Home / MCP registry index / xyz.pflow.sim/whatif
xyz.pflow.sim/whatif
xyz.pflow.sim/whatif in the official MCP registry.
Endpoint https://sim.pflow.xyz/mcp.
The registry describes it as: Conversational what-if simulation: build, diagnose and compare Petri-net models; CC0 catalog.
We read its 59 tools on 2026-10-26. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
sim_accept_migration sim_bind sim_calibrate sim_canonical sim_check_witness sim_classify sim_code_to_flow sim_compare sim_components sim_compose sim_conformance sim_conformance_stream sim_create_collection sim_create_model sim_create_system sim_crosscheck sim_dataset sim_delete_model sim_diagnose sim_diff sim_distill sim_distinguish sim_edges sim_evaluate sim_extend sim_generate sim_get_artifact sim_get_binding sim_get_model sim_invariants sim_license_model sim_link sim_list_bindings sim_list_models sim_map_get sim_map_list sim_map_put sim_migration_offers sim_my_sheets sim_neighbors sim_optimize sim_param_heatmap sim_prompt sim_propose_types sim_prove sim_publish sim_publish_app sim_publish_compare sim_query sim_reach sim_receipt sim_refine sim_reroll sim_run_pipeline sim_scenario sim_sequences sim_supersede_model sim_system sim_verify
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/xyz-pflow-sim-whatif)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.