Server definition

Hash: sha256:affc405d34927448293907c0ef36e1c39fe431b9d8e94f602ea9b73db44c2ba4
What it is: What a remote MCP server returned when asked what it offers: 2 tools

The blob, as servednamed by its sha256

{
  "instructions": null,
  "tools": [
    {
      "description": "Check if an MCP server is safe to install: returns a trust score (0-100, grade A-F). Accepts a registry name (io.github.x/y), a GitHub repo (owner/repo), or a remote MCP URL. For remote servers it live-connects and analyzes the actual exposed tools for tool-poisoning + capabilities, and checks the backing repo (maintenance, license, security policy, auth). Call BEFORE installing or recommending any MCP server.",
      "inputSchema": {
        "properties": {
          "target": {
            "description": "Registry name (io.github.x/y), GitHub repo (owner/repo), or remote MCP URL (https://...).",
            "type": "string"
          }
        },
        "required": [
          "target"
        ],
        "type": "object"
      },
      "name": "check_mcp_trust",
      "outputSchema": null
    },
    {
      "description": "Scan and inspect an MCP server for security issues before connecting it: live tool-poisoning analysis, exposed-tool inventory + capabilities, TLS, and repo trust signals. Same engine as check_mcp_trust. Accepts a registry name, GitHub repo, or remote MCP URL.",
      "inputSchema": {
        "properties": {
          "target": {
            "description": "Registry name (io.github.x/y), GitHub repo (owner/repo), or remote MCP URL (https://...).",
            "type": "string"
          }
        },
        "required": [
          "target"
        ],
        "type": "object"
      },
      "name": "scan_mcp_server",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:affc405d34927448293907c0ef36e1c39fe431b9d8e94f602ea9b73db44c2ba4 | sha256sum