Skip to content

Early access Governed MCP calls open to beta partners in March 2027. The MCP tracker and scanner are free to use today.

Stackduke Radar

PGA of America MCP server

No change

4 tools · Last check that passed 27 Oct 2026, 01:50 UTC

PGA of America's own remote MCP server gives an agent search for PGA coaches and golf programs near a location, coach availability, and lesson booking requests. Once a day, Stackduke connects to it the way any MCP client would, with no account and no sign-in, and lists its tools. It never runs them.

All 4 tools

ToolCounted as
book_golf_lessonChanges things
get_golf_coach_availabilitySaid to only read
search_golf_coachesSaid to only read
search_golf_programsSaid to only read

The tools the server listed at the last check that passed, at its default address and settings, with no sign-in; an account that signs in, or other settings, may see other tools. What a tool is counted as doing is Stackduke's cautious reading of the server's labels, the tool's name and its description: where they disagree it takes whichever says the tool can do most, so it overcounts on purpose. It does not say the server is safe, and it does not list what a tool cannot do. Descriptions are not shown, because they are written for models and may try to steer them.

Recent checks

12 of the last 12 checks passed

A check passes when the server lists its tools. Checked at https://mcp.pga.com/mcp.

Recent changes

No change seen across the last 12 checks that passed.

From the scan of 27 Oct 2026, 01:52 UTC. "Changed" and "Can do more" count changes from the last 30 days; older ones stay listed here. A change made and undone between two checks is not seen. Every check is in the scanner's public data.

What to watch for
  • Its book_golf_lesson tool sends the student name, email and phone, and a guardian name for juniors. Free lessons and those with no prepayment can be booked automatically. PGA of America's MCP page
  • Booking needs a PGA.com sign-in with the mcp:coaching scope, which is asked for the first time a booking is tried. PGA of America's MCP page
How to limit it

With PGA of America's own settings, as its documentation describes them. Stackduke has not tested them.

  • Lessons that need prepayment finish at a continuation link, so we recommend the user opens it and checks the lesson before paying. PGA of America's MCP page
  • Keep a person approving each booking request, as OWASP advises for high-risk actions, since some lessons book automatically. OWASP, prompt injection
What Stackduke is designed to do

Stackduke is designed to sit between your agents and their MCP servers: to check each tool call against your rules before it runs, hold the risky ones for a person to approve, and keep a record of what was decided.

It does not yet forward or block tool calls for customers. Today it reads what this server offers and publishes what changes.

Stackduke is not affiliated with or endorsed by PGA of America. The PGA of America name belongs to its owner and is used here only to name its MCP server.

How the tracker works, and every other server it checks, is on the tracker page. The scanner and its data are open source at github.com/Stackduke/mcp-scanner.