VenuNite Events
REMOTE · MCP.VENUNITE.COM · 2 COMPONENTS
Free US local event search. No signup or API key; 90-day lookahead. Paid commercial and bulk access.
Available components
Last scanned (25 minutes ago)
Scores higher than 93% of remote servers
Reachable. Last reached 6 Nov 2026.
Category Entertainment and Games
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability70
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2621 tokens (~655/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 94% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Checks we ran (13)
- TLS certificate
- Authorization
- HTTPS
- HSTS header
- DNSSEC
- Transport
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 6 Nov 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 5 Nov 26 0
- Stability: 0.97 → pass security
- 4 Nov 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- MCP protocol version: 2025-11-25 → 2026-07-28 functional
- 3 Nov 26 −1
- The server rewrote its instructions, which are the text every model session reads security
- Stability: pass → 0.93 functional
- 2 Nov 26 0
- The server rewrote its instructions, which are the text every model session reads security
- 1 Nov 26 0
- The server rewrote its instructions, which are the text every model session reads security
- 31 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- 30 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 6 Nov 2026 · Probed https://mcp.venunite.com/v1/mcp/
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.venunite.com | CN=YR2,O=Let's Encrypt,C=US | 12 Oct 2026 | 10 Jan 2027 | RSA 2048 | SHA256-RSA | 61a81185e13669ffde2a2e69dd3f9b67621 |
| SANs: mcp.venunite.com | ||||||
| CN=YR2,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | 4ebd24947e24d394802d84a52fd5b319 |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.venunite.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| com. | DS published | 19718 | 13 | Verified |
| venunite.com. | No DS | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.venunite.com/v1/mcp/ | Verified | 200 | |
| http (plaintext) | http://mcp.venunite.com/v1/mcp/ | HTTPS enforced | 308 | https://mcp.venunite.com/v1/mcp/ |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
create_calendar_draft Draft an interest calendar ~247
Prepare an editable, free calendar draft and a VenuNite preview link from interests, a fixed area, weekdays, time windows and exclusions. The tool performs no event search, geocoding, calendar save or subscription. The returned browser page provides the exact next-30-days preview and user-confirmed saving and calendar-app selection. Draft links contain preferences and the chosen location. Hosted calls record private request quota and telemetry; calendar apps control refresh timing.
| Name | Type | Req | Description |
|---|---|---|---|
| audience | string | – | Account hide-family preferences always apply when the user saves. |
| interests | array | yes | An event matches any one interest; conditions within an interest are combined. Keywords match event titles; jazz and trivia also match programming details. |
| location | object | – | An exact center explicitly chosen by the user. Never invent coordinates; omit if unknown. |
| name | string | yes | – |
| place | string | – | A city and state or ZIP, for example Boulder, CO or 80302. The user confirms the center in the browser. Omit if unknown. |
| radius_miles | number | – | Fixed subscription radius, 1–50 miles. Default is 10; tell the user the radius. |
| Name | Type | Req | Description |
|---|---|---|---|
| draft | object | – | – |
| error | string | – | – |
| message | string | – | – |
| preview_url | string | – | – |
No examples provided.
create_interest_calendar Create calendar subscription links ~262
Return working Google, Apple and Outlook subscription links and an exact live preview without VenuNite sign-in. Choose up to five interests and fixed 1–50-mile areas; generic MCP supports a different area per interest. This creates no stored account/calendar and does not subscribe a calendar app. Links contain their selected interests and areas; anyone with a link can read them. Changed settings produce a new link. Hosted calls consume request quota and record private telemetry.
| Name | Type | Req | Description |
|---|---|---|---|
| audience | string | – | Default hide excludes family events. Use preference to include them, or only for family-only events. Anonymous feeds have no account preference. |
| interests | array | yes | An event matches any one interest; conditions within an interest are combined. Keywords match event titles; jazz and trivia also match programming details. |
| location | object | – | An exact center explicitly chosen by the user. Never invent coordinates; omit if unknown. |
| name | string | yes | – |
| place | string | – | A city and state or ZIP, for example Boulder, CO or 80302. The user confirms the center in the browser. Omit if unknown. |
| radius_miles | number | – | Fixed subscription radius, 1–50 miles. Default is 10; tell the user the radius. |
| Name | Type | Req | Description |
|---|---|---|---|
| apple_url | string | – | – |
| draft | object | – | – |
| error | string | – | – |
| events | array | – | – |
| google_url | string | – | – |
| horizonDays | integer | – | – |
| message | string | – | – |
| outlook_url | string | – | – |
| preview_url | string | – | – |
| subscription_url | string | – | – |
| total | integer | – | – |
No examples provided.
create_ticket_handoff Create Ticket Handoff ~143
Create an attributed VenuNite ticket handoff for a specific event_id. Requires a live API key issued at https://venunite.com/developers/keys. Returns a preview-safe handoff_url; leaving for seller checkout requires the user to explicitly select Continue. This tool records a handoff but does not purchase, reserve, hold inventory, guarantee availability or final prices, or confirm a booking. Calls count against normal MCP tool-call limits; no search-result rows are charged. The handoff service also limits creation to 10 per minute per account.
| Name | Type | Req | Description |
|---|---|---|---|
| event_id | integer | yes | The stable VenuNite event_id returned by search_events. |
Structured output declared, but exposes no named fields.
No examples provided.
search_events Search Local Events ~1,818
Search US local events near a place and within a date window: concerts, comedy, theater, trivia, festivals, community and family events, including events at small venues. Combines semantic search over venue vibes, geographic radius filtering, date/cost/category filters, and audience tags. Returns ranked event facts, stable event_id values, canonical VenuNite event_url links when a stored slug exists, original source_url links for provenance, and applied filters. The legacy url field remains the original source. VenuNite event pages include ticket links when available. The tool cannot buy tickets, create or modify events, edit calendars, or message organizers. Calls record private quota and request telemetry. An uncached place_name is sent to the public Nominatim geocoder. Link health never removes an event. When every outside link an event stored is broken, or it stored none, source_url and url are null and ticket_link_status is unavailable or missing; event_url still opens its VenuNite page. Tag vocabulary is fixed (49 canonical tags across 6 facets: ambiance, social, time, age, venue_type, activity). See the `vibe_tags` field description. Safety-critical tags (queer-friendly, family-friendly, all-ages, 18-plus, 21-plus) are hard filters: results that don't satisfy them are excluded entirely, never just down-ranked. family-friendly, all-ages, 18-plus and 21-plus are judged on each event's own audience and age policy, with the venue's tag counting only when the event's classification doesn't contradict it; queer-friendly is a venue tag.
| Name | Type | Req | Description |
|---|---|---|---|
| categories | array | – | Event category(s). Map the user's intent: 'live music' → music, 'standup' → comedy, 'trivia night' → trivia-games, 'art opening' → arts-culture. 'anything to do' → omit (no category filter). |
| center_lat | number | – | Latitude (only if you already have precise coordinates — otherwise pass place_name). |
| center_lng | number | – | Longitude (paired with center_lat). |
| date_end | string | – | Exclusive ISO-8601 end of the search window, including the local UTC offset. Default: 14 days from date_start. The words now, today, tonight, tomorrow and this weekend are also accepted and resolved… |
| date_match | string | – | overlap includes events already running during the window, such as multi-day festivals or prior-night shows; events ending exactly at date_start are excluded. starts_within requires the event to star… |
| date_start | string | – | Inclusive ISO-8601 start of the search window, including the local UTC offset. Default: now. The words now, today, tonight, tomorrow and this weekend are also accepted and resolved in the caller's ti… |
| include_unknown_prices | boolean | – | Include events whose admission price cannot be determined. Default true preserves broad discovery; positive price bounds may then include unknown prices, which must be labeled unverified. false keeps… |
| limit | integer | – | Number of events to return. Default 20. Prefer small (5-10) when the user asked for a single recommendation. |
| local_only | boolean | – | Set true when the user's query implies 'in my immediate area' — 'what's on my block', 'nearby tonight', 'close by'. The server clamps the effective radius to a neighborhood-scale max based on local d… |
| max_cost | number | – | Upper bound on event cost in USD. 'cheap' ≈ 15, 'affordable' ≈ 30, 'under $X' → X. Events with no listed price stay in the results (most events list none), so present their price as unverified rather… |
| max_events_per_venue | integer | – | Per-venue diversity cap. Default 1 — each venue contributes at most one event, giving a diverse 'what's on' feed. Raise to 3-5 for 'what's on at <specific venue>' queries where the user expects multi… |
| min_cost | number | – | Lower bound on event cost. Rarely useful — only set when the user explicitly excluded free events. |
| place_name | string | – | Human-readable location if the user mentioned one: 'Westminster, CO' or 'Five Points Denver'. Prefer this over guessed lat/lng when you have a name; existing precise coordinates take precedence. Alwa… |
| query_text | string | – | Free-text vibe description extracted from the user's query. Keep it short — e.g. 'chill jazz' or 'loud rock club'. Omit when the user's request is purely geographic / tag-based (e.g. 'any comedy show… |
| radius_miles | number | – | Search radius in miles. OMIT this field to let the server pick a density-aware default: 5mi in dense metros (Chicago, NYC), 15mi suburban, 25mi rural. Only pass an explicit value when the user's phra… |
| sort | string | – | Ordering axis. Results are presented by calendar day in timezone; sort orders within each day. With query_text, the server selects the strongest event-text and venue-vibe matches under every sort, an… |
| state_hint | string | – | Two-letter state abbreviation to disambiguate place_name (e.g. place_name 'Frederick' + state_hint 'MD'). Unnecessary when place_name already contains the state. |
| timezone | string | – | IANA timezone (e.g. 'America/New_York') used for the calendar-day grouping of results. Default UTC — pass the user's local zone so 'today/tomorrow' day buckets match their clock. |
| vibe_tags | array | – | Canonical vibe vocabulary. Include tags the user explicitly or strongly implied. IMPORTANT: the tags `queer-friendly`, `family-friendly`, `all-ages`, `18-plus`, `21-plus` are HARD filters — only incl… |
| Name | Type | Req | Description |
|---|---|---|---|
| applied_filters | object | – | – |
| error | string | – | – |
| results | array | yes | – |
| validation_errors | array | – | – |
No examples provided.
How do I install the VenuNite Events MCP server?
VenuNite Events is a hosted endpoint at https://mcp.venunite.com/v1/mcp/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.venunite.com
claude mcp add --transport http isaacaskew-venunite-events 'https://mcp.venunite.com/v1/mcp/'
What is the VenuNite Events MCP server?
VenuNite Events is an MCP server listed in the public MCP registry as io.github.isaacaskew/venunite-events. Free US local event search. No signup or API key; 90-day lookahead. Paid commercial and bulk access. This page covers its hosted endpoint (https://mcp.venunite.com/v1/mcp/).
Is the VenuNite Events MCP server safe to use?
VenuNite Events scores 86 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the VenuNite Events MCP server expose?
VenuNite Events exposes 4 tools: search_events, create_ticket_handoff, create_calendar_draft, create_interest_calendar. Their descriptions and schemas cost roughly 2,470 tokens of context every time the server is loaded.
Does the VenuNite Events MCP server require authentication?
No. We connected to VenuNite Events without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the VenuNite Events MCP server still maintained?
VenuNite Events is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the VenuNite Events MCP server?
VerifyMCP ran 13 checks on VenuNite Events, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.