TRON infrastructure for AI agents.
Merx - TRON Resource Exchange Merx is the first TRON resource exchange that aggregates energy and bandwidth providers into a single MCP server. GitHub: https://github.com/Hovsteder/merx-mcp Hosted SSE: https://merx.exchange/mcp/sse npm: merx-mcp Website: https://merx.exchange Stats * 52 tools, 30 prompts, 21 resources * 7+ energy providers (CatFee, ITRX, PowerSun, Fe
Allow With Approval
trustsnap_cacc95b17167288e.- Recovery Semantics
- Error Contract
- Dependency Supply Chain Signal
- Inspect the latest validation evidence and resolve the client-visible regression.
- Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.
- Inspect the latest validation evidence and resolve the client-visible regression.
trustsnap_cacc95b17167288e- Possible agent/script activity
- profile / compare inspection
Current trust snapshot
trustsnap_cacc95b17167288eCanonical machine links
Own this MCP?
Claim ownership, prove control with a GitHub, DNS, HTTP, MCP metadata, or email-domain challenge, revalidate now, publish a badge, configure monitoring, and unlock a verified server profile.
POST /v1/servers/Hovsteder/merx-mcp/revalidateBadge embed
[](https://verify.sentinelsignal.io/servers/Hovsteder/merx-mcp)
Publisher readiness checklist
5/7 readiness checks currently pass. Paid status never changes the objective score; it can add evidence, monitoring, badge analytics, and authenticated validation.
| Check | Status | How to improve |
|---|---|---|
| Ownership verified | Needs work | Prove GitHub, DNS, HTTP, MCP metadata, or domain-email control. |
| Fresh validation | Ready | Keep public evidence inside the 48h publisher launch window. |
| Healthy endpoint | Needs work | Remote endpoint should initialize and list tools reliably. |
| Score threshold | Ready | Aim for score >= 70 before using production-readiness language. |
| Metadata complete | Ready | Publish description, homepage/docs, remote URL, and support metadata. |
| Risk posture reviewed | Ready | Address OAuth, write-action, destructive-tool, and protocol findings. |
| Badge ready | Ready | Publish score and freshness badges only when current evidence exists. |
MCP TrustOps
TrustOps turns this report into operational controls: freshness SLAs, authenticated validation, semantic benchmarks, policy exports, alert subscriptions, badges, cost/compliance metadata, and runtime routing. Fresh trusted index decisions stay separate from long-tail inventory so stale scores do not masquerade as current evidence.
/v1/decideAlert subscription types
MCP Runtime hosting
Verify Hosted MCP turns a trusted server report into a managed remote MCP endpoint with GitHub deployment provenance, sandbox policy, encrypted secrets, release history, rollback, and audit/usage events.
/hosted/{namespace}/{name}/mcp| Deployment | Status | Endpoint | Release |
|---|---|---|---|
| No hosted runtime deployments yet. | |||
Production readiness class
Evidence confidence
Recommended for
Client compatibility verdicts
Client compatibility only means the server shape can work with a client. Production trust decision and write-action publishing are evaluated separately so a client-compatible server can still be blocked for production.
Evidence provenance
initialize• OKtools_list• OKtransport_compliance_probe• Errorstep_up_auth_probe• Warningconnector_replay_probe• OK — Frozen tool snapshots must survive refresh.request_association_probe• Missing — Roots, sampling, and elicitation should stay request-scoped.
Evidence provenance
initialize• OKtools_list• OKtransport_compliance_probe• Error
Evidence provenance
action_safety_probe• Warning
Evidence provenance
tool_snapshot_probe• OKconnector_replay_probe• OK
Why compatibility is limited by client
Remediation checklist
Requires a streamable HTTP endpoint.Dynamic client registration materially improves connector setup.Transport compliance should be in good shape.OAuth interoperability should be strong.search fetch only is not yet satisfiedsafe for company knowledge is not yet satisfied
Remediation checklist
Transport behavior should match Claude-compatible HTTP expectations.search fetch only is not yet satisfiedsafe for company knowledge is not yet satisfiedsafe for messages api remote mcp is not yet satisfiedTransport compliance issues should be resolved before wider client rollout.
Remediation checklist
- No explicit blockers recorded.
Verdict traces
server_degraded• medium • Latest validation is degradedtool_snapshot_changed• high • Tool snapshot changedauth_mode_changed• high • Auth mode changedwrite_action_surface_expanded• high • Write-action surface expanded
Client verdict trace table
| Verdict | Status | Checks | Winning source | Conflicts |
|---|---|---|---|---|
openai_connectors |
Partially client-compatible | initialize, tools_list, transport_compliance_probe, step_up_auth_probe, connector_replay_probe, request_association_probe | live_validation | none |
claude_desktop |
Client-compatible | initialize, tools_list, transport_compliance_probe | live_validation | none |
unsafe_for_write_actions |
Publishing allowed | action_safety_probe | live_validation | none |
snapshot_churn_risk |
Medium | tool_snapshot_probe, connector_replay_probe | history | none |
Publishability policy profiles
- Search Fetch Only: No
- Write Actions Present: Yes
- Oauth Configured: Yes
- Admin Refresh Required: Yes
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
- Search Fetch Only: No
- Write Actions Present: Yes
- Oauth Configured: Yes
- Admin Refresh Required: Yes
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
Compatibility fixtures
- remote_http_endpoint: Passes
- oauth_discovery: Passes
- frozen_tool_snapshot_refresh: Passes
- request_association: Passes
- remote_transport: Passes
- tool_discovery: Passes
- auth_connect: Passes
- safe_write_review: Passes
Authenticated validation sessions
Public validation is free. Authenticated validation is paid and proves scoped behavior, write-action safeguards, and authenticated tool execution.
/v1/verify/v1/ci/previewPublic server reputation
Incident & change feed
| Timestamp | Event | Details |
|---|---|---|
| Aug 03, 2026 01:51:00 PM UTC | Latest validation: degraded | Score 72.1 with status degraded. |
| Aug 03, 2026 01:51:00 PM UTC | Score changed | Score delta +0.1 versus the previous run. |
| Aug 03, 2026 01:51:00 PM UTC | Tool snapshot changed | Added 25, removed 0, and changed 0 tool contracts. |
| Aug 03, 2026 01:51:00 PM UTC | Auth mode changed | Auth mode moved from unknown to oauth_supported. |
| Aug 02, 2026 08:43:52 PM UTC | Score changed | Score delta -0.3 versus the previous run. |
| Aug 02, 2026 02:11:48 AM UTC | Score changed | Score delta +0.0 versus the previous run. |
Capabilities
- OAuth:
- DCR/CIMD:
- Prompts:
- Homepage: https://glama.ai/mcp/servers/h2j6un5ug7
- Docs: none
- Support: https://github.com/Hovsteder/merx-mcp
- Icon: none
- Remote endpoint: https://merx.exchange/mcp/sse
- Server card: none
Security posture
Agent Commerce & Payment Readiness - Beta
Beta assessment. Verify separates commerce-adjacent context from observed payment execution. Usage, billing, pricing, card, wallet, or meter terms alone do not make a server payment-capable. This is not a certification of safety, compliance, or fraud prevention.
Warnings
No commerce-specific warnings generated.
Evidence
| Field | Value | Source | Matched terms | Confidence |
|---|---|---|---|---|
| commerce_signal | strong | tool_schema | order, payment, purchase, invoice, limit, amount, currency, estimate | high |
| payment_rails | x402, crypto | tool_schema | x402, crypto | medium |
Recommended operator fixes
- Separate quote/cart tools from charge/settlement tools.
- Require explicit user confirmation for payment execution.
- Return amount, currency, merchant, and receipt identifiers.
- Publish pricing and refund/cancellation policy.
- Add operator identity metadata.
- Add spending policy support or mandate constraints.
Tool capability & risk inventory
| Tool | Capabilities | Risk | Findings | Notes |
|---|---|---|---|---|
get_prices |
read | Low | none | No explicit safeguard hints detected. |
get_best_price |
read | Low | none | No explicit safeguard hints detected. |
analyze_prices |
other | Low | none | No explicit safeguard hints detected. |
get_price_history |
read export | Medium | bulk data access | No explicit safeguard hints detected. |
compare_providers |
other | Low | none | No explicit safeguard hints detected. |
estimate_transaction_cost |
write secrets | Medium | secret material access | No explicit safeguard hints detected. |
check_address_resources |
other | Low | none | No explicit safeguard hints detected. |
create_order |
read write network | Medium | arbitrary network egress | No explicit safeguard hints detected. |
get_order |
read | Low | none | No explicit safeguard hints detected. |
list_orders |
read export | Medium | bulk data access | No explicit safeguard hints detected. |
ensure_resources |
read network | Medium | arbitrary network egress | No explicit safeguard hints detected. |
wait_for_delegation |
read write | Medium | none | Safeguards hinted in metadata. |
get_balance |
read secrets | Medium | secret material access | No explicit safeguard hints detected. |
get_deposit_info |
read secrets | Medium | secret material access | No explicit safeguard hints detected. |
get_transaction_history |
read secrets | Medium | secret material access | No explicit safeguard hints detected. |
explain_concept |
read | Low | none | No explicit safeguard hints detected. |
suggest_duration |
other | Low | none | No explicit safeguard hints detected. |
calculate_savings |
other | Low | none | No explicit safeguard hints detected. |
list_providers |
read | Low | none | No explicit safeguard hints detected. |
get_account_info |
read write | Medium | none | No explicit safeguard hints detected. |
get_trx_balance |
read | Low | none | No explicit safeguard hints detected. |
get_trc20_balance |
read secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
get_transaction |
read | Low | none | No explicit safeguard hints detected. |
get_block |
read | Low | none | No explicit safeguard hints detected. |
get_chain_parameters |
read | Low | none | No explicit safeguard hints detected. |
convert_address |
other | Low | none | No explicit safeguard hints detected. |
get_trx_price |
read | Low | none | No explicit safeguard hints detected. |
validate_address |
other | Low | none | No explicit safeguard hints detected. |
search_transaction_history |
read export | Medium | bulk data access | No explicit safeguard hints detected. |
transfer_trx |
write | Medium | none | No explicit safeguard hints detected. |
transfer_trc20 |
read secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
approve_trc20 |
read secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
get_token_info |
read secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
read_contract |
read | Low | none | No explicit safeguard hints detected. |
estimate_contract_call |
other | Low | none | No explicit safeguard hints detected. |
call_contract |
write | Medium | none | No explicit safeguard hints detected. |
get_contract_info |
read write secrets | Medium | secret material access | No explicit safeguard hints detected. |
get_swap_quote |
read secrets export | High | bulk data access secret material access | No explicit safeguard hints detected. |
execute_swap |
secrets export | High | bulk data access secret material access | No explicit safeguard hints detected. |
get_token_price |
read secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
create_account |
read write secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
login |
secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
set_api_key |
read write secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
set_private_key |
write secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
deposit_trx |
secrets | Medium | secret material access | No explicit safeguard hints detected. |
enable_auto_deposit |
write delete secrets | High | destructive operation secret material access | No explicit safeguard hints detected. |
pay_invoice |
write network | Medium | arbitrary network egress | No explicit safeguard hints detected. |
create_paid_order |
read write network | Medium | arbitrary network egress | No explicit safeguard hints detected. |
execute_intent |
write exec | Medium | command execution | Safeguards hinted in metadata. |
simulate |
read write exec | Medium | command execution | Safeguards hinted in metadata. |
create_standing_order |
read write | Medium | none | No explicit safeguard hints detected. |
list_standing_orders |
read | Low | none | No explicit safeguard hints detected. |
get_standing_order |
read | Low | none | No explicit safeguard hints detected. |
cancel_standing_order |
read | Low | none | No explicit safeguard hints detected. |
create_monitor |
read write network | Medium | arbitrary network egress | No explicit safeguard hints detected. |
list_monitors |
read write | Medium | none | No explicit safeguard hints detected. |
cancel_monitor |
other | Low | none | No explicit safeguard hints detected. |
withdraw |
secrets | Medium | secret material access | No explicit safeguard hints detected. |
compile_policy |
read write delete admin | High | destructive operation admin mutation | No explicit safeguard hints detected. |
resource_broadcast |
read write delete network secrets | Critical | destructive operation arbitrary network egress secret material access | No explicit safeguard hints detected. |
register_agent |
read write network | Medium | none | No explicit safeguard hints detected. |
request_payment |
read write network secrets | High | arbitrary network egress secret material access freeform input surface | No explicit safeguard hints detected. |
lookup_invoice |
read write network secrets | Medium | secret material access | No explicit safeguard hints detected. |
create_invoice |
write network | Medium | none | No explicit safeguard hints detected. |
watch_address |
exec network secrets | Critical | command execution arbitrary network egress secret material access freeform input surface | No explicit safeguard hints detected. |
agent_status |
read write network export | Medium | bulk data access | Safeguards hinted in metadata. |
Write-action governance
Status detail: 7 high-risk tool(s), 3 destructive tool(s), 3 exec-capable tool(s); auth boundary is oauth or auth required with 4 safeguard(s) and 8 confirmation signal(s).
| Tool | Risk | Flags | Safeguards |
|---|---|---|---|
get_swap_quote |
High | bulk data access secret material access | no |
execute_swap |
High | bulk data access secret material access | no |
enable_auto_deposit |
High | destructive operation secret material access | no |
compile_policy |
High | destructive operation admin mutation | no |
resource_broadcast |
Critical | destructive operation arbitrary network egress secret material access | no |
request_payment |
High | arbitrary network egress secret material access freeform input surface | no |
watch_address |
Critical | command execution arbitrary network egress secret material access freeform input surface | no |
Action-controls diff
New actions
| Action | Risk | Flags |
|---|---|---|
agent_status | Medium | bulk data access |
analyze_prices | Low | none |
approve_trc20 | Medium | secret material access freeform input surface |
calculate_savings | Low | none |
call_contract | Medium | none |
cancel_monitor | Low | none |
cancel_standing_order | Low | none |
check_address_resources | Low | none |
compare_providers | Low | none |
compile_policy | High | destructive operation admin mutation |
convert_address | Low | none |
create_account | Medium | secret material access freeform input surface |
create_invoice | Medium | none |
create_monitor | Medium | arbitrary network egress |
create_order | Medium | arbitrary network egress |
create_paid_order | Medium | arbitrary network egress |
create_standing_order | Medium | none |
deposit_trx | Medium | secret material access |
enable_auto_deposit | High | destructive operation secret material access |
ensure_resources | Medium | arbitrary network egress |
estimate_contract_call | Low | none |
estimate_transaction_cost | Medium | secret material access |
execute_intent | Medium | command execution |
execute_swap | High | bulk data access secret material access |
explain_concept | Low | none |
Changed actions
| Action | Change types | Risk |
|---|---|---|
| No materially changed actions. | ||
Why this score?
Algorithmic score breakdown
Compatibility profiles
Connector URL: https://merx.exchange/mcp/sse # Complete OAuth in the client when prompted. # Server: Hovsteder/merx-mcp
{
"mcpServers": {
"merx-mcp": {
"command": "npx",
"args": ["mcp-remote", "https://merx.exchange/mcp/sse"]
}
}
}
smithery mcp add "https://merx.exchange/mcp/sse"
curl -sS https://merx.exchange/mcp/sse -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Actionable remediation
| Severity | Remediation | Why it matters | Recommended action |
|---|---|---|---|
| High | Add confirmation and dry-run semantics for risky actions | High-risk write, delete, exec, or egress tools should communicate safeguards clearly. | Inspect the latest validation evidence and resolve the client-visible regression.Playbook
|
| High | Align session and protocol behavior with Streamable HTTP expectations | Clients increasingly rely on MCP-Protocol-Version, session teardown, and expired-session semantics. | Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.Playbook
|
| High | Associate roots, sampling, and elicitation with active client requests | Modern MCP guidance expects roots, sampling, and elicitation traffic to be tied to an active client request instead of arriving unsolicited on idle sessions. | Inspect the latest validation evidence and resolve the client-visible regression.Playbook
|
| High | Publish OAuth authorization-server metadata | Clients need authorization-server metadata to discover issuer, endpoints, and DCR support. | Publish /.well-known/oauth-authorization-server from your issuer and include registration_endpoint when supported.Playbook
|
| High | Respond to auth mode changed | Auth mode changed from unknown to oauth_supported. | Document the new auth posture and confirm protected-resource and challenge metadata still match reality.Playbook
|
| High | Respond to tool snapshot changed | Tools were added, removed, or materially changed between the latest two validations. | Publish a first-class changelog for tool additions, removals, and breaking schema changes.Playbook
|
| High | Respond to write-action surface expanded | The number of high-risk write, delete, exec, or bulk-access tools increased on the latest run. | Review the newly exposed write and destructive actions before publishing them broadly.Playbook
|
| Medium | Adopt a current MCP protocol revision | Older protocol revisions reduce compatibility with newer clients and registry programs. | Inspect the latest validation evidence and resolve the client-visible regression.Playbook
|
| Medium | Close connector-publishing gaps | Connector catalogs care about protocol recency, session behavior, auth clarity, and tool-surface stability. | Inspect the latest validation evidence and resolve the client-visible regression.Playbook
|
| Medium | Document minimal scopes and return cleaner auth challenges | Modern clients expect granular scopes and step-up auth signals such as WWW-Authenticate scope hints. | Return granular scopes and WWW-Authenticate challenge hints instead of forcing overly broad auth upfront.Playbook
|
| Medium | Publish OpenID configuration | OIDC metadata improves token validation and client compatibility. | Expose /.well-known/openid-configuration with issuer, jwks_uri, and supported grants.Playbook
|
| Medium | Respond to latest validation is degraded | The server is reachable but at least one important behavior regressed. | Resolve the regressed checks and review the latest validation diff.Playbook
|
| Low | Expose modern utility surfaces like completions, pagination, or tasks | Utility coverage improves interoperability with larger clients and long-lived agent workflows. | Expose completions, pagination, and task metadata where supported so larger clients can plan and resume work safely.Playbook
|
| Low | Publish newer MCP capability signals | Roots, sampling, elicitation, structured outputs, and related metadata improve client understanding and ranking. | Inspect the latest validation evidence and resolve the client-visible regression.Playbook
|
| Low | Publish or reconcile the server in the official MCP registry | Official registry presence improves discovery confidence and cross-source consistency. | Inspect the latest validation evidence and resolve the client-visible regression.Playbook
|
Point loss breakdown
| Component | Current | Points missing |
|---|---|---|
| Recovery Semantics | 0/4 | -4.0 |
| Error Contract | 0/4 | -4.0 |
| Dependency Supply Chain Signal | 1.5/4 | -2.5 |
| OAUTH Interop | 1.6/4 | -2.4 |
| Utility Coverage | 2/4 | -2.0 |
| Trust Confidence | 2/4 | -2.0 |
| Spec Recency | 2/4 | -2.0 |
| Secret Handling Hygiene | 2/4 | -2.0 |
| Registry Consistency | 2/4 | -2.0 |
| Rate Limit Semantics | 2/4 | -2.0 |
| Execution Sandbox Safety | 2/4 | -2.0 |
| Egress SSRF Resilience | 2/4 | -2.0 |
Validation diff
Regressed checks: transport_compliance_probe
Improved checks: connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_protected_resource, probe_noise_resilience, prompt_get, prompts_list, provenance_divergence_probe, resource_read, resources_list, server_card, session_resume_probe, tool_snapshot_probe, tools_list
| Component | Previous | Latest | Delta |
|---|---|---|---|
maintenance_signal_score | 3.55 | 3.75 | 0.2 |
Tool snapshot diff & changelog
Required-argument changes
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument changes detected. | ||
Output-schema drift
| Tool | Previous properties | Latest properties |
|---|---|---|
| No output-schema drift detected. | ||
Connector replay
Required-argument replay breaks
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument replay breaks detected. | ||
Output-schema replay breaks
| Tool | Removed properties | Added properties |
|---|---|---|
| No output-schema replay breaks detected. | ||
Transport compliance drilldown
Issues: missing_protocol_header, bad_protocol_not_rejected, expired_session_not_404
Request association
Utility coverage
Benchmark tasks
| Benchmark task | Status | Evidence |
|---|---|---|
| Discover tools | Passes |
|
| Read-only fetch flow | Passes |
|
| OAuth-required connect | Passes |
|
| Safe write flow with confirmation | Degraded |
|
Registry & provenance divergence
| Field | Registry | Live server card |
|---|---|---|
| Title | n/a | merx-mcp |
| Version | n/a | 1.0.6 |
| Homepage | n/a | n/a |
Active alerts
- Latest validation is degraded (medium)
The server is reachable but at least one important behavior regressed. - Tool snapshot changed (high)
Tools were added, removed, or materially changed between the latest two validations. - Auth mode changed (high)
Auth mode changed from unknown to oauth_supported. - Write-action surface expanded (high)
The number of high-risk write, delete, exec, or bulk-access tools increased on the latest run.
Aliases & registry graph
| Identifier | Source | Canonical | Score |
|---|---|---|---|
Hovsteder/merx-mcp |
glama_registry | yes | 72.13 |
Alias consolidation
Source disagreements
| Field | What differs | Observed values |
|---|---|---|
| No source disagreements detected. | ||
Install snippets
Connector URL: https://merx.exchange/mcp/sse # Complete OAuth in the client when prompted. # Server: Hovsteder/merx-mcp
{
"mcpServers": {
"merx-mcp": {
"command": "npx",
"args": ["mcp-remote", "https://merx.exchange/mcp/sse"]
}
}
}
smithery mcp add "https://merx.exchange/mcp/sse"
curl -sS https://merx.exchange/mcp/sse -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Agent access & tool surface
tools/list, prompts/list, and resources/list checks.Hovsteder/merx-mcp.Claims & monitoring
No verified maintainer claim recorded.
Alert routing
| Watch | Team | Channels | Minimum severity |
|---|---|---|---|
| No active watch destinations. | |||
Maintainer analytics
Maintainer response quality
Maintainer annotations
No maintainer annotations have been recorded yet.
Maintainer rebuttals & expected behavior
No maintainer rebuttals or expected-behavior overrides are recorded yet.
Latest validation evidence
Failures
oauth_authorization_serverno authorization serveropenid_configurationno authorization servertransport_compliance_probeIssues: missing protocol header, bad protocol not rejected, expired session not 404 (bad protocol=200, DELETE=200, expired session=200).
Checks
| Check | Status | Latency | Evidence |
|---|---|---|---|
action_safety_probe |
Warning | n/a | 7 high-risk, 3 destructive, 3 exec-capable tool(s); auth present; safeguards=4; confirmation=estimate transaction cost, wait for delegation, approve trc20, set private key, +4 more. |
advanced_capabilities_probe |
Warning | n/a | Only 3 capability signal(s): prompts, resource links, resources. |
connector_publishability_probe |
Warning | n/a | Publishability blockers: transport compliance. |
connector_replay_probe |
OK | n/a | Backward compatible with no breaking tool-surface changes. |
determinism_probe |
OK | 102.8 ms | Check completed |
initialize |
OK | 96.4 ms | Protocol 2025-03-26 |
interactive_flow_probe |
OK | n/a | Check completed |
oauth_authorization_server |
Missing | n/a | no authorization server |
oauth_protected_resource |
OK | 94.9 ms | resource |
official_registry_probe |
Warning | n/a | Check completed |
openid_configuration |
Missing | n/a | no authorization server |
probe_noise_resilience |
OK | 99.2 ms | Fetched https://merx.exchange/robots.txt |
prompt_get |
OK | 95.7 ms | 1 prompt message(s) returned |
prompts_list |
OK | 97.1 ms | 30 prompt(s) exposed |
protocol_version_probe |
Warning | n/a | Claims 2025-03-26; 2 release(s) behind 2025-11-25. |
provenance_divergence_probe |
OK | n/a | Check completed |
request_association_probe |
Missing | n/a | No request-association capabilities were advertised. |
resource_read |
OK | 98.1 ms | 1 resource content item(s) returned |
resources_list |
OK | 96.3 ms | 21 resource item(s) exposed |
server_card |
OK | 311.7 ms | $schema, authentication, capabilities, description |
session_resume_probe |
OK | 102.6 ms | 66 tool(s) exposed |
step_up_auth_probe |
Warning | n/a | Oauth detected. |
tool_snapshot_probe |
OK | n/a | Check completed |
tools_list |
OK | 189.7 ms | 66 tool(s) exposed |
transport_compliance_probe |
Error | 199.4 ms | Issues: missing protocol header, bad protocol not rejected, expired session not 404 (bad protocol=200, DELETE=200, expired session=200). |
utility_coverage_probe |
Missing | 97.9 ms | No completions evidence; no pagination evidence; tasks missing. |
Raw evidence view
Show raw JSON evidence
Large evidence payload summarized to keep this page fast. Full raw evidence remains available from the JSON report.
{
"checks": {
"count": 26,
"items": {
"action_safety_probe": {
"auth_present": true,
"safeguard_count": 4,
"status": "warning"
},
"advanced_capabilities_probe": {
"status": "warning"
},
"connector_publishability_probe": {
"status": "warning"
},
"connector_replay_probe": {
"status": "ok"
},
"determinism_probe": {
"latency_ms": 102.8,
"status": "ok"
},
"initialize": {
"http_status": 200,
"latency_ms": 96.37,
"payload_omitted": true,
"status": "ok"
},
"interactive_flow_probe": {
"status": "ok"
},
"oauth_authorization_server": {
"reason": "no_authorization_server",
"status": "missing"
},
"oauth_protected_resource": {
"http_status": 200,
"latency_ms": 94.94,
"payload_omitted": true,
"status": "ok"
},
"official_registry_probe": {
"status": "warning"
},
"openid_configuration": {
"reason": "no_authorization_server",
"status": "missing"
},
"probe_noise_resilience": {
"http_status": 200,
"latency_ms": 99.18,
"status": "ok"
},
"prompt_get": {
"http_status": 200,
"latency_ms": 95.73,
"payload_omitted": true,
"status": "ok"
},
"prompts_list": {
"http_status": 200,
"latency_ms": 97.06,
"payload_omitted": true,
"status": "ok"
},
"protocol_version_probe": {
"status": "warning"
},
"provenance_divergence_probe": {
"status": "ok"
},
"request_association_probe": {
"reason": "no_request_association_capabilities_advertised",
"status": "missing"
},
"resource_read": {
"http_status": 200,
"latency_ms": 98.13,
"payload_omitted": true,
"status": "ok"
},
"resources_list": {
"http_status": 200,
"latency_ms": 96.27,
"payload_omitted": true,
"status": "ok"
},
"server_card": {
"http_status": 200,
"latency_ms": 311.72,
"payload_omitted": true,
"status": "ok"
},
"session_resume_probe": {
"http_status": 200,
"latency_ms": 102.58,
"payload_omitted": true,
"status": "ok",
"tool_count": 66,
"tool_names_preview": [
"get_prices",
"get_best_price",
"analyze_prices",
"get_price_history",
"compare_providers",
"estimate_transaction_cost",
"check_address_resources",
"create_order",
"get_order",
"list_orders",
"ensure_resources",
"wait_for_delegation",
"get_balance",
"get_deposit_info",
"get_transaction_history",
"explain_concept",
"suggest_duration",
"calculate_savings",
"list_providers",
"get_account_info",
"get_trx_balance",
"get_trc20_balance",
"get_transaction",
"get_block",
"get_chain_parameters"
]
},
"step_up_auth_probe": {
"status": "warning"
},
"tool_snapshot_probe": {
"status": "ok"
},
"tools_list": {
"http_status": 200,
"latency_ms": 189.73,
"payload_omitted": true,
"status": "ok",
"tool_count": 66,
"tool_names_preview": [
"get_prices",
"get_best_price",
"analyze_prices",
"get_price_history",
"compare_providers",
"estimate_transaction_cost",
"check_address_resources",
"create_order",
"get_order",
"list_orders",
"ensure_resources",
"wait_for_delegation",
"get_balance",
"get_deposit_info",
"get_transaction_history",
"explain_concept",
"suggest_duration",
"calculate_savings",
"list_providers",
"get_account_info",
"get_trx_balance",
"get_trc20_balance",
"get_transaction",
"get_block",
"get_chain_parameters"
]
},
"transport_compliance_probe": {
"latency_ms": 199.39,
"protocol_header_present": false,
"status": "error"
},
"utility_coverage_probe": {
"latency_ms": 97.92,
"status": "missing"
}
},
"omitted_count": 0
},
"failures": {
"count": 3,
"items": {
"oauth_authorization_server": {},
"openid_configuration": {},
"transport_compliance_probe": {}
},
"omitted_count": 0
},
"message": "Raw evidence is summarized in HTML to keep server detail pages fast. Use the JSON report or evidence API for the full payload.",
"remote_url": "https://merx.exchange/mcp/sse",
"server_card": {
"name": null,
"raw_payload_omitted": false,
"version": null
},
"server_identifier": "Hovsteder/merx-mcp",
"truncated": true
}
Known versions
- No versions recorded.
Validation history
| Timestamp | Status | Score | Latency | Tools |
|---|---|---|---|---|
| Aug 03, 2026 01:51:00 PM UTC | Degraded | 72.1 | 1930.7 ms | 66 |
| Aug 02, 2026 08:43:52 PM UTC | Degraded | 72.0 | 2127.6 ms | 0 |
| Aug 02, 2026 02:11:48 AM UTC | Degraded | 72.3 | 2052.8 ms | 0 |
| Aug 01, 2026 07:00:18 AM UTC | Degraded | 72.3 | 1957.8 ms | 0 |
| Jul 31, 2026 11:47:56 AM UTC | Degraded | 71.0 | 1925.7 ms | 0 |
Validation timeline
| Validated | Summary | Score | Protocol | Auth mode | Tools | High-risk tools | Changes |
|---|---|---|---|---|---|---|---|
| Aug 03, 2026 01:51:00 PM UTC | Degraded | 72.1 | 2025-03-26 | oauth_supported | 66 | 7 | auth_mode_changed write_surface_expanded tool_snapshot_changed |
| Aug 02, 2026 08:43:52 PM UTC | Degraded | 72.0 | unknown | unknown | 0 | 0 | none |
| Aug 02, 2026 02:11:48 AM UTC | Degraded | 72.3 | unknown | unknown | 0 | 0 | none |
| Aug 01, 2026 07:00:18 AM UTC | Degraded | 72.3 | unknown | unknown | 0 | 0 | none |
| Jul 31, 2026 11:47:56 AM UTC | Degraded | 71.0 | unknown | unknown | 0 | 0 | none |
Recent validation runs
| Started | Status | Summary | Latency | Checks |
|---|---|---|---|---|
| Aug 03, 2026 01:50:58 PM UTC | Completed | Degraded | 1930.7 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 02, 2026 08:43:50 PM UTC | Completed | Degraded | 2127.6 ms | |
| Aug 02, 2026 02:11:45 AM UTC | Completed | Degraded | 2052.8 ms | |
| Aug 01, 2026 07:00:16 AM UTC | Completed | Degraded | 1957.8 ms | |
| Jul 31, 2026 11:47:54 AM UTC | Completed | Degraded | 1925.7 ms | |