TheProtocol — Sovereign AI Agent Platform (api.theprotocol.cloud) MCP Server
https://api.theprotocol.cloud/mcp/sse
Remote
v1.0.0
Published by api.theprotocol.cloud — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
Sovereign AI agent platform. 19 tools: discovery, transfers, staking, governance. A2A v1.0.
Trust
A · 94/100
Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.
Capability
High
Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.
Coverage
Live
How much the scan could actually inspect. Shallow coverage is stated, never hidden.
A
Why this grade
threat 100 − adoption risk = 94/100
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 6 = 94. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 4
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: theprotocol_disableToolset → theprotocol_getAgentToken → theprotocol_authResendVerification. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow theprotocol_disableToolset → theprotocol_getAgentToken → theprotocol_authResendVerification
medium Unconstrained URL/host parameter "url" on "theprotocol_createWebhook"MTC-CAP-007
Tool "theprotocol_createWebhook" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool theprotocol_createWebhook · inputSchema.properties.url
medium Unconstrained URL/host parameter "url" on "theprotocol_updateWebhook"MTC-CAP-007
Tool "theprotocol_updateWebhook" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool theprotocol_updateWebhook · inputSchema.properties.url
medium Unconstrained URL/host parameter "webhook_url" on "theprotocol_createPipeline"MTC-CAP-007
Tool "theprotocol_createPipeline" takes a URL/host parameter "webhook_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool theprotocol_createPipeline · inputSchema.properties.webhook_url
Tools 413
Each tool and what it can reach — enumerated from the running server.
theprotocol_authResendVerificationnetwork egresstheprotocol_createPipelinenetwork egresstheprotocol_createWebhooknetwork egresstheprotocol_deleteWebhooknetwork egresstheprotocol_disableToolsetingests untrusted inputtheprotocol_downloadBundleingests untrusted inputtheprotocol_downloadBundleViaOnboardingests untrusted inputtheprotocol_downloadPipelineTemplateingests untrusted inputtheprotocol_enableToolsetingests untrusted inputtheprotocol_getAgentTokenreads sensitive data
Show 403 more tools ↓
theprotocol_getCircuitACIRingests untrusted inputtheprotocol_getCircuitNargoTomlingests untrusted inputtheprotocol_getCircuitSourceingests untrusted inputtheprotocol_getDeveloperWebhookDeliveriesAltnetwork egresstheprotocol_getMcpStdioBridgeAdminJsingests untrusted inputtheprotocol_getMcpStdioBridgeJsingests untrusted inputtheprotocol_getMyNotificationPrefsnetwork egresstheprotocol_getMyWebhooksnetwork egresstheprotocol_getOperatorMyBundleingests untrusted inputtheprotocol_getRegistryCardingests untrusted inputtheprotocol_getWebhooknetwork egresstheprotocol_getWebhookDeliveriesnetwork egresstheprotocol_testDeveloperWebhookAltnetwork egresstheprotocol_testWebhooknetwork egresstheprotocol_transferTokensnetwork egresstheprotocol_updateWebhooknetwork egresstheprotocol_acceptContractno sensitive capabilitytheprotocol_acceptContractFederatedno sensitive capabilitytheprotocol_acceptOrgInvitationno sensitive capabilitytheprotocol_activateOperatorno sensitive capabilitytheprotocol_activateVersionno sensitive capabilitytheprotocol_addTeamMemberno sensitive capabilitytheprotocol_agentBuilderGenerateno sensitive capabilitytheprotocol_agentBuilderGenerateTemplateno sensitive capabilitytheprotocol_agentBulkExportno sensitive capabilitytheprotocol_agentHeartbeatno sensitive capabilitytheprotocol_agentRevokeAttestationno sensitive capabilitytheprotocol_appendDeploymentLogsno sensitive capabilitytheprotocol_applyReputationSignalno sensitive capabilitytheprotocol_approveContractCompletionno sensitive capabilitytheprotocol_approveDisputeSettlementno sensitive capabilitytheprotocol_assignAgentToOrgno sensitive capabilitytheprotocol_authForgotPasswordno sensitive capabilitytheprotocol_authorizePaymentno sensitive capabilitytheprotocol_authRecover2FAno sensitive capabilitytheprotocol_authRecoverAccountno sensitive capabilitytheprotocol_authRefreshno sensitive capabilitytheprotocol_authRegisterno sensitive capabilitytheprotocol_authResetPasswordno sensitive capabilitytheprotocol_authSetNewPasswordno sensitive capabilitytheprotocol_authValidate2FAno sensitive capabilitytheprotocol_authVerifyEmailno sensitive capabilitytheprotocol_bridgeTransferno sensitive capabilitytheprotocol_buyExchangeIpono sensitive capabilitytheprotocol_cancelAccountDeletionno sensitive capabilitytheprotocol_cancelExchangeOrderno sensitive capabilitytheprotocol_castVoteno sensitive capabilitytheprotocol_changePasswordno sensitive capabilitytheprotocol_claimPendingAchievementsno sensitive capabilitytheprotocol_claimStakingRewardsno sensitive capabilitytheprotocol_claimTegRewardsno sensitive capabilitytheprotocol_cloneAgentno sensitive capabilitytheprotocol_createAgentno sensitive capabilitytheprotocol_createApiKeyno sensitive capabilitytheprotocol_createArenaMatchno sensitive capabilitytheprotocol_createAttestationScheduleno sensitive capabilitytheprotocol_createBundleno sensitive capabilitytheprotocol_createDeveloperApikeyMeno sensitive capabilitytheprotocol_createExchangeListingno sensitive capabilitytheprotocol_createFederationPeerno sensitive capabilitytheprotocol_createFrameInvitationno sensitive capabilitytheprotocol_createMalpracticeDisputeno sensitive capabilitytheprotocol_createOrganizationno sensitive capabilitytheprotocol_createOrganizationTeamno sensitive capabilitytheprotocol_createProposalno sensitive capabilitytheprotocol_createTegPoliciesBatchno sensitive capabilitytheprotocol_createTegPolicyno sensitive capabilitytheprotocol_createVersionno sensitive capabilitytheprotocol_crossRegistryContractProxyno sensitive capabilitytheprotocol_crossTegBalanceSyncno sensitive capabilitytheprotocol_customizeFlareno sensitive capabilitytheprotocol_declareExchangeDividendno sensitive capabilitytheprotocol_deleteBundleno sensitive capabilitytheprotocol_deleteFederationPeerSelfno sensitive capabilitytheprotocol_deleteMyAgentno sensitive capabilitytheprotocol_deleteMyAgentByDevno sensitive capabilitytheprotocol_deleteMyApiKeyno sensitive capabilitytheprotocol_deleteOrganizationno sensitive capabilitytheprotocol_deleteOrganizationTeamno sensitive capabilitytheprotocol_deletePipelineno sensitive capabilitytheprotocol_deleteTegPolicyno sensitive capabilitytheprotocol_deleteVersionno sensitive capabilitytheprotocol_depositReputationBondno sensitive capabilitytheprotocol_describeToolsno sensitive capabilitytheprotocol_disable2FASelfno sensitive capabilitytheprotocol_disableMyAttestationScheduleno sensitive capabilitytheprotocol_disableMyMtlsno sensitive capabilitytheprotocol_discoverAgentsno sensitive capabilitytheprotocol_discoverRegistriesno sensitive capabilitytheprotocol_enableMtlsno sensitive capabilitytheprotocol_equipFlareno sensitive capabilitytheprotocol_estimateMyStakingRewardsno sensitive capabilitytheprotocol_exportAgentDevno sensitive capabilitytheprotocol_exportTegTransactionsno sensitive capabilitytheprotocol_federationProposeRaiseno sensitive capabilitytheprotocol_federationSlashConfirmationno sensitive capabilitytheprotocol_federationSlashRequestno sensitive capabilitytheprotocol_federationSyncRequestno sensitive capabilitytheprotocol_federationVetoProposalno sensitive capabilitytheprotocol_federationVoteProposalno sensitive capabilitytheprotocol_finalizeFrameInvitationno sensitive capabilitytheprotocol_flareCelebrationAcknowledgeno sensitive capabilitytheprotocol_forkBundleno sensitive capabilitytheprotocol_getAchievementCatalogno sensitive capabilitytheprotocol_getActivityFeedByTypeno sensitive capabilitytheprotocol_getAgentANPno sensitive capabilitytheprotocol_getAgentAttestationsByDIDno sensitive capabilitytheprotocol_getAgentAttestationSchedulesByDIDno sensitive capabilitytheprotocol_getAgentByDIDno sensitive capabilitytheprotocol_getAgentByDIDAltno sensitive capabilitytheprotocol_getAgentCardByHRIno sensitive capabilitytheprotocol_getAgentCardByHumanReadableIdno sensitive capabilitytheprotocol_getAgentCardByIdno sensitive capabilitytheprotocol_getAgentCardExportno sensitive capabilitytheprotocol_getAgentContractsno sensitive capabilitytheprotocol_getAgentDIDDocno sensitive capabilitytheprotocol_getAgentFlareno sensitive capabilitytheprotocol_getAgentLocationsno sensitive capabilitytheprotocol_getAgentLocationsEmissionPoliciesno sensitive capabilitytheprotocol_getAgentLocationsOperatorno sensitive capabilitytheprotocol_getAgentLocationsTrustedRegistriesno sensitive capabilitytheprotocol_getAgentMetricsno sensitive capabilitytheprotocol_getAgentPendingRewardsno sensitive capabilitytheprotocol_getAgentProfileno sensitive capabilitytheprotocol_getAgentPublicKeyno sensitive capabilitytheprotocol_getAgentReputationno sensitive capabilitytheprotocol_getAgentRewardsHistoryno sensitive capabilitytheprotocol_getAgentStakingBalanceno sensitive capabilitytheprotocol_getAgentStakingHistoryno sensitive capabilitytheprotocol_getAgentTemplateno sensitive capabilitytheprotocol_getAgentTransactionHistoryno sensitive capabilitytheprotocol_getApyRatesno sensitive capabilitytheprotocol_getArenaAgentStatsno sensitive capabilitytheprotocol_getArenaLeaderboardno sensitive capabilitytheprotocol_getArenaMatchno sensitive capabilitytheprotocol_getArenaMatchBetsno sensitive capabilitytheprotocol_getArenaMatchMapno sensitive capabilitytheprotocol_getAttestationBundleno sensitive capabilitytheprotocol_getAttestationDetailno sensitive capabilitytheprotocol_getAttestationHealthno sensitive capabilitytheprotocol_getAttestationSigningPubkeyno sensitive capabilitytheprotocol_getAuthProfileno sensitive capabilitytheprotocol_getAuthRegistrationConfigno sensitive capabilitytheprotocol_getAutoCompoundForAgentno sensitive capabilitytheprotocol_getAutoTallyConfigno sensitive capabilitytheprotocol_getBatchAgentBalancesno sensitive capabilitytheprotocol_getBundleManifestno sensitive capabilitytheprotocol_getCircuitsno sensitive capabilitytheprotocol_getCommunityAnnouncementsno sensitive capabilitytheprotocol_getContractByIdno sensitive capabilitytheprotocol_getCrossFrameReputationno sensitive capabilitytheprotocol_getDeploymentno sensitive capabilitytheprotocol_getDeveloperFlareno sensitive capabilitytheprotocol_getDeveloperStatsno sensitive capabilitytheprotocol_getDevTrustGraphno sensitive capabilitytheprotocol_getDisputeByIdno sensitive capabilitytheprotocol_getDownloadsManifestno sensitive capabilitytheprotocol_getExchangeCandlesno sensitive capabilitytheprotocol_getExchangeListingno sensitive capabilitytheprotocol_getExchangeListingsno sensitive capabilitytheprotocol_getExchangeOrderBookno sensitive capabilitytheprotocol_getExchangeTradesno sensitive capabilitytheprotocol_getFeaturedBundlesno sensitive capabilitytheprotocol_getFederationDisputeSettlementno sensitive capabilitytheprotocol_getFederationDisputeSettlementsno sensitive capabilitytheprotocol_getFederationHealthCheckno sensitive capabilitytheprotocol_getFederationInfono sensitive capabilitytheprotocol_getFederationNetworkStatsno sensitive capabilitytheprotocol_getFederationPeerByIDno sensitive capabilitytheprotocol_getFederationPolicyComplianceno sensitive capabilitytheprotocol_getFederationRegistryHealthProfileno sensitive capabilitytheprotocol_getFederationSyncStatusDevno sensitive capabilitytheprotocol_getFeeCurrentRateno sensitive capabilitytheprotocol_getFiatProvidersno sensitive capabilitytheprotocol_getFiatPurchaseSessionno sensitive capabilitytheprotocol_getFiatQuoteno sensitive capabilitytheprotocol_getFiatStatsPublicno sensitive capabilitytheprotocol_getFiatTiersno sensitive capabilitytheprotocol_getForgeLineageno sensitive capabilitytheprotocol_getForgeStatusno sensitive capabilitytheprotocol_getGovernanceProposalsno sensitive capabilitytheprotocol_getMy2FAStatusno sensitive capabilitytheprotocol_getMyA2APaymentTokensno sensitive capabilitytheprotocol_getMyAchievementsno sensitive capabilitytheprotocol_getMyAgentBalanceno sensitive capabilitytheprotocol_getMyAgentBundlesno sensitive capabilitytheprotocol_getMyAgentCicdStatsno sensitive capabilitytheprotocol_getMyAgentDisputesno sensitive capabilitytheprotocol_getMyAgentHealthno sensitive capabilitytheprotocol_getMyAgentInfono sensitive capabilitytheprotocol_getMyAgentLogsno sensitive capabilitytheprotocol_getMyAgentsno sensitive capabilitytheprotocol_getMyApiKeyDetailno sensitive capabilitytheprotocol_getMyApiKeysno sensitive capabilitytheprotocol_getMyAutoCompoundno sensitive capabilitytheprotocol_getMyBalanceno sensitive capabilitytheprotocol_getMyCicdDeploymentsno sensitive capabilitytheprotocol_getMyCicdPipelinesno sensitive capabilitytheprotocol_getMyCicdVersionsno sensitive capabilitytheprotocol_getMyContractsno sensitive capabilitytheprotocol_getMyDeletionStatusno sensitive capabilitytheprotocol_getMyDeveloperActivityno sensitive capabilitytheprotocol_getMyDeveloperActivityEventstoreno sensitive capabilitytheprotocol_getMyDeveloperJwksno sensitive capabilitytheprotocol_getMyDeveloperProfileno sensitive capabilitytheprotocol_getMyDeveloperTegSummaryno sensitive capabilitytheprotocol_getMyDisputesno sensitive capabilitytheprotocol_getMyEarningsno sensitive capabilitytheprotocol_getMyEnforcementStatusno sensitive capabilitytheprotocol_getMyExchangeOrdersno sensitive capabilitytheprotocol_getMyExchangePortfoliono sensitive capabilitytheprotocol_getMyFederationRegistrationsno sensitive capabilitytheprotocol_getMyFiatPurchasesno sensitive capabilitytheprotocol_getMyFlareStatusno sensitive capabilitytheprotocol_getMyFundingRequestsno sensitive capabilitytheprotocol_getMyMcpAuditLogno sensitive capabilitytheprotocol_getMyMtlsStatusno sensitive capabilitytheprotocol_getMyOrganizationsno sensitive capabilitytheprotocol_getMyReputationBondStatusno sensitive capabilitytheprotocol_getMyRewardHistoryno sensitive capabilitytheprotocol_getMySigningKeysno sensitive capabilitytheprotocol_getMyStakesno sensitive capabilitytheprotocol_getMyStakeStatsno sensitive capabilitytheprotocol_getMyStakingHistoryno sensitive capabilitytheprotocol_getMyStakingStatusno sensitive capabilitytheprotocol_getMySupportTicketsno sensitive capabilitytheprotocol_getMyTegBalanceno sensitive capabilitytheprotocol_getMyTegDisputesno sensitive capabilitytheprotocol_getMyTegTransactionsno sensitive capabilitytheprotocol_getMyTreasuryBalanceno sensitive capabilitytheprotocol_getMyUnreadNotificationsno sensitive capabilitytheprotocol_getMyVoteOnProposalno sensitive capabilitytheprotocol_getMyVotingPowerno sensitive capabilitytheprotocol_getNetworkHealthno sensitive capabilitytheprotocol_getNetworkStatsno sensitive capabilitytheprotocol_getOAuthFederationStatusno sensitive capabilitytheprotocol_getOperatorMyLifecycleno sensitive capabilitytheprotocol_getOperatorMyStatusno sensitive capabilitytheprotocol_getOrganizationno sensitive capabilitytheprotocol_getOrganizationBySlugno sensitive capabilitytheprotocol_getOrganizationCicdSummaryno sensitive capabilitytheprotocol_getOrganizationTeamno sensitive capabilitytheprotocol_getPeerSlashConfigno sensitive capabilitytheprotocol_getPipelineTemplatesno sensitive capabilitytheprotocol_getProposalDetailno sensitive capabilitytheprotocol_getProposalVotesno sensitive capabilitytheprotocol_getPublicEventStoreRecentno sensitive capabilitytheprotocol_getPublicEventStoreStatsno sensitive capabilitytheprotocol_getPublicEventStoreStatsBno sensitive capabilitytheprotocol_getPublicRegistryConfigno sensitive capabilitytheprotocol_getPublicShowcaseAgentsno sensitive capabilitytheprotocol_getPublicShowcaseCallno sensitive capabilitytheprotocol_getRegistryFederationProposalsno sensitive capabilitytheprotocol_getRelayStatusno sensitive capabilitytheprotocol_getReputationComputationStatusno sensitive capabilitytheprotocol_getRevokedIdentitiesno sensitive capabilitytheprotocol_getSpireJWKSno sensitive capabilitytheprotocol_getStackHealthno sensitive capabilitytheprotocol_getStakingApyTiersTegno sensitive capabilitytheprotocol_getStakingDistributionRecordsno sensitive capabilitytheprotocol_getStakingDistributionsno sensitive capabilitytheprotocol_getStakingDistributionStatsno sensitive capabilitytheprotocol_getStakingGlobalStatsno sensitive capabilitytheprotocol_getSupportedWebhookEventsno sensitive capabilitytheprotocol_getSupportTicketDetailno sensitive capabilitytheprotocol_getSystemActivityFeedno sensitive capabilitytheprotocol_getTegAdvancedTransactionsno sensitive capabilitytheprotocol_getTegAttestationsno sensitive capabilitytheprotocol_getTegDisputeDetailno sensitive capabilitytheprotocol_getTegPoliciesComplianceDashboardno sensitive capabilitytheprotocol_getTegPolicyno sensitive capabilitytheprotocol_getTegPriceno sensitive capabilitytheprotocol_getTegReputationRankingsno sensitive capabilitytheprotocol_getTegTransactionDetailno sensitive capabilitytheprotocol_getTokenomicsRewardsno sensitive capabilitytheprotocol_getTokenomicsTransactionsno sensitive capabilitytheprotocol_getTokenomicsTreasuryno sensitive capabilitytheprotocol_getTransactionsAnalyticsno sensitive capabilitytheprotocol_getTrustScoreno sensitive capabilitytheprotocol_getVolumeProfileno sensitive capabilitytheprotocol_getWellKnownDevJwksno sensitive capabilitytheprotocol_getWellKnownRegistryCardno sensitive capabilitytheprotocol_guildAwardno sensitive capabilitytheprotocol_guildBidno sensitive capabilitytheprotocol_guildCancelOrderno sensitive capabilitytheprotocol_guildCrossRegistryBidno sensitive capabilitytheprotocol_guildGetOrderno sensitive capabilitytheprotocol_guildListOrdersno sensitive capabilitytheprotocol_guildMyWorkno sensitive capabilitytheprotocol_guildNetworkBoardno sensitive capabilitytheprotocol_guildPostOrderno sensitive capabilitytheprotocol_guildSubmitWorkno sensitive capabilitytheprotocol_guildVerifyno sensitive capabilitytheprotocol_importAgentno sensitive capabilitytheprotocol_inviteOrganizationMemberno sensitive capabilitytheprotocol_invokeToolno sensitive capabilitytheprotocol_listAgentBuilderTemplatesno sensitive capabilitytheprotocol_listAgentCardsno sensitive capabilitytheprotocol_listAgentTemplatesno sensitive capabilitytheprotocol_listArenaMatchesno sensitive capabilitytheprotocol_listDeveloperApikeysMeno sensitive capabilitytheprotocol_listDeveloperWebhooksno sensitive capabilitytheprotocol_listDeveloperWebhooksAltno sensitive capabilitytheprotocol_listFederationAgentCardsno sensitive capabilitytheprotocol_listFederationPeersno sensitive capabilitytheprotocol_listFederationRegistriesno sensitive capabilitytheprotocol_listFederationRegistryCardsno sensitive capabilitytheprotocol_listMyAttestationsno sensitive capabilitytheprotocol_listMyAttestationSchedulesno sensitive capabilitytheprotocol_listOrganizationAgentsno sensitive capabilitytheprotocol_listOrganizationMembersno sensitive capabilitytheprotocol_listOrganizationTeamsno sensitive capabilitytheprotocol_listPublicOperatorApplicationsno sensitive capabilitytheprotocol_listTegPoliciesno sensitive capabilitytheprotocol_listToolsetsno sensitive capabilitytheprotocol_logEnhancedDisputeno sensitive capabilitytheprotocol_logoutSessionno sensitive capabilitytheprotocol_logTegDisputeno sensitive capabilitytheprotocol_markContractFailedno sensitive capabilitytheprotocol_markNotificationReadno sensitive capabilitytheprotocol_mcpPassthroughGetAgentProfileno sensitive capabilitytheprotocol_moveFlareno sensitive capabilitytheprotocol_oauthIntrospectno sensitive capabilitytheprotocol_oauthTokenExchangeno sensitive capabilitytheprotocol_operatorPortalSelfLogsno sensitive capabilitytheprotocol_operatorPortalSelfRestartno sensitive capabilitytheprotocol_patchBundleno sensitive capabilitytheprotocol_placeExchangeOrderno sensitive capabilitytheprotocol_previewAdminEmailTextno sensitive capabilitytheprotocol_previewAdminEmailWithContextno sensitive capabilitytheprotocol_previewSlashReductionAttestationno sensitive capabilitytheprotocol_previewVotingPowerAttestationno sensitive capabilitytheprotocol_purchasePipelineTemplateno sensitive capabilitytheprotocol_rateBundleno sensitive capabilitytheprotocol_recordAchievementno sensitive capabilitytheprotocol_regenerateBackupCodesno sensitive capabilitytheprotocol_rejectDisputeSettlementno sensitive capabilitytheprotocol_relayActionno sensitive capabilitytheprotocol_releasePaymentno sensitive capabilitytheprotocol_releasePaymentByIdno sensitive capabilitytheprotocol_removeOrganizationMemberno sensitive capabilitytheprotocol_removeTeamMemberno sensitive capabilitytheprotocol_replySupportTicketno sensitive capabilitytheprotocol_reportBundleno sensitive capabilitytheprotocol_requestAccountDeletionno sensitive capabilitytheprotocol_requestFrameno sensitive capabilitytheprotocol_requestSelfRevocationno sensitive capabilitytheprotocol_resetAgentCredentialsOnboardno sensitive capabilitytheprotocol_resolveTegDisputeno sensitive capabilitytheprotocol_restoreBundleno sensitive capabilitytheprotocol_restoreFromUploadno sensitive capabilitytheprotocol_reverifyAttestationno sensitive capabilitytheprotocol_revokeApiKeyno sensitive capabilitytheprotocol_rollbackVersionno sensitive capabilitytheprotocol_rotateFederationLicenseSelfno sensitive capabilitytheprotocol_rotateMySigningKeyno sensitive capabilitytheprotocol_runForgeEvalno sensitive capabilitytheprotocol_searchToolsno sensitive capabilitytheprotocol_selectFlareno sensitive capabilitytheprotocol_selfProvisionOperatorno sensitive capabilitytheprotocol_setFlareCornerVariantno sensitive capabilitytheprotocol_setFlareOverlayno sensitive capabilitytheprotocol_setFlareVariantno sensitive capabilitytheprotocol_settlePaymentno sensitive capabilitytheprotocol_setup2FAno sensitive capabilitytheprotocol_smartSendno sensitive capabilitytheprotocol_stakeTokensno sensitive capabilitytheprotocol_submitAttestationno sensitive capabilitytheprotocol_submitContractWorkno sensitive capabilitytheprotocol_submitContractWorkFederatedno sensitive capabilitytheprotocol_submitDisputeno sensitive capabilitytheprotocol_submitDisputeEvidenceno sensitive capabilitytheprotocol_submitFundingRequestno sensitive capabilitytheprotocol_submitOnboardRegisterno sensitive capabilitytheprotocol_submitSupportTicketno sensitive capabilitytheprotocol_submitTegAttestationno sensitive capabilitytheprotocol_tallyProposalno sensitive capabilitytheprotocol_tegCrossRegistryTransferDirectno sensitive capabilitytheprotocol_tegReputationSignalTokenno sensitive capabilitytheprotocol_tegStakeDirectno sensitive capabilitytheprotocol_tegSystemTransferno sensitive capabilitytheprotocol_tegUnstakeDirectno sensitive capabilitytheprotocol_triggerDeploymentno sensitive capabilitytheprotocol_triggerFederationSyncno sensitive capabilitytheprotocol_triggerManualDistributionno sensitive capabilitytheprotocol_unassignAgentFromOrgno sensitive capabilitytheprotocol_unequipFlareno sensitive capabilitytheprotocol_unstakeTokensno sensitive capabilitytheprotocol_updateAutoCompoundno sensitive capabilitytheprotocol_updateDeploymentStatusno sensitive capabilitytheprotocol_updateFederationPeerno sensitive capabilitytheprotocol_updateMyDeveloperLocationno sensitive capabilitytheprotocol_updateMyDeveloperProfileno sensitive capabilitytheprotocol_updateOrganizationno sensitive capabilitytheprotocol_updateOrganizationTeamno sensitive capabilitytheprotocol_updatePeerSlashConfigno sensitive capabilitytheprotocol_updatePipelineno sensitive capabilitytheprotocol_updateTegPolicyno sensitive capabilitytheprotocol_validateAgentCardno sensitive capabilitytheprotocol_validateAgentImportno sensitive capabilitytheprotocol_verify2FAno sensitive capabilitytheprotocol_verifyPaymentno sensitive capabilitytheprotocol_verifyPublicAttestationBundleno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.0.0 latest |
A 94/100 | 4 | 1.10.0 | 2026-07-24 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan https://api.theprotocol.cloud/mcp/sse --onlineOther implementations of TheProtocol — Sovereign AI Agent Platform 24
Independent packages implementing the same tool, scanned with the same engine. Compare all 25 side by side →
LiveScore MCP (livescoremcp.com)
Remote
A
https://livescoremcp.com/sse
Live sports scores, fixtures and results across major leagues.
Bushdrum Events (bushdrum.com)
Remote
A
https://bushdrum.com/mcp/sse
City-scoped Bushdrum event search for agents with list_cities and search_events.
DexPaprika (mcp.dexpaprika.com)
Remote
A
https://mcp.dexpaprika.com/sse
Real-time DEX data, liquidity pools, token prices, and trading volumes across blockchain networks.
Mcp Merchant (mcp.shawndurrani.ai)
Remote
A
https://mcp.shawndurrani.ai/sse
Search-only commerce MCP server backed by Stripe (test)
Agent Ip (agent-ip.biodnd.com)
Remote
A
https://agent-ip.biodnd.com/sse
Agent IP: MCP server with patents search tools
Agent Fin (agent-fin.biodnd.com)
Remote
A
https://agent-fin.biodnd.com/sse
Agent Fin: finance MCP server with market data tools
More in AI & Agents
Agent
Source verified
npm
A
@aauth/mcp-agent
Security scan results for the Agent MCP server.
Agent Claim
Source verified
npm
A
@vk0/agent-claim-mcp
Security scan results for the Agent Claim MCP server.
Agent Comm
Source verified
npm
A
agent-comm
Security scan results for the Agent Comm MCP server.
Agent Comm
Source verified
npm
A
@jerfowler/agent-comm-mcp-server
Security scan results for the Agent Comm MCP server.
Agent Mcp Manager
Source verified
npm
A
agent-mcp-manager
Security scan results for the Agent Mcp Manager MCP server.
Agent Mesh
Source verified
npm
A
@reaatech/agent-mesh-mcp-server
Security scan results for the Agent Mesh MCP server.