io.github.Davedat-110105/mcp-gateway
REMOTE · GATEWAY-PRODUCTION-C71A.UP.RAILWAY.APP · SCANNED OCT 12
Curated gateway to snapshot-versioned Canadian public data services with source provenance.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint returned HTTP 404. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability0
- Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
- Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
- Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified
Unverified: 5 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
How do I install the io.github.Davedat-110105/mcp-gateway server?
io.github.Davedat-110105/mcp-gateway is a hosted endpoint at https://gateway-production-c71a.up.railway.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · gateway-production-c71a.up.railway.app
claude mcp add --transport http davedat-110105-mcp-gateway 'https://gateway-production-c71a.up.railway.app/mcp'
{
"mcpServers": {
"davedat-110105-mcp-gateway": {
"url": "https://gateway-production-c71a.up.railway.app/mcp"
}
}
} {
"servers": {
"davedat-110105-mcp-gateway": {
"type": "http",
"url": "https://gateway-production-c71a.up.railway.app/mcp"
}
}
} [mcp_servers.davedat-110105-mcp-gateway] url = "https://gateway-production-c71a.up.railway.app/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"davedat-110105-mcp-gateway": {
"type": "remote",
"url": "https://gateway-production-c71a.up.railway.app/mcp",
"enabled": true
}
}
} openclaw mcp add davedat-110105-mcp-gateway --url 'https://gateway-production-c71a.up.railway.app/mcp' --transport streamable-http
mcp_servers:
davedat-110105-mcp-gateway:
url: "https://gateway-production-c71a.up.railway.app/mcp" {
"McpServers": {
"davedat-110105-mcp-gateway": {
"Transport": "http",
"Url": "https://gateway-production-c71a.up.railway.app/mcp"
}
}
} assistant mcp add davedat-110105-mcp-gateway -t streamable-http -u 'https://gateway-production-c71a.up.railway.app/mcp'
{
"mcpServers": {
"davedat-110105-mcp-gateway": {
"type": "http",
"url": "https://gateway-production-c71a.up.railway.app/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 8 Sept 26 23
- Endpoint reachability: reachable → not serving MCP ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → fail ▼ security
- Authorization: Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the whole tool list to see what that exposes. security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- 7 Sept 26 0
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 12 Oct 2026 · Probed https://gateway-production-c71a.up.railway.app/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.up.railway.app | CN=YE2,O=Let's Encrypt,C=US | 27 Sept 2026 | 26 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 618edc56941aa1165ddb080bf9f799eb7c1 |
| SANs: *.up.railway.app, up.railway.app | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of gateway-production-c71a.up.railway.app. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| app. | present | 23684 | 8 | Verified |
| railway.app. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Inconclusive
We could not reach the endpoint well enough to judge its authorisation posture.
| Result | Inconclusive |
|---|---|
| HTTP status | 404 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://gateway-production-c71a.up.railway.app/mcp | HTTP error | 404 | |
| http (plaintext) | http://gateway-production-c71a.up.railway.app/mcp | HTTPS enforced | 301 | https://gateway-production-c71a.up.railway.app/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
call_tool ~44
Validate and call one enabled curated tool.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | – |
| mode | string | – | – |
| service | string | yes | – |
| tool | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
find_capability ~26
Find enabled service tools for a plain-language question.
| Name | Type | Req | Description |
|---|---|---|---|
| question | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
holidays_count_business_days ~62
Weekdays between start and end inclusive that are not holidays in the calendar.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| calendar | string | yes | Required named calendar ID |
| end | string | yes | – |
| snapshot_id | – | – | – |
| start | string | yes | – |
No output schema declared.
No examples provided.
holidays_get_holidays ~87
The public holidays of one calendar for one year, with observed dates. A year the source does not cover returns no holidays rather than a guess.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| calendar | string | yes | Required named calendar ID, for example GB-EAW-BANK |
| fields | – | – | – |
| limit | – | – | – |
| snapshot_id | – | – | – |
| year | integer | yes | – |
No output schema declared.
No examples provided.
holidays_list_calendars ~52
Every calendar this service names, with its authority and whether data is available. Use calendar_id from here as calendar in get_holidays and count_business_days.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | – | – | – |
| limit | – | – | – |
No output schema declared.
No examples provided.
inspect_tool ~35
Inspect one enabled curated tool.
| Name | Type | Req | Description |
|---|---|---|---|
| mode | string | – | – |
| service | string | yes | – |
| tool | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
laws_get_law ~46
One law by the id search_laws returned; law is null when absent.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| law_id | string | yes | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
laws_list_law_types ~44
The law types in the snapshot, as search_laws expects them in type.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| limit | – | – | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
laws_search_laws ~111
Federal Acts and regulations whose title contains the query. type is act or regulation (see list_law_types); since keeps laws whose consolidation date (current_to_date) or last amendment is on or after that date. Each hit links the official XML text.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| cursor | – | – | – |
| fields | – | – | – |
| limit | integer | – | – |
| query | string | – | – |
| since | – | – | – |
| snapshot_id | – | – | – |
| type | – | – | – |
No output schema declared.
No examples provided.
opendata_get_dataset ~50
One dataset's full metadata by the id search_datasets returned; dataset is null when absent.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| dataset_id | string | yes | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
opendata_list_organizations ~44
Publisher names in the snapshot, as search_datasets expects them in organization.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| limit | – | – | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
opendata_search_datasets ~130
Find open.canada.ca datasets by words in the title, keywords, or description. Title matches rank first. description is cut to about 300 characters here; get_dataset returns it whole. organization is an exact publisher name from list_organizations; jurisdiction is the source's own word, e.g. Federal or Municipal.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| cursor | – | – | – |
| fields | – | – | – |
| format | – | – | – |
| jurisdiction | – | – | – |
| limit | integer | – | – |
| organization | – | – | – |
| query | string | – | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
overview ~20
Summarize enabled curated services, coverage, and tool names.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
public-evidence_get_document ~66
Get one document from an immutable snapshot. Citation locators are source-provided, position-based h2/h3 ID fragments and are valid only within the snapshot that produced them.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| document_id | string | yes | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
public-evidence_get_document_changes ~86
Compare a document with its prior snapshot. Citation locators are source-provided, position-based h2/h3 ID fragments and are valid only within the snapshot that produced them. An upstream heading insertion can shift later locators and make one source edit appear as many changes.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| document_id | string | yes | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
public-evidence_list_evidence_sources ~64
List approved source pages and their citation rule. Citation locators are source-provided, position-based h2/h3 ID fragments and are valid only within the snapshot that produced them.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | – | – | – |
| limit | – | – | – |
| topic | – | – | – |
No output schema declared.
No examples provided.
public-evidence_search_passages ~105
Search passages of one approved document in an immutable snapshot. document_id is a code from list_evidence_sources. Citation locators are source-provided, position-based h2/h3 ID fragments and are valid only within the snapshot that produced them.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| cursor | – | – | – |
| document_id | string | yes | – |
| fields | – | – | – |
| limit | integer | – | – |
| query | string | – | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
recalls_get_recall ~74
One recall by the id search_recalls returned, with the source's advice text; recall is null when absent.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| country | string | – | Only CA is supported |
| recall_id | string | yes | – |
| snapshot_id | – | – | – |
| subdivision | – | – | Not supported by this source |
No output schema declared.
No examples provided.
recalls_list_categories ~63
Recall categories present in the snapshot, as search_recalls expects them in category.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| country | string | – | Only CA is supported |
| limit | – | – | – |
| snapshot_id | – | – | – |
| subdivision | – | – | Not supported by this source |
No output schema declared.
No examples provided.
recalls_search_recalls ~138
Health Canada recalls and safety alerts matching words in the title, product, or hazard. Active recalls only unless active_only is false. category values come from list_categories. Hits omit what_you_should_do unless fields names it; get_recall always includes it.
| Name | Type | Req | Description |
|---|---|---|---|
| active_only | boolean | – | – |
| as_of | – | – | – |
| category | – | – | – |
| country | string | – | Only CA is supported |
| cursor | – | – | – |
| fields | – | – | – |
| limit | integer | – | – |
| query | string | – | – |
| snapshot_id | – | – | – |
| subdivision | – | – | Not supported by this source |
| updated_since | – | – | – |
No output schema declared.
No examples provided.
search_services ~35
Find enabled curated services and their tools.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | – | – | – |
| limit | integer | – | – |
| query | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
seneca_get_course ~85
Get one course from a snapshot; course is null when absent.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | Use the snapshot captured at or before this ISO-8601 time |
| course_code | string | yes | – |
| snapshot_id | – | – | Immutable snapshot id |
| source_code | – | – | Source code, such as seneca |
| term | – | – | Teaching-period code; not a curriculum semester |
No output schema declared.
No examples provided.
seneca_get_course_prerequisites ~140
Get raw prerequisite text captured from official subject outlines. Text is returned as published; eligibility rules are not parsed.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | Use the snapshot captured at or before this ISO-8601 time |
| course_code | string | yes | – |
| cursor | – | – | Cursor from next_cursor |
| fields | – | – | – |
| limit | integer | – | – |
| outline_term_code | – | – | Official subject-outline term code |
| school_code | – | – | School or campus code |
| snapshot_id | – | – | Immutable snapshot id |
| source_code | – | – | Source code, such as seneca |
| term | – | – | Teaching-period code; not a curriculum semester |
No output schema declared.
No examples provided.
seneca_get_program_courses ~123
List a program's curriculum courses. curriculum_semester is a position in the program, not a teaching term.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | Use the snapshot captured at or before this ISO-8601 time |
| curriculum_semester | – | – | – |
| cursor | – | – | Cursor from next_cursor |
| fields | – | – | – |
| limit | integer | – | – |
| program_code | string | yes | – |
| snapshot_id | – | – | Immutable snapshot id |
| source_code | – | – | Source code, such as seneca |
| term | – | – | Teaching-period code; not a curriculum semester |
No output schema declared.
No examples provided.
seneca_list_snapshots ~56
List immutable catalog snapshots for one source, current first.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | – | – | Cursor from next_cursor |
| fields | – | – | – |
| limit | integer | – | – |
| source_code | – | – | Source code, such as seneca |
No output schema declared.
No examples provided.
seneca_list_sources ~28
List the institutions available in this catalog.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | – | – | – |
| limit | – | – | – |
No output schema declared.
No examples provided.
seneca_search_courses ~104
Search course codes, names, and descriptions within one snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | Use the snapshot captured at or before this ISO-8601 time |
| cursor | – | – | Cursor from next_cursor |
| fields | – | – | – |
| limit | integer | – | – |
| query | string | yes | – |
| snapshot_id | – | – | Immutable snapshot id |
| source_code | – | – | Source code, such as seneca |
| term | – | – | Teaching-period code; not a curriculum semester |
No output schema declared.
No examples provided.
seneca_search_programs ~103
Search program codes or names within one catalog snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | Use the snapshot captured at or before this ISO-8601 time |
| cursor | – | – | Cursor from next_cursor |
| fields | – | – | – |
| limit | integer | – | – |
| query | string | – | – |
| snapshot_id | – | – | Immutable snapshot id |
| source_code | – | – | Source code, such as seneca |
| term | – | – | Teaching-period code; not a curriculum semester |
No output schema declared.
No examples provided.
status ~31
Report how fresh every enabled curated service is: when each source last succeeded, last failed, and whether it is stale.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
transit-toronto_get_alerts ~112
Current TTC service alerts (subway, streetcar, bus, elevators) from the last capture. route narrows to one route number or line, as listed by get_routes. The envelope says whether the capture is fresh or the TTC feed was unavailable.
| Name | Type | Req | Description |
|---|---|---|---|
| agency | string | – | Only ttc is supported |
| as_of | – | – | – |
| cursor | – | – | – |
| fields | – | – | – |
| limit | integer | – | – |
| route | – | – | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
transit-toronto_get_routes ~61
Routes that have at least one alert in the capture, as get_alerts expects them in route.
| Name | Type | Req | Description |
|---|---|---|---|
| agency | string | – | Only ttc is supported |
| as_of | – | – | – |
| limit | – | – | – |
| snapshot_id | – | – | – |
No output schema declared.
No examples provided.
transit-toronto_list_agencies ~33
The transit agencies covered. Only the TTC today.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | – | – | – |
| limit | – | – | – |
No output schema declared.
No examples provided.
weather-alerts_get_weather_alert ~86
One alert by the id search_weather_alerts returned; alert is null when absent.
| Name | Type | Req | Description |
|---|---|---|---|
| alert_id | string | yes | – |
| as_of | – | – | – |
| country | string | – | Only CA is supported |
| snapshot_id | – | – | – |
| subdivision | string | yes | One province or territory, e.g. CA-ON. Required: alerts are held per province. |
No output schema declared.
No examples provided.
weather-alerts_list_weather_alert_types ~85
The alert types (watch, warning, statement) present for one province in the snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | – | – | – |
| country | string | – | Only CA is supported |
| limit | – | – | – |
| snapshot_id | – | – | – |
| subdivision | string | yes | One province or territory, e.g. CA-ON. Required: alerts are held per province. |
No output schema declared.
No examples provided.
weather-alerts_search_weather_alerts ~146
Active ECCC weather alerts for one province or territory, newest first. alert_type is watch, warning, or statement. Alerts the source has marked ended are left out unless active_only is false.
| Name | Type | Req | Description |
|---|---|---|---|
| active_only | boolean | – | – |
| alert_type | – | – | – |
| as_of | – | – | – |
| country | string | – | Only CA is supported |
| cursor | – | – | – |
| fields | – | – | – |
| limit | integer | – | – |
| query | string | – | – |
| risk_colour | – | – | – |
| snapshot_id | – | – | – |
| subdivision | string | yes | One province or territory, e.g. CA-ON. Required: alerts are held per province. |
No output schema declared.
No examples provided.
What is the io.github.Davedat-110105/mcp-gateway server?
io.github.Davedat-110105/mcp-gateway is listed in the public MCP registry as io.github.Davedat-110105/mcp-gateway. Curated gateway to snapshot-versioned Canadian public data services with source provenance. This page covers its hosted endpoint (https://gateway-production-c71a.up.railway.app/mcp).
Is the io.github.Davedat-110105/mcp-gateway server safe to use?
io.github.Davedat-110105/mcp-gateway scores 23 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.Davedat-110105/mcp-gateway server expose?
io.github.Davedat-110105/mcp-gateway exposes 35 tools: overview, find_capability, search_services, inspect_tool, call_tool, and 30 more. Their descriptions and schemas cost roughly 2,575 tokens of context every time the server is loaded.
Does the io.github.Davedat-110105/mcp-gateway server require authentication?
Its publisher declares no required credentials for io.github.Davedat-110105/mcp-gateway. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.
Is the io.github.Davedat-110105/mcp-gateway server still maintained?
io.github.Davedat-110105/mcp-gateway is still listed as active in the MCP registry. We last reached this channel on 12 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.