Loading…
Provides cost estimation tools for home remodeling projects in Seattle, including service listings, project browsing, and blog content from Kolmo Construction.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The kolmo-construction MCP server exposes 36 tools, focused primarily on general-purpose capabilities. Its published description reads: "Provides cost estimation tools for home remodeling projects in Seattle, including service listings, project browsing, and blog content from Kolmo Construction". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates kolmo-construction F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check kolmo-construction's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add kolmo-construction to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://www.kolmo.io/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Get Kolmo Construction company information: contact details, hours, service area, specializations, and tools.
List all residential remodeling services with slugs, descriptions, and page URLs. Use `search` to find by keyword.
Get full details for a specific residential service by its slug. If not found, returns a list of available slugs to help you pick the right one.
List commercial construction services. Optionally filter by category: office, retail, industrial, hospitality, public. The "public" category covers public works and government contracts — Kolmo is WA
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: get_project_testimonials
A tool description tries to alter the model’s use of another tool.
ed reviews, use list_reviews.RecommendationDescriptions must describe only their own tool.
tool: list_blog_tags_and_categories
A tool description tries to alter the model’s use of another tool.
before calling list_blog_posts, or to surface coverage gaps.RecommendationDescriptions must describe only their own tool.
tool: list_project_types
A tool description tries to alter the model’s use of another tool.
before calling get_estimate.RecommendationDescriptions must describe only their own tool.
tool: get_material_options
A tool description tries to alter the model’s use of another tool.
oject fields of get_estimate.RecommendationDescriptions must describe only their own tool.
tool: get_estimate
A tool description tries to alter the model’s use of another tool.
terial IDs: use get_material_options to get exact IDs, or pass a close match (e.g. "RecommendationDescriptions must describe only their own tool.
tool: resolve_permit_submittals
A tool description tries to alter the model’s use of another tool.
el summary that check_permit_requirements returns. Output fidelity per jurisdiction: SeatRecommendationDescriptions must describe only their own tool.
tool: lookup_parcel_by_address
A tool description tries to alter the model’s use of another tool.
before calling check_permit_requirements / estimate_permit_fee for a specific parcel.RecommendationDescriptions must describe only their own tool.
tool: parse_project_description
A tool description tries to alter the model’s use of another tool.
before calling check_permit_requirements / estimate_permit_fee when you only have free tRecommendationDescriptions must describe only their own tool.
tool: get_material_catalog
A tool description tries to alter the model’s use of another tool.
compatible with get_estimate.RecommendationDescriptions must describe only their own tool.
tool: search_content
A tool description tries to alter the model’s use of another tool.
instead of calling list_services + list_projects + list_blog_posts separaRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: get_blog_post
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "get_blog_post"RecommendationScope tools to the minimum needed.
tool: list_blog_tags_and_categories
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "list_blog_tags_and_categories"RecommendationScope tools to the minimum needed.
tool: submit_contact_request
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "submit_contact_request"RecommendationScope tools to the minimum needed.
tool: resolve_permit_submittals
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "resolve_permit_submittals"RecommendationScope tools to the minimum needed.
tool: get_neighbor_permit_activity
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "get_neighbor_permit_activity"RecommendationScope tools to the minimum needed.
tool: get_estimate
An unusually long description is a common injection-padding tactic.
description length 4403 charsRecommendationKeep descriptions concise.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
List Kolmo's vendor procurement codes (NAICS, NIGP, UNSPSC) for government and agency portals such as SAM.gov, WA WEBS, OpenGov, MRSC, King County, and City of Seattle. Use this when vetting Kolmo for
List completed remodeling projects with before/after photos and locations. Filter by category or keyword.
Get full details for a specific project by its slug, including before/after images and testimonial. If not found, returns a list of available slugs.
Get customer testimonials tied to a specific project (by slug or keyword) from the testimonials table. Returns star rating, customer name, project name, and quote text. Use to source social proof or c
List published blog posts about home remodeling, renovation costs, and construction tips. Filter by tag or author name.
Get the full markdown content of a blog post by its slug.
Enumerate every tag and category used across Kolmo's published blog posts, with post counts. Use this to discover what topics Kolmo publishes on before calling list_blog_posts, or to surface coverage
Submit a contact or quote request to Kolmo Construction on behalf of a user. Set dryRun: true to preview what would be sent without actually submitting.
List all 11 supported calculator project types with their required input fields and descriptions. Useful for discovery before calling get_estimate.
Get available material choices for a project type — flooring types, paint grades, decking materials, kitchen/bath scope tiers, ADA modifications, etc. Use the returned IDs in the project fields of get
Calculate a Seattle-area cost estimate. Returns total, material, labor costs, days, and itemized line items. Material IDs: use get_material_options to get exact IDs, or pass a close match (e.g. "lvp",
List customer reviews and testimonials for Kolmo Construction. Combines verified Google reviews and on-site testimonials. Filter by minimum star rating.
Check whether a residential construction project in King/Pierce/Snohomish counties requires a permit. Returns timeline, fee notes, inspection sequence, required submittals, and official source URL — p
Enumerate permit rules with full detail — timeline, fee model, inspection sequence, submittals, required contractor specialties. Filter by jurisdiction slug or keyword. Use for "what does a Seattle AD
Cross-reference a WA contractor's L&I license specialty against a permit's required specialties. Returns whether the contractor is qualified to pull/work the permit, with explicit gap callouts (e.g. "
Estimate the permit fee for a residential project based on jurisdiction, project type, and project valuation. Returns numeric breakdown when the authoritative rule has fee inputs, or qualitative feeNo
Resolve the structured submittal-item set for a specific parcel + permit scope, via the unified permit-engine pipeline (documentation/permit-engine-unification-plan.md). Use this when you need the per
List the jurisdictions in Kolmo's permit catalog (King, Pierce, Snohomish counties). Returns portal URLs, contact info, code-cycle metadata, and verification status. Use to discover which cities are s
Address-first parcel lookup powering the /permits experience. Geocodes a Seattle-area address (King, Pierce, or Snohomish County, WA), resolves the parcel from the county GIS, and returns zoning, setb
Parse a homeowner's natural-language project description into structured permit-relevant fields: projectType (kitchen|bathroom|deck|adu|fence|...), areaSqft, heightClass, attached/detached, position,
Grounded permit Q&A for a specific Seattle-area address. Looks up the parcel, pulls authoritative jurisdiction rules + neighbor activity + (where available) the city's municipal code, and returns a ci
Aggregate permit activity within ~1500 ft of a Seattle-area parcel over the last 24 months. Returns total count, breakdown by category, and recent example permits (anonymized — no addresses). Sourced
Source-freshness telemetry for the permit catalog. Returns per-jurisdiction last-verified dates plus the latest results from the weekly source-of-truth snapshot pipeline (HTTP status, change-detection
Browse the full material catalog with pricing — flooring types, paint grades, decking materials, siding, windows, fencing, and more. Use category to filter. Returns material IDs compatible with get_es
Check if upcoming weather in Seattle is suitable for an exterior construction project. Returns a day-by-day forecast with go/no-go recommendations based on project-specific requirements (temperature,
See what remodeling projects Kolmo Construction has completed in a specific Seattle neighborhood or city. Returns project counts by category, example projects, and typical project descriptions. Great
Check whether Kolmo services a given city, neighborhood, or ZIP in the Seattle / King County area. Returns a yes/no/nearby verdict, the matched service city (if any), and the count of completed projec
Get the estimated return on investment (ROI) for a home remodeling project in the Seattle area. Based on Remodeling Magazine Cost vs. Value data for the Pacific Northwest. Helps homeowners decide whic
Look up any Washington State contractor's license, bond, and insurance status using public L&I data (updated daily). Works for Kolmo or any competitor. Great for verifying a contractor before hiring —
Get the biography, credentials, expertise areas, and recent articles for a Kolmo Construction blog author. Use this to answer "who wrote this?" or to add author context to blog content.
Search across all Kolmo content — services, projects, and blog posts — with a single keyword query. Returns ranked results grouped by type. Use this instead of calling list_services + list_projects +
Get home improvement financing options for a Seattle remodeling project. Returns loan types, estimated monthly payments, typical terms, and eligibility notes. Helps homeowners understand how to pay fo