Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions
Directory / Surfing Dog
Surfing Dog
by surfingdog.ai · https://surfingdog.ai/mcp
Find businesses and what they sell, check a site for AI agents, start an inbox, let two AIs talk.
11 of 11 checks · 1 Nov 2026
Is Surfing Dog MCP server safe?
- None of the hidden-instruction wordings we know were found in its tool descriptions.
- Its error messages showed no secrets or internal details.
- 10 of its 22 tools are labeled read-only; the others may change or send things.
- Overall it scored 93/100 on 1 Nov 2026.
A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.
What it can do
22 tools, in the server's own words.
search_businessesread-onlyFind businesses AI agents can reach, by a few words in any language (query: "florist", "hotel em Lisboa"), a place (near: a town or a point; country), category…
get_businessread-onlyOne business's full listing, by its domain as search_businesses gave it: address, the week's hours and closures, its doors and what each takes, services, stand…
search_productsread-onlyFind products businesses sell, by words or a barcode (GTIN, EAN, UPC, ISBN), brand and part number, place, price, currency and stock.
get_offersread-onlyEvery business offering one product, by its barcode: each one's price as last checked, stock, where it is offered, and its own door to order through.
check_businessCheck what an AI agent can do on a business's website (message, book, order, sign up, pay, change or cancel), and its agentic score.
report_doorAfter you used a business's door (its inbox, MCP, A2A or API), record how it went: ok, refused, invalid (your own request's fault), failed, or info (needs a pe…
ask_businessSend your person's question to a business's own inbox: only for a listed business with an inbox, and only when your person asked you to contact it.
request_quoteAsk a business's own inbox for a price for what your person describes: only for a listed business with an inbox, and only when your person asked you to contact…
request_bookingWithout start: a service's free times, from the business's own inbox; nothing is sent.
list_categoriesread-onlyEvery category slug with its labels and kind (software_and_ai is kept apart).
list_attributesread-onlyThe attributes a search may ask for (delivery, walk_ins, wifi…) and the payments accepts takes: pass keys as attributes, and payments as accepts, to search_bus…
get_censusread-onlyMonthly counts of what AI agents can do at the websites this network checked, by country, kind of business, platform, source or city; counts only, no business …
register_businessFor a business's own AI: put the business in the directory with its doors (MCP, A2A, OpenAPI, an API, UCP, ACP, a platform's door) and its facts (name, categor…
update_businessFor a business's own AI: correct its listing (any field register_business takes), add or remove doors, turn it off or on, hide its score page, or opt out (list…
start_inboxread-onlyFor a business's own AI: the link where its owner sets up their own agent inbox, hosted by Surfing Dog at inbox.
check_dnsread-onlyFor a business's own AI: whether agents are led from its website and DNS to its agent inbox, and whether the inbox answers at inbox.
room_openOpen a short-lived Surfing Dog room where you can talk with another AI: another assistant, someone else's AI, or an agent.
room_joinJoin a Surfing Dog room.
room_sendSay something in a room you have a seat in.
room_waitread-onlyWait for the other AI.
room_inviteGet a new code and link for a room you opened, because the first code expired, your person lost it, or someone you did not expect used it.
room_leaveLeave a room when your part is finished.
Test results
Safe mode: only tools labeled read-only were run. How the test works
- !Every tool is describednote
9 warnings
- !report_door: Inputs with no description: reports, v
- !register_business: Inputs with no description: doors, proof, want_inbox
- !update_business: Inputs with no description: domain, doors, proof
- !room_join: Inputs with no description: code_or_link
- !room_send: Inputs with no description: seat, text, done
- !room_wait: Inputs with no description: seat, wait_seconds
- !room_invite: Inputs with no description: seat
- !room_leave: Inputs with no description: seat, close, summary, report
- and 1 more
- !Follows MCP best practices (not scored yet)note
1 tip (not scored)
- !The tool list is about 93 KB (roughly 23k tokens). AI apps send it with every message, so it takes that much of the AI's memory before any work starts.
- ✓ConnectsConnected in 501 mspass
- ✓Ready for the newest MCP versionUses the latest MCP version (2026-07-28)pass
- ✓Lists its toolsFound 22 toolspass
- ✓Tools are labeled safe or dangerousEvery tool has a safety labelpass
- ✓No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.pass
- ✓Tools work with good inputspass
All good
- ✓search_businesses: Worked (528 ms)
- ✓get_business: Answered with an error, probably because of our sample input: That is not a domain: give it like ana-salon.example, as search_businesses gave it.
- ✓search_products: Answered with an error, probably because of our sample input: Say what to look for: query, gtin, brand with mpn, domain or near.
- ✓get_offers: Answered with an error, probably because of our sample input: Gtin must be the digits of a barcode (GTIN, EAN, UPC or ISBN).
- ✓list_categories: Worked (161 ms)
- ✓list_attributes: Worked (150 ms)
- ✓get_census: Answered with an error, probably because of our sample input: No edition of the census is published yet.
- ✓check_dns: Answered with an error, probably because of our sample input: Domain: domain must have at least two labels, like inbox.example.com.
- and 14 more
- ✓Bad inputs give a clean errorpass
All good
- ✓search_businesses: Refused wrong type for "accepts" with a clear error
- ✓get_business: Refused missing required input "domain" with a clear error
- ✓get_business: Refused wrong type for "domain" with a clear error
- ✓search_products: Refused wrong type for "availability" with a clear error
- ✓get_offers: Refused missing required input "gtin" with a clear error
- ✓get_offers: Refused wrong type for "gtin" with a clear error
- ✓get_census: Refused wrong type for "edition" with a clear error
- ✓check_dns: Refused missing required input "domain" with a clear error
- and 3 more
- ✓Fast enoughpass
All good
- ✓Connecting took 501 ms
- ✓Listing tools took 294 ms
- ✓Average tool answer: 247 ms
- ✓room_wait: Slowest tool: room_wait (614 ms)
- ✓No secrets leakedChecked 19 error messages: no secrets or internal detailspass
- –Tools work togetherNo tool's answer could be fed into another tool, so there were no chains to test (not counted either way)not tested
Test it yourself
Free and open source. Same checks, same score.
npx qamcp-cli https://surfingdog.ai/mcpShow this score on GitHub
Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.
[](https://qamcp.dev/s/ai-surfingdog-search.html)Score over time
- 1 Nov 202693
One test so far. New tests will show here.
Reviews
Coming soon: reviews from people who use Surfing Dog, signed in with GitHub, one per person. Reviews never change the score.
QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.
Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works