SentryFi MCP server

A public Wi-Fi risk check that ChatGPT, Claude and other MCP clients can call. You describe the network (where it is, the password type, the sign-in page, any warnings you saw) and it returns a 0–100 score, the signals behind it, advice per activity, and who on that network can see what.

• Read-only. Every tool is annotated readOnlyHint; nothing is changed anywhere.
• No auth. No account, no API key, no OAuth.
• Nothing stored. Inputs stay in memory for one request and are not logged. Privacy policy.
• Does not scan your network. It never connects to or probes any network. The risk is computed only from what you describe, so the result is a set of signals, not a guarantee.

Endpoint (Streamable HTTP, stateless, POST):
https://sentryfi.mcp.srofia.com/mcp
Also served at https://mcp.srofia.com/sentryfi/mcp.

Try it with curl

Airport Wi-Fi with no password and a sign-in page on plain http (the sed and jq part only prints the text answer):

curl -s -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  https://sentryfi.mcp.srofia.com/mcp \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"check_public_wifi_risk","arguments":{"venue":"airport","security":"open","signInPage":"http"}}}' \
  | sed -n 's/^data: //p' | jq -r '.result.content[0].text'

Expected output (shortened):

Airport Wi-Fi: 55/100, some risk signals. Worth a closer look. Browse only, no logins. Signals: open, signin_http. The Wi-Fi owner (hotel, airport, café, host) can see: Which sites you visit (from DNS lookups and the site name your device sends); When you're online and how much data you use; Full pages and anything you type on sites without HTTPS. Cannot see: What you type on HTTPS sites; … Risk signals from your answers, not a guarantee. This check cannot see or scan the network itself.

The same reply carries the full result as JSON in result.structuredContent. List the tools and their schemas:

curl -s -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  https://sentryfi.mcp.srofia.com/mcp \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Tools

Only venue and devices are required. Yes/no fields accept null for "not known", and the model is told to use it instead of guessing.

check_public_wifi_risk

Score and signals for hotel, airport, café, rental or campus Wi-Fi, advice per activity, who can see what, and a checklist for that kind of place.

• venue required – hotel, airport, cafe, rental, campus, home, other
• security enum – open, shared_password, private_password, enterprise_login, unknown (default)
• signInPage enum – none, https, http, unknown (default)
• signInAsks array – room_and_name, email, phone, social_login, card_details, access_code
• nameConfirmed, similarNetworkNames, certificateWarning boolean | null
• usingVpn, encryptedDns, httpsOnly boolean – default false
• mobileDataAvailable boolean – default true
• activities array – browsing, streaming, email_social, banking_payments, work_accounts, file_sharing

identify_wifi_devices

Names the maker of each device in a list you copied from your own router, from the first 6 characters of its MAC address (public IEEE registry), with a likely device type and the ones worth checking. The rest of the address is dropped before lookup.

• devices required, array of {name, mac} – an empty list returns steps to find the list on your router
• routerBrand enum – generic, tp_link, netgear, asus, xfinity, eero, google_nest, orbi, att, spectrum, other

secure_my_wifi

A home router checklist ranked by impact, and, when symptoms are given, hack signals out of 100 with common causes that are not a hack and ordered first steps.

• routerBrand enum – same values as above
• alreadyDone array – admin_password, encryption, wifi_password, firmware, wps_off, remote_admin_off, upnp_off, guest_network, ssid_rename, dns
• smartHome enum – none, some, many, unknown (default)
• needsUpnp, cantLogIntoRouter, dnsChanged, redirectsOrPopups, redirectsOnAllDevices, wifiSettingsChanged, unknownDevices, adminPasswordDefault, firmwareOutdated, wpsOn, passwordSharedWidely, slowInternet, lightsAtNight boolean | null

Connect

ChatGPT

Turn on developer mode (Settings → Apps & Connectors → Advanced settings), then create a connector, paste https://sentryfi.mcp.srofia.com/mcp and choose no authentication. Menu names can differ by plan.

Claude and other MCP clients

In Claude, add a custom connector (Settings → Connectors → Add custom connector) with the same URL; no OAuth fields are needed. Any client that speaks Streamable HTTP works. To check from a terminal with the MCP Inspector CLI:

npx @modelcontextprotocol/inspector --cli https://sentryfi.mcp.srofia.com/mcp \
  --transport http --method tools/list

MCP Registry

Listed in the official MCP Registry as com.srofia/sentryfi: registry entry (JSON).

Made by the team behind the SentryFi app · App Store · Google Play