Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Tatuapé

REMOTE · WWW.TATUAPE.SAMPA.BR

Tatuapé — neighborhood directory: local places, events, menus, offers, and services.

−79 this week 0 Trust /100

Last scanned (3 days ago)

Scores higher than 0% of remote servers

Unreachable for 7 days in a row. Last reached 26 Oct 2026.

Category E-commerce

Dead

Every channel of this server has been unreachable for long enough to be marked dead. Its trust score is pinned to 0 and does not recover automatically: even once the server responds again it stays dead until it is manually reinstated.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security11
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
  • Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
  • Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified

Unverified: 5 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

What we tested

Checks we ran (2)

  • HTTPS
  • Transport

Checks we could not complete (9)

These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.

  • TLS certificate in Endpoint SecurityTLS not yet verified: we couldn't open a connection to check the certificate.
  • Authorization in Endpoint SecurityAuthorisation not yet verified: we couldn't confirm whether this endpoint requires it.
  • HSTS header in Endpoint SecurityHSTS not yet verified: we couldn't read the response headers to check for it.
  • DNSSEC in Endpoint SecurityDNSSEC not yet verified: we couldn't validate it against a resolver.
  • Schema quality in Schema Quality & AI Usability (scores 0 for this)Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.
  • Stability in Stability & Change Management (scores 0 for this)Stability not yet verified: not enough scan history yet (needs a 30-day window).
  • Tool coverage in Tool Coverage (scores 0 for this)Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
  • Tool safety in Tool Safety (scores 0 for this)Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
  • Capabilities in Capabilities (scores 0 for this)Capabilities not yet verified: we couldn't read the endpoint's capabilities.

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 −16

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 1 Nov 26 −16

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 31 Oct 26 −15

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 30 Oct 26 −16

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 29 Oct 26 −16

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 27 Oct 26 0
    • Endpoint reachability: reachable → unreachable ▼ security
    • DNSSEC: fail → unverified ▼ security
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • TLS certificate: pass → unverified ▼ security
    • HSTS header: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
    • Capabilities: fail → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
  • 25 Oct 26 +54
    • Injection markers: unverified → pass ▲ security
    • Stability: unverified → pass ▲ security
    • Transport: fail → pass ▲ security
    • Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 28 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
    • MCP protocol: unverified → fail ▼ functional
    • Endpoint reachability: not serving MCP → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
  • 22 Oct 26 −54
    • Endpoint reachability: reachable → not serving MCP ▼ security
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
    • Capabilities: fail → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • First check of Schema quality: unverified functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 2 Nov 2026 · Probed https://www.tatuape.sampa.br/mcp

TLS unreached
DNSSEC inconclusive

Validation of www.tatuape.sampa.br. — Inconclusive

Zone DS Keys Algorithms Outcome
www.tatuape.sampa.br. Error no A/AAAA/CNAME RRset answered for the name
Authentication Inconclusive

We could not reach the endpoint well enough to judge its authorisation posture.

Result Inconclusive

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://www.tatuape.sampa.br/mcp Unreachable
http (plaintext) http://www.tatuape.sampa.br/mcp HTTPS enforced
MCP tools · 28 exposed · ~3,330 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
create_booking ~239

Book an appointment slot at a venue (Wix Bookings). NOTHING IS BOOKED UNTIL THE CUSTOMER PAYS: this returns a checkout URL, and the booking stays off the venue's calendar until a human opens that URL and completes payment on the venue's own site. Tell the user they must open the link. Call get_availability immediately before this — the slot is re-validated server-side and a taken slot is rejected. The contact email is NOT verified at this step; the checkout is what confirms it.

NameTypeReqDescription
contactobjectyesWho the booking is for. All three are required by the venue to confirm or reschedule.
endDatestringyesSlot end as an ISO instant, exactly as returned by get_availability.
place_slugstringyesVenue place slug from search_places.
resourceIdstring–Optional staff/resource ID from the slot, when the user picked a specific professional.
serviceIdstringyesService ID from list_booking_services (called with the same place_slug).
startDatestringyesSlot start as an ISO instant, exactly as returned by get_availability.

No output schema declared.

No examples provided.

create_checkout ~57

Create a direct checkout URL for one or more store products (Wix Stores). The user clicks the URL to complete payment on the site — no login required on the AI agent side.

NameTypeReqDescription
itemsarrayyesProducts to add to cart.

No output schema declared.

No examples provided.

get_availability ~133

Get available time slots for a bookable service on a given date (Wix Bookings). Pass the serviceId from list_booking_services and a date in YYYY-MM-DD. Pass the same `place_slug` you used there — slot times are returned in the VENUE's timezone, which is not necessarily the directory's.

NameTypeReqDescription
datestringyesDate in YYYY-MM-DD format (e.g. "2026-06-25").
place_slugstring–Venue place slug — use the same one passed to list_booking_services.
serviceIdstringyesService ID from list_booking_services.

No output schema declared.

No examples provided.

get_event_tickets ~60

Get ticket types and prices for a specific event (Wix Events). Pass the event slug from list_events. Returns ticket names, prices, sale status, and how many are left.

NameTypeReqDescription
event_slugstringyesEvent slug from list_events.

No output schema declared.

No examples provided.

get_loyalty_info ~43

Get the loyalty/rewards program details for this site (Wix Loyalty). Returns program name, points currency name, and tier structure with required points per tier.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_place ~99

Get full details for a specific place by its URL slug, including opening hours, a precomputed `open_now` boolean, amenity `attributes` (slugs), a `delivery` array of curated delivery-app deep-links (ifood, rappi, uber-eats — each `{ platform, url }`), ratings, address, and neighborhood.

NameTypeReqDescription
slugstringyesURL slug of the place, e.g. "cafe-example".

No output schema declared.

No examples provided.

get_restaurant_menus ~92

Get the food menu for a specific restaurant on this site. Returns menus with their sections, dishes, descriptions, prices, and dietary labels (vegan, gluten-free, etc). Use search_places or list_categories first to find the restaurant's place_slug.

NameTypeReqDescription
place_slugstringyesThe slug of the restaurant, e.g. "bar-do-ze" (from search_places or a place URL).

No output schema declared.

No examples provided.

get_reviews ~49

Get published reviews for this site (Wix Reviews). Returns reviewer name, rating, title, and content.

NameTypeReqDescription
limitnumber–Max reviews to return (default 10, max 50).

No output schema declared.

No examples provided.

get_showtimes ~107

Get showtimes for a specific movie at cinemas in this neighborhood, for a given date. Returns each cinema with session times, format (e.g. "Laser", "3D"), and language (Dublado/Legendado). Requires movies_enabled on this site.

NameTypeReqDescription
datestring–Date in YYYY-MM-DD format. Defaults to today (BRT).
movie_slugstringyesMovie slug from list_movies (e.g. "o-corvo-1016084").

No output schema declared.

No examples provided.

get_site_info ~68

Returns basic information about this neighborhood directory: name, locale, domain, description, canonical URLs for key sections, plus the current LOCAL TIME and CURRENT WEATHER at the neighborhood (temperature, condition). Use this for any "what time is it there" or "what's the weather like" context.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_blog_posts ~78

List recent published blog posts for this site (Wix Blog). Returns title, excerpt, author, published date, reading time, categories, and the post URL.

NameTypeReqDescription
categorystring–Filter by category label. Case-insensitive substring match.
limitnumber–Max posts to return (default 10, max 50).

No output schema declared.

No examples provided.

list_booking_services ~209

List a venue's services — what it offers, with price and duration. Pass `place_slug` (from search_places) to list the services of a specific VENUE — a salon, clinic or studio listed in this directory; that is what you want in almost every case, and it is the only form whose serviceId works with create_booking. Omitting `place_slug` lists the directory site's own services instead, which most sites do not have. Returns name, description, price, duration in minutes, and `bookableViaMcp`. Services are listed for EVERY venue, including those with no online booking system — check `bookableViaMcp`: when it is false, `id` is null and you cannot book through create_booking, so point the user at `bookingUrl` or the venue's page instead.

NameTypeReqDescription
place_slugstring–Venue place slug from search_places. Strongly recommended — without it you get the directory's own services, not a venue's.

No output schema declared.

No examples provided.

list_categories ~38

Returns the full category taxonomy of this directory site: top-level groups with their subcategories, localized labels, schema.org types, and live place counts.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_events ~238

List upcoming events in this neighborhood with date, venue, price, and URL. Events within the next 7 days include a weatherForecast (condition + min/max temperature) for the event day — use it to tell users e.g. "the event is at X and it will be raining". Pass `filter` to narrow by time or price; `filter: "agora"` answers "what can I go to right now" and is resolved live on every call, which no cached page can do.

NameTypeReqDescription
filterstring–Narrow the list: "agora" = on stage at this exact moment (season runs and day-granular sources are excluded, because their stored window says nothing about whether a session is on right now); "hoje"/…
limitnumber–Max events to return (default 20, max 50).
upcoming_onlyboolean–Only return upcoming or in-progress events (default true).

No output schema declared.

No examples provided.

list_faqs ~48

Get all FAQ questions and answers for this site (Wix FAQ). Grouped by category. Use this to answer common questions about the site — opening hours, parking, policies, etc.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_forms ~48

List available contact/signup forms on this site (Wix Forms). Returns form name, ID, and field definitions (label, type, required). Use before submit_form to discover which fields to fill.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_guides ~62

List curated editorial guides ("best of" lists) published by this site — ranked places with editorial notes. The best source for "best X in this neighborhood" questions.

NameTypeReqDescription
limitnumber–Max guides to return (default 20, max 50).

No output schema declared.

No examples provided.

list_movies ~139

List movies available in this neighborhood (only on sites with movies_enabled). Returns now-showing films (with actual showtimes at local cinemas), coming-soon films, and streaming availability. Includes title, genres, TMDB rating, runtime, and detail URL.

NameTypeReqDescription
limitnumber–Max movies to return (default 20, max 100).
statusstring–Filter by status. "now_showing" = films with upcoming showtimes at local cinemas. "coming_soon" = unreleased or not yet playing locally. "streaming" = available on streaming services in Brazil. "all"…

No output schema declared.

No examples provided.

list_offers ~99

List active promotions and deals available in this neighborhood directory. Returns discount label, promo code (if any), CTA link, validity window, and which business/place it belongs to. FLASH offers have a countdown deadline.

NameTypeReqDescription
kindstring–Filter by offer kind. FLASH = time-limited flash sale with countdown. Omit to return all active offers.
limitnumber–Max offers to return (default 20, max 60).

No output schema declared.

No examples provided.

list_pricing_plans ~145

List membership or subscription plans (Wix Pricing Plans). Pass `place_slug` (from search_places) to list the plans of a specific VENUE — a gym, studio or clinic listed in this directory (e.g. its monthly/annual membership); that is what you want in almost every case. Omitting `place_slug` lists the directory site's own plans instead, which most sites do not have. Returns plan name, description, price, billing cycle, perks, and a direct checkout URL.

NameTypeReqDescription
place_slugstring–Venue place slug from search_places. Strongly recommended — without it you get the directory's own plans, not a venue's.

No output schema declared.

No examples provided.

list_products ~64

List products in this site's store (Wix Stores). Returns name, price, stock status, and product type.

NameTypeReqDescription
limitnumber–Max products to return (default 20, max 100).
qstring–Optional search term matched against product name.

No output schema declared.

No examples provided.

list_profiles ~69

List solo service-provider profiles on this site — businesses without a fixed physical location (e.g. dog walkers, tutors, personal trainers). Returns name, profile URL, category, and any available metadata (age, height, etc.).

NameTypeReqDescription
limitnumber–Max profiles to return (default 50).

No output schema declared.

No examples provided.

request_reservation ~230

Request a table at a restaurant. THE RESTAURANT IS NOT NOTIFIED YET: the request is held and a confirmation email is sent to the address you provide, and only when that person clicks the link does the restaurant receive it. Tell the user to check their inbox — the link expires in 24 hours. Use a real address belonging to the person you are acting for; the confirmation link is deliberately not returned to you. This is a request, not a confirmed booking: the restaurant confirms out of band.

NameTypeReqDescription
emailstringyesThe guest's own email — the confirmation link is sent here.
messagestring–Optional note (occasion, dietary needs, seating preference).
namestringyesName the table is under.
partySizenumberyesNumber of people (1–30).
phonestring–Optional phone number for the restaurant to reach the guest.
place_slugstringyesRestaurant place slug from search_places.
requestedAtstringyesDesired date and time as an ISO instant. Must be in the future.

No output schema declared.

No examples provided.

reserve_event_tickets ~139

Hold tickets for an event sold through this site (Wix Events) and return a checkout URL. THE HOLD IS TEMPORARY AND NOTHING IS PAID: the tickets are not the user's until a human opens the URL and completes checkout, and the hold expires on its own if they don't. Max 10 tickets and 10 ticket types per reservation. Only works for events this site sells directly — for events sold elsewhere (Sympla, Ingresse, Sesc), use the event's own ticketUrl instead.

NameTypeReqDescription
event_slugstringyesEvent slug from list_events.
ticketsarrayyesTicket types and quantities to hold.

No output schema declared.

No examples provided.

rsvp_event ~148

RSVP to a free event on this site (Wix Events). NOBODY IS ON THE GUEST LIST YET: a confirmation email goes to the address you provide, and the RSVP is only submitted when that person clicks the link (expires in 24 hours). Tell the user to check their inbox. Use a real address belonging to the person you are acting for — the confirmation link is deliberately not returned to you.

NameTypeReqDescription
emailstringyesThe guest's own email — the confirmation link is sent here.
event_slugstringyesEvent slug from list_events.
firstNamestringyesGuest first name.
lastNamestringyesGuest last name.

No output schema declared.

No examples provided.

search_dishes ~139

Find which restaurants serve a dish in this neighborhood. Searches every menu item across all restaurants on the site, grouped by dish — e.g. query "feijoada" returns each restaurant serving it with price, description, dietary labels, and the place URL. Omit the query to list the most-served dishes. Use this for any "where can I eat X" question.

NameTypeReqDescription
limitnumber–Max dishes to return (default 20, max 50).
querystring–Dish name or part of it, e.g. "feijoada", "pizza margherita". Omit to list top dishes.

No output schema declared.

No examples provided.

search_places ~395

Search for places (restaurants, cafes, shops, etc.) in this neighborhood. The `q` match is accent-insensitive and typo-tolerant ("acai" finds "Açaí", "restaurnt" finds "Restaurante"), ranked by relevance. Compose filters for multi-condition queries: `category`, `neighborhood`, `open_now` (true = open at this exact moment), and `attributes` (amenity slugs, ALL must match). Each result includes a precomputed `open_now` boolean, an `attributes` array (amenity slugs), a `delivery` array of curated delivery-app deep-links (ifood, rappi, 99food, uber-eats — each `{ platform, url }`), rating, and structured `hours` (Google Maps periods: day 0=Sun–6=Sat, time "HHMM"). Common amenity slugs: wifi, outdoor-seating, wheelchair, dog-friendly, delivery, takeaway, reservations, live-music, vegan, gluten-free (availability varies per place).

NameTypeReqDescription
attributesarray–Amenity slugs a place must ALL have, e.g. ["wifi","outdoor-seating"]. Common slugs: wifi, outdoor-seating, wheelchair, dog-friendly, delivery, takeaway, reservations, live-music, vegan, gluten-free.
categorystring–Filter by category label (e.g. "Café"). Case-insensitive substring match.
limitnumber–Max results to return (default 20, max 100).
neighborhoodstring–Filter by neighborhood name. Case-insensitive substring match.
open_nowboolean–When true, return only places open at the current local time (computed server-side from their opening hours).
qstring–Free-text term matched against place name and address — accent-insensitive and typo-tolerant.

No output schema declared.

No examples provided.

submit_form ~95

Submit a form on behalf of the user (Wix Forms). Call list_forms first to get the formId and field keys. Returns a submissionId on success.

NameTypeReqDescription
fieldsobjectyesKey-value pairs matching the field keys from list_forms. Example: { "field_1": "João", "field_2": "joao@email.com" }
formIdstringyesForm ID from list_forms.

No output schema declared.

No examples provided.

Install

How do I install the Tatuapé MCP server?

Tatuapé is a hosted endpoint at https://www.tatuape.sampa.br/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · www.tatuape.sampa.br

# add to Claude Code
claude mcp add --transport http junoventures-tatuape-sampa-br 'https://www.tatuape.sampa.br/mcp'
Common questions

What is the Tatuapé MCP server?

Tatuapé is an MCP server listed in the public MCP registry as io.github.junoventures/tatuape-sampa-br. Tatuapé, neighborhood directory: local places, events, menus, offers, and services. This page covers its hosted endpoint (https://www.tatuape.sampa.br/mcp).

Is the Tatuapé MCP server safe to use?

Tatuapé scores 0 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Tatuapé MCP server expose?

Tatuapé exposes 28 tools: get_site_info, list_categories, search_places, get_place, list_events, and 23 more. Their descriptions and schemas cost roughly 3,330 tokens of context every time the server is loaded.

Does the Tatuapé MCP server require authentication?

Its publisher declares no required credentials for Tatuapé. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.

Is the Tatuapé MCP server still maintained?

Tatuapé has been unreachable for long enough that we treat it as dead, and its score is pinned to zero. We last reached this channel on 26 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the Tatuapé MCP server?

VerifyMCP ran 2 checks on Tatuapé, covering HTTPS and Transport. 9 items could not be completed, a gap on our side rather than a finding about Tatuapé: TLS certificate, Authorization, HSTS header, DNSSEC and 5 more. 5 categories score 0 for that reason, because we only credit what we can confirm. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.