Open data: clinical trials, EU tenders, companies, fuel prices
REMOTE · API.GREGSWARM.DUCKDNS.ORG
Official open data as JSON: clinical trials, EU tenders, papers, apps, French firms, fuel, domains.
Available components
Last scanned (10 hours ago)
Scores higher than 57% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Health and Science
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability53
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1794 tokens (~299/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management11
- Stability check failed: schema churn in the 9 days we've observed: 1 tool removals, 0 breaking changes, 0 auth/transport breaks, 1 additions. See how to fix → Fail
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 5 to 8.
- 3 Nov 26 0
- Tool “app-store-search” rewrote its description, which is the text the model reads security
- Tool “clinical-trials-monitor” rewrote its description, which is the text the model reads security
- Tool “eu-fuel-monitor” rewrote its description, which is the text the model reads security
- Tool “fr-company-search” rewrote its description, which is the text the model reads security
- Tool “scholarly-search” rewrote its description, which is the text the model reads security
- Tool “ted-tender-monitor” rewrote its description, which is the text the model reads security
- 2 Nov 26 −2
- Stability: 0.17 → fail ▼ security
- A breaking change shipped without a version bump: still 1.0.0 ▼ security
- Tool “domain-availability” was removed ▼ security
- Schema quality: 2027 → 1812 ▲ functional
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 0
- Schema quality: 1578 → 2027 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- Tool “app-store-search” now declares an output schema ▲ functional
- Tool “clinical-trials-monitor” now declares an output schema ▲ functional
- Tool “domain-availability” now declares an output schema ▲ functional
- Tool “eu-fuel-monitor” now declares an output schema ▲ functional
- Tool “scholarly-search” now declares an output schema ▲ functional
- Tool “ted-tender-monitor” now declares an output schema ▲ functional
- First check of Tool coverage: 100 functional
- New tool “fr-company-search” functional
- 27 Oct 26 70
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://api.gregswarm.duckdns.org/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.gregswarm.duckdns.org | CN=YE1,O=Let's Encrypt,C=US | 27 Oct 2026 | 25 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 62436c8bb241527b6ba0f1e011bf4721841 |
| SANs: api.gregswarm.duckdns.org | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.gregswarm.duckdns.org. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| org. | present | 725, 26974 | 8, 8 | Verified |
| duckdns.org. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.gregswarm.duckdns.org/mcp | Verified | 200 | |
| http (plaintext) | http://api.gregswarm.duckdns.org/mcp | HTTPS enforced |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
app-store-search App Store App Search (iTunes API): prices, ratings, versions by country ~252
Search Apple's App Store by keyword in any storefront country and get each app's developer, price, rating, version, release date, genre, size, minimum OS and store URL. Read from itunes.apple.com when called. Each result: app_id, name, developer, developer_id, bundle_id, price, formatted_price, currency, average_rating, rating_count, average_rating_current_version, rating_count_current_version, version, version_release_date, release_date, primary_genre, size_bytes, minimum_os, content_rating, seller_name, store_url. Needs a RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api), sent as the X-RapidAPI-Key header; the listing has a free plan.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | Two-letter App Store country code, which sets the prices, currency and ratings returned. Example: "us". |
| limit | integer | – | How many apps to return (Apple allows up to 200 per search). Example: 50. |
| term | string | – | Keyword to search for in the App Store (for example budget, photo editor, meditation). Example: "budget". |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | how many results came back |
| fetched_at | integer | – | when the source was read (Unix seconds) |
| items | array | yes | the results, one object each |
| partial | boolean | – | some of the source's requests failed: the results are incomplete |
| product | string | – | – |
| sources | array | – | where the data came from: each source's name, licence and the attribution to show with it |
| truncated_from | integer | – | the answer was cut to fit: this many results came back in all |
No examples provided.
clinical-trials-monitor ClinicalTrials.gov Study Monitor ~258
Studies from the official ClinicalTrials.gov API v2 for a condition, phase and status, returning only the studies whose status, phase, enrollment or last update changed since your last run. Read from clinicaltrials.gov when called. Each result: nct_id, title, sponsor, phase, status, enrollment, start_date, completion_date, last_update_date, conditions, lead_intervention, first_country. Needs a RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api), sent as the X-RapidAPI-Key header; the listing has a free plan.
| Name | Type | Req | Description |
|---|---|---|---|
| condition | string | – | Disease or condition to follow (for example breast cancer, type 2 diabetes, Alzheimer). Example: "breast cancer". |
| limit | integer | – | At most this many results (default 100). |
| phase | string | – | Study phase to follow. Example: "PHASE2". |
| status | string | – | Recruitment status to follow. Example: "RECRUITING". |
| updated_since | string | – | Only studies whose record was last updated on or after this date (YYYY-MM-DD). Example: "2025-01-01". |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | how many results came back |
| fetched_at | integer | – | when the source was read (Unix seconds) |
| items | array | yes | the results, one object each |
| partial | boolean | – | some of the source's requests failed: the results are incomplete |
| product | string | – | – |
| sources | array | – | where the data came from: each source's name, licence and the attribution to show with it |
| truncated_from | integer | – | the answer was cut to fit: this many results came back in all |
No examples provided.
eu-fuel-monitor EU Fuel Price Change Monitor (France, Spain) ~233
Each run returns only the stations whose fuel prices changed since the last run, from the French and Spanish open government feeds, filtered by postcode prefix. Read from donnees.roulez-eco.fr, sedeaplicaciones.minetur.gob.es when called. Each result: country, station_id, postcode, address, city, lat, lon, diesel_eur_l, sp95_e5_eur_l, e10_eur_l, sp98_eur_l. Needs a RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api), sent as the X-RapidAPI-Key header; the listing has a free plan.
| Name | Type | Req | Description |
|---|---|---|---|
| country | array | – | Which national feeds to read (empty: all). Example: ["FR", "ES"]. |
| limit | integer | – | At most this many results (default 100). |
| postcode | string | – | Keep stations whose postcode starts with this (28 is Madrid in Spain, Eure-et-Loir in France; 75 Paris; empty keeps all). Example: "28". |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | how many results came back |
| fetched_at | integer | – | when the source was read (Unix seconds) |
| items | array | yes | the results, one object each |
| partial | boolean | – | some of the source's requests failed: the results are incomplete |
| product | string | – | – |
| sources | array | – | where the data came from: each source's name, licence and the attribution to show with it |
| truncated_from | integer | – | the answer was cut to fit: this many results came back in all |
No examples provided.
fr-company-search French Company Search (Recherche d'entreprises, Sirene) ~446
Search France's official company register by NAF activity code, département, headcount band and status, and get typed legal-entity records with head-office address, coordinates and company size. Read from recherche-entreprises.api.gouv.fr when called. Each result: siren, siret_head_office, name, legal_name, naf_code, legal_form_code, address, postcode, city, departement, lat, lon, creation_date, headcount_band, company_category, establishments_total, establishments_open, status. Needs a RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api), sent as the X-RapidAPI-Key header; the listing has a free plan.
| Name | Type | Req | Description |
|---|---|---|---|
| activite_principale | string | – | Main activity code (NAF rev. 2) of the company, e.g. 62.01Z (computer programming), 56.10A (restaurants), 47.11D (supermarkets). Example: "62.01Z". |
| departement | string | – | Département code of the head office, e.g. 75 Paris, 69 Rhône, 2A Corse-du-Sud. Leave empty for all of France. Example: "75". |
| etat_administratif | string | – | A = active companies, C = ceased companies. Example: "A". |
| limit | integer | – | At most this many results (default 100). |
| tranche_effectif_salarie | string | – | INSEE headcount band: 00 (0), 01 (1-2), 02 (3-5), 03 (6-9), 11 (10-19), 12 (20-49), 21 (50-99), 22 (100-199), 31 (200-249), 32 (250-499), 41 (500-999), 42 (1000-1999), 51 (2000-4999), 52 (5000-9999),… |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | how many results came back |
| fetched_at | integer | – | when the source was read (Unix seconds) |
| items | array | yes | the results, one object each |
| partial | boolean | – | some of the source's requests failed: the results are incomplete |
| product | string | – | – |
| sources | array | – | where the data came from: each source's name, licence and the attribution to show with it |
| truncated_from | integer | – | the answer was cut to fit: this many results came back in all |
No examples provided.
scholarly-search Scholarly Paper Search (OpenAlex): DOI, year, venue, citations, open-access link ~247
Search the OpenAlex index of scholarly works by keyword, year range and open-access status, and get each paper's title, DOI, year, venue, type, citation count and open-access link. Read from api.openalex.org when called. Each result: openalex_id, title, doi, year, publication_date, venue, type, cited_by_count, is_open_access, oa_status, open_access_url, language. Needs a RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api), sent as the X-RapidAPI-Key header; the listing has a free plan.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | At most this many results (default 100). |
| oa_status | string | – | Keep only works with this open-access status (empty: all works). Example: "green". |
| query | string | – | Keywords to search for in titles, abstracts and full text. Example: "graph neural networks". |
| year_from | integer | – | First publication year to include. Example: 2020. |
| year_to | integer | – | Last publication year to include. Example: 2026. |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | how many results came back |
| fetched_at | integer | – | when the source was read (Unix seconds) |
| items | array | yes | the results, one object each |
| partial | boolean | – | some of the source's requests failed: the results are incomplete |
| product | string | – | – |
| sources | array | – | where the data came from: each source's name, licence and the attribution to show with it |
| truncated_from | integer | – | the answer was cut to fit: this many results came back in all |
No examples provided.
ted-tender-monitor EU Public Tender Monitor (TED) ~275
New public procurement notices from the EU's official TED search API for a CPV code prefix, buyer country and keyword, returning only the notices that are new or changed since your last run. Read from api.ted.europa.eu when called. Each result: notice_id, publication_date, buyer, country_code, title, cpv_codes, procedure, deadline, estimated_value, currency, url. Needs a RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api), sent as the X-RapidAPI-Key header; the listing has a free plan.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | Country of the buying organisation, as a three-letter ISO code. Example: "FRA". |
| cpv_prefix | string | – | Start of the CPV code to follow (for example 72 for IT services, 45 for construction, 33 for medical equipment). Example: "72". |
| keyword | string | – | Optional word that the notice title must contain. Leave empty to keep all notices. Example: "services". |
| limit | integer | – | At most this many results (default 100). |
| published_since | string | – | Only notices published on or after this date, written YYYYMMDD. Example: "20250101". |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | how many results came back |
| fetched_at | integer | – | when the source was read (Unix seconds) |
| items | array | yes | the results, one object each |
| partial | boolean | – | some of the source's requests failed: the results are incomplete |
| product | string | – | – |
| sources | array | – | where the data came from: each source's name, licence and the attribution to show with it |
| truncated_from | integer | – | the answer was cut to fit: this many results came back in all |
No examples provided.
How do I install the Open data: clinical trials, EU tenders, companies, fuel… MCP server?
Open data: clinical trials, EU tenders, companies, fuel… is a hosted endpoint at https://api.gregswarm.duckdns.org/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.gregswarm.duckdns.org
claude mcp add --transport http org-duckdns-gregswarm-api-open-data 'https://api.gregswarm.duckdns.org/mcp'
What is the Open data: clinical trials, EU tenders, companies, fuel… MCP server?
Open data: clinical trials, EU tenders, companies, fuel… is an MCP server listed in the public MCP registry as org.duckdns.gregswarm.api/open-data. Official open data as JSON: clinical trials, EU tenders, papers, apps, French firms, fuel, domains. This page covers its hosted endpoint (https://api.gregswarm.duckdns.org/mcp).
Is the Open data: clinical trials, EU tenders, companies, fuel… MCP server safe to use?
Open data: clinical trials, EU tenders, companies, fuel… scores 71 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Open data: clinical trials, EU tenders, companies, fuel… MCP server expose?
Open data: clinical trials, EU tenders, companies, fuel… exposes 6 tools: app-store-search, clinical-trials-monitor, eu-fuel-monitor, fr-company-search, scholarly-search, ted-tender-monitor. Their descriptions and schemas cost roughly 1,711 tokens of context every time the server is loaded.
Does the Open data: clinical trials, EU tenders, companies, fuel… MCP server require authentication?
No. We connected to Open data: clinical trials, EU tenders, companies, fuel… without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Open data: clinical trials, EU tenders, companies, fuel… MCP server still maintained?
Open data: clinical trials, EU tenders, companies, fuel… is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.