Loading…
Public read-only MCP server providing AI agents structured access to Atlarium freshwater aquarium, plant, and habitat data.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The Atlarium Habitat Database MCP MCP server exposes 39 tools, focused primarily on general-purpose capabilities. Its published description reads: "Public read-only MCP server providing AI agents structured access to Atlarium freshwater aquarium, plant, and habitat data". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates Atlarium Habitat Database MCP F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Database tool takes a raw, unparameterised query" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check Atlarium Habitat Database MCP's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add Atlarium Habitat Database MCP to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.atlarium.bio/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Search fish and aquatic animal profiles in the Atlarium habitat database.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: search_fish
A database tool exposes a query/sql parameter that is a free-form string with no allow-list or parameterisation constraint — a raw-string injection surface. A tool exposing structured filters or an `enum` of named queries does not fire.
unconstrained query parameter "query"RecommendationExpose parameterised operations instead of a raw query string; never build queries from unvalidated model output.
tool: get_fish_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_fish.RecommendationDescriptions must describe only their own tool.
tool: search_plants
A database tool exposes a query/sql parameter that is a free-form string with no allow-list or parameterisation constraint — a raw-string injection surface. A tool exposing structured filters or an `enum` of named queries does not fire.
unconstrained query parameter "query"RecommendationExpose parameterised operations instead of a raw query string; never build queries from unvalidated model output.
tool: get_plant_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_plants.RecommendationDescriptions must describe only their own tool.
tool: search_products
A database tool exposes a query/sql parameter that is a free-form string with no allow-list or parameterisation constraint — a raw-string injection surface. A tool exposing structured filters or an `enum` of named queries does not fire.
unconstrained query parameter "query"RecommendationExpose parameterised operations instead of a raw query string; never build queries from unvalidated model output.
tool: get_product_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_products.RecommendationDescriptions must describe only their own tool.
tool: get_water_parameters
A tool description tries to alter the model’s use of another tool.
lug returned by search_fish or search_plants.RecommendationDescriptions must describe only their own tool.
tool: get_guide
A tool description tries to alter the model’s use of another tool.
lug returned by search_guides.RecommendationDescriptions must describe only their own tool.
tool: get_algae_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_algae.RecommendationDescriptions must describe only their own tool.
tool: get_disease_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_diseases.RecommendationDescriptions must describe only their own tool.
tool: get_plant_problem_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_plant_problems.RecommendationDescriptions must describe only their own tool.
tool: get_medicine_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_medicines.RecommendationDescriptions must describe only their own tool.
tool: get_equipment_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_equipment.RecommendationDescriptions must describe only their own tool.
tool: get_fertilizer_profile
A tool description tries to alter the model’s use of another tool.
lug returned by search_fertilizers.RecommendationDescriptions must describe only their own tool.
tool: get_fertilization_regime
A tool description tries to alter the model’s use of another tool.
lug returned by search_fertilization_regimes.RecommendationDescriptions must describe only their own tool.
tool: calculate_tank_weight
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
The server exposes one or more ui:// (MCP Apps) resources whose HTML/JS renders inside the host client — a client-side injection / data-exposure surface most scanners ignore. Flagged for review, not damning on its own.
4 ui:// resource(s); e.g. ui://widget/habitat-explorer.v4.htmlRecommendationReview each ui:// resource’s markup and scripts; treat host-rendered UI as untrusted, sandbox it, and never expose secrets or conversation context to it.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Get a structured fish or aquatic animal profile using the exact slug returned by search_fish.
Search aquatic plants in the Atlarium database.
Get a structured aquatic plant profile using the exact slug returned by search_plants.
Search public habitat products in the Atlarium database.
Get a structured public habitat product profile using the exact slug returned by search_products.
Check basic compatibility information between habitat species using Atlarium data.
Get recommended water parameters using the exact slug returned by search_fish or search_plants.
Suggest compatible aquatic species based on tank size and water parameters.
Search Atlarium habitat guides and educational content.
Get a structured public Atlarium guide using the exact slug returned by search_guides.
Search public algae diagnostic profiles with symptoms, causes and treatment guidance.
Get a structured public algae diagnostic profile using the exact slug returned by search_algae.
Search public aquatic disease diagnostic profiles and advisory treatment information.
Get a structured public aquatic disease profile using the exact slug returned by search_diseases.
Search public aquatic plant deficiency, pest and environmental problem profiles.
Get a structured public aquatic plant problem or deficiency profile using the exact slug returned by search_plant_problems.
Search public aquarium medicine and treatment product profiles.
Get a structured public aquarium medicine profile using the exact slug returned by search_medicines.
Find likely public algae, disease, plant problem and medicine profiles from a symptom query.
List public Atlarium product categories for equipment and fertilizers.
List public Atlarium product brands.
Search public aquarium and habitat equipment products.
Get a structured public equipment product profile using the exact slug returned by search_equipment.
Search public aquarium fertilizer products and nutrient profiles.
Get a structured public fertilizer product profile using the exact slug returned by search_fertilizers.
Search public fertilization regimes and dosing philosophies.
Get a structured public fertilization regime using the exact slug returned by search_fertilization_regimes.
Calculate an advisory fertilizer dose for a public catalog product and tank volume.
Compare nutrient targets with supplied measurements without saving user data.
Calculate weekly fertilizer totals for a supplied non-persistent dosing plan.
Generate an advisory non-persistent fertilization plan from public Atlarium catalog data.
Calculate gross and net aquarium volume estimates from dimensions.
Calculate advisory aquarium weight estimates from dimensions and material inputs.
Calculate water change volume, weekly totals and dilution estimates.
Calculate public water chemistry conversions, CO2, salinity and water-mix estimates.
Convert aquarium-relevant temperature, length, weight and volume units.
Calculate advisory heater, lighting and electricity requirements.
Suggest a complete public habitat plan with species, plants, products, warnings, motivations and related guides.