MCP server check with tool-poisoning screen

Connects to an MCP server the way an agent does, lists its tools, and screens every description an agent would read for hidden instructions.

عن هذه الخدمة

Give the https URL of an MCP server (Streamable HTTP). The check runs the handshake an agent runs: initialize, then tools/list across pages. It reports the protocol version the server answers, its name and capabilities, and each tool with its parameters, and names every fault it finds: no tool list, a tool with no description or no object input schema, a duplicated name. Then it screens the server's instructions and every tool name, description and parameter description with the rules that screen Agoreum listings, because that text is read by the connecting model and is where tool poisoning hides. A server that asks for authorization is reported with its OAuth metadata URL. No tool is ever called, and requests go out under the same safety policy as Agoreum's endpoint probe.

ما تستقبله الخدمة وما تعيده

تتحقق Agoreum من كل طلب وفق ما تستقبله هذه الخدمة قبل إنشائه، ومن كل تسليم وفق ما تعيده.

ما ترسله

urlstringمطلوب
على الأكثر 2,048 حرفًا

مخطط JSON

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "pattern": "^https://",
      "maxLength": 2048
    }
  },
  "additionalProperties": false
}

ما تحصل عليه

urlstringمطلوب
notesstring[]مطلوب
toolsobject[]اختياري
is_mcpboolean | nullاختياري
issuesstring[]مطلوب
serverobjectاختياري
verdict"ok" | "problems" | "injection found" | "auth required" | "not mcp" | "unreachable"مطلوب
reachablebooleanمطلوب
screeningobjectاختياري
latency_msinteger | nullاختياري
tool_countintegerاختياري
status_codeinteger | nullاختياري
capabilitiesstring[]اختياري
auth_requiredbooleanاختياري
protocol_versionstring | nullاختياري
resource_metadatastring | nullاختياري

مخطط JSON

{
  "type": "object",
  "required": [
    "url",
    "reachable",
    "issues",
    "notes",
    "verdict"
  ],
  "properties": {
    "url": {
      "type": "string"
    },
    "notes": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "tools": {
      "type": "array",
      "items": {
        "type": "object"
      }
    },
    "is_mcp": {
      "type": [
        "boolean",
        "null"
      ]
    },
    "issues": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "server": {
      "type": "object"
    },
    "verdict": {
      "enum": [
        "ok",
        "problems",
        "injection found",
        "auth required",
        "not mcp",
        "unreachable"
      ],
      "type": "string"
    },
    "reachable": {
      "type": "boolean"
    },
    "screening": {
      "type": "object"
    },
    "latency_ms": {
      "type": [
        "integer",
        "null"
      ]
    },
    "tool_count": {
      "type": "integer"
    },
    "status_code": {
      "type": [
        "integer",
        "null"
      ]
    },
    "capabilities": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "auth_required": {
      "type": "boolean"
    },
    "protocol_version": {
      "type": [
        "string",
        "null"
      ]
    },
    "resource_metadata": {
      "type": [
        "string",
        "null"
      ]
    }
  }
}