Skip to content
anlyon.dev

Headed In: Florida trips, water and weather

com.headedin/floridaheadedin.comstreamable-httpv1.1.1Scanned

Live Florida trip info: boat ramps, NOAA forecasts, red tide, beach flags, bridges, launches, picks.

31 tools: 1 do something that can't be undone, 29 change things and 1 only read.

Tools: 0 delete, 1 irreversible, 29 write, 1 read.
  • Reads private data · 0
  • Reads text others write · 31
  • Can send data out · 1
  • 2 findings

Anlyon alternative

30 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

31 tools

Can't be undone 1Claude Code: ask
  • window_seatWhich side of the plane to sit on: for a flight between two US airports (all of Florida's plus the big ones with nonstops to Florida), the big sights you can see from the window in…Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "window_seat" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Which side of the plane to sit on: for a flight between two US airports (all of Florida's plus the big ones with nonstops to Florida), the big sights you can see from the window in flight order (Lake Okeechobee, the Sunshine Skyway, the Vehicle Assembly Building, the Seven Mile Bridge, the Outer Banks, Manhattan, the Grand Canyon...), left or right side, about when, the states under the route, and tips for getting GPS to work in airplane mode. Use it when someone picks a seat, asks what they will see from the plane, or asks why their GPS dot disappears in the air.

    Annotations the server declares

    • title: Window seat sights
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Changes things 29Claude Code: ask
  • artificial_reefsFlorida's public artificial reefs near a spot (FWC's 4,519 deployments statewide): name, position, depth and relief in feet, what was sunk (ships, bridge spans, reef modules), year…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Florida's public artificial reefs near a spot (FWC's 4,519 deployments statewide): name, position, depth and relief in feet, what was sunk (ships, bridge spans, reef modules), year, miles away, closest first. For fishing, diving and spearfishing trips. Not for navigation.

    Annotations the server declares

    • title: Artificial reefs
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • beach_flagsThe beach warning flag lifeguards reported this morning at the nearest beaches (green, yellow, red, double red = water closed, purple = stinging marine life), with the report time,…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The beach warning flag lifeguards reported this morning at the nearest beaches (green, yellow, red, double red = water closed, purple = stinging marine life), with the report time, water temperature and notes: rip currents seen, surf height, jellyfish, stingrays, red tide coughing, dead fish. From Mote Marine Laboratory's Beach Conditions Reporting System, about twice a day at 131 beaches (Sarasota, Lee, Collier, Pinellas, Manatee, Charlotte, the Keys, Pensacola, some Atlantic beaches, Alabama, Texas, the Carolinas, Georgia). Give a position or a beach/town name. Gives one sentence to say out loud and what each flag means, plus how to volunteer as a Mote Beach Ambassador (Florida Panhandle first). Never says the water is safe.

    Annotations the server declares

    • title: Beach warning flags
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • beach_waterFlorida beach water health advisories right now: beaches where the county health department found bacteria (enterococcus) over the state limit and has not posted a lift yet, from a…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Florida beach water health advisories right now: beaches where the county health department found bacteria (enterococcus) over the state limit and has not posted a lift yet, from all 32 coastal counties' own posts (Miami-Dade, Broward, Palm Beach, Tampa Bay, Naples, the Panhandle...). Closest first within a radius when you give a position, or match a beach or county name; with neither, every open advisory in the state. Gives one sentence to say out loud and the health department's link. No advisory is not the same as a clean test, and the result says so; it never calls the water clean or safe.

    Annotations the server declares

    • title: Beach water advisories
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • bite_scoreWhen to go fishing in Florida waters: Headed In's Bite Score 1 to 10 for today and each of the next 14 days (moon from the solunar tables, NOAA tide swing, a tide change inside a d…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    When to go fishing in Florida waters: Headed In's Bite Score 1 to 10 for today and each of the next 14 days (moon from the solunar tables, NOAA tide swing, a tide change inside a daylight moon window, wind and pressure for the first week, every part shown), today's best-bite hours, this week's 2 best days with tide times, wind and which water lights up (rising tide = grass flats and oyster bars, falling = drains and the deep grass edge), and a Tide Read for right now. Give a position or a boat ramp name. Gives one sentence to say out loud. Anglers' rules of thumb, never a promise.

    Annotations the server declares

    • title: Bite Score fishing forecast
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • boat_rampsPublic boat ramps anywhere in Florida (FWC inventory, about 1,600), closest first, with the county, and the live wait at the ramp and trailer parking when boaters have reported it …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Public boat ramps anywhere in Florida (FWC inventory, about 1,600), closest first, with the county, and the live wait at the ramp and trailer parking when boaters have reported it (Tampa Bay so far).

    Annotations the server declares

    • title: Florida boat ramps
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • debark_dayOff the ship, not on the plane yet: a Florida cruise debark day.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Off the ship, not on the plane yet: a Florida cruise debark day. Off the ship in the morning (default 8 AM), flying out later: up to 3 of our own picks near the port in order with drive times, trimmed so the person leaves the last one in time to be at the airport 2 hours before a flight in the U.S. (3 for international, the TSA's general advice), plus the leave-for-the-airport time. Ports: PortMiami, Port Everglades, Port Canaveral, Port Tampa Bay, JAXPORT, Key West; the airport defaults to the usual one for the port (MIA, FLL, MCO, TPA, JAX, EYW). bags=true (all the luggage, no car) keeps it to 2 stops. Drive times are estimates; the person decides.

    Annotations the server declares

    • title: Cruise debark day
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • draft_float_planFor a boat trip: a link that opens Headed In's Float plan with the route, crew, hours, leave time, safety gear and a note already filled in.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    For a boat trip: a link that opens Headed In's Float plan with the route, crew, hours, leave time, safety gear and a note already filled in. The boater checks it and starts the trip in the app themselves.

    Annotations the server declares

    • title: Draft a float plan
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • drawbridgesWhen a Florida drawbridge opens next, right now: 80+ bridges with a federal schedule (Miami River, Miami Beach, Fort Lauderdale and the New River, Palm Beach, the Space Coast, St.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    When a Florida drawbridge opens next, right now: 80+ bridges with a federal schedule (Miami River, Miami Beach, Fort Lauderdale and the New River, Palm Beach, the Space Coast, St. Augustine, Jacksonville, Tampa's Hillsborough River, Pinellas beach causeways, Sarasota, Venice, the Caloosahatchee, the Keys). Says if it opens on signal now, the next scheduled opening, rush-hour closures, call-ahead hours, closed clearance, and the rule. Give a position for the closest ones, or a bridge name.

    Annotations the server declares

    • title: Drawbridge openings
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • florida_passportThe Florida Passport stamp book (55 stamps on 11 region pages: Mile Marker 0, Coral Castle, Weeki Wachee mermaids, a spring swim, Skunk Ape HQ, the time zone line, free OJ at a Wel…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The Florida Passport stamp book (55 stamps on 11 region pages: Mile Marker 0, Coral Castle, Weeki Wachee mermaids, a spring swim, Skunk Ape HQ, the time zone line, free OJ at a Welcome Center...). Each stamp is earned only by standing there with the free Headed Back or Headed In app. Give a position for the closest stamps, a page (road, bay, sarasota, southwest, miami, keys, space, central, nature, northeast, panhandle) or a name. Use it for Florida bucket lists, road-trip stops, or 'what should we not miss'.

    Annotations the server declares

    • title: Florida Passport stamps
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • florida_storiesShort true stories pinned all over Florida, closest first: Name game (why a town is called what it is: Pass-a-Grille, Kissimmee, Key West...) and Weird Florida (Koreshan hollow-ear…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Short true stories pinned all over Florida, closest first: Name game (why a town is called what it is: Pass-a-Grille, Kissimmee, Key West...) and Weird Florida (Koreshan hollow-earth camp, the world's smallest police station, Robert the Doll...). Each has a teaser, the spot and a map link; the whole story opens in the Headed Back app at the place. Great as road-trip stops.

    Annotations the server declares

    • title: Florida town names and weird spots
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • fuel_docksPublic marina fuel docks in Florida, only ones confirmed recently (gas, diesel, pump-out), closest first, with the phone number.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Public marina fuel docks in Florida, only ones confirmed recently (gas, diesel, pump-out), closest first, with the phone number. Distances are straight-line, not by water. No hours or prices (call ahead).

    Annotations the server declares

    • title: Marina fuel docks
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • golden_hourGolden hour, blue hour, sunrise and sunset for any spot (today and tomorrow, local time), which way the sun sets, what's next and how long until it, and a guess at tonight's sunset…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Golden hour, blue hour, sunrise and sunset for any spot (today and tomorrow, local time), which way the sun sets, what's next and how long until it, and a guess at tonight's sunset (could be a good one / clean and clear / iffy / probably gray) from cloud layers here and 25 miles toward the sun. For photographers, creators, sunset cruises and beach plans. Gives one sentence to say out loud.

    Annotations the server declares

    • title: Golden hour and sunset
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • inlet_watchIs a Florida inlet or pass stacking up?Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Is a Florida inlet or pass stacking up? The old rule of thumb, worked out hour by hour for the next 12 hours: an outgoing tide running out into an onshore wind stands the waves up. 35 inlets and passes on both coasts and the Panhandle (Haulover, Government Cut, Port Everglades, Boca, Jupiter, Sebastian, Ponce, the St. Johns jetties, East Pass, Boca Grande, Gordon Pass, Big Pass, Longboat...). Says if it's rough now, when it eases (the next low or the wind), or when it turns rough later. Give a position for the nearest ones, or an inlet name.

    Annotations the server declares

    • title: Inlet watch
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • lightning_nearLightning near a spot in the US right now, from NOAA's GOES-East weather satellite: the nearest strike in the last 15 minutes (distance, direction, how long ago), counts within 10 …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Lightning near a spot in the US right now, from NOAA's GOES-East weather satellite: the nearest strike in the last 15 minutes (distance, direction, how long ago), counts within 10 and 30 miles, and the 30-minute rule clock. Gives one sentence to say out loud, e.g. 'Lightning 6 miles west, 3 minutes ago.' Use it when someone on the water, at a ballgame, a beach or a campsite asks about storms or lightning.

    Annotations the server declares

    • title: Lightning nearby
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • live_conditionsWhat it's like right now at a pick or boat ramp (reports come mostly from Tampa Bay so far): how busy, parking, bugs, water, red tide, the wait at the ramp and trailer parking, fro…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    What it's like right now at a pick or boat ramp (reports come mostly from Tampa Bay so far): how busy, parking, bugs, water, red tide, the wait at the ramp and trailer parking, from anonymous reports in the last 3 hours.

    Annotations the server declares

    • title: Live conditions at a spot
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • marine_forecastNOAA's marine forecast and tides for anywhere in Florida waters (Gulf, Atlantic, the Keys, Biscayne Bay, Lake Okeechobee): advisories, the next periods in NOAA's own words, and the…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NOAA's marine forecast and tides for anywhere in Florida waters (Gulf, Atlantic, the Keys, Biscayne Bay, Lake Okeechobee): advisories, the next periods in NOAA's own words, and the nearest tide station. Give a position, or a ramp name from boat_ramps. Returns NOAA's own words; it does not say whether it's safe to go.

    Annotations the server declares

    • title: NOAA marine forecast and tides
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • message_bottlesMessage in a bottle: real drift bottles people tossed from Florida's shores with the free Headed In / Headed Back apps, moved every 3 hours on the real ocean currents and wind unti…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Message in a bottle: real drift bottles people tossed from Florida's shores with the free Headed In / Headed Back apps, moved every 3 hours on the real ocean currents and wind until they wash up on a real beach. Answers 'any bottles washed up near me?': the beaches near a spot where bottles washed up, how many, miles away, the longest drift and days at sea, how many times found, and how many are adrift right now. Never the note, a name or an exact spot: those are only read in person on the beach in the app. Gives one sentence to say out loud.

    Annotations the server declares

    • title: Message in a bottle beaches
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • open_plan_in_appA link that opens 'Plan a day' in the Headed Back (land) or Headed In (boat) app on the person's phone, on a mood (beach, Old Florida, rainy day, wild Florida, weird and cool, road…Reads text others write1 finding

    Why it is in this group

    • The name "open_plan_in_app" says "open": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "open_plan_in_app" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "open_plan_in_app" says "open": a word for a change.

      What this check looks for
    Description, as the server wrote it
    A link that opens 'Plan a day' in the Headed Back (land) or Headed In (boat) app on the person's phone, on a mood (beach, Old Florida, rainy day, wild Florida, weird and cool, road trip) and a start time. Use it at the end of a Florida day plan.

    Annotations the server declares

    • title: Open Plan a day in the app
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • red_tideRed tide (Karenia brevis) near a spot in Florida from FWC's own water samples of the last 8 days: the closest sample sites with FWC's words (not present/background, very low, low, …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Red tide (Karenia brevis) near a spot in Florida from FWC's own water samples of the last 8 days: the closest sample sites with FWC's words (not present/background, very low, low, medium, high), the sample day and miles away. Give a position, an FWC sample site or boat ramp name, or nothing for the statewide picture. Gives one sentence to say out loud. Never says a beach is safe.

    Annotations the server declares

    • title: Red tide samples
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • rocket_launchesRocket launches from Kennedy Space Center and Cape Canaveral, Florida, in the next two weeks: rocket, mission, pad, day and Eastern time, Go / Hold / Scrubbed status, weather odds …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Rocket launches from Kennedy Space Center and Cape Canaveral, Florida, in the next two weeks: rocket, mission, pad, day and Eastern time, Go / Hold / Scrubbed status, weather odds when posted, the live stream link, and where to watch on the Space Coast (Playalinda Beach, Jetty Park, Cocoa Beach Pier, the Kennedy visitor complex). Gives one sentence to say out loud. Use it when someone plans an Orlando or Space Coast trip or asks if there's a launch.

    Annotations the server declares

    • title: Rocket launches
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • safety_appsOur two free iPhone apps.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Our two free iPhone apps. Headed In (boats) is the float plan: a back-by time, and a boater's people are alerted if they're overdue; for outings on the water. Headed Back is road-trip games and trivia (the license plate game, Swamp Ape Millionaire, trivia, critters caught only at real places, The Daily Humidity), with no check-in; for road trips with people in the car.

    Annotations the server declares

    • title: Headed In and Headed Back apps
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • sail_awaysCruise ship sail-aways in Florida: which ships leave PortMiami, Port Everglades, Port Canaveral and Port Tampa Bay today, tomorrow or this week (from the ports' own published sched…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Cruise ship sail-aways in Florida: which ships leave PortMiami, Port Everglades, Port Canaveral and Port Tampa Bay today, tomorrow or this week (from the ports' own published schedules), the posted departure time where the port posts one (Miami, Canaveral), and when each passes the best public spots to watch it go by (South Pointe Park at Miami; Dr. Von D. Mizell-Eula Johnson State Park at Fort Lauderdale; Jetty Park at Canaveral; Sparkman Wharf and the Skyway Fishing Pier at Tampa). Use it for 'can we watch the cruise ships leave', sail-away parties on land, or when a cruiser's family wants to wave them off.

    Annotations the server declares

    • title: Cruise ship sail-aways
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • sandbarsFlorida sandbars and raft-up spots (44, from Tampa Bay, Miami and the Keys to Naples, Sarasota, the Space Coast, Jacksonville and the Panhandle: Beer Can Island, Haulover, Elliott …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Florida sandbars and raft-up spots (44, from Tampa Bay, Miami and the Keys to Naples, Sarasota, the Space Coast, Jacksonville and the Panhandle: Beer Can Island, Haulover, Elliott Key, Keewaydin, Crab Island...): what each is like, the map, and the next big day there (Boca Bash, Boater Skip Day, the Columbus Day Regatta raft-up), worked out for any year. Give a position, a sandbar name, or big_days: true.

    Annotations the server declares

    • title: Sandbars and raft-ups
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • shore_dayA cruise shore day in Florida that ends at the pier with time to spare: pick the port (PortMiami, Port Everglades, Port Canaveral, Port Tampa Bay, JAXPORT, Key West), when the ship…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    A cruise shore day in Florida that ends at the pier with time to spare: pick the port (PortMiami, Port Everglades, Port Canaveral, Port Tampa Bay, JAXPORT, Key West), when the ship docks and the all-aboard time, and get up to 3 of our own picks near the port in order with drive times, the time to leave the last stop, and the pier-by time (45 minutes before all aboard). Drive times are estimates, the ship does not wait, the person decides. Also use it when someone asks what to do near a Florida cruise port for a few hours.

    Annotations the server declares

    • title: Cruise shore day
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • storm_watchActive Atlantic hurricanes and tropical storms from the National Hurricane Center: wind in mph, category, movement, whether the 5-day cone covers a Florida place or the spot you gi…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Active Atlantic hurricanes and tropical storms from the National Hurricane Center: wind in mph, category, movement, whether the 5-day cone covers a Florida place or the spot you give, when the center passes closest, coastal watches and warnings, and a boat tie-down list (or a 7-day stock-up list with land=true) when a cone touches Florida. Info only; follow the county's orders.

    Annotations the server declares

    • title: Hurricane and storm watch
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • story_trailsShort walking, biking or boating story trails in Florida (St.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Short walking, biking or boating story trails in Florida (St. Pete, Tampa, Miami, Biscayne National Park, the Keys, the Everglades, Panama City Beach, Lake Okeechobee, Ocala National Forest; real places, a puzzle at each stop), played in the Headed Back / Headed In app.

    Annotations the server declares

    • title: Story trails
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • whats_onWhat's on in Florida in the next two weeks: festivals, concerts, farmers markets, boat-show and holiday events, library and park events, from about 30 cities' and counties' own pub…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    What's on in Florida in the next two weeks: festivals, concerts, farmers markets, boat-show and holiday events, library and park events, from about 30 cities' and counties' own public calendars (Tampa Bay, Orlando area, both coasts, the Keys, the Panhandle). Closest first within a radius when you give a position, soonest first. Each event links to its official page.

    Annotations the server declares

    • title: What's on in Florida
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • wheels_downWheels down to toes in the sand: from a Florida airport (MCO, SFB, TPA, PIE, SRQ, RSW, MIA, FLL, PBI, JAX, DAB, MLB, PNS, VPS, ECP, EYW, TLH, GNV), the nearest beaches and springs …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Wheels down to toes in the sand: from a Florida airport (MCO, SFB, TPA, PIE, SRQ, RSW, MIA, FLL, PBI, JAX, DAB, MLB, PNS, VPS, ECP, EYW, TLH, GNV), the nearest beaches and springs by drive time with miles and a line about each. Use it when a visitor asks how fast they can be in the water after landing, or which beach is closest to an airport.

    Annotations the server declares

    • title: Airport to beach
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • wind_phonesWind Phone booths around Tampa Bay: quiet public places to call someone you lost, after the Wind Phone in Ōtsuchi, Japan.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Wind Phone booths around Tampa Bay: quiet public places to call someone you lost, after the Wind Phone in Ōtsuchi, Japan.

    Annotations the server declares

    • title: Wind Phone booths
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 1Show 1 read-only tool
  • find_placesThings to do in Florida (Tampa Bay, Miami, Naples-Fort Myers, Sarasota, the Space Coast, Jacksonville-St.Reads text others writeNo findings

    Why it is in this group

    • The name "find_places" says "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Things to do in Florida (Tampa Bay, Miami, Naples-Fort Myers, Sarasota, the Space Coast, Jacksonville-St. Augustine, the Panhandle, Central Florida (Orlando, The Villages, Ocala), plus weird and worth-the-drive spots statewide): local picks for food, beaches, outdoors, only-in-Florida oddities and worth-the-drive spots, closest first (give lat/lon), with community thumbs and live crowd/parking/water/red-tide reports when available.

    Annotations the server declares

    • title: Florida local picks
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write31
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnopen_plan_in_app

    The server marks "open_plan_in_app" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "open_plan_in_app" says "open": a word for a change.

    What this check looks for
  • Warnwindow_seat

    The server marks "window_seat" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http florida https://headedin.com/mcp
claude mcp add --transport http florida https://headedin.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__florida__find_places"
    ],
    "ask": [
      "mcp__florida__live_conditions",
      "mcp__florida__boat_ramps",
      "mcp__florida__marine_forecast",
      "mcp__florida__story_trails",
      "mcp__florida__fuel_docks",
      "mcp__florida__florida_stories",
      "mcp__florida__whats_on",
      "mcp__florida__drawbridges",
      "mcp__florida__lightning_near",
      "mcp__florida__beach_water",
      "mcp__florida__rocket_launches",
      "mcp__florida__red_tide",
      "mcp__florida__beach_flags",
      "mcp__florida__inlet_watch",
      "mcp__florida__sandbars",
      "mcp__florida__storm_watch",
      "mcp__florida__golden_hour",
      "mcp__florida__bite_score",
      "mcp__florida__artificial_reefs",
      "mcp__florida__message_bottles",
      "mcp__florida__wind_phones",
      "mcp__florida__open_plan_in_app",
      "mcp__florida__shore_day",
      "mcp__florida__debark_day",
      "mcp__florida__wheels_down",
      "mcp__florida__florida_passport",
      "mcp__florida__sail_aways",
      "mcp__florida__window_seat",
      "mcp__florida__draft_float_plan",
      "mcp__florida__safety_apps"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as florida. Review it before you use it.

Capability tags behind 31 rules
  • mcp__florida__find_places untrusted-input
  • mcp__florida__live_conditions untrusted-input
  • mcp__florida__boat_ramps untrusted-input
  • mcp__florida__marine_forecast untrusted-input
  • mcp__florida__story_trails untrusted-input
  • mcp__florida__fuel_docks untrusted-input
  • mcp__florida__florida_stories untrusted-input
  • mcp__florida__whats_on untrusted-input
  • mcp__florida__drawbridges untrusted-input
  • mcp__florida__lightning_near untrusted-input
  • mcp__florida__beach_water untrusted-input
  • mcp__florida__rocket_launches untrusted-input
  • mcp__florida__red_tide untrusted-input
  • mcp__florida__beach_flags untrusted-input
  • mcp__florida__inlet_watch untrusted-input
  • mcp__florida__sandbars untrusted-input
  • mcp__florida__storm_watch untrusted-input
  • mcp__florida__golden_hour untrusted-input
  • mcp__florida__bite_score untrusted-input
  • mcp__florida__artificial_reefs untrusted-input
  • mcp__florida__message_bottles untrusted-input
  • mcp__florida__wind_phones untrusted-input
  • mcp__florida__open_plan_in_app untrusted-input
  • mcp__florida__shore_day untrusted-input
  • mcp__florida__debark_day untrusted-input
  • mcp__florida__wheels_down untrusted-input
  • mcp__florida__florida_passport untrusted-input
  • mcp__florida__sail_aways untrusted-input
  • mcp__florida__window_seat untrusted-input, outbound
  • mcp__florida__draft_float_plan untrusted-input
  • mcp__florida__safety_apps untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.headedin/florida/verify?hash=c0e3d2a06e3f4b6cb77e276f4e7ee29837050f81a8ac2451c0051e4fe69445cd" | jq -e '.changed == false'

Pinned hash c0e3d2a06e3f, from Oct 22, 2026, 23:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.headedin/florida/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.headedin/florida
[![anlyon.dev](https://anlyon.dev/badge/com.headedin/florida.svg)](https://anlyon.dev/servers/com.headedin/florida)

Source: MCP Registry. Synced Oct 22, 2026, 23:17 UTC.