Desky
REMOTE · WWW.DESKY.LA
Find and book coworking spaces, meeting rooms and offices in Latin America from your AI assistant.
Available components
Last scanned (16 minutes ago)
Scores higher than 69% of remote servers
Reachable. Last reached 5 Nov 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability73
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1569 tokens (~261/item across 6 items; 5 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- 26 Oct 26 72
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://www.desky.la/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.desky.la | CN=YR1,O=Let's Encrypt,C=US | 3 Oct 2026 | 1 Jan 2027 | RSA 2048 | SHA256-RSA | 6f8bcd4466f1bab0d1c33a947671c8c0a7c |
| SANs: www.desky.la | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.desky.la. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| la. | present | 25164, 42973, 42973 | 7, 7, 7 | Verified |
| desky.la. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | same-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.desky.la/mcp | Verified | 200 | |
| http (plaintext) | http://www.desky.la/mcp | HTTPS enforced | 308 | https://www.desky.la/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_availability Check availability ~184
Returns the free dates of a space (and the free hours of that day, if it is sold by the hour). Hours are in 24h format and in the VENUE'S LOCAL TIME, never UTC: the IANA time zone is in the `timezone` field of the response. Reports availability as dates/hours, without occupancy levels. The final confirmation happens at checkout.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Date YYYY-MM-DD. If given, the response focuses on that day and includes the free hours when the space is sold by the hour. |
| people_count | integer | – | Number of people, to warn if there may not be enough room. |
| slug | string | – | Space slug. Alternative to `space_id`. |
| space_id | integer | – | Space id. |
| utm_source | string | – | MCP client that originates the request, for attribution. |
| Name | Type | Req | Description |
|---|---|---|---|
| available_dates | array | yes | – |
| available_hours | array | – | Free START times, HH:MM in the venue's local time (`timezone`). Only present if the space is sold by the hour and a date was requested. For TODAY it starts at the next hour, not at opening: past hour… |
| bookable_hours | array | – | Start times that can actually be booked for one hour, HH:MM in the venue's local time. Same condition as `available_hours`. Unlike it, never includes the closing time and drops hours that overlap an… |
| booking_url | string | – | Checkout URL with the requested date already filled in. Only present if that date is free. |
| requested_date | string | – | – |
| requested_date_available | boolean | – | – |
| slug | string|null | – | – |
| space_id | integer | yes | Space identifier, for `get_booking_link`. |
| space_name | string | yes | – |
| timezone | string|null | – | IANA time zone of the venue. `available_hours` is in THIS zone, not UTC. |
| total_available_dates | integer | yes | – |
No examples provided.
cowork_detail Space details ~243
Full listing of a space: description, coworking and venue, address, capacity, prices per hour/day/week/month, amenities, opening hours, rating and reviews. Accepts `space_id` or `slug` (`search_coworks` returns both). If you already know the date or the number of people, pass them: the booking link comes prefilled.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | – | Currency of the returned prices (default usd). |
| date | string | – | Date YYYY-MM-DD, to prefill the booking link. |
| ends_at | string | – | End time HH:MM. Requires `starts_at` and must be later. |
| slug | string | – | Space slug. Alternative to `space_id`. |
| space_id | integer | – | Space id. |
| spots | integer | – | Number of people, to prefill the booking link. |
| starts_at | string | – | Start time HH:MM. Hourly bookings only; requires `ends_at`. |
| utm_source | string | – | MCP client that originates the request, for attribution of the booking URL (e.g. 'claude', 'chatgpt'). Default 'mcp_unknown'. |
| Name | Type | Req | Description |
|---|---|---|---|
| address | string|null | – | – |
| amenities | array | – | – |
| booking_horizon_months | integer|null | – | – |
| booking_url | string | yes | – |
| capacity | integer|null | – | – |
| city | string|null | – | – |
| country | string|null | – | – |
| coworking_name | string|null | – | – |
| currency | string | – | Currency of all prices. |
| description | string|null | – | – |
| id | integer | yes | Space identifier. Pass it as `space_id` to `check_availability` or `get_booking_link`. |
| image_url | string|null | – | – |
| images | array | – | – |
| instant_booking | boolean | – | – |
| latitude | number|null | – | – |
| longitude | number|null | – | – |
| name | string | yes | – |
| opening_hours | array | – | – |
| prices | object | yes | List prices per unit, already converted to `currency`. |
| province | string|null | – | – |
| rating | number|null | – | – |
| review_count | integer|null | – | – |
| slug | string | yes | – |
| space_type | string | – | – |
| timezone | string|null | – | IANA time zone of the venue. |
No examples provided.
get_booking_link Get booking link ~235
Returns the booking link on desky.la for a space, with the date and number of people already filled in. It does not book or charge: the person sees the final price and confirms on the site. It is the final action of this server, and that is context for you: sharing the link is enough.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Date YYYY-MM-DD. |
| dates | array | – | Several dates YYYY-MM-DD. Takes precedence over `date`. |
| ends_at | string | – | End time HH:MM. Requires `starts_at` and must be later. |
| slug | string | – | Space slug. Alternative to `space_id`. |
| space_id | integer | – | Space id (from `search_coworks` or `cowork_detail`). |
| spots | integer | – | Number of people / seats. |
| starts_at | string | – | Start time HH:MM. Hourly bookings only; requires `ends_at`. |
| utm_source | string | – | MCP client that originates the request, for attribution (e.g. 'claude', 'chatgpt'). Default 'mcp_unknown'. |
| Name | Type | Req | Description |
|---|---|---|---|
| booking_url | string | yes | Checkout URL on desky.la. It does not book or charge. |
| slug | string | – | – |
| space_id | integer | – | – |
| space_name | string|null | – | – |
No examples provided.
quote_booking Quote a booking ~199
Quotes a specific booking and returns the final total and the checkout link. The Desky interface uses it when the person changes the date or the number of seats. The total comes from the same calculation as the site's checkout, so it is the final number and not an estimate. It does not book or charge.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | – | Currency of the total (default usd). |
| date | string | – | Date YYYY-MM-DD. |
| dates | array | – | Several dates YYYY-MM-DD. Takes precedence over `date`. |
| ends_at | string | – | End time HH:MM. Requires `starts_at`. |
| slug | string | – | Space slug. Alternative to `space_id`. |
| space_id | integer | – | Space id. |
| spots | integer | – | Number of people. |
| starts_at | string | – | Start time HH:MM. Hourly bookings only. |
| utm_source | string | – | MCP client that originates the request. |
| Name | Type | Req | Description |
|---|---|---|---|
| checkout_url | string | yes | Prefilled checkout URL. |
| currency | string | yes | – |
| is_instant | boolean | yes | Whether the booking is confirmed automatically for THOSE dates. It is not the space flag: with auto-accept rules it is decided day by day. |
| prices | object | yes | – |
| slug | string | yes | – |
| space_id | integer | yes | – |
| space_name | string|null | – | – |
No examples provided.
search_coworks Search workspaces ~498
Searches workspaces published on Desky by city, neighborhood, type, capacity and price range. For each one it returns its id, name, coworking, location, starting price with its unit (per day for desks and offices, per hour for rooms: see `price_from_period`), amenities and a ready-made booking URL. It does not filter by availability: use `check_availability` for that. Pass `capacity` if the person said how many people: it is used to filter AND to prefill the link with that number of seats. Prices are LIST prices per unit, never a total: the final price is calculated at checkout. That is context for you so you do not present them as a total; there is no need to point it out to the person in every reply.
| Name | Type | Req | Description |
|---|---|---|---|
| capacity | integer | – | Minimum number of people the space must fit. |
| city | string | – | City (e.g. 'Buenos Aires', 'CDMX'). Accepts free text. |
| currency | string | – | Currency of `price_min`/`price_max` and of the returned prices (default usd). Prices are converted and rounded the same way as on desky.la; the filter compares before rounding, so a result can fall u… |
| date | string | – | Tentative date YYYY-MM-DD. It does NOT filter by availability: it is used to prefill the booking link. To know if the space is free, use `check_availability`. |
| limit | integer | – | Number of results (default 10, maximum 20). |
| price_max | number | – | Maximum price, in the `currency` currency. |
| price_min | number | – | Minimum price, in the `currency` currency. |
| space_type | string | – | Space type. `day_pass` is a desk in a shared area; `private_office` a closed office; `meeting_room` a room booked by the hour. |
| utm_source | string | – | MCP client that originates the request, for attribution of the booking URLs (e.g. 'claude', 'chatgpt'). Default 'mcp_unknown'. |
| zone | string | – | Neighborhood within the city (e.g. 'Palermo'). If the neighborhood can be resolved, results are LIMITED to it; otherwise it is combined with `city` as free text and the results may be broader. |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | Number of spaces returned. |
| currency | string | yes | Currency of all prices. |
| note | string | – | What these prices are. |
| results | array | yes | – |
No examples provided.
How do I install the Desky MCP server?
Desky is a hosted endpoint at https://www.desky.la/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.desky.la
claude mcp add --transport http la-desky-mcp 'https://www.desky.la/mcp'
What is the Desky MCP server?
Desky is an MCP server listed in the public MCP registry as la.desky/mcp. Find and book coworking spaces, meeting rooms and offices in Latin America from your AI assistant. This page covers its hosted endpoint (https://www.desky.la/mcp).
Is the Desky MCP server safe to use?
Desky scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Desky MCP server expose?
Desky exposes 5 tools: check_availability, cowork_detail, get_booking_link, quote_booking, search_coworks. Their descriptions and schemas cost roughly 1,359 tokens of context every time the server is loaded.
Does the Desky MCP server require authentication?
No. We connected to Desky without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Desky MCP server still maintained?
Desky is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.