
| Parameter | Type | Description |
|---|---|---|
origin | string | Public HTTPS origin. The tool fetches <origin>/.well-known/mcp.json. Private hosts and IP literals are rejected. |
cardUrl | string | Explicit public HTTPS MCP Server Card URL. Private hosts and IP literals are rejected. |
timeoutMs | integer | Per-network-call timeout in milliseconds. |
probeInitialize | boolean | If true, POST a safe MCP initialize request to the card endpoint. It does not invoke tools or send secrets. |
| Parameter | Type | Description |
|---|---|---|
counts* | object | Counts of listed tools/resources/prompts in the card. |
server* | object | Server name/title/version/schema/protocol summary. |
cardUrl* | string | Fetched MCP Server Card URL. |
samples* | object | First listed tools/resources/prompts, bounded for context. |
verdict* | string | ready when card shape and initialize probe are usable; partial/blocked identify legibility gaps. |
endpoint* | object | Absolute MCP endpoint derived from the card. |
evidence* | object | Fetch status, bytes, latency, and SSRF guard evidence. |
problems* | string[] | |
fetchedAt* | string | |
transport* | object | Transport type and declared endpoint. |
authPayment* | object | Cheap hints for x402, Tool Pass/SIWE/EIP-3009, API key, or declared security scheme language. |
capabilities* | string[] | Declared top-level MCP capabilities. |
firstSafeCall* | object | Copyable initialize request that should not spend, mutate, or leak secrets. |
initializeProbe* | object | Live response summary for the safe initialize probe, if enabled. |