Skip to main content
Glama

McpStamp Check

Score any remote MCP server for readiness for the Claude Directory, ChatGPT Apps, Gemini Connected Apps and the MCP Registry: a 0-100 score, an A-F grade, per-store readiness and a one-line fix for every failing check.

Try it: https://www.mcpstamp.com/check/

Badge

After a check, embed your badge in your README (<id> is in the check result):

[![McpStamp](https://www.mcpstamp.com/badge/<id>.svg)](https://www.mcpstamp.com/check/?id=<id>)

The badge shows McpStamp | 87 B, coloured by grade, or a grey unchecked.

Related MCP server: MCP Scorecard

MCP server

McpStamp Check is itself a remote MCP server (Streamable HTTP, protocol 2025-11-25, no sign-in):

https://mcp.zovo.one/stamp/mcp

Tool

What it does

check_mcp_server(url, fresh?)

Score, grade, readiness per store, every failing check with its fix, report URL and badge markdown

explain_check(check_id)

What a check means, which stores it blocks, and the store or spec source

Add it to your client:

# Claude Code
claude mcp add --transport http mcpstamp https://mcp.zovo.one/stamp/mcp
// Cursor: ~/.cursor/mcp.json
{ "mcpServers": { "mcpstamp": { "url": "https://mcp.zovo.one/stamp/mcp" } } }

// VS Code: .vscode/mcp.json
{ "servers": { "mcpstamp": { "type": "http", "url": "https://mcp.zovo.one/stamp/mcp" } } }

Then ask: "Check https://example.com/mcp with McpStamp". Live checks share the API limit (20 per hour per client). It is listed in the MCP Registry as io.github.theluckystrike/mcpstamp-check.

GitHub Action

Gate your CI on readiness. The action calls the public API, writes a job summary (score, stores, fixes) and fails the step when the score is below min-score or a store in fail-on-store is not ready.

name: McpStamp Check
on:
  workflow_dispatch:
  push:
    branches: [main]
jobs:
  mcpstamp:
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: theluckystrike/mcpstamp-check@v1
        id: stamp
        with:
          url: https://example.com/mcp
          min-score: 80
          fail-on-store: claude,chatgpt
      - run: echo "Score ${{ steps.stamp.outputs.score }} (${{ steps.stamp.outputs.grade }}): ${{ steps.stamp.outputs.report-url }}"

Input

Default

Meaning

url

(required)

The https URL of your MCP endpoint

min-score

0

Fail when the score is below this value

fail-on-store

empty

Comma list of claude, chatgpt, gemini, registry that must be ready (a store whose blocking checks could not run, for example tools behind sign-in, is not ready)

fresh

true

false accepts a result up to 10 minutes old. On a rate limit the action falls back to the cached result

api-base

https://mcp.zovo.one/stamp

API base URL

Outputs: score, grade, report-url, badge-url, ready-stores.

The action is a composite action that runs action/run.mjs with the runner's Node.js (18 or later), with no dependencies and no build step. Check a deployed URL: run it after your deploy step.

API

Base URL: https://mcp.zovo.one/stamp (also proxied at https://www.mcpstamp.com/api/).

Request

Response

GET /api/check?url=<https MCP URL>[&fresh=1]

Result JSON (cached for 10 minutes)

GET /api/result/<id>

Last stored result, 404 if none

GET /api/checks

The check table below

GET /badge?url=<url> or GET /badge/<id>.svg

SVG badge

POST /mcp

MCP Streamable HTTP endpoint (see above)

Errors: 400 {error:"bad_url"|"blocked_host"}, 429 {error:"rate_limited", retry_after}, 502 {error:"unreachable", detail}. Limits: 20 live checks per hour per IP; at most 6 HTTP requests to the checked server per check; 8 s timeout and 1 MB body cap per request; https only, ports 443/8443, no IP literals or private names, max 3 redirects (each re-validated).

Proxies

A trusted proxy (the mcpstamp.com Pages Functions) may send x-mcpstamp-proxy-key: <PROXY_KEY secret> and x-mcpstamp-client-ip: <visitor IP> so the rate limit applies per visitor, not per proxy.

Scoring

Each check is pass (1), warn (0.5), fail (0) or skip (not counted). Score = weighted pass ratio over the checks that apply. Grades: A >= 90, B >= 80, C >= 65, D >= 50, else F. Each store gets status: ready (no blocking check failed and none was skipped), unverified (none failed, but a blocking check could not run, for example tools behind sign-in) or not_ready (a blocking check failed). ready is true only for ready. When the tools sit behind sign-in and cannot be inspected, the score is capped at 85.

Check

Group

What it tests

Weight

Counts for

Blocks

https

transport

Served over HTTPS

10

claude, chatgpt, gemini, registry

claude, chatgpt, gemini, registry

initialize

transport

initialize over Streamable HTTP

15

claude, chatgpt, gemini, registry

claude, chatgpt, gemini, registry

protocol_version

transport

Supported protocol version negotiated

6

claude, chatgpt, gemini, registry

gemini

content_type

transport

JSON or SSE response Content-Type

3

claude, chatgpt, gemini, registry

-

jsonrpc_errors

transport

JSON-RPC error for unknown method

4

claude, chatgpt, gemini, registry

-

get_stream

transport

GET answers SSE or 405

3

claude, chatgpt, gemini, registry

-

latency

transport

initialize latency

5

claude, chatgpt, gemini, registry

-

server_info

metadata

serverInfo name and version

6

claude, chatgpt, gemini, registry

-

instructions

metadata

Server instructions

4

claude, chatgpt, gemini

-

capabilities_tools

metadata

tools capability declared

3

claude, chatgpt, gemini, registry

-

auth_challenge

auth

401 carries WWW-Authenticate resource_metadata

6

claude, chatgpt, gemini

-

auth_prm

auth

Protected resource metadata (RFC 9728)

8

claude, chatgpt, gemini

claude, chatgpt

auth_resource

auth

Resource metadata "resource" equals the server URL

4

claude, chatgpt, gemini

claude

auth_as_metadata

auth

Authorization server metadata (RFC 8414 / OIDC)

8

claude, chatgpt, gemini

claude, chatgpt, gemini

auth_pkce

auth

PKCE S256 advertised

6

claude, chatgpt, gemini

claude, chatgpt, gemini

auth_registration

auth

Client registration (DCR or Client ID Metadata Documents)

6

claude, chatgpt, gemini

-

auth_refresh

auth

refresh_token grant advertised

3

claude, chatgpt, gemini

-

tools_list

tools

tools/list returns tools

10

claude, chatgpt, gemini, registry

claude, chatgpt, gemini

tool_schema

tools

inputSchema is an object schema

6

claude, chatgpt, gemini, registry

claude, chatgpt, gemini

tool_names

tools

Tool names are valid and portable

5

claude, chatgpt, gemini, registry

-

tool_annotations

tools

readOnlyHint and destructiveHint on every tool

10

claude, chatgpt, gemini

claude, chatgpt

tool_open_world

tools

Explicit readOnlyHint, destructiveHint and openWorldHint (ChatGPT)

5

chatgpt

chatgpt

tool_titles

tools

Human-readable title on every tool

5

claude, chatgpt, gemini

claude, chatgpt

tool_descriptions

tools

Tool descriptions

6

claude, chatgpt, gemini

-

Every rule is traced to the store or spec text in SOURCES.md.

Use the engine

src/check.mjs is a pure ES module with no dependencies. It runs in Node 20+ and in Cloudflare Workers:

import { checkServer, CHECKS } from './src/check.mjs';
const result = await checkServer('https://example.com/mcp', { fetch, timeoutMs: 8000 });
console.log(result.score, result.grade, result.stores.claude);

CLI: node scripts/check-cli.mjs https://example.com/mcp [--json]

Develop

npm test             # node --test, mock fetch, no network (engine, Worker, MCP endpoint, action)
npx wrangler deploy  # Worker "mcpstamp-check"

Contact: support@zovo.one

License

MIT

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Open-source MCP server that audits websites for AI search readiness, providing deterministic scoring (0-100) and prioritized fix lists for metrics like JSON-LD, llms.txt, heading hierarchy, and AI crawler access.
    1
    MIT