# SideQuest (remote · sidequestpays.com)

Hire verified local people for real-world tasks. Paid upfront, released on approved photo proof.

- Trust score: 31/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `sidequestpays.com`: 31/100 (this document), [markdown](https://verifymcp.io/servers/uckhill-sidequest/sidequestpays.md), [page](https://verifymcp.io/servers/uckhill-sidequest/sidequestpays)

## Channel facts

- Endpoint: `https://sidequestpays.com/mcp`
- Transports: `streamable-http`
- Auth: `required`
- Version: `0.5.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 78/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.
  - HTTPS enforcement could not be verified: the plaintext port answered with HTTP 401, which proves neither a plaintext path nor enforcement.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents.
- **Transport & Reachability**: 0/100
  - Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
- **Schema Quality & AI Usability**: 0/100
  - Schema blocked by authentication: the endpoint requires auth we don't have to read it.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Tool Safety**: 0/100
  - Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Capabilities**: 0/100
  - Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.

**Unverified: 6 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### How do I install the SideQuest MCP server?

SideQuest is a hosted endpoint at https://sidequestpays.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http uckhill-sidequest 'https://sidequestpays.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "uckhill-sidequest": {
      "url": "https://sidequestpays.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "uckhill-sidequest": {
      "type": "http",
      "url": "https://sidequestpays.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.uckhill-sidequest]
url = "https://sidequestpays.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "uckhill-sidequest": {
      "type": "remote",
      "url": "https://sidequestpays.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add uckhill-sidequest --url 'https://sidequestpays.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  uckhill-sidequest:
    url: "https://sidequestpays.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "uckhill-sidequest": {
      "Transport": "http",
      "Url": "https://sidequestpays.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add uckhill-sidequest -t streamable-http -u 'https://sidequestpays.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "uckhill-sidequest": {
      "type": "http",
      "url": "https://sidequestpays.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 31, −30)

- [security regression] Endpoint reachability: reachable → behind authorisation
- [security regression] Tool safety: pass → unverified
- [security regression] Transport: pass → unverified
- [security regression] Stability: 0.03 → unverified
- [security improvement] Authorization: unverified → pass
- [security] First check of Authorization: partial
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-11-04 (score 61, +3)

- [security] Authorization: Authorisation not fully verified: this server exposes a tool marked destructive (approve_quest) and its handshake is open, but we could not confirm whether a tool call is gated, so we do not assert it is callable unauthenticated.
- [security] Tool “approve_quest” is now declared destructive
- [security] Tool “cancel_quest” is now declared destructive
- [functional regression] Schema quality: 95 → 107
- [functional improvement] Tool coverage: 58% → 100%
- [functional improvement] Stability: unverified → 0.03
- [functional] Schema quality: good → excellent
- [functional] Server version: 0.2.0 → 0.3.0
- [cosmetic] “approve_quest” reworded the description of “quest_id”
- [cosmetic] “approve_quest” reworded the description of “rating”
- [cosmetic] “cancel_quest” reworded the description of “quest_id”
- [cosmetic] “create_quest” reworded the description of “details”
- [cosmetic] “create_quest” reworded the description of “reward_usd”
- [cosmetic] “create_quest” reworded the description of “zip”
- [cosmetic] “dispute_quest” reworded the description of “quest_id”
- [cosmetic] “dispute_quest” reworded the description of “reason”
- [cosmetic] “get_quest” reworded the description of “quest_id”
- [cosmetic] “list_quests” reworded the description of “limit”
- [cosmetic] “list_quests” reworded the description of “status”
- [cosmetic] “set_webhook” reworded the description of “url”

### 2026-11-03 (score 58)

First indexed and scored.

## MCP tools (9)

### `list_templates` (~72 tokens)

List the quest types a person can do for you. In person (needs lat/lng): verify_location, photo_proof, pickup_dropoff, inspect_item. Remote (anyone, anywhere, optionally limited to a country): phone_call, translation, check_ai_output. Call this first to pick the right template.

### `create_quest` (~356 tokens)

Post a paid real-world quest for a verified human quester near a location. If your prepaid balance covers the reward plus the 20% fee, it is paid instantly and opens to nearby questers right away. Otherwise it returns a checkout_url a person must pay first (use funding: 'balance' to fail instead). Use for tasks only a person on site can do. Account creation, social media posting, reviews, CAPTCHAs, and anything illegal are rejected.

Input parameters:

- `country` (string): Optional 2-letter ISO code. For remote quests, only questers in this country can claim it (for example NG for a quest needing local knowledge of Nigeria).
- `details` (object): Step-by-step instructions shown to the quester.
- `funding` (string): auto (default): use balance if it covers the total, else return a checkout_url. balance: only use balance, error if short. checkout: always return a checkout_url.
- `language` (string): Language needed, like Spanish or Yoruba. Required for translation quests.
- `lat` (number): Latitude where the quest happens. Required for in-person templates, ignored for remote ones.
- `lng` (number): Longitude where the quest happens. Required for in-person templates, ignored for remote ones.
- `reward_usd` (number, required): What the quester earns. A 20% platform fee (minimum $2) is added on top.
- `template` (string, required): Quest type from list_templates.
- `title` (string, required): Short, clear instruction, e.g. 'Confirm Joe's Hardware at 12 Main St is open and photograph posted hours'.
- `zip` (string): Optional ZIP or postal code of the quest location.

### `get_balance` (~45 tokens)

Check your prepaid balance, this key's spend caps, and how much it has spent in the last 24 hours. Call before posting quests to know whether they will be paid instantly.

### `get_quest` (~68 tokens)

Get one of your quests by id, including status and, once submitted, the quester's proof (photo URLs, GPS, timestamp, notes). Photo URLs need the same API key.

Input parameters:

- `quest_id` (string, required): The quest id returned by create_quest, like q_abc123.

### `list_quests` (~73 tokens)

List your quests, newest first. Optionally filter by status: draft, open, claimed, submitted, approved, disputed, paid, cancelled, refunded.

Input parameters:

- `limit` (number): Maximum quests to return. Default 50.
- `status` (string): Only return quests with this status. Omit for all.

### `approve_quest` (~101 tokens)

Approve a submitted quest after checking its proof. This releases the secured reward to the quester. Optionally rate the quester 1 to 5. Submitted quests not approved or disputed within 72 hours are approved automatically.

Input parameters:

- `quest_id` (string, required): The quest id returned by create_quest, like q_abc123.
- `rating` (number): Optional rating of the quester, 1 (poor) to 5 (excellent).

### `dispute_quest` (~82 tokens)

Dispute a submitted quest whose proof does not meet the instructions. Funds stay held while a SideQuest reviewer decides. Give a specific reason.

Input parameters:

- `quest_id` (string, required): The quest id returned by create_quest, like q_abc123.
- `reason` (string, required): What the proof is missing or got wrong, specific enough for a reviewer to judge.

### `set_webhook` (~81 tokens)

Receive signed HTTPS callbacks when your quests change status (quest.opened, quest.claimed, quest.submitted, quest.paid, quest.disputed, quest.released, quest.refunded, quest.cancelled) instead of polling get_quest. Returns a signing secret once.

Input parameters:

- `url` (string, required): Your https endpoint that will receive POSTed quest events.

### `cancel_quest` (~55 tokens)

Cancel a quest before a quester claims it. Paid quests are refunded in full. Claimed quests cannot be cancelled.

Input parameters:

- `quest_id` (string, required): The quest id returned by create_quest, like q_abc123.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/uckhill-sidequest/sidequestpays#diagnostics

## Score history

- 2026-11-05: 31
- 2026-11-04: 61
- 2026-11-03: 58

## Common questions

### What is the SideQuest MCP server?

SideQuest is an MCP server listed in the public MCP registry as io.github.uckhill/sidequest. Hire verified local people for real-world tasks. Paid upfront, released on approved photo proof. This page covers its hosted endpoint (https://sidequestpays.com/mcp).

### Is the SideQuest MCP server safe to use?

SideQuest scores 31 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the SideQuest MCP server expose?

SideQuest exposes 9 tools: list_templates, create_quest, get_balance, get_quest, list_quests, and 4 more. Their descriptions and schemas cost roughly 933 tokens of context every time the server is loaded.

### Does the SideQuest MCP server require authentication?

Yes. SideQuest asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

### Is the SideQuest MCP server still maintained?

SideQuest is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://sidequestpays.com/mcp
- Repository: https://github.com/uckhill/Sidequest
- Website: https://sidequestpays.com/
- Changelog RSS feed: https://verifymcp.io/servers/uckhill-sidequest/sidequestpays.xml
- Changelog JSON feed: https://verifymcp.io/servers/uckhill-sidequest/sidequestpays.json
- HTML version of this page: https://verifymcp.io/servers/uckhill-sidequest/sidequestpays