mygn & rundown.city – Events Hamburg, München, Oldenburg, San Francisco
de.mygn/eventsmygn.destreamable-httpv1.0.0Scanned
What's on today in the city: ad-free event listings, read-only, no token needed.
5 tools: 5 only read.
- Reads private data · 1
- Reads text others write · 2
- Can send data out · 0
- 1 finding
Anlyon alternative
Run the operations that matter as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
5 tools
Only reads 5Show 5 read-only tools
get_day_overviewHow busy one day is in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): the number of events per category, how many are free, how many have…No findings
Why it is in this group
- The name "get_day_overview" says "get": a word for reading.
Description, as the server wrote it How busy one day is in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): the number of events per category, how many are free, how many have a verified location, whether the day is quiet, normal or busy compared with the same kind of day (weekday or weekend) in the next 14 days (unknown for a day further out, where the listings are not complete yet) and top_curated, our editorial picks of the day (occurrence_id, title, starts_at; empty while nothing is rated). Events are counted once per day however many time slots they have. Use it to answer 'is there a lot on this Saturday' before listing events with search_events.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Day overview
get_eventThe full record of one event occurrence from search_events, in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): summary, start and end time…Reads text others writeNo findings
Why it is in this group
- The name "get_event" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it The full record of one event occurrence from search_events, in a hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): summary, start and end time, venue with address and coordinates, price text, age_min, the audience block (family, adults_only, visitor_pick, family_p as in search_events; null when not rated), the organiser's link (url), the link to this event's own page on our site or, without one, our hub page (share_url), brand (mygn or rundown) and attribution_url (the hub page to cite as the source), plus the next 20 other dates of the same event (siblings, with siblings_truncated true when there are more). Internal fields (signals, series_kind, kind, title_override) are left out unless verbose is true. all_day true means the occurrence spans the whole day (T00:00 start, ends_at at least 18 hours later). time_unknown true means starts_at is only a date anchor, not a start time: never show 00:00. series_continues true means the listed dates of this recurring event stop only where our sources' look-ahead stops, so it likely runs on: never say it ends after the last listed date. Use url for the organiser's page, where tickets and opening details are.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Get event details
list_categoriesList the event categories one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) currently has, each with its slug, display label (in the hub's …No findings
Why it is in this group
- The name "list_categories" says "list": a word for reading.
Description, as the server wrote it List the event categories one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) currently has, each with its slug, display label (in the hub's language) and a one-line definition. The slugs are the values for the categories filter of search_events. Typical slugs: party, concert, culture, show, family, food, sport, market, cruise, quiz, tours, other; an event has exactly one.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: List event categories
list_hubsList the cities (hubs) covered by mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): hub slug, display label, timezone and the website of the hub.Reads text others writeNo findings
Why it is in this group
- The name "list_hubs" says "list": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "list" and "website": it reads web pages, which anyone can write.
Description, as the server wrote it List the cities (hubs) covered by mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco): hub slug, display label, timezone and the website of the hub. Pass the slug as hub to the other tools. The hub website is the source to cite.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: List cities (hubs)
search_eventsSearch upcoming events in one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) between date_from and date_to in the hub's local calendar.Reads private data1 finding
Why it is in this group
- The name "search_events" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "calendar": it reads calendars.
Findings
- Info
The description is 2,446 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...the time is not given. Call get_event for the details of events you will mention."
Description, as the server wrote it Search upcoming events in one hub of mygn.de (Hamburg, München, Oldenburg + Umland) and rundown.city (San Francisco) between date_from and date_to in the hub's local calendar. Returns a compact list in time order with at most 50 events per call (default 25); follow next_cursor for more. An event that runs several times on one day (for example 11:00, 13:00 and 15:00) is ONE item whose starts_at and occurrence_id are those of its first slot and whose slots list gives occurrence_id, starts_at and ends_at of every slot; total and paging count items. Each item has occurrence_id, title, display_title, category, starts_at (local time), all_day, time_unknown, venue, is_free, price_text (in the hub's language and currency), attend_mode, share_url (the event's own page on our site or, without one, our hub page, the source to cite), age_min (a stated minimum age, null when the source states none, 0 for all ages), the audience block and tags. The audience block is null when the event is not rated; otherwise family (true: suitable for parents with children, false: not, null: unsure), adults_only (true: an adults-only event, false: not, null: unsure), visitor_pick (0 to 1, how much a first-time visitor would be glad to find it; a ranking hint, not a filter) and family_p (0 to 1, the raw family-friendly probability behind family, for your own threshold). query matches each word on its own in the title and summary (all words first, any word if none has them all; German compounds such as Halloweenparty are split); the words Kinder, Kids, Familie and family do not filter but list family events first, then the rest, each group in the requested sort. time_from and time_to (HH:MM, hub local time) keep the events that start in that range, for 'tonight' or 'in the morning'. Internal fields (editorial score and flags, signals, series_kind, kind, long_running) are left out unless verbose is true. Examples: 'free events this weekend' -> free_only with the weekend dates; 'something for kids on Saturday' -> categories=['family'] for that day; 'concerts tonight' -> categories=['concert'] and time_from='18:00' for today. all_day true means the occurrence spans the whole day (starts_at is the day anchor T00:00 and it ends at least 18 hours later). time_unknown true means starts_at is only a date anchor because no showtime is known: never show 00:00, say the time is not given. Call get_event for the details of events you will mention.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
- title: Search events
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write2
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
- Infosearch_events
The description is 2,446 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...the time is not given. Call get_event for the details of events you will mention."
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http events https://mcp.mygn.de/publicclaude mcp add --transport http events https://mcp.mygn.de/publicRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__events__list_hubs",
"mcp__events__list_categories",
"mcp__events__get_day_overview",
"mcp__events__search_events",
"mcp__events__get_event"
],
"ask": [],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as events. Review it before you use it.
Capability tags behind 3 rules
- mcp__events__list_hubs untrusted-input
- mcp__events__search_events private-data
- mcp__events__get_event untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/de.mygn/events/verify?hash=c38d882e09bc41e48cb4e86d08f346355a3bb99684445bf49507bff88adb0081" | jq -e '.changed == false'Pinned hash c38d882e09bc, from Nov 2, 2026, 09:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/de.mygn/events/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/de.mygn/events)Source: MCP Registry. Synced Nov 2, 2026, 09:17 UTC.