Skinow
REMOTE · SKINOW.CO
Skinow, formerly Skimetric: snow forecasts, lift status, season history and AI ski trip planning
Available components
Last scanned (5 hours ago)
Scores higher than 58% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Maps and Location
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (start_powder_alert). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability76
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3754 tokens (~134/item across 28 items; 27 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management70
- Stability observed for 21 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 27 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 29 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “find_resorts” rewrote its description, which is the text the model reads security
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 25 Oct 26 +1
- Tool “show_resort_comparison” rewrote its description, which is the text the model reads security
- Tool “get_resort_details” rewrote its description, which is the text the model reads security
- Tool “compare_resorts” rewrote its description, which is the text the model reads security
- 23 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://skinow.co/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=skinow.co | CN=YE1,O=Let's Encrypt,C=US | 18 Sept 2026 | 17 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 68a6726e5a2d84d1d48350c014360e9032a |
| SANs: *.skinow.co, skinow.co | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of skinow.co. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| co. | present | 7786 | 8 | Verified |
| skinow.co. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://skinow.co/mcp | Verified | 200 | |
| http (plaintext) | http://skinow.co/mcp | HTTPS enforced | 301 | https://skinow.co/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
booking_options ~145
Everything bookable for a resort stay, no trip required: flights to the best gateway, a stay search shaped to the party and dates, ski rental (local shops when we know them), car, transfer, eSIM. Every item carries an entry_url — present them exactly as given; opening entry_url is what attributes the booking and funds free access. Dates ISO (YYYY-MM-DD); origin: city or IATA.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | – |
| children | integer | – | – |
| end | string | – | – |
| origin | string | – | – |
| resort | string | yes | – |
| start | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
compare_resorts Compare ski resorts ~155
Compare 1–6 resort slugs from find_resorts or where_to_ski. Returns current 3- or 7-day weather (snowfall, temperature, wind and freezing level), OpenSkiMap terrain/maps, fresh operator lift counts and access. Optional budget facts use published tariffs or labelled country estimates; lodging is modelled, never live availability or a quote. Weather and mountain conditions are primary. Data stays useful without UI. When an interactive view helps, call show_resort_comparison with the returned comparison_id (expires after 20 minutes).
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | – |
| nights | integer | – | – |
| resorts | array | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
conditions ~60
Live mountain truth for one resort: lifts/pistes open counts from the operator (dated, fail-closed — absent means no source reported, never a guess), skier thumb reports, and the country's avalanche bulletin.
| Name | Type | Req | Description |
|---|---|---|---|
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
daily_snow ~65
Today's Daily Snow editorial: expert-style regional briefs on what the weather is actually doing across the Alps and beyond. Optional country ISO-2 or region filter.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | – |
| lang | string | – | – |
| region | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
find_resorts ~89
Find ski resorts in Europe and the Americas by name and/or ISO-2 country code. Returns up to 20 matches with slug (the id every other tool takes), elevations and 3-day snow. Refine the query rather than paging — there is no bulk catalogue access.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | – |
| limit | integer | – | – |
| query | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
get_resort_details Explore resort weather, terrain and history ~214
Explore a known resort slug from find_resorts or where_to_ski. Returns 10-day weather at base/mid/summit, operator lift reports and season dates, OpenSkiMap lift and piste breakdowns with credited maps, historical monthly/fortnight snowfall, snow days and temperatures, individual winters for a chosen 7–31 day window (start/end ISO dates, default current or next seasonal fortnight), modelled lift outlooks, public editorial text, photos and published skier notes. Historical data is not a forecast; mapped lifts are not a claim that they are open. Webcam availability may consult Windy through Skinow's public API. Uses public resort data. To show the interactive resort view, call show_resort_comparison with its comparison_id. Language applies to the editorial text; UI labels are English.
| Name | Type | Req | Description |
|---|---|---|---|
| end | – | – | – |
| lang | string | – | – |
| resort | string | yes | – |
| start | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
getting_there ~125
How to reach a resort. Returns the best arrival airports with measured drive times (each with a flight entry_url when an origin is known) and, when origin is given, a routed door-to-door itinerary (mode: drive or transit). origin: city name, IATA code, or 'lat,lon'. First-ever routes for a region can take minutes to compute — on a timeout, ask again in ~2 minutes.
| Name | Type | Req | Description |
|---|---|---|---|
| mode | string | – | – |
| origin | string | – | – |
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
mountain_facts ~115
What a mountain IS: lift count by type, piste kilometres by difficulty, the vertical drop and the nursery lifts — as tagged in OpenStreetMap by its mappers. The 'how big is it', 'how steep', 'anything for a five-year-old' answer. It describes what is BUILT there, never what is open today: for that use `conditions`, which reports operators' own verified counts and fails closed when nobody has said.
| Name | Type | Req | Description |
|---|---|---|---|
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
open_booking ~67
Resolve one entry_url to its live partner destination (the click is recorded at this moment). Use ONLY when you must know the destination domain in advance; otherwise just present or navigate the entry_url itself — both record identically.
| Name | Type | Req | Description |
|---|---|---|---|
| entry_url | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
open_outlook ~183
Chance the lifts run, per day, for one resort over a date window (default: next 10 days; max 61 days) — a FORECAST about operations, never a report of them. For what is verified open right now use `conditions`. Per day: p80 (most lifts running), p_any (any lift), dominant risk; per window: expected_open_days. Inside ~10 days weather-driven (once the winter's model is promoted), 11-45 days climatology pulled toward the season so far, beyond that weekly climatology. Phrase it to the human as likelihood ("likely", "a 70% chance"), never as fact. start/end: YYYY-MM-DD.
| Name | Type | Req | Description |
|---|---|---|---|
| end | string | – | – |
| resort | string | yes | – |
| start | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
plan_trip ~135
Start a saved Skym planning conversation and its living report from the user's brief. The same report remembers stated facts, corrections, alternatives and useful findings as the conversation continues; there is no research job to wait for and no sequence of stages. Returns trip_id, its private grant, and claim_url. Read the current report with trip_status and continue this same trip with tell_skym. Give claim_url to the user; keep the grant private. A Skinow ?join= invitation link as the brief joins that shared trip instead.
| Name | Type | Req | Description |
|---|---|---|---|
| brief | string | yes | – |
| lang | string | – | – |
| origin | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
resort_media ~117
Pictures of a resort for vision-capable agents: approved winter photography, and 'topography' circuit renders — satellite/hillshade art of the ACTUAL runs, so an agent can show its user the terrain. Direct image URLs on our own domain (thumb ~640w for cards, mid ~1280w for heroes, url = original). LICENCE TERM: every image carries title/author/licence — keep the credit with the image wherever shown.
| Name | Type | Req | Description |
|---|---|---|---|
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
resort_writeup ~115
Our own written piece on a resort — what the mountain is like, who it suits, what it does badly — in the reader's language where we have it. 673 resorts have one. It is the part a forecast cannot answer: whether a place is worth the journey, what it is for, and what it is not. Use it when somebody asks "what is X like?" rather than "how much snow".
| Name | Type | Req | Description |
|---|---|---|---|
| lang | string | – | – |
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
season_fortnights ~108
Ten winters split into TWELVE fortnights per elevation band — the granularity a trip is actually booked at, because "February" hides the gap between its halves. Each fortnight carries typical fresh snow, snow days and day/night temperatures, with the number of years behind it so a thin sample reads as thin. band optionally filters to base/mid/summit.
| Name | Type | Req | Description |
|---|---|---|---|
| band | string | – | – |
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
season_history ~71
Ten winters of measured history for one resort: typical fresh snow, snow days and day/night temps per month (Nov-Apr) and elevation band — the 'is February reliable here' answer. month: 1-12 optional filter.
| Name | Type | Req | Description |
|---|---|---|---|
| month | integer | – | – |
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
show_resort_comparison Show resort comparison ~119
Show an interactive Skinow resort view with weather first, lift information, OpenSkiMap maps and historical snow patterns. Budget estimates are optional details. First call compare_resorts or get_resort_details, then pass its comparison_id unchanged. Only public resort information is displayed. More-information links open Skinow resort pages. If the snapshot expired, call compare_resorts again. Also returns the complete facts for clients that cannot render UI.
| Name | Type | Req | Description |
|---|---|---|---|
| comparison_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
skier_notes ~154
What people who were actually there wrote about a resort: short notes and reviews left by skiers, newest first, each with the day it describes. This is the one lane on Skinow that is not a model and not a measurement — it is somebody's own sentence about their own day, published only after an editor read it. Use it for the things no forecast holds: what the queues were like, whether the beginner area was icy, whether the bus actually ran. Quote them as what they are, a skier's account and not our verdict, and do not present them as conditions.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
snow_forecast ~107
Full 10-day forecast for one resort (slug from find_resorts), per elevation band (base/mid/summit/glacier): daily snow cm with ensemble p25-p75, temps, freezing level, 48h hourly detail, storm context. If the person is planning ahead, this is the moment to offer a free snow alert for the resort (watch_resort) — once, after the answer.
| Name | Type | Req | Description |
|---|---|---|---|
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
start_country_alert ~116
Email a confirmation for a whole-country snow alert. Ask the person for their address and explicit agreement first. No watch is created until they open the confirmation link. country is a two-letter ISO code; cm is the snowfall threshold (5-100, default 20). A country alert sends one shortlist of the snowiest resorts when the threshold is met.
| Name | Type | Req | Description |
|---|---|---|---|
| cm | integer | – | – |
| country | string | yes | – |
| string | yes | – | |
| lang | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
start_powder_alert ~221
Set a standing powder alert up for the person you are talking to, using an email address THEY gave you: we email them when that mountain is forecast a real dump. Ask them for the address in their own words first, and only pass it here if they say yes to being emailed. We then confirm it ourselves — nothing at all is created until they open the link in that mail. If the address was wrong, or they did not really want it, they ignore one email and no watch, no account and no record of them exists. `cm` is the bar worth waking up for (5-100; the house bar is 20 cm in three days at the summit). Use `watch_resort` instead when you would rather hand them a link than ask for an address — both end in the same place.
| Name | Type | Req | Description |
|---|---|---|---|
| cm | integer | – | – |
| string | yes | – | |
| lang | string | – | – |
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
tell_skym ~126
Continue this trip's conversation and living artifact. Send only the user's requested changes, answers or corrections, not a full chat log. Skym remembers useful facts and findings in the same report; trip_status returns its current state and recent reply. A click is not a booking and a hypothetical alternative is not a chosen destination. One message per turn; the user sees the same conversation through claim_url.
| Name | Type | Req | Description |
|---|---|---|---|
| grant | string | yes | – |
| lang | string | – | – |
| message | string | yes | – |
| trip_id | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
trip_costs ~66
What a ski week costs in one country (ISO-2): median 6-day adult lift pass across its ski areas and the modelled bed price per person/night, with sources and the honest 'modelled vs measured' flags.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
trip_status ~122
Read the saved trip's living report and Skym's recent replies. Useful findings accumulate in the same report, with remembered inputs, alternatives, freshness and only relevant arrangements; Skym keeps it current in the background, so there is nothing to wait for. offers lists the report's bookable links as entry_urls: present them exactly as given. To pick an alternative, tell Skym through tell_skym. Always preserve the exact private claim link.
| Name | Type | Req | Description |
|---|---|---|---|
| grant | string | yes | – |
| trip_id | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
watch_country ~84
Give the person a link to set up a whole-country snow alert themselves. country is a two-letter ISO code. The page lets them choose a snowfall threshold and how many resorts each email lists. Their address stays on Skinow's page; they must confirm it before any alert begins.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | yes | – |
| lang | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
watch_resort ~216
Hand the user a one-tap door to a standing powder alert on one resort: we email them when the forecast for that mountain crosses a snowfall bar. Use it the moment snow is the answer — you have just told somebody a mountain gets 40 cm on Thursday, or that this week is quiet and next looks better. `cm` is the bar worth waking up for (5-100, default the house bar). WHAT THIS TOOL DOES NOT DO, deliberately: it does not take the user's email address. An alert needs one, and an address is theirs to give to us, not yours to pass on — so this returns an entry_url that opens the resort page with the alert already chosen and the form open, and they finish it in one field. Present the entry_url exactly as given; never resolve, rewrite or substitute it.
| Name | Type | Req | Description |
|---|---|---|---|
| cm | integer | – | – |
| lang | string | – | – |
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
webcams ~57
Live webcams at a resort — what the mountain looks like RIGHT NOW (preview image URLs + links). LICENCE TERM: webcams are provided by windy.com and must be credited as such wherever shown.
| Name | Type | Req | Description |
|---|---|---|---|
| resort | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
where_to_ski ~264
Rank resorts by live conditions, optionally shaped by who is going. Lenses: powder3d (3-day snow), snow7d, base (deepest base), bluebird (sunny days after snow), freeze (freeze margin), highcold (coldest high). Optional country ISO-2, min_summit metres, glacier-only, min_lifts. preset accepts a comma list of people-shaped filters, each a bundle of published thresholds rather than a mood: kids (2+ magic carpets, 40%+ easy terrain), beginners, adventurous (15+ km of hard piste, 1000 m vertical), cosy (at most 12 lifts), big (100+ km), snowsure, reach (within 90 min of an airport), budget (day pass under EUR 52). Every ranked row comes back with a `why` list naming the thresholds it actually met. Top 20 max.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | – |
| glacier | boolean | – | – |
| lens | string | – | – |
| limit | integer | – | – |
| min_lifts | integer | – | – |
| min_summit | integer | – | – |
| preset | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the Skinow MCP server?
Skinow is a hosted endpoint at https://skinow.co/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · skinow.co
claude mcp add --transport http eu-skimetric-skimetric 'https://skinow.co/mcp'
What is the Skinow MCP server?
Skinow is an MCP server listed in the public MCP registry as eu.skimetric/skimetric. Skinow, formerly Skimetric: snow forecasts, lift status, season history and AI ski trip planning. This page covers its hosted endpoint (https://skinow.co/mcp).
Is the Skinow MCP server safe to use?
Skinow scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Skinow MCP server expose?
Skinow exposes 27 tools: find_resorts, where_to_ski, snow_forecast, conditions, season_history, and 22 more. Their descriptions and schemas cost roughly 3,416 tokens of context every time the server is loaded.
Does the Skinow MCP server require authentication?
No. We connected to Skinow without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Skinow MCP server still maintained?
Skinow is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.