Back to Browse

Lokal MCP Server

Developer ToolsModerate5.3LocalRemote
Free

Norwegian experiences marketplace MCP: activities by county, category, weather, season, group size.

About

Norwegian experiences marketplace MCP: activities by county, category, weather, season, group size.

Remote endpoints: streamable-http: https://opplevagent.no/mcp

Security Report

5.3
Moderate5.3Moderate Risk

This is a thin stdio-to-remote bridge with no hardcoded credentials, no shell execution, and no local file access, and its network and env var usage matches its stated purpose. The main considerations are that tool definitions and behavior are controlled by the remote service rather than auditable locally, that the OPPLEVAGENT_URL override could redirect traffic, and that guest personal data is sent to the remote in booking calls by design. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Override API base URL (default: https://opplevagent.no)Optional

Environment variable: OPPLEVAGENT_URL

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

opplevagent-mcp

MCP server for opplevagent.no — find Norwegian experiences and activities from Claude Desktop, ChatGPT, Cursor, and other AI assistants.

Curated, Brreg-verified experiences searchable by county, category, weather, season, group size, price, and duration.

Install

npx opplevagent-mcp

Or add to Claude Desktop config (~/.claude/claude_desktop_config.json):

{
  "mcpServers": {
    "opplevagent": {
      "command": "npx",
      "args": ["opplevagent-mcp"]
    }
  }
}

How it works

Since 0.4.0 the package is a thin stdio bridge to the live remote server (https://opplevagent.no/mcp). Tools, descriptions, instructions and UI resources always match the remote service, so the npm package and the remote never drift, and free-text query reaches discover_experiences unchanged. Remote rate limits apply.

Remote (Streamable HTTP)

For ChatGPT and other remote MCP clients, paste this URL directly:

https://opplevagent.no/mcp

Tools

ToolDescription
discover_experiencesSearch experiences by county (fylke), category, weather, season, indoor/outdoor, group size, age, price, duration
list_experience_categoriesList all categories with experience counts
get_experienceFull details for one experience via UUID
discover_gardssalgSearch gårdssalg (farm-sale) drink producers by county, municipality, producer type, near-me distance, booking status — or look one up by name with query. Rows carry id (the provider_id for booking)
book_gardssalgSubmit a pending booking request to a gårdssalg producer (never confirms — the producer responds). Accepts provider_query (the producer's name) instead of provider_id, plus requested_weekday as a wrong-day guard, so one sentence («book et møte hos X fredag 20. okt kl. 10») becomes one call

Examples

hva kan vi finne på i Troms om vinteren?
utendørsaktiviteter i Oslo for 4 personer
opplevelser som passer i regnvær i Bergen
hvalsafari Tromsø
familievennlige aktiviteter under 500 kr
hvilke typer opplevelser finnes i Norge?
book et besøk hos Fjordgard Bryggeri fredag 23. oktober kl. 10 for 4 personer

One-sentence booking (gårdssalg)

«Book et møte hos X fredag den 20. oktober klokken 10» is a single book_gardssalg call:

FieldValue
provider_query"X" — the producer's name as the guest said it (or provider_id from discover_gardssalg)
slot_at"2026-10-20T10:00" (Europe/Oslo)
requested_weekday"fredag" — if the 20th is not a Friday the tool answers weekday_mismatch:true with the nearest Fridays instead of booking the wrong day
party_size, guest_name, guest_emailthe human guest's own details — ask for them, never invent them

Outcomes are always honest and explicit: provider_not_found, provider_ambiguous (with candidates to put to the guest), weekday_mismatch (with suggestions), paused (the producer has not activated booking — profile link included), outside_hours (retry with confirm_outside_hours:true), or a pending request with booking_ref, the resolved provider.navn and slot_at_local. The producer is notified by email and confirms, proposes another time, or declines — the tool itself can never confirm a booking.

What the bridge sends

Besides the tool arguments of each call, the bridge identifies itself to the remote server in two ways: the MCP clientInfo (your AI client's name and version, as " via opplevagent-mcp") and a User-Agent header of the form opplevagent-mcp/<version>. This is client statistics, not an identifier of you: no account, credentials or device identifier is sent. The server keeps ordinary web-request logs (IP address and request metadata) for operations and abuse prevention.

Booking (gårdssalg)

book_gardssalg requires no login and is rate-limited on the server. The call sends the guest's name and e-mail address to opplevagent.no. The request stays pending until the producer answers; the tool never confirms a booking. Your AI client should have the guest's explicit yes before it calls the tool.

Trust boundary

The tool list, tool descriptions and server instructions are fetched from the remote server (https://opplevagent.no/mcp) over HTTPS every time the bridge starts. This package does not pin or freeze them, so what your AI client sees is whatever the remote service currently serves. OPPLEVAGENT_URL overrides the remote URL, and every tool argument you or your AI client supply is sent to that host. Only set it from a configuration you trust.

Environment

VariableDefaultDescription
OPPLEVAGENT_URLhttps://opplevagent.noOverride the remote base URL (or a full /mcp URL)

License

MIT

Reviews

No reviews yet

Be the first to review this server!