners to draw. |
No output schema declared.
No examples provided.
create_perk Create a perk ~213
Create a reward a brand can give members: a coupon code, a link or a message. Milestone rewards set in the dashboard are perks too.
| Name | Type | Req | Description |
|---|---|---|---|
| brandId | string | yes | Brand ID, the project that offers the perk. |
| expiresAt | – | – | When the perk stops being shown, as an ISO 8601 time. |
| kind | string | yes | coupon (a code), url (a link) or message (text). |
| name | string | yes | What the brand calls this perk. |
| uniqueCodes | boolean | – | Coupons only. true when each member needs their own code, like a gift card: members wait for one until codes are added, and never get the value. |
| validDays | – | – | How many days a member has to use it after it's given, like 30. Null keeps it until the perk's own expiry. |
| value | string | yes | The coupon code, link or message. |
| valueCents | – | – | What the perk is worth to a member, in cents. |
No output schema declared.
No examples provided.
create_share_card Make a share card ~164
Make a card for a win, streak, perk, giveaway entry or winner announcement. Returns a public page and PNG image in square, story or link size. Uses supplied text; it does not verify a winner, grant a perk or publish a social post. Never put private tokens or coupon codes in a card.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | object | yes | Template text: winner uses name, prize, from; streak uses days, habit, optional name; perk uses milestone, perk, from; entered uses giveaway, prize, from; announce uses title, winners (one per line),… |
| site | string | – | Optional website backlink. Query strings and fragments are removed. |
| size | string | – | – |
| template | string | yes | – |
| theme | string | – | – |
No output schema declared.
No examples provided.
create_streak_badge Start a streak badge ~157
Start a personal streak for any habit with Perkadoo's Streak Badge, no account needed. Returns a public streak page, a live SVG badge for a README or website, and a private check-in link. The check-in link is the only way to check in, so tell the person to save it.
| Name | Type | Req | Description |
|---|---|---|---|
| ownerName | string | – | Whose streak it is, shown on the public page. |
| theme | string | – | Badge colours. Default light. |
| timeZone | string | – | IANA time zone that decides when a day starts, e.g. Europe/London. Default UTC. |
| title | string | yes | The habit, e.g. 'Read 20 pages' or 'Ship a commit'. |
No output schema declared.
No examples provided.
draw_from_post Pick winners from a post's comments ~224
Pick random winners from the people who commented on a public post, from its link, with no account: YouTube videos, Bluesky posts and Reddit threads. Each commenter gets one entry. Reads the comments and draws in one step, with public drand randomness anyone can check. Returns the winners and a public results link to share. An Instagram post needs its owner: the answer is a link for them.
| Name | Type | Req | Description |
|---|---|---|---|
| link | string | yes | The post's link, as copied from its share button: a YouTube video, a Bluesky post or a Reddit thread. |
| method | string | – | single: one winner. multiple: several equal winners. placed: 1st, 2nd, 3rd… with a prize per place. |
| prizes | array | – | Prize labels. For placed draws, one per place in order; otherwise one prize for every winner. |
| title | string | – | A name for the giveaway, shown on the results page. Default: the post's title. |
| winnerCount | integer | – | How many winners to pick. |
No output schema declared.
No examples provided.
draw_winners Pick giveaway winners ~181
Pick random winners from a list of names with Perkadoo's Winner Picker. The draw uses public drand randomness that didn't exist when the names were locked in, so anyone can check it. Returns the winners and a public results link to share.
| Name | Type | Req | Description |
|---|---|---|---|
| entrants | – | yes | The entrants: an array of names, or text with one name per line. A name listed twice gets two entries. |
| method | string | – | single: one winner. multiple: several equal winners. placed: 1st, 2nd, 3rd… with a prize per place. |
| prizes | array | – | Prize labels. For placed draws, one per place in order; otherwise one prize for every winner. |
| title | string | – | A name for the giveaway, shown on the results page. |
| winnerCount | integer | – | How many winners to pick. |
| Name | Type | Req | Description |
|---|---|---|---|
| drandRound | integer | yes | – |
| entrantCount | integer | yes | – |
| imageUrl | string | yes | – |
| resultsUrl | string | yes | – |
| status | string | yes | – |
| title | string | – | – |
| winners | array | yes | – |
No examples provided.
get_draw Read a draw result ~53
Read and verify a Winner Picker result from its public slug. If randomness is now available, completes the previously committed draw. Returns the original winners and share image; never picks a replacement winner.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
No output schema declared.
No examples provided.
get_giveaway Read a giveaway ~84
Read a giveaway with its phase, approval, links, winners and numbers: entrants, entries, sources, entries by day, top referrers and flagged entries. dashboardUrl is where a signed-in person approves it or, once approved, draws it.
| Name | Type | Req | Description |
|---|---|---|---|
| giveawayId | string | yes | Giveaway ID. It is also the giveaway's campaign ID for approval and status. |
No output schema declared.
No examples provided.
get_goal Read the brand's goal ~58
See how many new faces or returning members a brand has toward its goal, the target, the deadline and whether it's on pace. Returns null when no goal is set.
| Name | Type | Req | Description |
|---|---|---|---|
| brandId | string | yes | Brand ID, the project Doo runs. |
No output schema declared.
No examples provided.
get_proof_report Read Proof results ~53
Read the latest holdout experiment, its sample sizes and measured return rate. Returns null when no experiment exists; never invents uplift.
| Name | Type | Req | Description |
|---|---|---|---|
| campaignId | string | yes | Streak program ID from list_programs. |
No output schema declared.
No examples provided.
get_streak_badge Read a streak badge ~55
Read a Perkadoo Streak Badge: the live streak, best streak, total days and the last seven days.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | The streak's public slug, from its link /s/<slug>. |
No output schema declared.
No examples provided.
get_streak_performance Read streak performance ~47
Read the streak distribution, best streaks and progress for a program. Excludes synthetic test activity.
| Name | Type | Req | Description |
|---|---|---|---|
| campaignId | string | yes | Streak program ID from list_programs. |
No output schema declared.
No examples provided.
list_giveaway_entries List giveaway entries ~87
List a giveaway's entries, newest first, with email, entries, source, referrer, status and risk signals. Filter by status to review flagged entries.
| Name | Type | Req | Description |
|---|---|---|---|
| giveawayId | string | yes | Giveaway ID. It is also the giveaway's campaign ID for approval and status. |
| limit | integer | – | – |
| offset | integer | – | – |
| status | string | – | – |
No output schema declared.
No examples provided.
list_giveaways List giveaways ~43
List a brand's giveaways, newest first, with their phase and entry counts.
| Name | Type | Req | Description |
|---|---|---|---|
| brandId | string | yes | Brand ID, the project that runs the giveaway. |
No output schema declared.
No examples provided.
list_perks List perks ~66
List a brand's perks with how many have been granted, revealed to members and redeemed, and for coupons with a code pool, how many codes are left and how many grants are waiting for one.
| Name | Type | Req | Description |
|---|---|---|---|
| brandId | string | yes | Brand ID, the project that offers the perk. |
No output schema declared.
No examples provided.
list_programs List streak programs ~43
List a brand's streak programs with their event key, cadence, target and status.
| Name | Type | Req | Description |
|---|---|---|---|
| brandId | string | yes | Brand ID, the project that runs the streak. |
No output schema declared.
No examples provided.
list_projects List projects ~21
List the Perkadoo projects available to the authenticated MCP credential.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
make_winners_card Make a winners card ~51
Make a square card announcing a drawn giveaway's winners, with emails masked: a public page link and a PNG to post. It publishes nothing itself.
| Name | Type | Req | Description |
|---|---|---|---|
| giveawayId | string | yes | A drawn giveaway. |
No output schema declared.
No examples provided.
pick_random_numbers Pick random numbers ~126
Pick one or more random whole numbers in a range with Perkadoo's Random Number Generator, like 1 to 100. Several numbers never repeat. Uses public drand randomness, so anyone can check it. Returns the numbers and a public results link to share.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | How many different numbers to pick. Default 1. |
| max | integer | yes | The highest number that can come up. |
| min | integer | – | The lowest number that can come up. Default 1. |
| title | string | – | A name shown on the results page. |
No output schema declared.
No examples provided.
read_post_comments Read a post's comments from its link ~133
Read every top-level comment on a public post from its link, with no account: YouTube videos, Bluesky posts and Reddit threads (where this server has a Reddit app). Returns the post (title, the account that posted it) and each comment's handle, text and time, ready for draw_winners or a comment picker. An Instagram post needs its owner: the answer is a link for them to pick a verifiable winner from that post.
| Name | Type | Req | Description |
|---|---|---|---|
| link | string | yes | The post's link, as copied from its share button: a YouTube video, a Bluesky post or a Reddit thread. |
No output schema declared.
No examples provided.
set_goal Set the brand's goal ~130
Aim a brand at more new faces or more returning members: a number to reach by a deadline. Doo plans around it and Home tracks it. Replaces the current goal, which is kept as history.
| Name | Type | Req | Description |
|---|---|---|---|
| brandId | string | yes | Brand ID, the project Doo runs. |
| deadline | string | yes | When to reach it, within the next 366 days. ISO 8601 with an offset. |
| metric | string | yes | new_faces counts first-time members who left an email. returning counts members active in two or more weeks. |
| target | integer | yes | The number to reach. |
No output schema declared.
No examples provided.
spin_wheel Spin the wheel ~107
Spin a wheel of choices with Perkadoo's Spin the Wheel and land on one, like a prize, a name or where to eat. A choice listed twice has two slices. Uses public drand randomness, so anyone can check it. Returns where it landed and a public results link to share.
| Name | Type | Req | Description |
|---|---|---|---|
| slices | – | yes | The wheel's slices: an array, or text with one slice per line. |
| title | string | – | What the wheel decides, shown on the results page. |
No output schema declared.
No examples provided.
update_giveaway Update a giveaway ~299
Change a giveaway before it's drawn. Changing its dates, draw, prizes, rules or bonus entries clears its approval and returns it to draft; pause a live giveaway first. Headline, description, image and color can change any time.
| Name | Type | Req | Description |
|---|---|---|---|
| closesAt | string | – | When entries close, as an ISO 8601 time. Must be after opensAt. |
| drawMethod | string | – | single: one winner. multiple: equal winners. placed: 1st, 2nd, 3rd… |
| entryPage | object | – | The hosted entry page's headline, description, image, brand color and bonuses. |
| giveawayId | string | yes | Giveaway ID. It is also the giveaway's campaign ID for approval and status. |
| language | string | – | The language the entry page, results page and site banner speak to entrants: en or es. |
| name | string | – | The giveaway's name, shown as its title. |
| opensAt | string | – | When entries open, as an ISO 8601 time. |
| prizes | array | – | One prize per place for placed draws; otherwise the first prize goes to every winner. |
| rules | object | – | The official rules. A person approves them before the giveaway goes live. |
| timezone | string | – | The time zone the official rules and dashboard use, e.g. America/New_York. |
| winnerCount | integer | – | How many winners to draw. |
No output schema declared.
No examples provided.
How do I install the Perkadoo MCP server?
Perkadoo is a hosted endpoint at https://mcp.perkadoo.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.perkadoo.com
claude mcp add --transport http com-perkadoo-perkadoo 'https://mcp.perkadoo.com/mcp'
What is the Perkadoo MCP server?
Perkadoo is an MCP server listed in the public MCP registry as com.perkadoo/perkadoo. Manage Perkadoo giveaways, streak programs and perks, plus verifiable draws and streak badges. This page covers its hosted endpoint (https://mcp.perkadoo.com/mcp).
Is the Perkadoo MCP server safe to use?
Perkadoo scores 82 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Perkadoo MCP server expose?
Perkadoo exposes 25 tools: list_projects, get_streak_performance, get_proof_report, list_programs, list_perks, and 20 more. Their descriptions and schemas cost roughly 2,887 tokens of context every time the server is loaded.
Does the Perkadoo MCP server require authentication?
Yes. Perkadoo asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Perkadoo MCP server still maintained?
Perkadoo is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the Perkadoo MCP server?
VerifyMCP ran 13 checks on Perkadoo, covering TLS certificate, Authorization, HSTS header, DNSSEC and 9 more. One item could not be completed, a gap on our side rather than a finding about Perkadoo: HTTPS. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.