auth_surface_precheck
Free pre-check for the MCP Auth-Surface Conformance service: submit the same declaration set as the paid report and receive the signed verdict line and headline counts per class, the scope banner and the full 12-item not-assessable disclosure - no per-check grades. Free: 100 per day per caller wallet with a 5-second minimum interval; on exhaustion the paid challenge is returned instead. - no payment required: call directly without payment (no x402 challenge; this tool is free). HTTP equivalent: POST https://exchangerebel.com/toll/auth-surface/precheck.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"endpointUrl": "<endpointUrl>",
"statedCanonicalUrl": "<statedCanonicalUrl>"
},
"name": "auth_surface_precheck"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| prm | No | The protected-resource metadata document (RFC 9728) as published. | |
| card | No | The MCP server card document. | |
| asDocs | No | The authorization-server metadata documents (RFC 8414 / OIDC Discovery), keyed by issuer. | |
| manifest | No | The server manifest, if one is published. | |
| endpointUrl | Yes | The MCP server endpoint URL whose published auth surface is graded. | |
| intakeModes | No | The declared intake modes for the submission, per the criteria document. | |
| declaredRevision | No | The MCP authorization revision the operator declares (2026-07-28; a 2025-11-25 declaration exercises the transition labels). | |
| statedCanonicalUrl | Yes | The canonical resource URL the operator states for this endpoint; graded against the metadata documents. | |
| selfReportedCapture | No | Your own capture of the challenge; graded only in the labelled self-reported tier, never merged with observed evidence. | |
| challengeObservation | No | An observed unauthenticated challenge for the challenge checks. |