# `eu.surfbooking/surfbooking` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/eu.surfbooking/surfbooking
- JSON: https://anlyon.dev/api/v1/servers/eu.surfbooking/surfbooking
- Version: 0.2.0 (active)
- Publisher: eu.surfbooking (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:12:50.556Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Surf Booking
Surf lessons from verified schools and the sea beach by beach, for your level and hour. Read-only.
```

Scanned 2026-10-21T19:00:14.113Z over streamable-http.

**10 tools: 2 change things and 8 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 8 | allow |

## Findings

No check matched anything in these tool definitions.


## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `recommend_spots`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Recommend the top surf beaches in SurfBooking zones right now. Pass `level` for a LEVEL-AWARE ranking — the best spots for a beginner / advanced surfer at this moment, weighted by how well each spot's live wave fits that level. Without `level`, ranks by the live SurfBooking Index (conditions + activity). Best for 'where's good to surf now?' / 'best beach for a beginner today?'. Optionally filter by zone. It ranks beaches for right now, not the best day ahead, and returns no lessons. This returns BEACHES, not lessons.
```

### `size_equipment`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Recommend surf gear sizes (wetsuit, board, leash, and boots if a shoe size is given) from a person's weight, height and surf level. Pure EU/Portugal sizing calculation — read-only, books or charges nothing. Useful before picking a lesson so the right gear is ready. Great for 'what wetsuit size do I need' or 'que prancha para 80 kg e 1,80 m'.
```

## Only reads (8)

Looks things up and changes nothing. Claude Code: allow.

### `best_surf_today`

- The description's first verb is "return": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Return the top surf spots in SurfBooking zones right now, ranked by current live conditions. Scores every active SurfBooking spot (wave height, swell period, wind, coast facing) and returns the best ones with wave height, wind, surf score, level suitability, and a link to each beach's page with its lessons. Great for 'what's the best surf spot today?', 'onde está o surf melhor agora?', or 'melhores condições de surf em Portugal'. Conditions are cached from the live forecast and updated every 15 minutes. Read-only, SurfBooking zones only: Portugal (27 zones), South Africa (4 zones), Spain (2 zones), Italy (2 zones). The ranking is by live conditions only, not weighted to one surfer level.
```

### `find_lessons_by_conditions`

- The name "find_lessons_by_conditions" says "find": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Find bookable surf lessons at SurfBooking beaches where current sea conditions match the given criteria: minimum wave height, minimum surf score, wind quality, and/or a specific level. Returns real upcoming lessons with date, time, spot, price and a booking link — only from spots where the sea ACTUALLY meets your threshold right now. Great for 'find beginner lessons when the sea is at least 1m', 'show lessons on days with light wind', or 'surf quando o mar tiver pelo menos 1.5m'. The scoring algorithm is proprietary and runs server-side. Read-only, SurfBooking zones with schools only: Portugal (14 zones with schools), Spain (1 zone with schools). Books or charges nothing. It always returns lessons, never a plain ranking of beaches.
```

### `get_booking_link`

- The name "get_booking_link" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get the secure SurfBooking link a user opens to BOOK and PAY for a lesson. NEVER books or charges — only returns the URL; the human completes the purchase. Great for 'send me the payment link' or 'manda-me o link para pagar essa aula'.
```

### `lesson_details`

- The description's first verb is "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get full details of a specific bookable lesson by its id (date, time, level, price, duration, spots left, what's included). Takes a lesson id from a lesson search result. Read-only. Great for 'tell me more about that lesson' or 'o que está incluído nessa aula'.
```

### `list_spots`

- The name "list_spots" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List surf beaches (spots), optionally filtered to one zone/region, with bottom type and a short description so you can pick beginner-friendly beaches. Returns beaches, not forecasts or lessons. Great for 'which beaches are in Ericeira' or 'praias boas para iniciantes no Algarve'.
```

### `list_zones`

- The name "list_zones" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the surf zones/regions covered by SurfBooking (SurfBooking zones only: Portugal (27 zones), South Africa (4 zones), Spain (2 zones), Italy (2 zones)), with how many certified schools each has and whether lessons are bookable. Answers an open 'where can I learn to surf?' / 'best region for beginners?' question. This is about REGIONS and school coverage, never live sea conditions or per-level rankings.
```

### `search_lessons`

- The name "search_lessons" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search bookable surf lessons on SurfBooking by free-text query (zone, beach, level, activity), with optional structured filters (level, maxPrice, date range). Returns upcoming lessons with date, time, spot, level, school, price and a booking link, and says how many matched. All times are local Europe/Lisbon. SurfBooking zones with schools only: Portugal (14 zones with schools), Spain (1 zone with schools). Read-only — does not book or charge anything. It returns lessons, not a ranking of where the surf is good right now. Great for 'aulas de surf na Ericeira', 'beginner lessons this weekend' or 'surf lesson under 40 euros'. This is the general search by place, level, date and price; it does not filter by what the sea is doing, and it does not search hotels.
```

### `surf_forecast`

- The description's first verb is "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get the SurfBooking forecast for a surf spot by name (e.g. 'Carcavelos', 'Ericeira', 'Matosinhos', 'Peniche'). Returns the current 0–10 surf score with label, the level-relevant wave height, period and wind, PLUS a multi-day outlook (the best daylight window per day for the next ~week) so you can answer 'which day this week should I book a lesson?'. The score is level-aware and scored per spot (proprietary). Read-only, SurfBooking zones only: Portugal (27 zones), South Africa (4 zones), Spain (2 zones), Italy (2 zones), times Europe/Lisbon. Books or charges nothing.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `surfbooking`:

```json
{
  "permissions": {
    "allow": [
      "mcp__surfbooking__search_lessons",
      "mcp__surfbooking__lesson_details",
      "mcp__surfbooking__get_booking_link",
      "mcp__surfbooking__surf_forecast",
      "mcp__surfbooking__list_zones",
      "mcp__surfbooking__list_spots",
      "mcp__surfbooking__find_lessons_by_conditions",
      "mcp__surfbooking__best_surf_today"
    ],
    "ask": [
      "mcp__surfbooking__size_equipment",
      "mcp__surfbooking__recommend_spots"
    ],
    "deny": []
  }
}
```
