{"server":{"name":"io.github.Compuute/compuute-scan-api","title":"Compuute MCP Security Scanner","$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","remotes":[{"url":"https://scan.compuute.se/mcp/","type":"streamable-http"}],"version":"0.3.0","repository":{"url":"https://github.com/Compuute/compuute-scan-api","source":"github"},"websiteUrl":"https://scan.compuute.se","description":"Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages."},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","isLatest":true,"updatedAt":"2026-05-23T20:33:27.90771Z","publishedAt":"2026-05-23T20:33:27.90771Z","statusChangedAt":"2026-05-23T20:33:27.90771Z"},"dev.protogrid/connectability":{"class":"R0","autonomous":true,"human_steps":[],"preferred":{"kind":"remote","idx":0},"remotes":[{"idx":0,"url":"https://scan.compuute.se/mcp/","transport":"streamable-http","templated":false,"headers":[],"auth":{"type":"none","location":null,"secret_name":null,"oauth":null},"protocol":{"supported_versions":["2025-11-25"],"stateless":true},"health":{"reachable":true,"uptime_30d":1,"latency_ms_p50":521,"consecutive_failures":0,"last_probe_at":"2026-10-20T06:03:42.594Z","last_ok_at":"2026-10-20T06:03:42.594Z"}}],"packages":[]},"dev.protogrid/tools":[{"name":"scan_mcp_server","title":null,"description":"Scan a public GitHub MCP-server repository for security issues.\n\n    Clones the repo (shallow, <60s, <200 MB), runs compuute-scan v0.6.2 in\n    static analysis mode (no code execution from the target), and returns a\n    structured report with severity counts, a 0-100 score, and the 10 most\n    severe findings.\n\n    WHEN TO USE:\n      - Before connecting to an unknown MCP server discovered via Anthropic\n        Registry, Smithery, mcp.so, or a Discord recommendation.\n      - Before installing a third-party MCP-server package into a production\n        pipeline.\n      - As part of an agent's pre-commit / pre-deploy due-diligence step\n        when adding new dependencies.\n      - As one input to a multi-source trust evaluation (combine with\n        publisher reputation, package install count, last-update recency).\n\n    WHEN NOT TO USE:\n      - For private repos. Use the on-prem CLI instead:\n          `npx compuute-scan ./path-to-private-repo`\n      - For deep exploitability assessment of a specific code path. This is\n        pattern matching, not dataflow analysis. Book a manual L2-L4 audit\n        at https://compuute.se/audit for that depth.\n      - For non-GitHub hosts (GitLab, Bitbucket, self-hosted). v1 supports\n        github.com only.\n      - For repos > 200 MB or clone time > 60s. The endpoint returns a 413\n        or 504 in those cases — fall back to local CLI.\n\n    EXPECTED RESPONSE TIME:\n      - Median: ~1-2 seconds for small repos (<100 files).\n      - p99: ~10 seconds for medium repos.\n      - Hard timeout at clone=60s, scan=120s combined.\n\n    EXPECTED COST:\n      - Free tier in MVP. Future Pro tier may charge per-scan or per-month.\n\n    DATA FRESHNESS:\n      - Scanner version is reported in response.scanner.version.\n      - L1 rule set freshness reflects compuute-scan releases — see\n        github.com/Compuute/compuute-scan/CHANGELOG.md for the latest CVE\n        and threat-intel response timeline.\n\n    EXAMPLES:\n\n      Example 1 — scan an MCP server you're evaluating:\n        github_url = \"https://github.com/modelcontextprotocol/servers\"\n        → score: 0, summary: {critical: 1, high: 94, medium: 22}\n        → top_findings include SSRF, eval, etc.\n        → recommendation: \"AVOID — 1 critical and 94 high finding(s)...\"\n\n      Example 2 — scan a clean reference implementation:\n        github_url = \"https://github.com/microsoft/azure-devops-mcp\"\n        → score: 90+, summary: {critical: 0, high: 1}\n        → recommendation: \"REVIEW — 1 high finding(s)...\"\n\n      Example 3 — scan your own dev MCP-server before publishing:\n        github_url = \"https://github.com/yourorg/your-mcp\"\n        → audit your own surface before others install it\n\n    OUTPUT FIELDS (stable schema):\n      - repo_url (str): canonical URL of the scanned repo.\n      - score (int): 0-100, higher safer. Coarse summary, not a precision claim.\n      - summary (object): {critical, high, medium, low, info, files_scanned}.\n      - recommendation (str): action guidance derived from severity counts.\n      - findings_count (int): total raw findings (may include false positives).\n      - top_findings (list): up to 10 most severe, each with {id, title,\n        severity, file, line, owasp, cwe}.\n      - l0_discovery (object): MCP transport, tool count, dependency pinning.\n      - performance (object): clone_seconds, scan_seconds, repo_size_bytes.\n      - scanner (object): {name, version, layers_covered}.\n      - _disclaimer (str): MANDATORY triage disclaimer. Read it.\n\n    Args:\n      github_url: Public GitHub HTTPS URL (e.g. https://github.com/org/repo).\n                  Must be public and < 200 MB. v1 is github.com only.\n\n    Returns:\n      Structured scan result. On error, returns {\"error\": code, \"message\": ...}\n      with HTTP-style code (invalid_url, clone_failed, scan_timeout, etc.).\n    ","annotations":null,"source":"probe","observed_at":"2026-10-20T06:03:42.594Z"}],"dev.protogrid/trust":{"score":90,"components":{"hygiene":100,"liveness":100,"freshness":65,"provenance":90},"drivers":["+repository","+namespace-matches-repo","+website","+reachable","+uptime-100%","~updated-149d-ago"],"flags":[],"blocked":false,"computed_at":"2026-10-20T07:46:02.584Z","disclaimer":"Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed."},"dev.protogrid/quality":{"score":76,"label":"good","components":{"auth":null,"hygiene":64,"protocol":75,"stability":100,"dependencies":null},"checks":[{"id":"protocol.modern","detail":"newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28","status":"warn","category":"protocol"},{"id":"protocol.stateless","detail":"only applies to 2026-07-28 servers","status":"na","category":"protocol"},{"id":"protocol.transport","detail":"streamable HTTP","status":"pass","category":"protocol"},{"id":"protocol.list_ttl","detail":"only applies to 2026-07-28 servers","status":"na","category":"protocol"},{"id":"auth.prm","detail":"no remote uses OAuth","status":"na","category":"auth"},{"id":"auth.as_metadata","detail":"no remote uses OAuth","status":"na","category":"auth"},{"id":"auth.cimd","detail":"no remote uses OAuth","status":"na","category":"auth"},{"id":"auth.secret_in_url","detail":"no templated URL","status":"na","category":"auth"},{"id":"tools.descriptions","detail":"every tool has a description","status":"pass","category":"hygiene"},{"id":"tools.description_length","detail":"1 tools have descriptions over 1,024 characters, which crowds the context","status":"warn","category":"hygiene"},{"id":"tools.schemas","detail":"every tool has an object input schema","status":"pass","category":"hygiene"},{"id":"tools.annotations","detail":"no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones","status":"fail","category":"hygiene"},{"id":"tools.directory_hints","detail":"no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: scan_mcp_server (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)","status":"fail","category":"hygiene"},{"id":"tools.token_cost","detail":"about 999 tokens to load every tool","status":"pass","category":"hygiene"},{"id":"tools.api_dump","detail":"tools are not a one-to-one API dump","status":"pass","category":"hygiene"},{"id":"stability.changes","detail":"no tool changes in 30 days","status":"pass","category":"stability"},{"id":"stability.rug_pull","detail":"no tool changed its meaning under the same name","status":"pass","category":"stability"},{"id":"deps.known_vulns","detail":"no npm or PyPI package","status":"na","category":"dependencies"},{"id":"deps.mcp_sdk_version","detail":"no npm or PyPI package","status":"na","category":"dependencies"},{"id":"deps.resolvable","detail":"no npm or PyPI package","status":"na","category":"dependencies"}],"drivers":["-tools.annotations","-tools.directory_hints","~protocol.modern","~tools.description_length"],"flags":[],"tool_count":1,"token_estimate":999,"tools_hash":"d3011d5b6c8c309d4a373a02558163c7","tools_changed_at":null,"computed_at":"2026-10-20T07:21:44.986Z","disclaimer":"Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed."},"dev.protogrid/identity":{"canonical_id":"io.github.Compuute/compuute-scan-api","aliases":[],"alias_count":0,"repository_key":"github:compuute/compuute-scan-api","owner":{"verified":false,"method":null,"since":null}}},"next_actions":[{"action":"list_tools","description":"Every current tool with input schemas","href":"/v1/servers/io.github.Compuute%2Fcompuute-scan-api/tools","arguments":{"name":"io.github.Compuute/compuute-scan-api"}},{"action":"get_connection","description":"Minimal connection block for the preferred remote or package","href":"/v1/servers/io.github.Compuute%2Fcompuute-scan-api/connection?target=mcpServers","arguments":{"name":"io.github.Compuute/compuute-scan-api","target":"mcpServers"}},{"action":"search","description":"Find other servers by intent","href":"/v1/search?q={query}","arguments":{"q":"{query}"}}]}