A
licenseA
qualityB
maintenanceTrust-scan gate for MCP servers: evidence-backed verdicts before you install.
6
MIT
MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)
by dev.gtfo
Server Details
Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 0.0% over 37 days
- Last Tested
- Transport
- Streamable HTTP
- URL
TDQS
A3.5/5.0
Scored across 1 tool
Disambiguation5/5
Only one tool exists, so there is no ambiguity between tools. The tool's description is clear and distinct.
Naming Consistency5/5
With a single tool, there is no inconsistency. The name 'get_weather' follows a clear verb_noun pattern.
Tool Count1/5
The server name implies a comprehensive research tool, but only a single weather tool is provided. This is a severe mismatch, making the count inappropriate.
Completeness1/5
The server's purpose is ambiguous due to the server name, and the single weather tool is insufficient for any meaningful domain coverage, lacking essential operations like forecasts or alerts.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
get_weather
Related MCP Connectors
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Trust checks for MCP servers: trust scores, tool-drift detection, signed diligence receipts. Free.
MCP registry & directory: search, find & install 31k+ MCP servers & tools. Catalog and marketplace.
Related MCP Servers
- AlicenseAqualityDmaintenanceMCP security trust layer. Continuously monitors 800+ MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift, and publisher posture. Ships a GitHub Action policy gate for PR-level allow/warn/block decisions. 5 MCP tools, no API key required.868 npm1MIT
- AlicenseNot gradedqualityBmaintenanceA transparent MCP proxy that independently re-verifies tool-call claims instead of trusting them, paired with devmcp — the git/CI server it's proven against.1MIT
- FlicenseNot gradedqualityCmaintenanceDemonstrates deceptive tool naming and unsanitized shell execution by exposing tools that perform OS fingerprinting and run local system commands through MCP. Intended for security research on vulnerabilities in the MCP ecosystem.1-
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd
Glama MCP Gateway
Add one secure layer between your agents and this server.