MCP.Market

Kicksmash MCP server

online · 100% uptime
by kicksma.sh·sh.kicksma/kicksmash·v1.1.0
No reviews yet

Padel matches for people and agents: create, share one link, join, americano schedules, levels.

B81/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B81/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Kicksmash yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Kicksmash tools (15, 4 write)

write = sends, deletes, buys or posts
  • about_kicksmashFree

    What Kicksmash is and how to use it: matches, levels, groups, boards, the API and what we ask of assistants. Read this once before acting.

  • book_lessonFree

    Book one lesson at a free start for an accepted student (their personal token). Draws from their open package when they have one. Confirm the time with the person first.

  • cancel_lessonwrite actionFree

    Cancel a student's lesson under the coach's rules; the outcome says whether it was refunded, covered by a free pass, or counted. Say the rule to the person before cancelling late.

  • coach_slotsFree

    Free starts inside a coach's hours for the next days (default 14). Only accepted students can book them: request_coach first.

  • create_api_keywrite actionFree

    Get a free key instantly for roomier limits and webhooks. Shown once. Not needed for reading or for a few writes a day.

  • create_matchwrite actionFree

    Create a padel match (4 players) or an americano tournament for a person. A tournament may keep fixed pairs (fixedPairs: true): two partners play every round together and the table ranks pairs. Returns the share link for the players and the organizer's private links. Give the person all links; keep personalToken and manageUrl private. Ask before creating; one request, one match.

  • find_clubsFree

    Padel clubs: booking link and platform, courts, today's free courts (from the club's own calendar feed, or read from its booking platform's public page: freeCourts.source says which, and freeCourts.platform names it), founding status. Every row says `claimed`: true when the club runs the page itself, false when Kicksmash listed it from public sources, where the courts and links are our reading and may be out of date. Pass include:'listed' to get both — that is what answers "where can I play here?". Filter by city (phuket, singapore) or ask for one club by name.

  • find_coachesFree

    Padel coaches who listed their page: clubs, lesson length, languages, the rules students book under (cancellation cutoff, free late passes, notice). Filter by city. Prices are the coach's to tell; nothing is paid through Kicksmash.

  • find_matchesFree

    Open, organizer-listed matches at a venue (its public board), with spots left and level ranges. Give the venue name; the slug is derived.

  • find_seriesFree

    Tournament series: same weekday and time every week, fortnight or month, with the next edition to sign up for and the past podiums. Filter by city, or pass a slug for one series. Players sign up on the edition's match page.

  • generate_scheduleFree

    Rounds of rotating-partner doubles for 4 to 64 players. Exact when the field is in fours (every pair partners once in players−1 rounds), fair sit-outs otherwise. Nothing is stored.

  • get_groupFree

    A crew that plays together: members' first names and count (their levels are for members only, so null here), weekly slot, whether it asks to join, upcoming matches, calendar feed.

  • get_matchFree

    A match or tournament by its 4-character code: players with levels, spots left, venue, time, level range, result. Public data only.

  • join_matchwrite actionFree

    Put a person into a match by first name (or by their personal token from an earlier call). Handles waitlists and level ranges; when the level is outside the range, the organizer is asked to approve, unless the player already played a finished, scored match with that organizer. On a fixed-pairs tournament pass partner (a first name) to sign up as a pair: the answer's partner.inviteUrl is the link the partner opens to claim their spot; without partner the person is listed as needing a partner. For a group's match the answer says whether the person is now a member of the group; a group that asks to join is never joined through a match. A place the organizer holds for the same name refuses the join (name_held) and writes nothing: if it is that person, they take the place on the match page; if not, they join with a fuller name, such as a last name. A name (with no token) that a player already in the match carries refuses the join (name_seated) and writes nothing: if it is that player, call again with their personal token; if not, join with a fuller name.

  • request_coachFree

    Ask a coach to accept a person as their student, by first name or personal token. The coach answers with one tap. Keep the returned personalToken private to the student; book_lesson needs it. Ask the person before calling.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1150ms20/20
  • Tool poisoning15 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 4 write-action tools with no auth3/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 81/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Kicksmash compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
81/100
higher than 62% of 48,243 servers
Tools
15
the typical server has 7
Tools that change things
27%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
525 ms
faster than 31% of 30,027 servers

What its tools let an agent do: 9 read · 4 create · 1 change · 1 delete

Install Kicksmash in Claude Code, Cursor or VS Code

claude mcp add --transport http kicksmash https://kicksma.sh/mcp
Add to Cursor

What the publisher says

From the Kicksmash repository's README, as published. We do not edit it. Read it on GitHub

Kicksmash — padel match-up in one link

Mobile-first web app for organizing padel matches with zero app installs, zero accounts, zero passwords. Create a match, share kicksma.sh/{code} on WhatsApp or Telegram, friends tap → enter a name once → they're in.

  • Stack: Next.js 15 (App Router, TypeScript) · Supabase Postgres + Drizzle · Resend · next-intl (EN/RU/ES) · Tailwind v4 · Vercel (Cron + OG images).
  • Open source under the Apache License 2.0. Run your own copy, build on it, send a PR: see CONTRIBUTING.md and SECURITY.md.
  • Identity: one-time name entry → player UUID in a signed httpOnly cookie (1 year) + localStorage mirror. Cross-device: every player has a private personal link (/p/{token}, shown on My matches, in every email and in the calendar invite) that signs any device in; an email that was used before can restore history with a 6-digit code, merging all identities that share it. The home-screen shortcut opens the personal link, and calendar entries and emails carry the private event link (/p/{token}/{code}: signs the device in, opens the match). A newly added email receives the personal link (inside the calendar invite when in a match, otherwise on its own). Tokens are 12 characters; older 32-char tokens keep working as previoustoken after the lazy shortening. An email can be changed but never blanked once set; the previous address is kept as recoveryemail, so a restore code sent to either address gets the player back in. "Email me this link" on My matches mails the personal link (native share, copy and QR are the other options).
  • Push reminders: Web Push (VAPID) one hour before each match, for every device the player enabled it on (iPhone: from the home-screen app). /api/cron/push is called every 5 minutes by Supabase pgcron + pgnet (Vercel Hobby cron is daily). Set VAPIDPUBLICKEY, VAPIDPRIVATEKEY, VAPID_SUBJECT.
  • Links: /{code} (4 chars, public) · /{code}/i/{6} (personal invite) · /{code}/manage/{10} (organizer secret).
  • Agent-native and open. A public REST API (OpenAPI 3.1 at /api/openapi.json), an MCP server at /mcp that any assistant adds by URL, instant self-serve keys, signed webhooks, llms.txt, /.well-known/mcp.json, a robots.txt that welcomes AI crawlers, AGENTS.md, an installable skill (npx skills add evhg/padel-matchup), calendar feeds per group and venue. Public data is CC BY 4.0. See /developers and /agents.
  • Email is optional everywhere. Without RESENDAPIKEY the app runs fully with email features hidden.
  • Privacy, short and cheeky: /about (one faint footer link) says what is stored, what is never done, and how to leave. Every organizer-initiated email (invites, invite reminders) carries a signed one-tap /unsubscribe link; a player adding their own address again lifts the opt-out. "Delete my account" at the bottom of My matches wipes personal data, releases upcoming spots, cancels the player's own upcoming matches, and — if they coach — cancels their upcoming lessons (each student told, with the coach's real name) and takes their coach page down with everything on it; old scores stay as "Deleted player". A coach who wants only the page gone, keeping the account, has "Delete my coach page" at the bottom of their settings, which refuses while a lesson is still to come.
  • Levels: every player can declare a padel level (0–7 in quarter steps, the scale the padel apps use) once, from My matches or the first time a ranged match asks for it. It shows as a small chip next to the name everywhere (roster, standings, team picker). Results nudge it: when the organizer confirms a 2v2 score or finalizes a tournament, a

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Kicksmash: common questions

Is Kicksmash MCP server safe?
Mostly: it is graded B (81/100). Read the Kicksmash safety report
How do I install Kicksmash?
It runs remotely at kicksma.sh. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Kicksmash need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Kicksmash maintained?
The last commit was 21 days ago (2026-10-15). The latest release is v1.1.0.
Is Kicksmash up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Kicksmash?
Servers from other publishers that do the same job: Compiler Explorer MCP server.
How does Kicksmash compare with other MCP servers?
safety score 81/100 (higher than 62% of 48,243 servers); tools 15 (the typical server has 7); tools that change things 27% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Kicksmash

Same job from other publishers: the closest match first, then the best rated.

  • Compiler Explorer
    Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links
    B