Server definition

Hash: sha256:2aefc9431c971dca37e2f637d074f65fae9e4960d671bc348cde57da36e5f55a
What it is: What a remote MCP server returned when asked what it offers: 4 tools

The blob, as servednamed by its sha256

{
  "instructions": null,
  "tools": [
    {
      "description": "Analyzes an Android project's source code for security vulnerabilities. Accepts project files (AndroidManifest.xml, build.gradle, Java/Kotlin sources, XML configs) and returns a structured security report with findings, severity scores, and recommendations.",
      "inputSchema": {
        "properties": {
          "files": {
            "description": "Array of project files to analyze",
            "items": {
              "properties": {
                "content": {
                  "description": "File content as text",
                  "type": "string"
                },
                "path": {
                  "description": "Relative file path within the project (e.g., app/src/main/AndroidManifest.xml)",
                  "type": "string"
                }
              },
              "required": [
                "path",
                "content"
              ],
              "type": "object"
            },
            "type": "array"
          },
          "options": {
            "description": "Analysis options",
            "properties": {
              "enableSecretScan": {
                "description": "Enable secret/credential scanning (default: true)",
                "type": "boolean"
              },
              "includeInfoLevel": {
                "description": "Include informational findings (default: true)",
                "type": "boolean"
              },
              "maxFileSizeKb": {
                "description": "Maximum file size in KB to process (default: 512)",
                "type": "number"
              }
            },
            "type": "object"
          },
          "projectName": {
            "description": "Name of the Android project being analyzed",
            "type": "string"
          }
        },
        "required": [
          "projectName",
          "files"
        ],
        "type": "object"
      },
      "name": "analyze_android_project",
      "outputSchema": null
    },
    {
      "description": "Explains a specific security finding by its rule ID. Returns why it is a risk, how to fix it, and false positive considerations.",
      "inputSchema": {
        "properties": {
          "findingId": {
            "description": "The rule/finding ID (e.g., MAN-001, SRC-003, SEC-002)",
            "type": "string"
          }
        },
        "required": [
          "findingId"
        ],
        "type": "object"
      },
      "name": "explain_finding",
      "outputSchema": null
    },
    {
      "description": "Returns the server health status, version, and rule engine statistics.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "health",
      "outputSchema": null
    },
    {
      "description": "Returns the list of all implemented security checks/rules with their IDs, categories, severity levels, and descriptions.",
      "inputSchema": {
        "properties": {
          "category": {
            "description": "Filter rules by category (manifest, gradle, source, xml-config, secret). Leave empty for all rules.",
            "enum": [
              "manifest",
              "gradle",
              "source",
              "xml-config",
              "secret"
            ],
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_android_security_checks",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:2aefc9431c971dca37e2f637d074f65fae9e4960d671bc348cde57da36e5f55a | sha256sum