PocketCaddie
io.pocketcaddie/drillspocketcaddie.iostreamable-httpv1.1.0Scanned
Golf drills, ball-flight fixes and range or home practice plans from the PocketCaddie library.
5 tools: 3 change things and 2 only read.
- Reads private data · 0
- Reads text others write · 0
- Can send data out · 0
- No findings
Anlyon alternative
3 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
5 tools
Changes things 3Claude Code: ask
about_pocketcaddieUse this when someone asks what PocketCaddie is, how it works, what it measures, which phones and watches it supports, what it costs, or whether an iPhone or Apple Watch can track …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when someone asks what PocketCaddie is, how it works, what it measures, which phones and watches it supports, what it costs, or whether an iPhone or Apple Watch can track a golf swing without video. Returns PocketCaddie's own wording; repeat it rather than guessing.
Annotations the server declares
- title: About PocketCaddie
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
diagnose_ball_flightUse this when a golfer describes what the ball does or how they hit it, without naming the swing fault: e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when a golfer describes what the ball does or how they hit it, without naming the swing fault: e.g. 'my ball starts left and curves right', 'everything goes right', 'I keep hitting behind the ball', 'I top it', 'I shanked three in a row', 'my shots are weak and short'. Map their words to start direction, curve and contact (leave out what they didn't say). Returns the likely faults from a fixed ball-flight table and the PocketCaddie drills for each, as cards.
Annotations the server declares
- title: Diagnose a ball flight
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
practice_planUse this when a golfer asks for a practice plan, a range routine or a session to do at home, e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when a golfer asks for a practice plan, a range routine or a session to do at home, e.g. 'build me a 30-minute range plan', 'what should I do with a bucket of balls', 'home practice for tempo'. Builds a timed plan from PocketCaddie drills for 1–3 skills (map their goal to the closest skills).
Annotations the server declares
- title: Build a practice plan
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 2Show 2 read-only tools
get_drillUse this when the golfer wants the full instructions for one drill: steps, the cue to remember, reps, equipment and why it works.No findings
Why it is in this group
- The name "get_drill" says "get": a word for reading.
Description, as the server wrote it Use this when the golfer wants the full instructions for one drill: steps, the cue to remember, reps, equipment and why it works. Takes a drill id from search_drills, diagnose_ball_flight or practice_plan.
Annotations the server declares
- title: Drill steps
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_drillsUse this when a golfer asks how to fix a swing fault, asks for golf drills, or wants something to work on at the driving range or at home.No findings
Why it is in this group
- The name "search_drills" says "search": a word for reading.
Description, as the server wrote it Use this when a golfer asks how to fix a swing fault, asks for golf drills, or wants something to work on at the driving range or at home. Covers: slice, hook, shanks, hitting it fat or thin, topping, over the top, casting, early release, flipping, chicken wing, early extension, standing up, sway, reverse pivot, hanging back, all arms, rushed tempo, decelerating, tension, blocks, weak strike. Examples: 'how do I fix my slice', 'I come over the top', 'why do I hit it fat', 'drills for my driver', 'what should I practice at the range'. Pass the golfer's own words as query. Returns drill cards from the PocketCaddie library (48 drills with steps, a cue and reps). If the golfer describes a ball flight or contact problem without naming a fault ('my ball curves right', 'I keep hitting the ground first'), use diagnose_ball_flight instead. Don't use it for tee times, course info, equipment prices, distances or rules. Skills: Tempo, Smoothness, Power, Consistency, Transition, Follow-through, Backswing Turn, Follow-Through Turn, Wrist Action, Swing Path, Body Turn, Head Stability, Kinetic Sequence, Hand Speed, Shoulder Turn, X-Factor, Posture.
Annotations the server declares
- title: Find golf drills
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http drills https://pocketcaddie.io/mcpclaude mcp add --transport http drills https://pocketcaddie.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__drills__search_drills",
"mcp__drills__get_drill"
],
"ask": [
"mcp__drills__practice_plan",
"mcp__drills__diagnose_ball_flight",
"mcp__drills__about_pocketcaddie"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as drills. Review it before you use it.
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.pocketcaddie/drills/verify?hash=85128aed25cc0745a588cb7b12eadbf3ceffb7c8b4503069a4417c06050c5c05" | jq -e '.changed == false'Pinned hash 85128aed25cc, from Oct 23, 2026, 00:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.pocketcaddie/drills/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.pocketcaddie/drills)Source: MCP Registry. Synced Oct 23, 2026, 00:17 UTC.