PersonalKnowHow
REMOTE · PERSONALKNOWHOW-DEMO.KXTWRDZT6G.WORKERS.DEV · SCANNED SEP 20
Live public demo: query one person's learning and work history as a knowledge graph via MCP.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability69
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 953 tokens (~238/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management43
- Stability observed for 13 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the PersonalKnowHow MCP server?
PersonalKnowHow is a hosted endpoint at https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · personalknowhow-demo.kxtwrdzt6g.workers.dev
claude mcp add --transport http georgi-petkov-personalknowhow 'https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp'
{
"mcpServers": {
"georgi-petkov-personalknowhow": {
"url": "https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp"
}
}
} {
"servers": {
"georgi-petkov-personalknowhow": {
"type": "http",
"url": "https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp"
}
}
} [mcp_servers.georgi-petkov-personalknowhow] url = "https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"georgi-petkov-personalknowhow": {
"type": "remote",
"url": "https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp",
"enabled": true
}
}
} openclaw mcp add georgi-petkov-personalknowhow --url 'https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp' --transport streamable-http
mcp_servers:
georgi-petkov-personalknowhow:
url: "https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp" {
"McpServers": {
"georgi-petkov-personalknowhow": {
"Transport": "http",
"Url": "https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp"
}
}
} assistant mcp add georgi-petkov-personalknowhow -t streamable-http -u 'https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp'
{
"mcpServers": {
"georgi-petkov-personalknowhow": {
"type": "http",
"url": "https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 8 Sept 26 0
- Stability: unverified → 0.03 ▲ functional
- 7 Sept 26 59
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=kxtwrdzt6g.workers.dev | CN=YE2,O=Let's Encrypt,C=US | 26 Jul 2026 | 24 Oct 2026 | ECDSA 256 | ECDSA-SHA384 | 626e4c9cd869113bf826c75496937f5db57 |
| SANs: *.kxtwrdzt6g.workers.dev, kxtwrdzt6g.workers.dev | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of personalknowhow-demo.kxtwrdzt6g.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| workers.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp | Verified | 200 | |
| http (plaintext) | http://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
list_by_type List know-how by type ~107
Returns the COMPLETE, exact set of entries for one type, with no similarity ranking, no relevance cutoff, and no cap on count. Use this instead of query_knowhow whenever the question requires an exhaustive or countable answer ('list all my certifications', 'how many courses have I completed'). Deterministic ordering (sorted by label) -- repeated calls with the same type return the same list in the same order.
| Name | Type | Req | Description |
|---|---|---|---|
| type | string | yes | Exact entry type to list in full |
No output schema declared.
No examples provided.
query_knowhow Query know-how ~355
Search this person's real, grounded skills/experience graph for a topic using semantic search. Returns only entries with real evidence -- never guesses. Every entry here represents something actually done or completed (project, certification, position, course, or education) -- this public dataset never includes saved-but-not-worked jobs or applications. This is SEMANTIC search ranked by relevance and capped at 10 results -- it is NOT exhaustive. For 'list every X' or 'how many X' questions, use list_by_type instead -- it returns the complete, uncapped set with no similarity ranking involved. Clearing the similarity floor means 'closest available match', not 'confirmed match' -- read each result's actual label/description/type before citing it as evidence for the specific topic queried. Each result also carries source_url/captured_at/provider (the real evidence behind it, when available) and source_note (explaining why not, when the underlying source has no link) -- use these to answer a disputed claim with actual backing evidence rather than just the description text. Embeddings can rank a topically-adjacent-but-wrong entry above the floor (e.g. a course on a different cloud data-warehouse tool, or a different framework in the same category) for a term it isn't actually about; if a result isn't genuinely on topic, treat the query as unmatched rather than reporting it as a match. For 'what else is connected to this' or 'what shares a skill/provider with this specific entry' questions, call related_entries with a result's id instead of re-querying by topic.
| Name | Type | Req | Description |
|---|---|---|---|
| topic | string | yes | A skill, technology, or topic to check, e.g. 'django' or 'aws' |
No output schema declared.
No examples provided.
related_entries Find related entries ~258
Given an entry id (from a prior query_knowhow or list_by_type result), returns other entries that share at least one tag or the same content provider -- the only two relationships this corpus currently tracks (there is no 'led to' or 'used in' relationship here, only shared tag/provider). This is NOT a similarity or relevance judgment -- two entries sharing a broad tag (e.g. both tagged 'data-science') can be quite different in substance; read each related entry's own label/type before treating it as meaningful. Each group is capped at 15 entries, sorted by label, with the true total count shown separately so you know if results were truncated -- call list_by_type on that type if you need the full set. Useful for 'what else is connected to X' or 'what did they do that relates to this specific course/certification/endorsement' -- questions query_knowhow's independent similarity search can't reliably answer, since two entries can be genuinely related without their description text reading alike (e.g. a course title and an endorsement phrase for the same skill, worded completely differently).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | An entry id from a prior query_knowhow or list_by_type result |
No output schema declared.
No examples provided.
skill_evidence Find skill evidence ~233
Given an exact tag/skill (e.g. 'docker', 'gcp'), returns EVERY entry with that tag, uncapped, grouped by type with a real count per type. Unlike related_entries (capped at 15, requires a starting entry id) or query_knowhow (semantic, ranked, may over- or under-include), this is an EXACT tag match against every entry -- the right tool for 'how many X have I completed/done' or 'do I have any real evidence for X at all'. Tags are exact strings from a prior list_by_type/related_entries/query_knowhow result's tags array -- this is NOT semantic search; a tag never assigned during ingest returns found:false, try query_knowhow instead. Each type's entries sort by captured_at ascending (oldest first); entries with no captured_at are moved to the end and counted in undated_count, never silently sorted as if their date were known.
| Name | Type | Req | Description |
|---|---|---|---|
| tag | string | yes | An exact tag from a prior result's tags array, e.g. 'python', 'docker', 'gcp' |
No output schema declared.
No examples provided.
What is the PersonalKnowHow MCP server?
PersonalKnowHow is an MCP server listed in the public MCP registry as io.github.Georgi-Petkov/personalknowhow. Live public demo: query one person's learning and work history as a knowledge graph via MCP. This page covers its hosted endpoint (https://personalknowhow-demo.kxtwrdzt6g.workers.dev/mcp).
Is the PersonalKnowHow MCP server safe to use?
PersonalKnowHow scores 65 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the PersonalKnowHow MCP server expose?
PersonalKnowHow exposes 4 tools: query_knowhow, list_by_type, related_entries, skill_evidence. Their descriptions and schemas cost roughly 953 tokens of context every time the server is loaded.
Does the PersonalKnowHow MCP server require authentication?
No. We connected to PersonalKnowHow without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the PersonalKnowHow MCP server still maintained?
PersonalKnowHow is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.