Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Waitwhile MCP by usefulapi

REMOTE · WAITWHILE.USEFULAPI.IO

Read Waitwhile visits, bookings, customers, services and analytics; add, update and cancel visits.

63 Trust /100

Last scanned (1 hour ago)

Scores higher than 46% of remote servers

Reachable. Last reached 17 Oct 2026.

Category CRM and Sales

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security78
Transport & Reachability0
Schema Quality & AI Usability76
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 4119 tokens (~142/item across 29 items; 29 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
  • Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage92
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 77% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 29 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 30 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 17 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Oct 26 +3
    • The server rewrote its instructions, which are the text every model session reads security
    • The server now declares the “prompts” capability functional
    • First check of Schema quality: 100 functional
    • New prompt “getting_started” functional
    • Server version: 1.0.0 → 1.1.0 functional
  • 13 Oct 26 +1
    • Stability: unverified → 0.03 ▲ functional
  • 12 Oct 26 58

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 17 Oct 2026 · Probed https://waitwhile.usefulapi.io/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=usefulapi.io CN=WE1,O=Google Trust Services,C=US 13 Sept 2026 12 Dec 2026 ECDSA 256 ECDSA-SHA256 d9be3287b0fde9630e825ba1f79bff3f
SANs: usefulapi.io, *.usefulapi.io
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of waitwhile.usefulapi.io. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
io. present 57355 8 Verified
usefulapi.io. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On tool calls
HTTP status 302

WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://waitwhile.usefulapi.io/.well-known/oauth-protected-resource/mcp"

Bearer realm="OAuth", resource_metadata="https://waitwhile.usefulapi.io/.well-known/oauth-protected-resource/mcp"

Protected resource metadata

Document https://waitwhile.usefulapi.io/.well-known/oauth-protected-resource/mcp
Retrieved Yes
Resource https://waitwhile.usefulapi.io/mcp
Authorisation server https://waitwhile.usefulapi.io

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://waitwhile.usefulapi.io/mcp Redirected 302 https://usefulapi.io/waitwhile/
http (plaintext) http://waitwhile.usefulapi.io/mcp Inconclusive 302 http://waitwhile.usefulapi.io/mcp
MCP tools · 29 exposed · ~3,910 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
waitwhile_add_customer_note ~88

WRITE: add one staff note to a customer's record (optionally tied to a visit and location). Adds only; nothing is edited or sent to the customer. POST /customers/{customerId}/notes.

NameTypeReqDescription
contentstringyesThe note text.
customer_idstringyesCustomer id.
location_idstring––
visit_idstring––

No output schema declared.

No examples provided.

waitwhile_cancel_visit ~178

WRITE: cancel ONE visit (a waitlist entry or booking). Waitwhile sets its state to COMPLETE and adds the CANCELLED tag; the visit is kept, not deleted. By default the request asks Waitwhile to suppress the customer message; this may only stop the immediate cancellation notice, and scheduled reminders/follow-ups can still go out per the location's settings. With send_notifications=true Waitwhile may text/e-mail this ONE customer. POST /visits/{visitId}/cancel.

NameTypeReqDescription
send_notificationsboolean–Default false: the request asks Waitwhile not to send the immediate confirmation/status message. This may not stop everything: scheduled reminders and follow-ups can still go out according to the loc…
visit_idstringyesVisit id.

No output schema declared.

No examples provided.

waitwhile_create_visit ~355

WRITE: create ONE visit at a location. Without a date it adds the customer to the waitlist; with a local date-time (YYYY-MM-DDThh:mm) it creates a booking. Needs a location and at least a name, phone or e-mail. Not idempotent: calling it twice creates two visits. Visit notes are not supported here (the field is deprecated): use waitwhile_add_customer_note. By default the request asks Waitwhile to suppress the customer message; this may only stop the immediate confirmation, and scheduled reminders/follow-ups can still go out per the location's settings. With send_notifications=true Waitwhile may text/e-mail this ONE customer. POST /visits.

NameTypeReqDescription
datestring–Booking start in the location's local time, YYYY-MM-DDThh:mm. Omit to join the waitlist.
durationinteger–Booking duration in seconds.
emailstring–Customer e-mail.
first_namestring––
last_namestring––
location_idstringyesLocation id (see waitwhile_list_locations).
namestring–Customer name.
party_sizeinteger––
phonestring–Customer phone, E.164 (+16005551234).
resource_idsarray–Preferred resources (staff, rooms).
send_notificationsboolean–Default false: the request asks Waitwhile not to send the immediate confirmation/status message. This may not stop everything: scheduled reminders and follow-ups can still go out according to the loc…
service_idsarray–Services the customer wants.

No output schema declared.

No examples provided.

waitwhile_first_available_slots ~148

The first available booking slots of a location (optionally for a party size, services and resources) from a date. Use it to propose appointment times. GET /visits/first-available-slots.

NameTypeReqDescription
from_datestring–Local start, YYYY-MM-DDThh:mm.
location_idstringyesLocation id.
max_num_slotsinteger–Max number of slots to return.
party_sizeinteger––
resource_idsarray––
service_durationinteger–Service duration in seconds.
service_idsarray––
to_datestring–Local end, YYYY-MM-DDThh:mm.

No output schema declared.

No examples provided.

waitwhile_get_customer ~48

One customer by id: contact details, tags, per-location state and last visit. Contains personal data. GET /customers/{customerId}.

NameTypeReqDescription
customer_idstringyesCustomer id.

No output schema declared.

No examples provided.

waitwhile_get_data_field ~38

One data field by id. GET /data-fields/{dataFieldId}.

NameTypeReqDescription
data_field_idstringyesData field id.

No output schema declared.

No examples provided.

waitwhile_get_location ~48

One location by id or short name (the part of its public Waitwhile URL). GET /locations/{shortNameOrId}.

NameTypeReqDescription
locationstringyesLocation id or short name.

No output schema declared.

No examples provided.

waitwhile_get_location_status ~47

Live status of one location: open/closed, waiting and serving counts, estimated wait. GET /location-status/{locationId}.

NameTypeReqDescription
location_idstringyesLocation id.

No output schema declared.

No examples provided.

waitwhile_get_message ~36

One message by id. Contains personal data. GET /messages/{messageId}.

NameTypeReqDescription
message_idstringyesMessage id.

No output schema declared.

No examples provided.

waitwhile_get_resource ~32

One resource by id. GET /resources/{resourceId}.

NameTypeReqDescription
resource_idstringyesResource id.

No output schema declared.

No examples provided.

waitwhile_get_service ~32

One service by id. GET /services/{serviceId}.

NameTypeReqDescription
service_idstringyesService id.

No output schema declared.

No examples provided.

waitwhile_get_visit ~61

One visit (waitlist entry or booking) by id: customer, state, tags, services, resources, party size, position, estimated wait and all timestamps. GET /visits/{visitId}.

NameTypeReqDescription
visit_idstringyesVisit id.

No output schema declared.

No examples provided.

waitwhile_list_audit_entries ~231

The account's audit log: who changed what and when (visits, customers, locations, services, resources, users, messages). Filter by type, event, entity, location or date. GET /audit-entries.

NameTypeReqDescription
descboolean–Newest first.
entity_idstring–Id of the changed object.
eventstring–Audit event type.
from_datestring–ISO 8601 date or date-time (e.g. 2026-10-01 or 2026-10-01T00:00:00Z).
limitinteger–Results per page, 1-100 (default 20).
location_idstring––
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.
to_datestring–ISO 8601 date or date-time (e.g. 2026-10-01 or 2026-10-01T00:00:00Z).
typestring––

No output schema declared.

No examples provided.

waitwhile_list_booking_slots ~167

Booking slots of a location for a date range with the free spots per resource and service, so you can see when an appointment can be booked. Dates are local to the location, YYYY-MM-DDThh:mm. GET /visits/availability.

NameTypeReqDescription
from_datestring–Local start, YYYY-MM-DDThh:mm.
location_idstringyesLocation id.
resource_idsarray–Only slots for these resources.
service_durationinteger–Service duration in seconds, to size the slots.
service_idsarray–Only slots for these services.
show_min_spotsinteger–Only slots with at least this many free spots.
to_datestring–Local end, YYYY-MM-DDThh:mm.

No output schema declared.

No examples provided.

waitwhile_list_customer_notes ~48

The staff notes recorded on a customer (content, author, visit and location, timestamps). GET /customers/{customerId}/notes.

NameTypeReqDescription
customer_idstringyesCustomer id.

No output schema declared.

No examples provided.

waitwhile_list_customers ~214

List customers (name, phone, e-mail, tags, last visit per location, created/updated). Cursor-paged, 20 per page by default; filter by location, external id or created/updated date. Contains personal data. GET /customers.

NameTypeReqDescription
descboolean–Newest first.
external_idstring––
from_datestring–ISO 8601 date or date-time (e.g. 2026-10-01T00:00:00Z), or epoch milliseconds.
limitinteger–Results per page, 1-100 (default 20).
location_idstring–Only customers with visits at this location.
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.
to_datestring–ISO 8601 date or date-time (e.g. 2026-10-01T00:00:00Z), or epoch milliseconds.

No output schema declared.

No examples provided.

waitwhile_list_data_fields ~125

List the custom data fields (intake/booking form questions) with type, options and where they apply. Use the ids to read answers on visits. GET /data-fields.

NameTypeReqDescription
external_idstring––
limitinteger–Results per page, 1-100 (default 20).
location_idarray–Only items offered at these locations.
qstring–Prefix match on name or display name.
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.

No output schema declared.

No examples provided.

waitwhile_list_location_status ~85

Live status of every location: open/closed, number of people waiting and being served, current estimated wait time, and booking counters. GET /location-status.

NameTypeReqDescription
limitinteger–Results per page, 1-100 (default 20).
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.

No output schema declared.

No examples provided.

waitwhile_list_locations ~135

List the account's locations (businesses/sites): id, name, short name, address, time zone, opening hours and waitlist/booking settings. Use the ids to filter visits, services and resources. GET /locations.

NameTypeReqDescription
country_codestring–Two-letter country code.
descboolean–Newest first.
external_idstring–Only the location with this external id.
limitinteger–Results per page, 1-100 (default 20).
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.

No output schema declared.

No examples provided.

waitwhile_list_messages ~253

List the SMS/e-mail messages Waitwhile sent to and received from customers: channel, recipient, body, delivery state (PENDING, BLOCKED, FAILED, DELIVERED, UNCONFIRMED, RECEIVED) and error. Filter by location, visit, customer, state or date. Contains personal data. This only reads; it cannot send. GET /messages.

NameTypeReqDescription
customer_idstring––
descboolean–Newest first.
external_customer_idstring––
from_datestring–ISO 8601 date or date-time (e.g. 2026-10-01T00:00:00Z), or epoch milliseconds.
limitinteger–Results per page, 1-100 (default 20).
location_idstring––
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.
statestring––
to_datestring–ISO 8601 date or date-time (e.g. 2026-10-01T00:00:00Z), or epoch milliseconds.
visit_idstring––

No output schema declared.

No examples provided.

waitwhile_list_resources ~165

List resources — the people, rooms, tables or equipment that serve customers: name, locations, services, availability flag and category structure. GET /resources.

NameTypeReqDescription
emailstring–Only the resource with this e-mail.
external_idstring––
is_categoryboolean–Only resource categories (true) or only resources (false).
limitinteger–Results per page, 1-100 (default 20).
location_idarray–Only items offered at these locations.
parent_idstring–Only children of this category.
qstring–Prefix match on name or display name.
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.

No output schema declared.

No examples provided.

waitwhile_list_services ~147

List services (what customers book or queue for): name, duration, price, locations, resources and category structure. GET /services.

NameTypeReqDescription
external_idstring––
is_categoryboolean–Only service categories (true) or only services (false).
limitinteger–Results per page, 1-100 (default 20).
location_idarray–Only items offered at these locations.
parent_idstring–Only children of this category.
qstring–Prefix match on name or display name.
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.

No output schema declared.

No examples provided.

waitwhile_list_users ~130

List the staff users of the account: name, e-mail, roles, locations. Password data and tokens are never returned. GET /users.

NameTypeReqDescription
external_idstring––
limitinteger–Results per page, 1-100 (default 20).
location_idarray–Only users with access to these locations.
qstring–Prefix match on name or e-mail.
rolearray–Only users with these roles.
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.

No output schema declared.

No examples provided.

waitwhile_list_visits ~324

List visits: waitlist entries (people in line) and bookings (appointments), with customer, state (PENDING, DRAFT, BOOKED, WAITING, SERVING, COMPLETE), tags (e.g. NO-SHOW, CANCELLED, ARRIVED), services, resources, party size, position and timestamps. Filter by location, state, tag, customer, service, resource, booking date (local time) or created/updated date. Cursor-paged. Contains customer contact details. GET /visits.

NameTypeReqDescription
customer_idstring––
descboolean–Newest first.
external_customer_idstring––
from_booking_datestring–Bookings starting at or after this local date-time, YYYY-MM-DDThh:mm.
from_datestring–Visits created from this date-time (ISO 8601 or epoch ms).
limitinteger–Results per page, 1-100 (default 20).
location_idstring–Only visits at this location.
resource_idstring––
service_idstring––
start_afterstring–Cursor: pass the previous reply's next_start_after to get the next page.
statestring––
tagstring––
to_booking_datestring–Bookings starting at or before this local date-time, YYYY-MM-DDThh:mm.
to_datestring–Visits created up to this date-time (ISO 8601 or epoch ms).

No output schema declared.

No examples provided.

waitwhile_resources_availability ~82

Working hours/availability of a location's resources on a date (e.g. who is working today). GET /resources/availability.

NameTypeReqDescription
datestring–Date (yyyy-mm-dd) or ISO 8601 date-time; default today.
location_idstringyesLocation id.
resource_idsarray–Only these resources.

No output schema declared.

No examples provided.

waitwhile_search_customers ~136

Search customers by a prefix match on name, phone, e-mail or customer id; optionally narrowed by location, visit state or tag. Page-numbered. Contains personal data. GET /customers/search.

NameTypeReqDescription
limitinteger–Results per page, 1-100 (default 20).
location_idstring––
pageinteger–Page number, from 1 (default 1). Pass the previous reply's next_page.
qstringyesPrefix match on name, phone, e-mail or customer id.
statestring––
tagstring––

No output schema declared.

No examples provided.

waitwhile_search_visits ~157

Search visits by a prefix match on customer name, phone, e-mail or customer id, optionally filtered by location, state, tag and excluded tags. Page-numbered. Contains customer contact details. GET /visits/search.

NameTypeReqDescription
exclude_tagsarray–Leave out visits carrying any of these tags.
limitinteger–Results per page, 1-100 (default 20).
location_idstring––
pageinteger–Page number, from 1 (default 1). Pass the previous reply's next_page.
qstringyesPrefix match on name, phone, e-mail or customer id.
statestring––
tagstring––

No output schema declared.

No examples provided.

waitwhile_update_visit ~276

WRITE: change ONE visit — its state (e.g. WAITING to SERVING to COMPLETE, or BOOKED), add/remove tags (e.g. ARRIVED, CONFIRMED, NO-SHOW), booking date/duration or party size. Only the fields you pass change. By default the request asks Waitwhile to suppress the customer message; this may only stop the immediate status message, and scheduled reminders/follow-ups can still go out per the location's settings. With send_notifications=true Waitwhile may text/e-mail this ONE customer. Use waitwhile_cancel_visit to cancel. POST /visits/{visitId}.

NameTypeReqDescription
add_tagsarray–Tags to add.
datestring–New booking start, local time YYYY-MM-DDThh:mm.
durationinteger–New booking duration in seconds.
party_sizeinteger––
remove_tagsarray–Tags to remove.
send_notificationsboolean–Default false: the request asks Waitwhile not to send the immediate confirmation/status message. This may not stop everything: scheduled reminders and follow-ups can still go out according to the loc…
statestring–New state.
visit_idstringyesVisit id.

No output schema declared.

No examples provided.

waitwhile_visit_analytics ~124

Aggregated visit statistics for a period: visits, waitlisted, bookings, served, no-shows, cancellations, wait and serve duration quantiles, and breakdowns by location, resource, service, party size, user, day of week and hour of day. GET /analytics/visits (JSON).

NameTypeReqDescription
from_datestring–Period start (ISO 8601 or epoch ms).
location_idstring–Only this location (default: all).
to_datestring–Period end (ISO 8601 or epoch ms).

No output schema declared.

No examples provided.

Install

How do I install the Waitwhile MCP by usefulapi server?

Waitwhile MCP by usefulapi is a hosted endpoint at https://waitwhile.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · waitwhile.usefulapi.io

# add to Claude Code
claude mcp add --transport http io-usefulapi-waitwhile 'https://waitwhile.usefulapi.io/mcp'
Common questions

What is the Waitwhile MCP by usefulapi server?

Waitwhile MCP by usefulapi is listed in the public MCP registry as io.usefulapi/waitwhile. Read Waitwhile visits, bookings, customers, services and analytics; add, update and cancel visits. This page covers its hosted endpoint (https://waitwhile.usefulapi.io/mcp).

Is the Waitwhile MCP by usefulapi server safe to use?

Waitwhile MCP by usefulapi scores 63 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Waitwhile MCP by usefulapi server expose?

Waitwhile MCP by usefulapi exposes 29 tools: waitwhile_list_locations, waitwhile_get_location, waitwhile_list_location_status, waitwhile_get_location_status, waitwhile_list_visits, and 24 more. Their descriptions and schemas cost roughly 3,910 tokens of context every time the server is loaded.

Does the Waitwhile MCP by usefulapi server require authentication?

Yes. Waitwhile MCP by usefulapi asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the Waitwhile MCP by usefulapi server still maintained?

Waitwhile MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.