Skip to content

mygn & rundown.city – Events Hamburg, München, Oldenburg, San Francisco

de.mygn/eventsmygn.destreamable-httpv1.0.0Scanned

What's on today in the city: ad-free event listings, read-only, no token needed.

5 tools: 5 only read.

Tools: 0 delete, 0 irreversible, 0 write, 5 read.
  • Reads private data · 1
  • Reads text others write · 2
  • Can send data out · 0
  • 1 finding

Anlyon alternative

Run the operations that matter as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

5 tools

Only reads 5Show 5 read-only tools
  • get_day_overviewHow busy one day is in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): the number of events per category, how many are free, how many have…No findings

    Why it is in this group

    • The name "get_day_overview" says "get": a word for reading.
    Description, as the server wrote it
    How busy one day is in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): the number of events per category, how many are free, how many have a verified location, whether the day is quiet, normal or busy compared with the same kind of day (weekday or weekend) in the next 14 days (unknown for a day further out, where the listings are not complete yet) and top_curated, our editorial picks of the day (occurrence_id, title, starts_at; empty while nothing is rated). Events are counted once per day however many time slots they have. Use it to answer 'is there a lot on this Saturday' before listing events with search_events.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Day overview
  • get_eventThe full record of one event occurrence from search_events, in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): summary, start and end time…Reads text others writeNo findings

    Why it is in this group

    • The name "get_event" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    The full record of one event occurrence from search_events, in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): summary, start and end time, venue with address and coordinates, price text, age_min, the audience block (family, adults_only, visitor_pick, family_p as in search_events; null when not rated), the organiser's link (url), the link to this event's own page on our site or, without one, our hub page (share_url), brand (mygn or rundown) and attribution_url (the hub page to cite as the source), plus the next 20 other dates of the same event (siblings, with siblings_truncated true when there are more). Internal fields (signals, series_kind, kind, title_override) are left out unless verbose is true. all_day true means the occurrence spans the whole day (T00:00 start, ends_at at least 18 hours later). time_unknown true means starts_at is only a date anchor, not a start time: never show 00:00. series_continues true means the listed dates of this recurring event stop only where our sources' look-ahead stops, so it likely runs on: never say it ends after the last listed date. Use url for the organiser's page, where tickets and opening details are.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Get event details
  • list_categoriesList the event categories one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) currently has, each with its slug, display label (in the hub's …No findings

    Why it is in this group

    • The name "list_categories" says "list": a word for reading.
    Description, as the server wrote it
    List the event categories one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) currently has, each with its slug, display label (in the hub's language) and a one-line definition. The slugs are the values for the categories filter of search_events. Typical slugs: party, concert, culture, show, family, food, sport, market, cruise, quiz, tours, other; an event has exactly one.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List event categories
  • list_hubsList the cities (hubs) covered by mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): hub slug, display label, timezone and the website of the hub.Reads text others writeNo findings

    Why it is in this group

    • The name "list_hubs" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "list" and "website": it reads web pages, which anyone can write.
    Description, as the server wrote it
    List the cities (hubs) covered by mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): hub slug, display label, timezone and the website of the hub. Pass the slug as hub to the other tools. The hub website is the source to cite.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List cities (hubs)
  • search_eventsSearch upcoming events in one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) between date_from and date_to in the hub's local calendar.Reads private data1 finding

    Why it is in this group

    • The name "search_events" says "search": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "search" and "calendar": it reads calendars.

    Findings

    • Info

      The description is 2,446 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...the time is not given. Call get_event for the details of events you will mention."

      What this check looks for
    Description, as the server wrote it
    Search upcoming events in one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) between date_from and date_to in the hub's local calendar. Returns a compact list in time order with at most 50 events per call (default 25); follow next_cursor for more. An event that runs several times on one day (for example 11:00, 13:00 and 15:00) is ONE item whose starts_at and occurrence_id are those of its first slot and whose slots list gives occurrence_id, starts_at and ends_at of every slot; total and paging count items. Each item has occurrence_id, title, display_title, category, starts_at (local time), all_day, time_unknown, venue, is_free, price_text (in the hub's language and currency), attend_mode, share_url (the event's own page on our site or, without one, our hub page, the source to cite), age_min (a stated minimum age, null when the source states none, 0 for all ages), the audience block and tags. The audience block is null when the event is not rated; otherwise family (true: suitable for parents with children, false: not, null: unsure), adults_only (true: an adults-only event, false: not, null: unsure), visitor_pick (0 to 1, how much a first-time visitor would be glad to find it; a ranking hint, not a filter) and family_p (0 to 1, the raw family-friendly probability behind family, for your own threshold). query matches each word on its own in the title and summary (all words first, any word if none has them all; German compounds such as Halloweenparty are split); the words Kinder, Kids, Familie and family do not filter but list family events first, then the rest, each group in the requested sort. time_from and time_to (HH:MM, hub local time) keep the events that start in that range, for 'tonight' or 'in the morning'. Internal fields (editorial score and flags, signals, series_kind, kind, long_running) are left out unless verbose is true. Examples: 'free events this weekend' -> free_only with the weekend dates; 'something for kids on Saturday' -> categories=['family'] for that day; 'concerts tonight' -> categories=['concert'] and time_from='18:00' for today. all_day true means the occurrence spans the whole day (starts_at is the day anchor T00:00 and it ends at least 18 hours later). time_unknown true means starts_at is only a date anchor because no showtime is known: never show 00:00, say the time is not given. Call get_event for the details of events you will mention.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Search events

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 info
  • The description is 2,446 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...the time is not given. Call get_event for the details of events you will mention."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http events https://mcp.mygn.de/public
claude mcp add --transport http events https://mcp.mygn.de/public

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__events__list_hubs",
      "mcp__events__list_categories",
      "mcp__events__get_day_overview",
      "mcp__events__search_events",
      "mcp__events__get_event"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as events. Review it before you use it.

Capability tags behind 3 rules
  • mcp__events__list_hubs untrusted-input
  • mcp__events__search_events private-data
  • mcp__events__get_event untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/de.mygn/events/verify?hash=c38d882e09bc41e48cb4e86d08f346355a3bb99684445bf49507bff88adb0081" | jq -e '.changed == false'

Pinned hash c38d882e09bc, from Nov 2, 2026, 09:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/de.mygn/events/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for de.mygn/events
[![anlyon.dev](https://anlyon.dev/badge/de.mygn/events.svg)](https://anlyon.dev/servers/de.mygn/events)

Source: MCP Registry. Synced Nov 2, 2026, 09:17 UTC.