Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

WRDO

REMOTE · API.WRDO.CO.ZA

Local businesses, menus and price lists in Cape Town and the Western Cape; start a request in WRDO.

Available components

+3 this week 76 Trust /100

Last scanned (22 hours ago)

Scores higher than 66% of remote servers

Reachable. Last reached 4 Nov 2026.

Category E-commerce

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security74
Transport & Reachability100
Schema Quality & AI Usability66
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 1576 tokens (~262/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management50
  • Stability observed for 15 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

  • 27 Oct 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “get_business” rewrote its description, which is the text the model reads security
    • Tool “get_price_list” rewrote its description, which is the text the model reads security
    • Tool “start_request” rewrote its description, which is the text the model reads security
    • Schema quality: 236 → 262 ▼ functional
    • New tool “list_areas” functional
    • “get_business” reworded the description of “id” cosmetic
    • “get_price_list” reworded the description of “id” cosmetic
    • “start_request” reworded the description of “business_id” cosmetic
  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 21 Oct 26 +1
    • Stability: unverified → 0.03 ▲ functional
  • 20 Oct 26 69

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Probed https://api.wrdo.co.za/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=wrdo.co.za CN=WE1,O=Google Trust Services,C=US 14 Oct 2026 12 Jan 2027 ECDSA 256 ECDSA-SHA256 9849bf1351026b670eb8f6dbd4463c9d
SANs: wrdo.co.za, *.wrdo.co.za
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of api.wrdo.co.za. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
za. present 45749 8 Verified
co.za. present 41369 8 Verified
wrdo.co.za. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy same-origin

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://api.wrdo.co.za/mcp Verified 200
http (plaintext) http://api.wrdo.co.za/mcp HTTPS enforced 301 https://api.wrdo.co.za/mcp
MCP tools · 6 exposed · ~1,437 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
get_business ~222

One business's public WRDO page: name, category, area, whether it is verified, and (for verified businesses) its description, address, opening hours (hours, as the business wrote them), website and menu link. Also open_now (true, false or null when hours are missing or unreadable) and reviews: WRDO's own reviews only (count, average_rating and up to 3 recent comments; never copied from Google or other sites; count 0 with a note when there are none). For one business already found; to look for businesses use search_local_businesses, and for prices use get_price_list. Takes the id from a search_local_businesses result. An unknown or malformed id returns an error ("WRDO has no public business with that id"), not an empty page. Never a phone number or email.

NameTypeReqDescription
idstringyesA WRDO business id (lbiz_…), copied from the "id" of a search_local_businesses result. Ids are not guessable; an unknown id returns an error.
NameTypeReqDescription
addressstring––
areastringyes–
categorystringyes–
descriptionstring––
facebook_urlstring––
hoursarray––
idstringyes–
last_checked–yes–
menu_urlstring––
namestringyes–
open_now––Open right now in SAST from the hours above; null when hours are missing or unreadable.
page_urlstringyes–
reviewsobject–WRDO's own reviews only (never copied from Google or any other site).
sourcestringyes–
start_url–yes–
verifiedbooleanyes–
websitestring––

No examples provided.

get_price_list ~203

A business's price list or menu, for any kind of business (salon, barber, nails, beauty, restaurant): sections of items with name, description, price_zar (rand) and, for services, duration_min. prices_confirmed is false (with a price_note) when the prices come from the business website and are not confirmed. For a business already found (has_price_list is true in search_local_businesses); it is not a search and gives no business details (use get_business). Takes the id from a search_local_businesses result. An unknown or malformed id returns an error ("WRDO has no public business with that id"); a known business with no list returns empty sections. Never a phone number or email.

NameTypeReqDescription
idstringyesA WRDO business id (lbiz_…), copied from the "id" of a search_local_businesses result. Ids are not guessable; an unknown id returns an error.
NameTypeReqDescription
business–yes–
item_countnumberyes–
messagestring––
page_url–yes–
price_notestring––
prices_confirmedbooleanyes–
sectionsarrayyes–
sourcestringyes–
truncatedbooleanyes–

No examples provided.

list_areas ~147

The towns and suburbs in the Western Cape where WRDO has listings, each with its region and how many businesses (suburbs counted in their town). Gives the valid names for "where" in search_local_businesses and list_categories. Optional "query" keeps areas whose name or region contains it (e.g. "paarl" or "winelands"). Most businesses first, up to 100; areas with none are left out. Western Cape only. Names and counts only: no business or contact details.

NameTypeReqDescription
querystring–Part of a town, suburb or region name, e.g. "paarl" or "cape town". Leave out for every area.
NameTypeReqDescription
areasarrayyes–
messagestring––
sourcestringyes–
totalnumberyesHow many areas match, before the cap on this list.
truncatedbooleanyes–

No examples provided.

list_categories ~124

The kinds of business WRDO lists in the Western Cape, with how many of each, for a town or suburb or everywhere. Answers "what is there in Paarl?". Each slug is a valid "category" for search_local_businesses. Most businesses first; categories with none are left out. Outside the Western Cape it returns nothing. No business details, no contact details.

NameTypeReqDescription
wherestring–A town or suburb in the Western Cape, e.g. "Paarl" or "Val de Vie, Paarl". Leave out for the whole Western Cape.
NameTypeReqDescription
categoriesarrayyes–
messagestring––
sourcestringyes–
totalnumberyes–
where–yes–

No examples provided.

search_local_businesses ~509

Find local businesses on WRDO in the Western Cape by what they do (or their name), optionally in a town or suburb, optionally narrowed by category, price list, price and whether they are open now. Example: "hairdressers in Paarl under R200 that are open now". Give "what" (words) and/or "category" (an exact slug from list_categories). Returns id, name, category, area, verified (claimed by the owner), page_url, start_url, has_price_list, price_from_rand (cheapest listed price, rand, or null) and open_now (true, false or null when unknown). When any of has_price_list, max_price_rand or open_now is used, only the top 100 matches are checked (a message says so). open_now uses opening hours that verified businesses publish; a business without readable hours is left out when open_now is true. No contact details: to reach a business, give the person its start_url.

NameTypeReqDescription
categorystring–Only businesses in this category: an exact plural slug such as "restaurants", "hair-salons" or "plumbers" (list_categories returns the valid slugs and which have businesses). An unknown slug returns…
has_price_listboolean–true: only businesses with a price list or menu on WRDO (so get_price_list will have content). false: only those without. Leave out for both.
limitinteger–How many results, 1 to 20 (default 10).
max_price_randnumber–Only businesses with at least one listed item priced at or under this many rand (e.g. 200). Businesses without a listed price never match. The cheapest price may be unconfirmed (from their website);…
open_nowboolean–true: only businesses that are open right now in South Africa (SAST). Only verified businesses with readable hours can match; those without hours are excluded. Leave out when the person does not need…
whatstring–What the person needs: a kind of business or service ("plumber", "pizza") or a business name. Optional when "category" is given.
wherestring–A town or suburb in the Western Cape, e.g. "Paarl" or "Val de Vie, Paarl". Leave out for the whole Western Cape.
NameTypeReqDescription
messagestring––
resultsarrayyes–
sourcestringyes–

No examples provided.

start_request ~232

Get a link the person opens to ask WRDO for a quote, booking or order (optionally from one business). The person finishes in WRDO. This tool never books, charges or creates an account. It only starts a request: nothing is booked until the business confirms in WRDO. The result is a plain wa.me link with the request already typed in; it is not stored, has no token and does not expire. Nothing is sent or saved until the person opens it and sends the message. "what" is required; business_id is optional and must come from search_local_businesses (an unknown id returns an error).

NameTypeReqDescription
business_idstring–A WRDO business id (lbiz_…), copied from the "id" of a search_local_businesses result. Ids are not guessable; an unknown id returns an error.
whatstringyesWhat the person needs: a kind of business or service ("plumber", "pizza") or a business name.
whenstring–When they want it, in their words, e.g. "Saturday morning".
NameTypeReqDescription
messagestringyes–
next_stepstringyes–
start_urlstringyes–
statusstringyes–

No examples provided.

Install

How do I install the WRDO MCP server?

WRDO is a hosted endpoint at https://api.wrdo.co.za/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · api.wrdo.co.za

# add to Claude Code
claude mcp add --transport http za-co-wrdo-wrdo 'https://api.wrdo.co.za/mcp'
Common questions

What is the WRDO MCP server?

WRDO is an MCP server listed in the public MCP registry as za.co.wrdo/wrdo. Local businesses, menus and price lists in Cape Town and the Western Cape; start a request in WRDO. This page covers its hosted endpoint (https://api.wrdo.co.za/mcp).

Is the WRDO MCP server safe to use?

WRDO scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the WRDO MCP server expose?

WRDO exposes 6 tools: search_local_businesses, list_categories, list_areas, get_business, start_request, get_price_list. Their descriptions and schemas cost roughly 1,437 tokens of context every time the server is loaded.

Does the WRDO MCP server require authentication?

No. We connected to WRDO without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the WRDO MCP server still maintained?

WRDO is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.