Skip to main content
Glama

Server Details

Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL
ChatGPT
–
Claude
–

TDQS

A4.4/5.0

Scored across 4 tools

Disambiguation4/5

The four tools mostly have clear boundaries: methodology, register, ledger, and free dossier are conceptually distinct. However, get_free_dossier and get_openai_ledger both point at the same public OpenAI record, and an agent must read carefully to know one returns a PDF/URL and the other field-level evidence.

Naming Consistency5/5

All tool names follow a consistent get_ pattern with clear object nouns: dossier, methodology, openai_ledger, register. There is no mixed casing, verb style variation, or vagueness across the set.

Tool Count5/5

Four tools is a well-scoped size for an informational evidence ledger service: methodology, the public ledger, the free dossier, and the release register. Each tool earns its place and the set does not feel thin or bloated.

Completeness4/5

The core workflow is covered: understand the framework, access the free public dossier, retrieve field-level evidence, and view releases and commission options. The main gap is that licensed dossiers are described in the register but cannot be fetched directly, and commissioning is reported but not executable through a tool.

Available Tools

4 tools
get_free_dossierAInspect

Returns the free OpenAI Public Edition: the dossier title, the direct PDF download URL, and the guided page URL. The OpenAI record, Dossier No. 003, is published free and complete as proof of the format: the same 55 fields across 10 domains, the same two states (47 Documented, 8 Question surfaced), the same source register and the same integrity identifier a Licensed Edition carries. It is built from OpenAI's own published pages, reviewed before release; no relationship with, or endorsement by, OpenAI is implied. Use this tool to give a buyer the whole workproduct to read before they license another released vendor or commission a new one.

Inputs: no named parameters.

get_methodologyAInspect

Returns SaaSDossier's two-state evidence framework: Documented and Question surfaced. A Question surfaced is not a finding of absence. SaaSDossier is the vendor's own record, made reviewable: a finished, dated, source-linked, human-reviewed evidence workproduct built only from vendor-published sources, recording 55 fixed fields across 10 domains for each vendor, with a source register listing every vendor page reviewed. Documented means the reviewed vendor-published sources established the field for the evidence date; Question surfaced means they did not, and each one becomes a buyer-ready follow-up question. Each dossier includes a SHA-256 identifier tied to the reviewed evidence record used for that release. Use this tool to understand what a state means, what the framework covers and where its boundaries are, before quoting or acting on any field.

Inputs: no named parameters.

get_openai_ledgerAInspect

Returns the free public OpenAI security evidence ledger — 55 fixed fields, each either Documented with a vendor-published source or recorded as a Question surfaced. This is the complete Public Edition record, Dossier No. 003: 47 fields Documented and 8 Question surfaced across 10 domains, free, dated to its evidence date. Documented fields carry the vendor's own quoted wording and the source URL it was found on; Question surfaced fields carry the follow-up question a buyer can put to the vendor in writing. Question surfaced means the reviewed vendor-published sources did not establish the field for the evidence date — it does not establish absence of the control. The record is a dated evidence workproduct, checked against the reviewed source record before release. It does not score or rate the vendor. Use this tool when an agent needs the actual field-level evidence and its sources rather than a description of the framework.

Inputs: no named parameters.

get_registerAInspect

Returns SaaSDossier's release register: dossier numbers, vendors, editions, and licensing information. The register is the released catalogue: four finished evidence records built only from vendor-published sources across a fixed 55-field, 10-domain framework, every field recorded in one of two states — Documented, or Question surfaced. Each entry carries its vendor, dossier number, edition, evidence date, two-state counts and commercial status: Licensed Editions are US$1,500 one-time; the OpenAI Public Edition is free and complete. Separately from that catalogue, the same response carries the commission capability: a buyer can commission a SaaSDossier for another named vendor that does not already have a released dossier, US$1,500 one-time, refunded in full if the vendor-published material cannot support a defensible SaaSDossier record. A commission is not a released dossier and carries no dossier number until it is released. The released catalogue remains the four records. Use this tool to answer what SaaSDossier has released, what each record costs, and how a vendor that has no released record yet can be commissioned.

Inputs: no named parameters.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      B
      maintenance
      Read-only MCP server that answers questions about turva.dev from its published data. Five tools return JSON: the service catalog with prices, contact and operator details, engagement principles and dated agent-readiness and security evidence with verification links. Connect over Streamable HTTP. You need no API key. The server does not scan other websites or run audits.
      MIT
    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables read-only, source-backed vulnerability investigations, recent intelligence discovery, CVE/package evidence review, and observed-change timelines through cached MCP tools covering briefings, CISA KEV, EPSS, GitHub advisories, and OSV records.
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      Read-only MCP service for normalized public evidence from Web, X, YouTube, Reddit, and RSS. Owner-authenticated via Cloudflare Access, it exposes health, read, and transcript actions to ChatGPT and Codex.
      MIT
    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources