Loading…
Japanese holiday and business-day calculations using official Japan Cabinet Office data.
Review before connecting
The findings on this server are worth reviewing before you connect an agent to it.
Scanned 8 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The jp-calendar MCP server exposes 4 tools, focused primarily on general-purpose capabilities. Its published description reads: "Japanese holiday and business-day calculations using official Japan Cabinet Office data". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates jp-calendar C- — the findings are worth reviewing before you connect an agent to it. Its most notable findings include "Cross-tool shadowing" and "No authorization on a public remote server". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check jp-calendar's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add jp-calendar to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://jp-calendar.plugrail.dev/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
指定した日付が日本の祝日（国民の祝日・休日）かどうかを判定します。内閣府公表データに基づきます。入力例: {"date": "2026-01-01"}
指定した年または期間の日本の祝日一覧を返します。入力例: {"year": 2026} または {"from": "2026-01-01", "to": "2026-06-30"}
指定した日付(date)の翌日から数えてN営業日目(days)の日付を返します。dateの当日は数えません。daysが負の場合は過去方向（dateの前日から遡ってN営業日目）に計算します。土日・日本の祝日を除外し、calendar="banking"を指定すると銀行休業日（12/31〜1/3）も除外します。dateが営業日かどうかだけ知りたい場合は is_holiday を使ってください（days
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: add_business_days
A tool description tries to alter the model’s use of another tool.
業日かどうかだけ知りたい場合は is_holiday を使ってください（days=0でも同じ情報がskipped経由で得られます）。入力例: {"dRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
Validates ZUGFeRD, Factur-X, and XRechnung e-invoices against EN 16931 with correction suggestions.
Tracks US tariff and trade-action changes from Federal Register documents and exposes them through an API for AI agents.
Instant rug-check for any EVM or Solana token, distilled to one clear 0-10 risk verdict.
Provides access to Bible translations, books, chapters, verses, and search functionality.
Remote-first MCP adapter for emitting Settlement Attestation Receipts; not a verifier.
Risk-ranked registry of AI tools for enterprise governance, enabling lookup of tool risk and shadow AI domain detection.
from〜to間の営業日数を数えます。既定では「fromを含まず、toを含む」境界です（例:「今日から支払期日まで何営業日か」）。include_from/include_toで境界を変更できます。土日・日本の祝日を除外し、calendar="banking"を指定すると銀行休業日（12/31〜1/3）も除外します。from > to の場合はエラーにせず、from/toとinclude_from