MCP Debugger

api.toolexec.ai/mcp

keryx 0.45.0Checked October 2, 2026 at 9:22 PM

Unlisted. Anyone with the link can view this report.

Negotiated protocol2025-11-25outdated
AuthorizationRequired
CapabilitiesResources, Tools

Evidence

Connection5 passed

The server handles core MCP protocol requirements correctly.

Passed

Server responds to ping requests

Technical details
{
  "result": {}
}
Passed

Origin header validation

Technical details
{
  "status": 403
}
Passed

JSON-RPC request validation

Technical details
{
  "status": 400,
  "code": -32600,
  "id": null
}
Passed

Protocol version header validation

Technical details
{
  "status": 400
}
Passed

Session termination

Technical details
{
  "status": 200
}
Authorization46 passed · 4 info

This server requires authorization and implements the required security protocols well.

401 challenge

Server prompts for authentication.

Passed

Unauthenticated MCP request returns 401

Passed
WWW-Authenticate Header PresentAuthorization (opens in a new tab)

401 includes WWW-Authenticate

WWW-Authenticate parsing

Detect resource metadata hints.

Passed
WWW-Authenticate Header ExistsAuthorization (opens in a new tab)

401 includes a challenge

Passed

Challenge uses the Bearer scheme

Passed

Challenge includes a valid resource_metadata URL

Passed

Challenge scope tokens are valid

Passed
WWW-Authenticate scope recommendedAuthorization (opens in a new tab)

Protected MCP servers SHOULD include a scope parameter in the Bearer WWW-Authenticate challenge to guide least-privilege authorization.

Technical details
{
  "scope": "mcp",
  "wwwAuthenticateHeader": "[REDACTED]"
}

Protected resource metadata

Discover and validate protected resource metadata.

Passed

Protected Resource Metadata is discoverable

Technical details
{
  "url": "https://api.toolexec.ai/.well-known/oauth-protected-resource/mcp"
}
Passed

PRM response is a JSON object

Passed

PRM contains a resource identifier

Technical details
{
  "resource": "https://api.toolexec.ai/mcp"
}
Passed
PRM Has Authorization ServersAuthorization (opens in a new tab)

PRM contains valid authorization server URLs

Passed
PRM Scopes Supported ValidAuthorization (opens in a new tab)

Optional PRM scopes are strings

Passed

Valid PRM is available

Passed

PRM has a resource field

Passed

PRM resource is an absolute URI

Passed
PRM Resource Uses HTTPSAuthorization (opens in a new tab)

PRM resource uses HTTPS

Passed
PRM Resource Has No FragmentAuthorization (opens in a new tab)

PRM resource omits a fragment

Passed
PRM Resource Matches ServerAuthorization (opens in a new tab)

PRM resource identifies the MCP server

Authorization server discovery

Resolve authorization server metadata endpoints.

Passed

Valid PRM is available

Passed

RFC 8414 metadata endpoint is available

Information

OIDC metadata endpoint is available

Passed

At least one metadata discovery mechanism is available

Passed

Summarizes available discovery mechanisms

Authorization server metadata

Validate authorization server metadata.

Passed
AS Metadata Endpoint ExistsAuthorization (opens in a new tab)

Authorization Server metadata is discoverable

Technical details
{
  "url": "https://api.toolexec.ai/.well-known/oauth-authorization-server"
}
Passed

Valid PRM is available

Passed

AS metadata is a JSON object

Passed

AS metadata contains its issuer

Passed
AS Has Authorization EndpointAuthorization (opens in a new tab)

AS metadata contains authorization_endpoint

Passed

AS metadata contains token_endpoint

Passed
AS Response Types SupportedAuthorization (opens in a new tab)

AS supports the authorization code response type

Passed
AS Registration EndpointAuthorization (opens in a new tab)

AS advertises dynamic client registration

Client registration

Check client ID metadata and registration support.

Passed
AS Metadata PrerequisiteAuthorization (opens in a new tab)

Valid AS Metadata is available

Passed
CIMD Support Field PresentAuthorization (opens in a new tab)

AS metadata declares CIMD support

Passed

AS supports Client ID Metadata Documents

Passed
Registration Options AvailableAuthorization (opens in a new tab)

CIMD or DCR is available

PKCE support

Verify authorization code protection requirements.

Passed
AS Metadata PrerequisiteAuthorization (opens in a new tab)

Valid AS Metadata is available

Passed

AS metadata declares PKCE methods

Passed

AS supports S256 PKCE

Passed

AS is ready for authorization code PKCE

Token endpoint authentication

Validate token endpoint authentication methods.

Passed
AS Metadata PrerequisiteAuthorization (opens in a new tab)

Valid AS Metadata is available

Passed
Token Auth Methods PresentAuthorization (opens in a new tab)

AS declares token endpoint authentication methods

Passed
Token Auth Methods ValidAuthorization (opens in a new tab)

Token authentication methods are strings

Information
Confidential Client ReadyAuthorization (opens in a new tab)

AS supports a confidential-client token auth method

Grant types

Confirm supported grant types.

Passed
AS Metadata PrerequisiteAuthorization (opens in a new tab)

Valid AS Metadata is available

Passed

AS declares supported grant types

Passed
Authorization Code GrantAuthorization (opens in a new tab)

AS supports authorization_code

Passed

AS supports refresh_token

Information
Client Credentials GrantAuthorization (opens in a new tab)

AS supports client_credentials

Information

AS advertises client credentials readiness

Other authorization checks

Additional authorization evidence.

Passed
Invalid token rejection (active probe)Authorization (opens in a new tab)

Automatically sends a synthetic invalid Bearer token to protected servers. This can trigger WAF or security alerts.

Technical details
{
  "active": true,
  "automatic": true,
  "sideEffect": "security-log-event",
  "status": 401
}
Resources1 passed

The server reported support for the resources capability.

Passed

The server returned 3 resources when requested.

Technical details
{
  "resourceCount": 3,
  "resources": [
    "ui://toolexec/workflow-plan",
    "ui://toolexec/workflow-run-logs",
    "ui://toolexec/run-logs"
  ]
}
Tools4 passed · 1 info

The server reported support for the tools capability.

Passed

The server returned 111 tools when requested.

Technical details
{
  "toolCount": 111,
  "tools": [
    "user-edit",
    "components-catalog",
    "me-view",
    "membership-list",
    "membership-delete",
    "membership-create",
    "invite-create",
    "invite-list",
    "invite-accept",
    "invite-list-pending",
    "invite-reject",
    "audit-list",
    "tag-delete",
    "tag-create",
    "tag-list",
    "user-tag-assign",
    "user-tag-remove",
    "tag-edit",
    "project-view",
    "project-settings-view",
    "project-delete",
    "project-list",
    "project-apply",
    "project-settings-edit",
    "project-edit",
    "project-create",
    "project-overview",
    "project-dump",
    "help-view",
    "help-cancel",
    "help-answer",
    "help-list",
    "connection-put",
    "connection-probe",
    "connection-delete",
    "connection-list",
    "workflow-view",
    "workflow-plan",
    "workflow-run-cancel",
    "workflow-edit",
    "workflow-list",
    "workflow-run-create",
    "workflow-delete",
    "workflow-create",
    "workflow-run-retry",
    "workflow-run-list",
    "workflow-run-logs",
    "workflow-run-view",
    "workflow-validate",
    "sandbox-destroy",
    "sandbox-list",
    "run-artifacts-view",
    "run-tree",
    "run-logs",
    "run-list",
    "run-message",
    "run-cancel",
    "run-retry",
    "run-view",
    "run-events-list",
    "run-create",
    "notification-unread-count",
    "notification-list",
    "notification-mark-read",
    "agent-delete",
    "agent-prompt-preview",
    "agent-create",
    "agent-edit",
    "agent-view",
    "agent-list",
    "agent-validate",
    "agent-search",
    "agent-model-options",
    "agent-context-delete",
    "agent-context-list",
    "agent-context-edit",
    "agent-context-create",
    "agent-context-reorder",
    "sandbox-gateway-create",
    "sandbox-gateway-delete",
    "sandbox-gateway-edit",
    "sandbox-gateway-probe",
    "sandbox-gateway-list",
    "gateway-credential-put",
    "agent-input-create",
    "agent-input-edit",
    "agent-input-delete",
    "agent-input-list",
    "test-agent",
    "build",
    "poetry-agent",
    "pr-babysitter",
    "random-food-agent",
    "research",
    "review-verdict",
    "review-architecture",
    "review-interface",
    "review-security",
    "review-test-coverage",
    "revise"
  ]
}
Passed

The tools available on the server have well-formatted names.

Technical details
{
  "user-edit": "valid",
  "components-catalog": "valid",
  "me-view": "valid",
  "membership-list": "valid",
  "membership-delete": "valid",
  "membership-create": "valid",
  "invite-create": "valid",
  "invite-list": "valid",
  "invite-accept": "valid",
  "invite-list-pending": "valid",
  "invite-reject": "valid",
  "audit-list": "valid",
  "tag-delete": "valid",
  "tag-create": "valid",
  "tag-list": "valid",
  "user-tag-assign": "valid",
  "user-tag-remove": "valid",
  "tag-edit": "valid",
  "project-view": "valid",
  "project-settings-view": "valid",
  "project-delete": "valid",
  "project-list": "valid",
  "project-apply": "valid",
  "project-settings-edit": "valid",
  "project-edit": "valid",
  "project-create": "valid",
  "project-overview": "valid",
  "project-dump": "valid",
  "help-view": "valid",
  "help-cancel": "valid",
  "help-answer": "valid",
  "help-list": "valid",
  "connection-put": "valid",
  "connection-probe": "valid",
  "connection-delete": "valid",
  "connection-list": "valid",
  "workflow-view": "valid",
  "workflow-plan": "valid",
  "workflow-run-cancel": "valid",
  "workflow-edit": "valid",
  "workflow-list": "valid",
  "workflow-run-create": "valid",
  "workflow-delete": "valid",
  "workflow-create": "valid",
  "workflow-run-retry": "valid",
  "workflow-run-list": "valid",
  "workflow-run-logs": "valid",
  "workflow-run-view": "valid",
  "workflow-validate": "valid",
  "sandbox-destroy": "valid",
  "sandbox-list": "valid",
  "run-artifacts-view": "valid",
  "run-tree": "valid",
  "run-logs": "valid",
  "run-list": "valid",
  "run-message": "valid",
  "run-cancel": "valid",
  "run-retry": "valid",
  "run-view": "valid",
  "run-events-list": "valid",
  "run-create": "valid",
  "notification-unread-count": "valid",
  "notification-list": "valid",
  "notification-mark-read": "valid",
  "agent-delete": "valid",
  "agent-prompt-preview": "valid",
  "agent-create": "valid",
  "agent-edit": "valid",
  "agent-view": "valid",
  "agent-list": "valid",
  "agent-validate": "valid",
  "agent-search": "valid",
  "agent-model-options": "valid",
  "agent-context-delete": "valid",
  "agent-context-list": "valid",
  "agent-context-edit": "valid",
  "agent-context-create": "valid",
  "agent-context-reorder": "valid",
  "sandbox-gateway-create": "valid",
  "sandbox-gateway-delete": "valid",
  "sandbox-gateway-edit": "valid",
  "sandbox-gateway-probe": "valid",
  "sandbox-gateway-list": "valid",
  "gateway-credential-put": "[REDACTED]",
  "agent-input-create": "valid",
  "agent-input-edit": "valid",
  "agent-input-delete": "valid",
  "agent-input-list": "valid",
  "test-agent": "valid",
  "build": "valid",
  "poetry-agent": "valid",
  "pr-babysitter": "valid",
  "random-food-agent": "valid",
  "research": "valid",
  "review-verdict": "valid",
  "review-architecture": "valid",
  "review-interface": "valid",
  "review-security": "valid",
  "review-test-coverage": "valid",
  "revise": "valid"
}
Passed

All tools have valid inputSchema (and outputSchema, where present) definitions.

Technical details
{
  "user-edit": "valid",
  "components-catalog": "valid",
  "me-view": "valid",
  "membership-list": "valid",
  "membership-delete": "valid",
  "membership-create": "valid",
  "invite-create": "valid",
  "invite-list": "valid",
  "invite-accept": "valid",
  "invite-list-pending": "valid",
  "invite-reject": "valid",
  "audit-list": "valid",
  "tag-delete": "valid",
  "tag-create": "valid",
  "tag-list": "valid",
  "user-tag-assign": "valid",
  "user-tag-remove": "valid",
  "tag-edit": "valid",
  "project-view": "valid",
  "project-settings-view": "valid",
  "project-delete": "valid",
  "project-list": "valid",
  "project-apply": "valid",
  "project-settings-edit": "valid",
  "project-edit": "valid",
  "project-create": "valid",
  "project-overview": "valid",
  "project-dump": "valid",
  "help-view": "valid",
  "help-cancel": "valid",
  "help-answer": "valid",
  "help-list": "valid",
  "connection-put": "valid",
  "connection-probe": "valid",
  "connection-delete": "valid",
  "connection-list": "valid",
  "workflow-view": "valid",
  "workflow-plan": "valid",
  "workflow-run-cancel": "valid",
  "workflow-edit": "valid",
  "workflow-list": "valid",
  "workflow-run-create": "valid",
  "workflow-delete": "valid",
  "workflow-create": "valid",
  "workflow-run-retry": "valid",
  "workflow-run-list": "valid",
  "workflow-run-logs": "valid",
  "workflow-run-view": "valid",
  "workflow-validate": "valid",
  "sandbox-destroy": "valid",
  "sandbox-list": "valid",
  "run-artifacts-view": "valid",
  "run-tree": "valid",
  "run-logs": "valid",
  "run-list": "valid",
  "run-message": "valid",
  "run-cancel": "valid",
  "run-retry": "valid",
  "run-view": "valid",
  "run-events-list": "valid",
  "run-create": "valid",
  "notification-unread-count": "valid",
  "notification-list": "valid",
  "notification-mark-read": "valid",
  "agent-delete": "valid",
  "agent-prompt-preview": "valid",
  "agent-create": "valid",
  "agent-edit": "valid",
  "agent-view": "valid",
  "agent-list": "valid",
  "agent-validate": "valid",
  "agent-search": "valid",
  "agent-model-options": "valid",
  "agent-context-delete": "valid",
  "agent-context-list": "valid",
  "agent-context-edit": "valid",
  "agent-context-create": "valid",
  "agent-context-reorder": "valid",
  "sandbox-gateway-create": "valid",
  "sandbox-gateway-delete": "valid",
  "sandbox-gateway-edit": "valid",
  "sandbox-gateway-probe": "valid",
  "sandbox-gateway-list": "valid",
  "gateway-credential-put": "[REDACTED]",
  "agent-input-create": "valid",
  "agent-input-edit": "valid",
  "agent-input-delete": "valid",
  "agent-input-list": "valid",
  "test-agent": "valid",
  "build": "valid",
  "poetry-agent": "valid",
  "pr-babysitter": "valid",
  "random-food-agent": "valid",
  "research": "valid",
  "review-verdict": "valid",
  "review-architecture": "valid",
  "review-interface": "valid",
  "review-security": "valid",
  "review-test-coverage": "valid",
  "revise": "valid"
}
Passed

All tools have a description.

Technical details
{
  "user-edit": "valid",
  "components-catalog": "valid",
  "me-view": "valid",
  "membership-list": "valid",
  "membership-delete": "valid",
  "membership-create": "valid",
  "invite-create": "valid",
  "invite-list": "valid",
  "invite-accept": "valid",
  "invite-list-pending": "valid",
  "invite-reject": "valid",
  "audit-list": "valid",
  "tag-delete": "valid",
  "tag-create": "valid",
  "tag-list": "valid",
  "user-tag-assign": "valid",
  "user-tag-remove": "valid",
  "tag-edit": "valid",
  "project-view": "valid",
  "project-settings-view": "valid",
  "project-delete": "valid",
  "project-list": "valid",
  "project-apply": "valid",
  "project-settings-edit": "valid",
  "project-edit": "valid",
  "project-create": "valid",
  "project-overview": "valid",
  "project-dump": "valid",
  "help-view": "valid",
  "help-cancel": "valid",
  "help-answer": "valid",
  "help-list": "valid",
  "connection-put": "valid",
  "connection-probe": "valid",
  "connection-delete": "valid",
  "connection-list": "valid",
  "workflow-view": "valid",
  "workflow-plan": "valid",
  "workflow-run-cancel": "valid",
  "workflow-edit": "valid",
  "workflow-list": "valid",
  "workflow-run-create": "valid",
  "workflow-delete": "valid",
  "workflow-create": "valid",
  "workflow-run-retry": "valid",
  "workflow-run-list": "valid",
  "workflow-run-logs": "valid",
  "workflow-run-view": "valid",
  "workflow-validate": "valid",
  "sandbox-destroy": "valid",
  "sandbox-list": "valid",
  "run-artifacts-view": "valid",
  "run-tree": "valid",
  "run-logs": "valid",
  "run-list": "valid",
  "run-message": "valid",
  "run-cancel": "valid",
  "run-retry": "valid",
  "run-view": "valid",
  "run-events-list": "valid",
  "run-create": "valid",
  "notification-unread-count": "valid",
  "notification-list": "valid",
  "notification-mark-read": "valid",
  "agent-delete": "valid",
  "agent-prompt-preview": "valid",
  "agent-create": "valid",
  "agent-edit": "valid",
  "agent-view": "valid",
  "agent-list": "valid",
  "agent-validate": "valid",
  "agent-search": "valid",
  "agent-model-options": "valid",
  "agent-context-delete": "valid",
  "agent-context-list": "valid",
  "agent-context-edit": "valid",
  "agent-context-create": "valid",
  "agent-context-reorder": "valid",
  "sandbox-gateway-create": "valid",
  "sandbox-gateway-delete": "valid",
  "sandbox-gateway-edit": "valid",
  "sandbox-gateway-probe": "valid",
  "sandbox-gateway-list": "valid",
  "gateway-credential-put": "[REDACTED]",
  "agent-input-create": "valid",
  "agent-input-edit": "valid",
  "agent-input-delete": "valid",
  "agent-input-list": "valid",
  "test-agent": "valid",
  "build": "valid",
  "poetry-agent": "valid",
  "pr-babysitter": "valid",
  "random-food-agent": "valid",
  "research": "valid",
  "review-verdict": "valid",
  "review-architecture": "valid",
  "review-interface": "valid",
  "review-security": "valid",
  "review-test-coverage": "valid",
  "revise": "valid"
}
Information

One or more tools have annotation issues, such as unrecognized keys or contradictory hints.

No tools expose annotations; check not applicable.

Technical details
{}
Additional checks6 passed

Additional protocol evidence returned by the conformance runner.

Passed
ToolsNameFormat

Tool names are 1-64 characters and match ^[A-Za-z0-9_./-]+$

Technical details
{
  "toolCount": 111,
  "results": {
    "user-edit": "valid",
    "components-catalog": "valid",
    "me-view": "valid",
    "membership-list": "valid",
    "membership-delete": "valid",
    "membership-create": "valid",
    "invite-create": "valid",
    "invite-list": "valid",
    "invite-accept": "valid",
    "invite-list-pending": "valid",
    "invite-reject": "valid",
    "audit-list": "valid",
    "tag-delete": "valid",
    "tag-create": "valid",
    "tag-list": "valid",
    "user-tag-assign": "valid",
    "user-tag-remove": "valid",
    "tag-edit": "valid",
    "project-view": "valid",
    "project-settings-view": "valid",
    "project-delete": "valid",
    "project-list": "valid",
    "project-apply": "valid",
    "project-settings-edit": "valid",
    "project-edit": "valid",
    "project-create": "valid",
    "project-overview": "valid",
    "project-dump": "valid",
    "help-view": "valid",
    "help-cancel": "valid",
    "help-answer": "valid",
    "help-list": "valid",
    "connection-put": "valid",
    "connection-probe": "valid",
    "connection-delete": "valid",
    "connection-list": "valid",
    "workflow-view": "valid",
    "workflow-plan": "valid",
    "workflow-run-cancel": "valid",
    "workflow-edit": "valid",
    "workflow-list": "valid",
    "workflow-run-create": "valid",
    "workflow-delete": "valid",
    "workflow-create": "valid",
    "workflow-run-retry": "valid",
    "workflow-run-list": "valid",
    "workflow-run-logs": "valid",
    "workflow-run-view": "valid",
    "workflow-validate": "valid",
    "sandbox-destroy": "valid",
    "sandbox-list": "valid",
    "run-artifacts-view": "valid",
    "run-tree": "valid",
    "run-logs": "valid",
    "run-list": "valid",
    "run-message": "valid",
    "run-cancel": "valid",
    "run-retry": "valid",
    "run-view": "valid",
    "run-events-list": "valid",
    "run-create": "valid",
    "notification-unread-count": "valid",
    "notification-list": "valid",
    "notification-mark-read": "valid",
    "agent-delete": "valid",
    "agent-prompt-preview": "valid",
    "agent-create": "valid",
    "agent-edit": "valid",
    "agent-view": "valid",
    "agent-list": "valid",
    "agent-validate": "valid",
    "agent-search": "valid",
    "agent-model-options": "valid",
    "agent-context-delete": "valid",
    "agent-context-list": "valid",
    "agent-context-edit": "valid",
    "agent-context-create": "valid",
    "agent-context-reorder": "valid",
    "sandbox-gateway-create": "valid",
    "sandbox-gateway-delete": "valid",
    "sandbox-gateway-edit": "valid",
    "sandbox-gateway-probe": "valid",
    "sandbox-gateway-list": "valid",
    "gateway-credential-put": "[REDACTED]",
    "agent-input-create": "valid",
    "agent-input-edit": "valid",
    "agent-input-delete": "valid",
    "agent-input-list": "valid",
    "test-agent": "valid",
    "build": "valid",
    "poetry-agent": "valid",
    "pr-babysitter": "valid",
    "random-food-agent": "valid",
    "research": "valid",
    "review-verdict": "valid",
    "review-architecture": "valid",
    "review-interface": "valid",
    "review-security": "valid",
    "review-test-coverage": "valid",
    "revise": "valid"
  }
}
Passed
JSON-RPC result response validation

JSON-RPC result response validation

Technical details
{
  "status": 200
}
Passed
POST response content type

POST response content type

Technical details
{
  "contentType": "application/json"
}
Passed
Reserved _meta field acceptance

Reserved _meta field acceptance

Technical details
{
  "status": 200
}
Passed
JSON-RPC error response validation

JSON-RPC error response validation

Passed
Notification has no JSON-RPC response

Notification has no JSON-RPC response

Technical details
{
  "status": 202
}
Raw server infoJSON
{
  "serverInfo": {
    "name": "keryx",
    "version": "0.45.0"
  },
  "capabilities": {
    "prompts": false,
    "resources": true,
    "tools": true,
    "logging": false,
    "completions": false,
    "experimental": false
  }
}
MCP Debugger results for https://api.toolexec.ai/mcp