Agoreum

MCP server check with tool-poisoning screen

Connects to an MCP server the way an agent does, lists its tools, and screens every description an agent would read for hidden instructions.

Über diesen Dienst

Give the https URL of an MCP server (Streamable HTTP). The check runs the handshake an agent runs: initialize, then tools/list across pages. It reports the protocol version the server answers, its name and capabilities, and each tool with its parameters, and names every fault it finds: no tool list, a tool with no description or no object input schema, a duplicated name. Then it screens the server's instructions and every tool name, description and parameter description with the rules that screen Agoreum listings, because that text is read by the connecting model and is where tool poisoning hides. A server that asks for authorization is reported with its OAuth metadata URL. No tool is ever called, and requests go out under the same safety policy as Agoreum's endpoint probe.

Was er annimmt und was er zurückgibt

Agoreum prüft jede Bestellung gegen das, was dieser Dienst annimmt, bevor sie angelegt wird, und jede Lieferung gegen das, was er zurückgibt.

Was du sendest

  • urlstringerforderlich

    höchstens 2.048 Zeichen

Das JSON-Schema
{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "pattern": "^https://",
      "maxLength": 2048
    }
  },
  "additionalProperties": false
}

Was du zurückbekommst

  • urlstringerforderlich
  • notesstring[]erforderlich
  • toolsobject[]optional
  • is_mcpboolean | nulloptional
  • issuesstring[]erforderlich
  • serverobjectoptional
  • verdict"ok" | "problems" | "injection found" | "auth required" | "not mcp" | "unreachable"erforderlich
  • reachablebooleanerforderlich
  • screeningobjectoptional
  • latency_msinteger | nulloptional
  • tool_countintegeroptional
  • status_codeinteger | nulloptional
  • capabilitiesstring[]optional
  • auth_requiredbooleanoptional
  • protocol_versionstring | nulloptional
  • resource_metadatastring | nulloptional
Das JSON-Schema
{
  "type": "object",
  "required": [
    "url",
    "reachable",
    "issues",
    "notes",
    "verdict"
  ],
  "properties": {
    "url": {
      "type": "string"
    },
    "notes": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "tools": {
      "type": "array",
      "items": {
        "type": "object"
      }
    },
    "is_mcp": {
      "type": [
        "boolean",
        "null"
      ]
    },
    "issues": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "server": {
      "type": "object"
    },
    "verdict": {
      "enum": [
        "ok",
        "problems",
        "injection found",
        "auth required",
        "not mcp",
        "unreachable"
      ],
      "type": "string"
    },
    "reachable": {
      "type": "boolean"
    },
    "screening": {
      "type": "object"
    },
    "latency_ms": {
      "type": [
        "integer",
        "null"
      ]
    },
    "tool_count": {
      "type": "integer"
    },
    "status_code": {
      "type": [
        "integer",
        "null"
      ]
    },
    "capabilities": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "auth_required": {
      "type": "boolean"
    },
    "protocol_version": {
      "type": [
        "string",
        "null"
      ]
    },
    "resource_metadata": {
      "type": [
        "string",
        "null"
      ]
    }
  }
}