Back to Browse

Storied MCP Server

Developer ToolsModerate7.6MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Search historic castles, manors and châteaux for exclusive-use rental in the UK, Ireland and France.

About

Search historic castles, manors and châteaux for exclusive-use rental in the UK, Ireland and France.

Remote endpoints: streamable-http: https://storied-mcp.onrender.com/mcp

Security Report

7.6
Moderate7.6Low Risk

This is a read-only MCP server that fetches venue data from a public Google Sheet, with no shell execution, eval, or data exfiltration found. The main concerns are low-severity: the HTTP endpoint has no authentication (acceptable for public marketing data), CORS is set to a wildcard origin, and the LOCAL_CSV env var can read an arbitrary local file. Permissions match the stated purpose. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

5 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Storied Collection Venues — remote MCP server

Read-only MCP server (Streamable HTTP, stateless, JSON responses) serving Storied Collection venue data live from the Google Sheet 1voQY3AHxjEasFCy3L2T1i1JsdzaD52AZnieFhASRLsM, tab Properties. 5-minute cache (CACHE_TTL_SECONDS); if a refresh fails, the last good data keeps being served.

Endpoint: POST /mcp (GET / = health check)

Tools

  • search_venues: query, country, min_sleeps, max_price + max_price_currency (GBP/EUR, no conversion), max_minimum_nights, helipad, ev_charging, guest_house, sort_by
  • get_venue: fuzzy, accent-insensitive name lookup, with suggestions when nothing matches
  • list_countries: countries with venue counts and currencies

Every price comes back with its currency. Values are never converted. Parsing rules: "3,000"→3000, "100+"→100 (the original text is kept in sleeps_display), "1600s"→1600, "On request"/blank→null. Blank Yes/No cells → null (unknown), and boolean filters leave those venues out.

Data source (pick one)

  1. Public sheet (default): share the sheet as Anyone with the link can view. The server reads the gviz CSV endpoint.
  2. Service account: set GOOGLE_SERVICE_ACCOUNT_JSON to the key JSON and share the sheet (Viewer) with the service account's email.
  3. LOCAL_CSV=path.csv: local file, for testing only.

Run / test

npm install && npm run build
npm start                                  # reads the public sheet; or LOCAL_CSV=your.csv
npm test                                   # SDK client end-to-end calls
npx @modelcontextprotocol/inspector --cli http://localhost:3000/mcp --transport http --method tools/list

Deploy (free options)

  • Render / Railway / Fly.io: any Node host. Run npm run build && npm start; PORT is respected.
  • Google Cloud Run: gcloud run deploy --source . (free tier). Lets you use a service account without a key file.
  • Cloudflare Workers would need a port to the Workers runtime (no Express). The data logic in src/data.ts carries over.

Reviews

No reviews yet

Be the first to review this server!