Connect-MCP

io.github.robertoyanguas-ops/assay

io.github.robertoyanguas-ops/assay · v0.4.2

A2A & MCP Pre-Flight Security: SHA-256 tool schema rug-pull detection and liveness grades.

MCPremoteno credentialsAI & LLMTravelFinance

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 4 tools, protocol 2024-11-05 · checked 2026-10-17

Test & rating

B 88/100

What it does: 4 tools · 0 read, 4 write · Finance, Travel, AI & LLM

No tool could be tested safely. Only read-only tools that need no input are called.

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +10
  • Read/write annotations: +5
  • Safe test call: +8
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://assay-207908449630.us-central1.run.app/mcp

Tools

4 tools listed at last check
  • assay_preflight Evaluate a remote MCP, A2A, or x402 endpoint before calling or paying it. Probes live JSON-RPC reachability, hashes tools/list (SHA-256), checks expected_tools_hash for silent rug-pull drift, and scans for prompt-injection poisoning. Returns {verdict ('allow'|'warn'|'deny'), reason, receipt ('asr_rc
  • assay_probe Execute a live HTTP, A2A agent-card, and MCP tools/list probe against a target URL and record the observation in the Assay Observatory ledger without pre-flight policy gating. Returns the updated dossier {target, grade ('A+' to 'F'), score (0-100), mcp_tools, tools_hash, rug_pulls, poison_flags, lat
  • assay_verify_delivery Independently probe a paid x402/A2A provider after payment to verify delivery or confirm an SLA breach. Combines reported status_code with a live probe and binds tx_hash into an HMAC-SHA256 receipt. Returns {verdict ('delivery_verified'|'sla_breach_confirmed'), sla_breach, grade, score, sla_receipt
  • assay_get_ledger_policy Query historical conformance observations, rug-pull drift events, and canonical SHA-256 tools/list policy hashes (expected_tools_hash) for a target MCP or A2A endpoint. Returns {verdict, reason, receipt, pinned_tools_hash, observations, dossier}. Use to audit historical ledger data or pin expected_t

Badge

Connect-MCP badge for io.github.robertoyanguas-ops/assay

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/io.github.robertoyanguas-ops/assay.svg)](https://clawy.uk/mcp/s/io.github.robertoyanguas-ops/assay)