Find great espresso cafes worldwide with curated data and transparent quality scoring.
MCPpedia last refreshed this data
io.github.mattgierhart/espresso-mcp is an MCP server that find great espresso cafes worldwide with curated data and transparent quality scoring. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 72/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"espresso": {
"args": [
"-y",
"espresso-mcp@latest"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
An MCP server that finds great espresso cafes — and codifies what makes them great.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'openclaw' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
OpenClaw: Native command authorization could skip owner-command enforcement
### Summary Native command authorization could skip owner-command enforcement. In affected versions, a sender able to trigger native command handling could authorize a native command without enforcing the configured owner-only command policy. This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, app
OpenClaw: Native command authorization could skip owner-command enforcement
### Summary Native command authorization could skip owner-command enforcement. In affected versions, a sender able to trigger native command handling could authorize a native command without enforcing the configured owner-only command policy. This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, app
OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks
### Summary PowerShell encoded-command aliases could miss exec allowlist checks. In affected versions, a command request using abbreviated encoded-command flags could use an alias form not recognized by the allowlist parser. This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist,
OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks
### Summary PowerShell encoded-command aliases could miss exec allowlist checks. In affected versions, a command request using abbreviated encoded-command flags could use an alias form not recognized by the allowlist parser. This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist,
OpenClaw: Trusted retry endpoint checks could match hostname prefixes
### Summary Trusted retry endpoint checks could match hostname prefixes. In affected versions, a retry endpoint URL chosen by lower-trust input could pass validation by using a hostname prefix that resembled a trusted host. This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, s
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security
Regression testing for MCP servers. Checks capabilities, invokes tools, detects schema drift.
MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...
MCP Security Weekly
Get CVE alerts and security updates for io.github.mattgierhart/espresso-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
An MCP server that finds great espresso cafes — and codifies what makes them great.
espresso-mcp is a Model Context Protocol server you can plug into Claude Desktop, Claude.ai, ChatGPT, Google Gemini, Cursor, Hermes, OpenClaw, and any other standard MCP host. It ships with a curated database of 100+ specialty-coffee shops, 75+ specialty roasters, and a transparent scoring algorithm that captures why a shop is good — sourcing, freshness, equipment, training — and why a shop is bad (the heaviest negative signal: menus dominated by flavored syrups).
It is not a Yelp clone. The data is hand-curated, the scoring is explicit, and the philosophy is "if it's covering bad coffee with flavors, we don't want it."
espresso-mcp has an opinion. Shops that hide bad coffee behind flavored syrups are the failure pattern this tool is designed to filter out. The scoring algorithm gives syrup_emphasis the heaviest non-disqualifying penalty (−22) — heavier than any single positive signal. Mass-market chains (Starbucks, Dunkin', Costa, Tim Hortons, Peet's, Caribou) and "looks third-wave but tastes flavored" shops (the algorithm's flavor-led-specialty category) score in avoid or fair tier regardless of how good the signage looks.
Positive credit goes to the signals great shops actually invest in:
Every signal is documented at src/scoring/weights.ts and surfaced to clients via the score breakdown on every result — you can see exactly why a cafe is recommended.
You: I'm near Brandenburg Gate in Berlin. Find me 3 great espresso cafes
within walking distance.
Claude: [resolves Brandenburg Gate → 52.5163, 13.3777]
[calls find_espresso_near with radius_km=2]
Found 3 specialty cafes within 2km of Brandenburg Gate, sorted by quality:
• The Barn (Mitte) — 0.8km — score 95 (world-class) — World's #61
In-house roastery, single-origin focus, "never blends beans." Founded
2010, one of Europe's leading third-wave roasters.
• Companion Coffee (Mitte) — 1.1km — score 83 (great)
Curated multi-roaster with rotating guest beans. Tea + coffee crossover
in a quiet Mitte design space.
• Westberlin (Mitte) — 1.3km — score 82 (great)
Iconic third-wave anchor since ~2010. Magazine + coffee concept; pours
The Barn and rotating European roasters.
Once installed in your MCP client, you can ask things like: