Licence audit, page read and endpoint check (AI-operated)
Server Details
AI-operated. Free capped previews: dependency licences, page reads, endpoint checks. Paid full.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
TDQS
Each tool has a clearly distinct purpose: checking endpoints, retrieving payment terms, auditing licenses, and reading pages. No functional overlap exists.
Naming is inconsistent: three tools use a verb_noun_preview pattern (endpoint_check_preview, licence_audit_preview, page_read_preview), but one uses get_payment_terms without a preview suffix. Mixing 'get_' with direct verb patterns and inconsistent suffix usage weakens predictability.
With four tools, the set is concise and manageable, covering the three advertised domains plus payment terms without bloat. A slightly larger set could be justified but this is reasonable.
The tools cover the core preview functions for the three named domains (licence audit, page read, endpoint check) and payment terms. Missing full non-preview variants or related utilities, but the stated purpose is satisfied.
Available Tools
4 toolsendpoint_check_previewAInspect
FREE. Checks whether an HTTPS endpoint answers and returns the status code and how many milliseconds it took. The paid call adds the content type, byte count, whether the body parses as JSON and the head of the body, as reproducible evidence. Operated by an AI, not by a person.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Absolute https URL to check. | |
| method | No | HTTP method, GET by default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
States it's free and AI-operated, implying no human involvement and no cost. Does not explicitly mention read-only nature, side effects, or rate limits, though 'checks' suggests a safe operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Very concise, two sentences. No unnecessary words, clearly structured with free vs paid distinction.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Provides sufficient context for expected output (status code, latency, and paid extras). Lacks mention of error handling or non-responsive endpoints, but overall gives a clear functional picture.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema descriptions for 'url' and 'method' are identical to text; no additional meaning provided. Since schema coverage is 100%, the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool's function: checking an HTTPS endpoint and returning status code and latency. Also clarifies free vs paid capabilities.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Mentions free vs paid tiers but does not explicitly differentiate from sibling tools or provide when-to-use guidance. Lacks clear conditions for choosing this over alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_payment_termsAInspect
Returns what the paid operations cost, on which chains, and exactly how to pay: a standard x402 EIP-3009 authorization on Base is verified and settled through the facilitator.xpay.sh facilitator in the same request (no gas for the buyer, transaction hash returned), and a transaction the buyer broadcast themselves is accepted too. Also returns the free worked examples.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden. It explicitly says 'Returns' and describes the content, indicating a read-only operation. It also discloses the return includes payment instructions and examples, but it does not explicitly state 'no side effects' or 'read-only'. However, the verb 'Returns' strongly implies a safe, non-mutating operation. The description is transparent about what the tool returns, which is the primary behavioral trait.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is moderately long but well-structured: it opens with the primary return value (costs, chains, payment methods), then details the payment mechanisms, and ends with examples. It is not overly verbose, but some sentences are dense. The key information is front-loaded, and every clause adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Since there is no output schema, the description must fully explain the return content. It does so: it specifies what is returned (costs, chains, payment methods, examples), the exact payment processes (facilitator-based x402 with no gas and transaction hash, or self-broadcast transaction), and the fact that free worked examples are included. For a parameterless tool, this is complete and sufficient for an agent to understand and invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has no parameters, so schema coverage is trivially 100%. The description adds no parameter-specific information, but none is needed. Baseline for 0 parameters is 4, which is appropriate because the tool's behavior is fully described without parameter details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns payment terms: costs, chains, payment methods (x402 EIP-3009 via facilitator or self-broadcast transaction), and free worked examples. It is specific and distinct from sibling preview tools (endpoint_check_preview, licence_audit_preview, page_read_preview) which are all about checking or reading previews, not payment information.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for retrieving payment terms and examples, but it does not explicitly state when to use this tool over others or mention alternatives. Since siblings are semantically different, the usage context is clear by content, but no explicit guidance or exclusion is provided. An agent would infer based on the topic, but it lacks direct routing instructions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
licence_audit_previewAInspect
FREE. Audits the first packages of a public dependency manifest and returns each package's licence with the registry document it was read from. Reads manifests and public registry metadata only - it never clones, builds or executes anything, and it does not scan for vulnerabilities. Capped at 8 packages; the full audit, with every package, obligation findings scored against how you ship and a CycloneDX 1.5 SBOM, is the paid call described by get_payment_terms. Operated by an AI, not by a person.
| Name | Required | Description | Default |
|---|---|---|---|
| distribution | No | How the software reaches users; decides which copyleft obligations trigger. | |
| manifest_url | Yes | Absolute https URL of a public package.json, package-lock.json, requirements.txt, poetry.lock, pyproject.toml, go.mod or Cargo.toml. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses read-only behavior ('never clones, builds or executes anything'), limitations ('Capped at 8 packages'), and operational context ('Operated by an AI, not by a person'). This is thorough transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is information-dense but well-structured: it states the core function, then constraints and exclusions, then the paid alternative. No redundant phrases; every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite lacking an output schema, the description indicates the return format ('each package's licence with the registry document'), and clarifies the scope and limitations. It also mentions the paid upgrade path, making it self-contained for an agent to decide whether to use it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Both parameters have full descriptions in the schema (100% coverage), so the description adds no additional parameter-level meaning. It only reiterates 'public dependency manifest' which is already implied by the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Audits the first packages of a public dependency manifest and returns each package's licence with the registry document it was read from.' It distinguishes itself from the paid full audit via get_payment_terms.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says 'FREE' and 'Capped at 8 packages', and points to get_payment_terms for the full audit. It also clarifies what it does not do (never clones/builds/executes, no vulnerability scanning), giving clear conditions for when to use this tool versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
page_read_previewAInspect
FREE. Reads one public web page without executing JavaScript and returns its title, its headings and the first 800 characters of the cleaned text. The paid call returns the whole cleaned text, the JSON-LD blocks and every outbound link. Operated by an AI, not by a person.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Absolute https URL of a public page. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behaviors: it avoids executing JavaScript, returns cleaned text, and includes specific elements (title, headings, first 800 characters). It also notes that each call is limited to public pages. However, it does not mention potential side effects, error conditions, or rate limits, though it covers the primary behavior well.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, using two sentences to convey the core functionality and the free/paid distinction. It is well-structured, front-loading the primary action and output, and avoids unnecessary detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema, the description adequately specifies what the tool returns (title, headings, first 800 characters) and the parameter constraints. It could be more complete by mentioning error handling or edge cases, but for the tool's simple purpose, it is sufficiently informative.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter 'url' is fully described with constraints: it must be an absolute https URL of a public page. This provides clear semantic guidance for the parameter, leaving no ambiguity about its format or requirements.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action (reads one public web page), its scope (no JavaScript execution), and the specific output (title, headings, first 800 characters of cleaned text). It also distinguishes the free version from the paid call, making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not explicitly state when to use this tool over alternatives. It mentions the paid call returns more data, but this is not a directive for choosing between tools. It lacks guidance on scenarios where this tool is preferred, such as quick previews or limited content needs.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
4 tool updates
- First observed
endpoint_check_preview - First observed
get_payment_terms - First observed
licence_audit_preview - First observed
page_read_preview
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity – fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge – works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge – works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Open-source licence risk checks for AI coding agents and dependency trees.
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
- VulX WatchOAuthai.vulx
Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.
Source-linked enterprise AI deployment search. Free preview; API keys unlock full results.
Related MCP Servers
- AlicenseAqualityDmaintenanceDependency security & health auditing for AI agents with no account or API key required.22MIT
- AlicenseAqualityAmaintenanceDependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.95172Apache 2.0
- AlicenseAqualityDmaintenanceAudits AI-bot visibility: robots.txt per-bot for 22 AI user-agents (GPTBot/ClaudeBot/PerplexityBot/etc), Cloudflare flags, JSON-LD, sitemap, llms.txt, SPA shell, plus cross-model brand mentions via Perplexity + OpenRouter. 0-100 score. SSRF-guarded, spend-capped.41MIT
- FlicenseNot gradedqualityCmaintenance53 security & enrichment MCP tools for AI agents. Contract scanning, threat intel, OSINT, crypto data, DNS/WAF recon. Pay-per-call via HTTP 402 + USDC on Base mainnet. No API keys. First call free.-