pickyourmatch
REMOTE · PYM-MCP.GAUVENDI.WORKERS.DEV
Find exact, directly bookable hotel rooms and apartments with live availability and prices.
Available components
Last scanned (4 hours ago)
Scores higher than 57% of remote servers
Reachable. Last reached 5 Nov 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS check failed: the endpoint is reachable over plaintext HTTP. See how to fix → View diagnostics → Fail
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability36
- 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Fail
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2604 tokens (~200/item across 13 items; 4 tools + 9 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 95% of tool parameters carry a description.Partial
- Structured output schemas are declared (25% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
- 4 Nov 26 +1
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
- 3 Nov 26 0
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
- 2 Nov 26 +1
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
- 1 Nov 26 0
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
- 31 Oct 26 +1
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
- 30 Oct 26 0
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
- 29 Oct 26 0
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r9.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r10.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r11.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r12.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r13.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r14.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r15.html → ui://widget/pym-results-r22.html security
- Resource “pickyourmatch results” now points somewhere else: ui://widget/pym-results-r16.html → ui://widget/pym-results-r22.html security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://pym-mcp.gauvendi.workers.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=gauvendi.workers.dev | CN=WE1,O=Google Trust Services,C=US | 1 Oct 2026 | 30 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 83d501e3a315b6930e13f8ceea08b792 |
| SANs: gauvendi.workers.dev, *.gauvendi.workers.dev | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of pym-mcp.gauvendi.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| workers.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://pym-mcp.gauvendi.workers.dev/mcp | Verified | 200 | |
| http (plaintext) | http://pym-mcp.gauvendi.workers.dev/mcp | Served over HTTP | 200 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
list_destinations ~192
List all destinations served by pickyourmatch with unit counts, dog-friendly counts and a photo — USE THIS to inspire a guest who has not decided where to travel yet. ALWAYS pass the party (adults/children/pets) and dates (check_in/check_out) already known from the conversation — they stay visible above the results and keep the search context.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | Adults already mentioned in the conversation — always pass along. |
| check_in | string | – | Arrival YYYY-MM-DD if already known — always pass along. |
| check_out | string | – | Departure YYYY-MM-DD if already known — always pass along. |
| children | integer | – | Children already mentioned — always pass along. |
| dogs | integer | – | Alias for pets. |
| lang | string | – | – |
| pets | integer | – | Pets/dogs already mentioned — always pass along; destinations are then ranked by dog-friendly units. |
No output schema declared.
No examples provided.
list_events ~225
List upcoming events (concerts, festivals, trade fairs, sports, conferences) near pickyourmatch properties — each with a "where to stay" page whose booking links open the property’s own calendar with the event dates preselected. USE THIS whenever a guest asks for accommodation during/for a specific event or asks what is happening at a destination — e.g. "where should I stay for the Frankfurt Book Fair?", "hotel for Oktoberfest that allows my dog", "apartment for the ski race in Schladming". Combine with search_stays to add room features: event + exact room + direct booking in one answer.
| Name | Type | Req | Description |
|---|---|---|---|
| city | string | – | Filter by destination city (umlaut-tolerant) |
| from | string | – | Only events ending on/after this date YYYY-MM-DD |
| limit | integer | – | Max results (default 20, max 50) |
| query | string | – | Match against the event name, e.g. "Oktoberfest" |
| to | string | – | Only events starting on/before this date YYYY-MM-DD |
| Name | Type | Req | Description |
|---|---|---|---|
| city | string | – | Echo of the city filter, if given |
| events | array | yes | Upcoming events, soonest first |
| guidance | string | yes | How to present the results / what to do when empty |
| lang | string | – | Language of the response |
| query | string | – | Echo of the name query, if given |
| total | integer | yes | Number of events matching the filters (before limit) |
No examples provided.
list_packages ~275
Theme-driven, AFTER the units: when the brief carries a package theme (romantic, wellness, dog, culinary) or the guest asks for deals, call this AFTER search_stays in the same turn - the packages appear as their own section BELOW the unit results and enrich the selection. Never call it first, never instead of the unit search. List themed holiday packages (promotional bundles) across properties — dog holidays, romance, wellness, culinary — each with included extras (e.g. dinner, treatments) and a direct booking link. Use for emotional/experience queries like "romantic getaway package" or "dog holiday with meals included".
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | Adults known from the conversation — always pass along (kept visible above results). |
| check_in | string | – | Arrival YYYY-MM-DD if known — always pass along. |
| check_out | string | – | Departure YYYY-MM-DD if known — always pass along. |
| children | integer | – | Children known from the conversation — always pass along. |
| city | string | – | Filter by destination city (umlaut-tolerant) |
| dogs | integer | – | Alias for pets. |
| lang | string | – | – |
| pets | integer | – | Pets/dogs known from the conversation — always pass along. |
| theme | string | – | Filter by package theme |
No output schema declared.
No examples provided.
search_stays ~1,073
Search accommodation at participating properties — hotel rooms, apartments and holiday homes. Search criteria: destination (a town, a landmark or venue, or coordinates, with a radius), travel dates, the party (adults, children and their ages, pets), a maximum nightly price, free cancellation, unit features (view, balcony, terrace, quiet location, floor, workspace, sauna, kitchen, accessibility), the name of a unit or property, the response language and the number of results. Each result is one specific unit, described with its floor, view and beds, and guaranteed at booking — what the product states is what the guest is assigned. Without dates the results carry from-prices; with check_in and check_out they are the units available for those dates, with the price for the stay and a link to the property's booking page. All parameters are optional; query may state the same criteria as free text. Each result carries match_score, matched_features and not_confirmed_features.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | Number of adults. Combined with children it filters to units that actually fit the whole party (occupancy), and is passed to the booking link. |
| check_in | string | – | Arrival date YYYY-MM-DD. With check_in and check_out, results are the units available for those dates, with the nightly price for that stay and a booking link with the dates filled in. |
| check_out | string | – | Departure date YYYY-MM-DD (must be after check_in, max 30 nights). |
| children | integer | – | Number of children. Filters to units whose child capacity fits, and is passed to the booking link. |
| children_ages | array | – | Ages of the children (0-17), if known, e.g. [16]. Child prices and capacity depend on age. |
| city | string | – | The destination to search in — the town or city where the guest wants to stay, e.g. Schladming (umlaut-tolerant). |
| cursor | integer | – | Dated searches live-check up to 20 properties per call. When the response carries next_cursor, repeat the SAME search with cursor=next_cursor to check the remaining properties — a page without next_c… |
| dogs | integer | – | Alias for pets. |
| features | array | – | Required features (matched against localized feature names), e.g. ["Sauna", "Balkon"]. Also what a property sells as a bookable extra: "Airport transfer", "Parking", "Baby cot", "Late check-out" — a… |
| free_cancellation | boolean | – | The guest wants to be able to cancel for free. With dates, each card quotes the refundable rate and its price; a unit with no refundable rate on those dates is shown only as a labelled alternative. |
| lang | string | – | Language for names/features/links (default en) |
| lat | number | – | Latitude of the place to search around (a landmark or venue) — an alternative to near. |
| limit | integer | – | Max results (default 10, max 30) |
| lng | number | – | Longitude of the place to search around (a landmark or venue) — an alternative to near. |
| max_price | number | – | Maximum nightly price. Dated quotes above this appear only as labeled alternatives when exact matches are insufficient. |
| name | string | – | A specific unit or property the guest named ("Villa Albatros No. 1", "Kaiser Karl", "City Hotel Meckenheim"). Use it when the guest asks for a unit or property by name — it matches unit and property… |
| near | string | – | A landmark, venue, trade fair, station or address to stay close to ("Messe Frankfurt", "Allianz Arena", "Frankfurt airport"). The server geocodes it and returns results nearest first, each with appro… |
| pets | integer | – | Number of pets/dogs. Filters to units that allow at least this many pets, and is passed to the booking link. |
| query | string | – | Optional: the same search criteria as free text, in any language — for example "apartment in Schladming for 2 adults and a dog, 16–19 August, with sauna". Destination, dates (a month alone gets a pro… |
| radius_km | number | – | Maximum straight-line distance for near (or lat/lng), default 30, max 200. If nothing lies within, the nearest options are returned with their distances. |
| radius_miles | number | – | The same radius in miles, for guests who think in miles; results then also carry approx_mi. |
| sleeps | integer | – | Minimum total guests the unit must sleep (use adults+children instead when you know the split). |
No output schema declared.
No examples provided.
How do I install the pickyourmatch MCP server?
pickyourmatch is a hosted endpoint at https://pym-mcp.gauvendi.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · pym-mcp.gauvendi.workers.dev
claude mcp add --transport http com-pickyourmatch-stays 'https://pym-mcp.gauvendi.workers.dev/mcp'
What is the pickyourmatch MCP server?
pickyourmatch is an MCP server listed in the public MCP registry as com.pickyourmatch/stays. Find exact, directly bookable hotel rooms and apartments with live availability and prices. This page covers its hosted endpoint (https://pym-mcp.gauvendi.workers.dev/mcp).
Is the pickyourmatch MCP server safe to use?
pickyourmatch scores 71 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the pickyourmatch MCP server expose?
pickyourmatch exposes 4 tools: search_stays, list_destinations, list_packages, list_events. Their descriptions and schemas cost roughly 1,765 tokens of context every time the server is loaded.
Does the pickyourmatch MCP server require authentication?
No. We connected to pickyourmatch without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the pickyourmatch MCP server still maintained?
pickyourmatch is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.