Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

mu.micro/mu

REMOTE · MICRO.MU

News, web search, mail, markets, weather, places, files, calendar, contacts. 67 tools, one endpoint.

Available components

0 this week 76 Trust /100

Last scanned (19 hours ago)

Scores higher than 66% of remote servers

Reachable. Last reached 4 Nov 2026.

Recent critical change

Authorization (20 Sept 2026). See the changelog before you install this server.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security57
Transport & Reachability100
Schema Quality & AI Usability78
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 12582 tokens (~74/item across 170 items; 170 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage97
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 91% of tool parameters carry a description.Partial
Tool Safety95
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 12 of 15 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "blog_create" implies "publish" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Partial
  • An AI judge read all 170 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities40
  • Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28. See how to fix → Fail
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 0
    • New tool “alerts_update”, which the server declares destructive security
    • New tool “alerts_list” functional
    • New tool “alerts_raise” functional
  • 22 Oct 26 +1
    • Judged manipulation: unverified → pass ▲ security
    • “groups_create” added an optional parameter “description” cosmetic
    • “groups_update” reworded the description of “action” cosmetic
    • “groups_update” reworded the description of “value” cosmetic
  • 20 Oct 26 +14
    • Stability: fail → pass ▲ security
  • 14 Oct 26 −14
    • Stability: pass → fail ▼ security
  • 13 Oct 26 0
    • Stability: fail → pass ▲ security
  • 10 Oct 26 0
    • Stability: pass → fail ▼ security
  • 7 Oct 26 −1
    • Judged manipulation: pass → unverified ▼ security
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Probed https://micro.mu/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=micro.mu CN=YR2,O=Let's Encrypt,C=US 16 Sept 2026 15 Dec 2026 RSA 2048 SHA256-RSA 558fed297b8fa8136674184dfe454deb606
SANs: micro.mu
CN=YR2,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA 4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of micro.mu. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
mu. present 46330, 46579 8, 8 Verified
micro.mu. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self'; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com; frame-ancestors 'self'
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://micro.mu/mcp Verified 200
http (plaintext) http://micro.mu/mcp HTTPS enforced 301 https://micro.mu/mcp
MCP tools · 170 exposed · ~12,582 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
alerts_list ~75

List your alerts or a group's alerts. Requires current group membership.

NameTypeReqDescription
groupstring–Group id; omit for your personal alerts
limitnumber–Default 20, maximum 100
offsetnumber––
statestring–open, acknowledged, resolved, dismissed; empty for all

No output schema declared.

No examples provided.

alerts_raise ~90

Record or update a condition under a stable key. No notification is sent. Group administrators may raise shared alerts.

NameTypeReqDescription
detailstring–What changed, why it matters and what to do
groupstring––
keystringyesStable condition key; repeated calls update one alert
titlestringyes–
urlstring–Optional local or https action link

No output schema declared.

No examples provided.

alerts_update ~64

Acknowledge, resolve or dismiss an alert. Group administrators may update shared alerts. Resolving a custom alert allows the next occurrence to reopen it.

NameTypeReqDescription
groupstring––
idstringyes–
statestringyesacknowledged, resolved or dismissed

No output schema declared.

No examples provided.

apps_build ~104

Queue a durable app build and immediately return its ID and status URL. Use BuildStatus to retrieve progress and the completed app. Reuse request_key on retries. Builds survive server restarts

NameTypeReqDescription
promptstringyesDescription of the app to build, e.g. 'an expense tracker', 'a packing checklist', 'a water intake counter'
request_keystring–Reuse this key when retrying the same request. Omit to deduplicate identical descriptions.

No output schema declared.

No examples provided.

apps_builds ~17

List your app build jobs and outcomes

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

apps_buildstatus ~38

Read your saved app build status by ID. Poll until complete or failed; the same ID survives restarts.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

apps_collection ~17

List your saved apps and their source references

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

apps_create ~263

Create an app — a small, self-contained HTML tool hosted here. Takes the HTML; apps_build writes it for you from a description Apps run in a sandbox. Use fetch('/api/v1/<service>/<method>') or mu.service(name, method, args); mu.api does not exist. Direct external fetch is blocked. Inspect real service schemas and data before coding; never invent fields, rankings or claim runtime verification from static checks.

NameTypeReqDescription
descriptionstring–What the app does. Defaults to the name
htmlstringyesThe app's HTML, inline CSS and JavaScript included, up to 256KB
iconstring–An SVG icon
namestringyesApp name, e.g. "Pomodoro Timer"
pricenumber–Credits charged per use, 0 for free, up to 1000
privateboolean–Keep this app private to its owner; use true for personal widgets
publicboolean–Publish only when explicitly requested by the owner. Personal apps are private by default.
slugstring–URL-friendly id, e.g. pomodoro-timer. Derived from the name if omitted
tagsstring–Comma-separated tags

No output schema declared.

No examples provided.

apps_edit ~220

Edit an app you own — its name, description, tags, icon, HTML or price. Fields left out keep their value Apps run in a sandbox. Use fetch('/api/v1/<service>/<method>') or mu.service(name, method, args); mu.api does not exist. Direct external fetch is blocked. Inspect real service schemas and data before coding; never invent fields, rankings or claim runtime verification from static checks.

NameTypeReqDescription
descriptionstring–New description. Left alone if omitted
htmlstring–New HTML, up to 256KB. Left alone if omitted
iconstring–New SVG icon. Left alone if omitted
namestring–New name. Left alone if omitted
pricenumber–Credits charged per use, 0 for free, up to 1000. Left alone if omitted
slugstringyesThe app's URL slug, e.g. pomodoro-timer
tagsstring–New comma-separated tags. Left alone if omitted

No output schema declared.

No examples provided.

apps_embed ~41

Show a saved micro app in the conversation. Embedding preserves access permissions and does not publish the app

NameTypeReqDescription
slugstringyesThe app's URL slug

No output schema declared.

No examples provided.

apps_fork ~58

Fork an app into your own account, to change independently of the original

NameTypeReqDescription
new_slugstring–Slug for the copy. Generated from the original if omitted
slugstringyesSlug of the app to fork

No output schema declared.

No examples provided.

apps_read ~45

Read an app or build status by slug, including source HTML for apps you own

NameTypeReqDescription
slugstringyesThe app's URL slug, e.g. pomodoro-timer

No output schema declared.

No examples provided.

apps_search ~49

Find your saved private micro apps by name, description or tag

NameTypeReqDescription
querystring–Search query — name, description or tag
tagstring–Filter to apps carrying this tag

No output schema declared.

No examples provided.

apps_test ~51

Test an app by checking its HTML and checking supported SDK calls; this is not browser execution, so an author finds out what is broken without opening it

NameTypeReqDescription
slugstringyesThe app's URL slug

No output schema declared.

No examples provided.

archive_list ~80

With a kind, the most recent entries of it. Without one, what kinds are archived and how much of each

NameTypeReqDescription
kindstring–One kind: news, post, video, market, social, reminder. Omit for a summary of what is here
limitnumber–Max entries (default 20, max 100)

No output schema declared.

No examples provided.

archive_search ~118

Search everything this instance has collected, across news, video, markets and posts at once. Use it when the question crosses a service, or when you do not know which service would hold the answer; news_search is narrower and better when you know it is news

NameTypeReqDescription
kindstring–Narrow to one kind: news, post, video, market, social, reminder. Omit to search everything
limitnumber–Max results (default 20, max 100)
querystringyesWhat to look for

No output schema declared.

No examples provided.

blog_create ~105

Publish a post to the caller's blog. For anything meant to be read later by other people — notes, write-ups, announcements. For a private note to yourself, prefer files or memory

NameTypeReqDescription
contentstringyesThe post body, at least 50 characters
privateboolean–True to keep it to yourself
tagsstring–Comma-separated tags
titlestring–Post title. One is generated from the body if omitted

No output schema declared.

No examples provided.

blog_delete ~107

Delete one of the caller's own blog posts, by id or title. Refuses posts written by anyone else, and refuses an ambiguous title rather than guessing. Irreversible, so confirm with the user first

NameTypeReqDescription
idstring–The post's id, as given by blog_list
titlestring–The post's title, or enough of it to be unambiguous. An ambiguous title is refused rather than guessed — deleting the wrong post is not recoverable

No output schema declared.

No examples provided.

blog_list ~35

Read recent blog posts — titles, snippets and ids

NameTypeReqDescription
limitnumber–Optional max number of posts (default all recent)

No output schema declared.

No examples provided.

blog_read ~86

Read one blog post in full, by id or by title. Use after blog_list has found a candidate and the summary is not enough

NameTypeReqDescription
idstring–The post's id, as given by blog_list
titlestring–The post's title, or enough of it to be unambiguous — use this when you have a name rather than an id

No output schema declared.

No examples provided.

blog_update ~92

Edit one of the caller's own posts. Fields left out keep their current value

NameTypeReqDescription
contentstring–New body, at least 50 characters. Left alone if omitted
idstringyesThe post's id, as given by blog_list
tagsstring–New comma-separated tags. Left alone if omitted
titlestring–New title. Left alone if omitted

No output schema declared.

No examples provided.

bookmarks_add ~82

Save an article, video, blog post or link privately. Re-saving preserves its note

NameTypeReqDescription
notestring–Optional private note
refstring–Public archive item id for an article, video or blog post
titlestring–Title for a link
urlstring–Link to save when no archive id is available

No output schema declared.

No examples provided.

bookmarks_annotate ~42

Set or clear a private note on one saved item

NameTypeReqDescription
idstringyes–
notestring–Private note, or empty to clear

No output schema declared.

No examples provided.

bookmarks_delete ~25

Remove one of your saved items

NameTypeReqDescription
idstringyesSaved item id

No output schema declared.

No examples provided.

bookmarks_get ~39

Read one saved item and its private note, with available archived text. Videos have descriptions, not transcripts

NameTypeReqDescription
idstringyesSaved item id

No output schema declared.

No examples provided.

bookmarks_list ~93

Find your saved reading by text or kind, newest first. Private notes are searched too

NameTypeReqDescription
kindstring–article, video, post or link; empty for all
limitnumber–Maximum items, default 20, at most 100
offsetnumber–Number of matching items to skip
querystring–Search your saved titles, links, excerpts and private notes

No output schema declared.

No examples provided.

browser_read ~110

Open a page in a real browser and read it after its JavaScript has run. Use it when web_fetch comes back empty or with only a nav bar, which is what a page that builds itself in the browser looks like to a plain fetch. web_fetch is free and is the right first try; this costs, because it runs a browser

NameTypeReqDescription
urlstringyesThe page to open
waitstring–Optional CSS selector to wait for before reading, for content that arrives late

No output schema declared.

No examples provided.

browser_shot ~100

Photograph a page and get back a URL for the picture. What it looks like, rather than what it says — a chart, a layout, a page whose content is an image. Ask for full to capture past the first screenful

NameTypeReqDescription
fullboolean–Capture the whole page rather than one screenful
urlstringyesThe page to photograph
waitstring–Optional CSS selector to wait for before the shot

No output schema declared.

No examples provided.

chat_messages ~31

Read the recent conversation in a discussion room

NameTypeReqDescription
roomstring–Room id, as returned by Rooms

No output schema declared.

No examples provided.

chat_rooms ~32

List discussion rooms that currently have activity

NameTypeReqDescription
limitnumber–How many rooms to return (default 20)

No output schema declared.

No examples provided.

chat_send ~53

Say something in a discussion room, as the caller. Use chat_rooms to find the room id

NameTypeReqDescription
messagestringyesWhat to say
roomstringyesRoom id, as returned by chat_rooms

No output schema declared.

No examples provided.

chat_source ~30

Read one stored message owned by the caller, by id

NameTypeReqDescription
idstringyesStored message id

No output schema declared.

No examples provided.

chat_sources ~31

List stored message ids owned by the caller

NameTypeReqDescription
limitnumber––
offsetnumber––

No output schema declared.

No examples provided.

contacts_add ~78

Save someone to the address book. Adding a name already there updates it rather than making a second card

NameTypeReqDescription
emailstring–Their email address
namestringyesThe person's name, e.g. "Sarah Chen"
notestring–Anything worth remembering about them
phonestring–Their phone number

No output schema declared.

No examples provided.

contacts_delete ~33

Remove someone from the address book

NameTypeReqDescription
idstringyesThe contact's id, from contacts_find or contacts_list

No output schema declared.

No examples provided.

contacts_find ~57

Look someone up in the address book by name, part of a name, or address. Use this before sending mail to a person named rather than addressed

NameTypeReqDescription
querystringyesA name, part of a name, or an address

No output schema declared.

No examples provided.

contacts_list ~17

List everyone in the caller's address book

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

docs_delete ~30

Delete one of your documents, by id

NameTypeReqDescription
idstringyesDocument id, from docs_list

No output schema declared.

No examples provided.

docs_list ~63

List your documents, most recently changed first, with an optional search over titles and bodies. Use this to find an id

NameTypeReqDescription
limitnumber–Maximum documents to return (default 50)
querystring–Optional text to match against titles and bodies

No output schema declared.

No examples provided.

docs_read ~53

Read one of your documents in full, by id or by exact title

NameTypeReqDescription
idstring–Document id, from docs_list
titlestring–Exact title, if you do not have the id

No output schema declared.

No examples provided.

docs_write ~115

Write a document — a title and a markdown body. Pass an id to replace one you already have. Private unless you set public. For something long enough to re-read; for a short thing to remember, use notes

NameTypeReqDescription
contentstringyesThe document's body, as markdown
idstring–Existing document id to replace. Omit to create a new one
publicboolean–Readable by anyone when true. Private by default
titlestringyesThe document's title

No output schema declared.

No examples provided.

events_create ~221

Schedule a reminder or event at a given time; optionally repeating, and optionally running a prompt through the agent when it fires

NameTypeReqDescription
advanceobject–Optional advance trigger: minutes before the event and recipient user or agent. Agent prepares a read-only report for delivery at when; actions that change records must use a normal scheduled prompt…
minutesnumber–How long it lasts in minutes (default 30)
notestring–Optional extra detail
promptstring–Optional instruction to run through the agent when it fires, e.g. "brief me on today's news". The answer is mailed to you
repeatstring–How often it recurs: hourly, daily, weekly or monthly. Omit for once
titlestringyesWhat to be reminded about, e.g. 'Call the dentist'
whenstringyesWhen to fire, RFC3339 with timezone offset, e.g. 2026-07-22T15:00:00+01:00

No output schema declared.

No examples provided.

events_delete ~31

Cancel an event by id

NameTypeReqDescription
idstringyesThe event's id, as given by events_list

No output schema declared.

No examples provided.

events_free ~160

Find when the caller has nothing booked — open slots of a given length, within working hours

NameTypeReqDescription
day_endnumber–Latest hour of the day to offer, 0-23 (default 18)
day_startnumber–Earliest hour of the day to offer, 0-23 (default 9)
fromstring–Start of the window to search, RFC3339, e.g. 2026-08-03T00:00:00+01:00. Defaults to now
minutesnumber–How long a slot you need, in minutes (default 30)
tostring–End of the window, RFC3339. Defaults to a week after from

No output schema declared.

No examples provided.

events_list ~49

List the caller's upcoming events and reminders, each with its id

NameTypeReqDescription
limitnumber–Maximum events, default 20, max 100
offsetnumber–Events to skip

No output schema declared.

No examples provided.

events_read ~23

Read one schedule owned by the caller

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

events_update ~172

Update one of your scheduled events without changing its id. Omitted fields stay unchanged; empty notes, prompts or recurrence clear them

NameTypeReqDescription
advanceobject–Advance trigger with minutes and recipient user or agent; zero minutes and empty recipient clears it. Agent preparation is read-only
idstringyesEvent id from events_list
minutesnumber–Duration in minutes, 1 to 10080
notestring–New note; empty clears it
promptstring–New standing instruction; empty clears it
repeatstring–hourly, daily, weekly, monthly; empty makes it one-off
titlestring–New title; omitted keeps the existing title
whenstring–New future time as RFC3339 with timezone offset

No output schema declared.

No examples provided.

files_delete ~25

Delete a file you own

NameTypeReqDescription
idstringyesThe file's id

No output schema declared.

No examples provided.

files_driveread ~39

Read the caller's connected Google Drive. Read-only; connect in Account first.

NameTypeReqDescription
idstringyesDrive file id from DriveSearch

No output schema declared.

No examples provided.

files_drivesearch ~72

Search the caller's connected Google Drive. Read-only; connect in Account first.

NameTypeReqDescription
limitnumber–Number of files, up to 20
pagestring–Next page token from a previous search
querystring–Text to find in the caller's connected Google Drive

No output schema declared.

No examples provided.

Install

How do I install the mu.micro/mu MCP server?

mu.micro/mu is a hosted endpoint at https://micro.mu/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · micro.mu

# add to Claude Code
claude mcp add --transport http mu-micro-mu 'https://micro.mu/mcp'
Common questions

What is the mu.micro/mu MCP server?

mu.micro/mu is an MCP server listed in the public MCP registry as mu.micro/mu. News, web search, mail, markets, weather, places, files, calendar, contacts. 67 tools, one endpoint. This page covers its hosted endpoint (https://micro.mu/mcp).

Is the mu.micro/mu MCP server safe to use?

mu.micro/mu scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the mu.micro/mu MCP server expose?

mu.micro/mu exposes 170 tools: alerts_list, alerts_raise, alerts_update, apps_build, apps_builds, and 165 more. Their descriptions and schemas cost roughly 12,582 tokens of context every time the server is loaded.

Does the mu.micro/mu MCP server require authentication?

No. We connected to mu.micro/mu without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the mu.micro/mu MCP server still maintained?

mu.micro/mu is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.