Atlas / MCP servers / skyunlimit / skyunlimit-sinoconnection-esim

skyunlimit-sinoconnection-esimSAFE

mcp/skyunlimit/sinoconnection-esim-mcp

SinoConnection eSIM — read-only MCP server (China & Asia travel eSIM specialist, 200+ countries)

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
streamable-http
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The China & Asia travel eSIM specialist — with global coverage in 200+ countries.

A public, read-only Model Context Protocol server that lets AI assistants (ChatGPT, Claude, Gemini, ...) search travel-eSIM plans, look up plan details, and check device eSIM compatibility on a user's behalf. Specialized China plans deliver uncensored internet without a VPN.

Operated by SinoConnection 华人通 (SinoConnection LLC), a physical wireless store in Elmhurst, Queens NY, serving the community since 2001.

Connect

  • Endpoint: https://mcp.sinoconnection.com/mcp
  • Transport: Streamable HTTP (MCP JSON-RPC 2.0)
  • Auth: none (public, read-only)

Claude (custom connector)

Settings → Connectors → Add custom connector → paste the endpoint URL.

ChatGPT / other MCP clients

Add a remote MCP server pointing at the endpoint above.

Tools

Purchasing is completed by the human on sinoconnection.com — the connector never handles payment.

Privacy

Read-only. No account, no sign-in; the connector does not collect name, email, phone, or payment details. See the Privacy Policy (§ AI Assistant Connector).

About the "no-VPN in China" note

Per Airalo's official documentation, China, Regional Asia, and Global eSIMs with China coverage work in China without a VPN (international routing bypasses the Great Firewall

Read from source at commit e8b424088980OBSERVED · 2026-10-13
02

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (2)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-13 · audit v0.4.1 · source sha e8b424088980full audit observations/trust-audit/mcp-server/skyunlimit__sinoconnection-esim-mcp.json · Report an issue / request a re-scan
03

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-13e8b424088980SAFEB89first audit
04

Questions

What is the skyunlimit-sinoconnection-esim MCP server?

SinoConnection eSIM — read-only MCP server (China & Asia travel eSIM specialist, 200+ countries)

Is skyunlimit-sinoconnection-esim safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does skyunlimit-sinoconnection-esim need?

No credential environment variables were found in its source, so it appears to need none.

How does skyunlimit-sinoconnection-esim run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (e8b424088980), read on 2026-10-13. The repository is watched and re-audited when it changes.

Advertisement