clariBIcom
clariBI is an AI-powered business intelligence platform that lets SaaS and ecommerce teams ask plain-English questions across Stripe, HubSpot, Google Analytics, ad platforms, and 30+ other sources. The AI engine picks the right visualization from 24 chart types and generates dashboards automatically.
Block For Production
trustsnap_1611d07a529088e3.- Utility Coverage
- Transport Compliance
- Step Up Auth
- Add an explicit confirm/dry-run parameter or two-step confirmation flow to write, delete, exec, and egress-capable tool…
- Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.
- Serve /.well-known/oauth-protected-resource and point it at your authorization server metadata.
- No segmented attention signals observed in the current window.
Dispute this assessment
If any published claim about this server -- its score, a risk flag, a capability classification, or its taxonomy -- is factually wrong, tell us what evidence shows and we will review it. This does not require claiming or verifying ownership of the server first.
Verify responds to disputes within 5 business days and resolves them within 15.
Dispute history
No disputes filed for this server.
Risks
Security posture
Tool capability & risk inventory
| Tool | Capabilities | Risk | Findings | Notes | Evidence |
|---|---|---|---|---|---|
check_integration_status |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"handoff_id": {
"description": "The id returned by request_oauth_integration_url.",
"format": "uuid",
"type": "string"
}
},
"required": [
"handoff_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
check_pricing |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"tier": {
"description": "Optional. Return only this tier (free, trial, lite, starter, professional, enterprise).",
"type": "string"
}
},
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
create_checkout_session |
write network financial | High | arbitrary network egress financial transaction | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": true,
"readOnlyHint": false
},
"capabilities": [
"write",
"network",
"financial"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"billing_period": {
"default": "monthly",
"description": "Billing cadence for the checkout. Defaults to monthly.",
"enum": [
"monthly",
"yearly"
],
"type": "string"
},
"tier": {
"description": "Target subscription tier.",
"enum": [
"starter",
"professional",
"enterprise"
],
"type": "string"
}
},
"required": [
"tier"
],
"type": "object"
},
"risk_flags": [
"arbitrary_network_egress",
"financial_transaction"
]
}
Dispute this classification
|
create_forecast |
write exec filesystem | High | command execution freeform input surface filesystem mutation | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"write",
"exec",
"filesystem"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"aggregation": {
"default": "auto",
"description": "How multiple raw points falling into the same bucket are combined. Auto picks sum for additive metrics, mean otherwise. Use Mean for rates (CTR, conversion, latency).",
"enum": [
"auto",
"sum",
"mean",
"last",
"max"
],
"type": "string"
},
"description": {
"maxLength": 5000,
"type": "string"
},
"granularity": {
"default": "daily",
"description": "Bucket size for the time series. Hourly requires an hourly data source; the engine refuses to fabricate hourly buckets from daily data.",
"enum": [
"hourly",
"daily",
"weekly",
"monthly",
"quarterly",
"annual"
],
"type": "string"
},
"horizon_days": {
"default": 30,
"description": "How many BUCKETS ahead to project. The per-granularity cap applies: hourly 168, daily 90, weekly 52, monthly 24, quarterly 8, annual 5. The field name is \"_days\" for backwards compatibility \u2014 it counts buckets of the chosen granularity.",
"maximum": 168,
"minimum": 1,
"type": "integer"
},
"include_anomalies": {
"default": true,
"type": "boolean"
},
"include_changepoints": {
"default": true,
"type": "boolean"
},
"include_correlations": {
"default": true,
"type": "boolean"
},
"method_override": {
"description": "Force a specific forecasting method instead of auto-selecting via walk-forward CV. Valid names: naive, seasonal_naive, moving_average, drift, linear_trend, ar_p, holt_winters, holt_winters_multiplicative, holt_winters_damped, theta, gradient_boost, ensemble_top3. Empty = auto.",
"maxLength": 40,
"type": "string"
},
"metric_path": {
"description": "Dot-path to the numeric column. For data_source: the metric key (e.g. \"revenue\"). For goal: \"value\" or \"percentage\". For report: the path inside the insights JSON. For dashboard: \"widget_id:metric_name\".",
"type": "string"
},
"name": {
"maxLength": 255,
"minLength": 1,
"type": "string"
},
"narration_enabled": {
"default": true,
"description": "When true, every completed run gets an AI-generated narrative attached (summary, highlights, risks, recommendations, methodology). Costs 1-2 extra AI credits per run.",
"type": "boolean"
},
"non_negative": {
"description": "When true, point + lower band clamped at zero. Omit to let the engine heuristic decide (via non_negative_auto=true).",
"type": "boolean"
},
"non_negative_auto": {
"default": true,
"description": "When true (default), the backend heuristic owns non_negative and re-evaluates per run based on the metric path. Set false alongside non_negative to lock the choice.",
"type": "boolean"
},
"schedule_day_of_month": {
"maximum": 31,
"minimum": 1,
"type": "integer"
},
"schedule_day_of_week": {
"maximum": 6,
"minimum": 0,
"type": "integer"
},
"schedule_frequency": {
"default": "monthly",
"description": "How often the forecast re-runs. Manual schedules only run when called explicitly via run_forecast.",
"enum": [
"daily",
"weekly",
"monthly",
"manual"
],
"type": "string"
},
"source_id": {
"description": "UUID of the report, dashboard, goal, or data source.",
"type": "string"
},
"source_type": {
"description": "Which clariBI artifact the metric lives on. Most callers should start with data_source for raw connector metrics or goal to forecast a tracked KPI.",
"enum": [
"report",
"dashboard",
"goal",
"data_source"
],
"type": "string"
},
"transform": {
"default": "auto",
"description": "Series transform applied before fitting. Log helps revenue/traffic series with growing variance. Auto detects when log is beneficial; none forces raw scale.",
"enum": [
"auto",
"none",
"log"
],
"type": "string"
}
},
"required": [
"name",
"source_type",
"source_id",
"metric_path"
],
"type": "object"
},
"risk_flags": [
"command_execution",
"freeform_input_surface",
"filesystem_mutation"
]
}
Dispute this classification
|
generate_report |
write | Medium | freeform input surface | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"write"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"output_format": {
"default": "pdf",
"description": "Output format. Must match one of ``GeneratedReport.OUTPUT_FORMATS``.",
"enum": [
"json",
"pdf",
"html",
"excel",
"csv"
],
"type": "string"
},
"template_id": {
"description": "Optional registry ID of the marketplace template to render. If omitted, an empty report shell is created and you can attach a template later from the web app.",
"type": "string"
},
"title": {
"description": "Display title for the generated report.",
"maxLength": 200,
"minLength": 2,
"type": "string"
}
},
"required": [
"title"
],
"type": "object"
},
"risk_flags": [
"freeform_input_surface"
]
}
Dispute this classification
|
get_analysis_status |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"job_id": {
"description": "job_id returned by a prior run_analysis call.",
"format": "uuid",
"type": "string"
}
},
"required": [
"job_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_billing_status |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {},
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_dashboard |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"dashboard_id": {
"description": "UUID of the dashboard to fetch.",
"format": "uuid",
"type": "string"
}
},
"required": [
"dashboard_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_data_source_schema |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"data_source_id": {
"description": "UUID of the data source to fetch the schema for.",
"format": "uuid",
"type": "string"
}
},
"required": [
"data_source_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_forecast |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"forecast_id": {
"description": "UUID of the forecast to fetch.",
"format": "uuid",
"type": "string"
}
},
"required": [
"forecast_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_forecast_run |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"forecast_id": {
"format": "uuid",
"type": "string"
},
"run_id": {
"description": "UUID of the run. Pass 'latest' to fetch the most recent run for the forecast.",
"format": "uuid",
"type": "string"
}
},
"required": [
"forecast_id",
"run_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_forecast_trust |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"forecast_id": {
"format": "uuid",
"type": "string"
}
},
"required": [
"forecast_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_report |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"report_id": {
"description": "UUID of the report to fetch.",
"format": "uuid",
"type": "string"
}
},
"required": [
"report_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
get_usage |
read | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {},
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
ingest_url_data_source |
write exec network | High | command execution arbitrary network egress freeform input surface | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": true,
"readOnlyHint": false
},
"capabilities": [
"write",
"exec",
"network"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"description": {
"description": "Optional human note stored on the data source.",
"maxLength": 1000,
"type": "string"
},
"format": {
"description": "Optional format hint. If omitted, the server infers it from the Content-Type header and URL extension.",
"enum": [
"csv",
"tsv",
"json",
"xlsx",
"xls",
"txt",
"pdf"
],
"type": "string"
},
"name": {
"description": "Display name for the new data source.",
"maxLength": 200,
"minLength": 2,
"type": "string"
},
"url": {
"description": "Public http(s) URL of the file to ingest. The server fetches it once at call time; the URL is not re-fetched on subsequent analyses. Private networks (RFC 1918, loopback, link-local, cloud metadata) are blocked.",
"type": "string"
},
"wait_seconds": {
"default": 0,
"description": "Seconds to block waiting for preprocessing before returning. 0 returns immediately.",
"maximum": 60,
"minimum": 0,
"type": "integer"
}
},
"required": [
"name",
"url"
],
"type": "object"
},
"risk_flags": [
"command_execution",
"arbitrary_network_egress",
"freeform_input_surface"
]
}
Dispute this classification
|
list_dashboards |
read | Low | none | Safeguards hinted in metadata. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"limit": {
"default": 20,
"description": "Page size (1\u2013100).",
"maximum": 100,
"minimum": 1,
"type": "integer"
},
"offset": {
"default": 0,
"description": "Row offset for pagination.",
"minimum": 0,
"type": "integer"
},
"search": {
"description": "Optional substring match against dashboard name.",
"type": "string"
}
},
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
list_data_sources |
read | Low | none | Safeguards hinted in metadata. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"limit": {
"default": 50,
"description": "Page size (1-100).",
"maximum": 100,
"minimum": 1,
"type": "integer"
},
"offset": {
"default": 0,
"description": "Row offset for pagination.",
"minimum": 0,
"type": "integer"
},
"source_type": {
"description": "Filter by source_type (csv, postgresql, google_ads, meta_ads, jira, mcp, \u2026).",
"type": "string"
}
},
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
list_forecasts |
read | Low | none | Safeguards hinted in metadata. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"is_active": {
"description": "Filter by active forecasts. Omit to include both active and paused.",
"type": "boolean"
},
"limit": {
"default": 20,
"description": "Page size (1-100).",
"maximum": 100,
"minimum": 1,
"type": "integer"
},
"offset": {
"default": 0,
"description": "Row offset for pagination.",
"minimum": 0,
"type": "integer"
}
},
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
list_reports |
read | Low | none | Safeguards hinted in metadata. |
Schema & evidence{
"annotations": {
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true
},
"capabilities": [
"read"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"limit": {
"default": 20,
"description": "Page size (1-100).",
"maximum": 100,
"minimum": 1,
"type": "integer"
},
"offset": {
"default": 0,
"description": "Row offset for pagination.",
"minimum": 0,
"type": "integer"
},
"status": {
"description": "Filter by status (pending, generating, completed, failed, cancelled).",
"type": "string"
}
},
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
regenerate_forecast_narrative |
undetermined | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"undetermined"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"forecast_id": {
"format": "uuid",
"type": "string"
},
"run_id": {
"description": "UUID of a COMPLETED run. Use get_forecast_run with run_id='latest' first if you want the most recent.",
"format": "uuid",
"type": "string"
}
},
"required": [
"forecast_id",
"run_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
register_account |
undetermined | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"undetermined"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"accept_terms": {
"description": "Must be true. By passing true the user agrees to https://claribi.com/terms and https://claribi.com/privacy.",
"type": "boolean"
},
"email": {
"description": "Work email for the new account.",
"format": "email",
"type": "string"
},
"first_name": {
"description": "User's first name (optional).",
"maxLength": 100,
"type": "string"
},
"last_name": {
"description": "User's last name (optional).",
"maxLength": 100,
"type": "string"
},
"organization_name": {
"description": "Display name for the organization workspace.",
"maxLength": 200,
"minLength": 2,
"type": "string"
}
},
"required": [
"email",
"organization_name",
"accept_terms"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
request_oauth_integration_url |
network | Medium | arbitrary network egress | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": true,
"readOnlyHint": false
},
"capabilities": [
"network"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"integration_type": {
"description": "Per-provider sub-type. Google accepts google_ads, gsheets, ga4, gsc, gdrive, bigquery, gcs, gcp, basic. Meta accepts ads or basic. Jira and Confluence accept basic. Defaults to basic.",
"type": "string"
},
"provider": {
"description": "OAuth provider to authorize. Currently supports the native-OAuth catalog: Google (Ads, Analytics 4, Search Console, Sheets, Drive, BigQuery), Meta Ads, and Atlassian Jira / Confluence.",
"enum": [
"google",
"meta",
"jira",
"confluence"
],
"type": "string"
}
},
"required": [
"provider"
],
"type": "object"
},
"risk_flags": [
"arbitrary_network_egress"
]
}
Dispute this classification
|
run_analysis |
secrets | Medium | secret material access | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"secrets"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"question": {
"description": "Natural language question to analyze. E.g. \"What was revenue last quarter by region?\".",
"maxLength": 1000,
"minLength": 3,
"type": "string"
},
"session_id": {
"description": "Optional existing conversation session UUID.",
"type": "string"
},
"wait_seconds": {
"default": 30,
"description": "How long (seconds) to wait for the job to finish before returning a job_id for polling. 0 = always return immediately.",
"maximum": 60,
"minimum": 0,
"type": "integer"
}
},
"required": [
"question"
],
"type": "object"
},
"risk_flags": [
"secret_material_access"
]
}
Dispute this classification
|
run_forecast |
undetermined | Low | none | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"undetermined"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"forecast_id": {
"format": "uuid",
"type": "string"
},
"wait_seconds": {
"default": 30,
"description": "Seconds to wait for the run to finish before returning a poll handle. 0 = return immediately with the run_id.",
"maximum": 60,
"minimum": 0,
"type": "integer"
}
},
"required": [
"forecast_id"
],
"type": "object"
},
"risk_flags": []
}
Dispute this classification
|
upload_data_source |
write exec | Medium | command execution | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"write",
"exec"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"data_base64": {
"description": "Base64-encoded file contents. Maximum 25 MB encoded (~18 MB raw). For larger payloads, host the file at a public URL and use ingest_url_data_source.",
"type": "string"
},
"description": {
"description": "Optional human-readable description. Surfaces in the web app and in get_data_source_schema.",
"maxLength": 1000,
"type": "string"
},
"format": {
"description": "File format. Drives MIME detection and the preprocessing route inside clariBI. csv covers comma-separated; tsv is tab-separated; xlsx is modern Excel; json must be a top-level array of objects or a single object.",
"enum": [
"csv",
"tsv",
"json",
"xlsx",
"xls",
"txt",
"pdf"
],
"type": "string"
},
"name": {
"description": "Display name for the new data source. Shown in the web app and in subsequent list_data_sources calls.",
"maxLength": 200,
"minLength": 2,
"type": "string"
},
"wait_seconds": {
"default": 0,
"description": "How long (seconds) to wait for preprocessing to finish before returning. 0 returns immediately with status=\"preprocessing\"; the caller polls get_data_source_schema or list_data_sources.",
"maximum": 60,
"minimum": 0,
"type": "integer"
}
},
"required": [
"name",
"format",
"data_base64"
],
"type": "object"
},
"risk_flags": [
"command_execution"
]
}
Dispute this classification
|
verify_email |
secrets | Medium | secret material access freeform input surface | No explicit safeguard hints detected. |
Schema & evidence{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false
},
"capabilities": [
"secrets"
],
"input_schema": {
"additionalProperties": false,
"properties": {
"code": {
"description": "6-digit verification code from the email.",
"pattern": "^[0-9]{6}$",
"type": "string"
},
"password": {
"description": "A password for the new account. Must be at least 8 characters and pass Django's standard validators.",
"minLength": 8,
"type": "string"
},
"pending_id": {
"description": "The pending_id returned by register_account.",
"format": "uuid",
"type": "string"
}
},
"required": [
"pending_id",
"code",
"password"
],
"type": "object"
},
"risk_flags": [
"secret_material_access",
"freeform_input_surface"
]
}
Dispute this classification
|
Write-action governance
Status detail: 3 high-risk tool(s), 3 exec-capable tool(s) are exposed without a clear auth boundary; 4 safeguard(s) and 0 confirmation signal(s) detected.
| Tool | Risk | Flags | Safeguards |
|---|---|---|---|
create_checkout_session |
High | arbitrary network egress financial transaction | no |
create_forecast |
High | command execution freeform input surface filesystem mutation | no |
ingest_url_data_source |
High | command execution arbitrary network egress freeform input surface | no |
Recommended runtime policy
No policy blockers under the default policy stance.
Action-controls diff
New actions
| Action | Risk | Flags |
|---|---|---|
| No newly added actions. | ||
Changed actions
| Action | Change types | Risk |
|---|---|---|
| No materially changed actions. | ||
Critical alerts
Compatibility
Client readiness verdicts
Client compatibility only means the server shape can work with a client. Production trust decision and write-action publishing are evaluated separately so a client-compatible server can still be blocked for production.
Evidence provenance
initialize• OKtools_list• OKtransport_compliance_probe• Errorstep_up_auth_probe• Missingconnector_replay_probe• OK — Frozen tool snapshots must survive refresh.request_association_probe• Missing — Roots, sampling, and elicitation should stay request-scoped.
Evidence provenance
initialize• OKtools_list• OKtransport_compliance_probe• Error
Evidence provenance
action_safety_probe• Error
Evidence provenance
tool_snapshot_probe• OKconnector_replay_probe• OK
Client readiness gate details
Remediation checklist
- Add OAuth-based authentication for remote connector auth.
- Support dynamic client registration (DCR) to simplify connector setup.
- Resolve the transport compliance failure -- see the transport compliance probe evidence for what specifically broke.
- Document step-up auth requirements in a connector-friendly way.
- Improve OAuth interoperability -- see the OAuth Interop score breakdown.
- Limit the exposed surface to search/fetch-style read tools.
Remediation checklist
- Resolve the transport compliance failure -- see the transport compliance probe evidence for what specifically broke.
- Limit the exposed surface to search/fetch-style read tools.
- Remove or isolate write, delete, and exec-capable tools before using this read/search-only client profile.
- Configure OAuth for authenticated remote MCP access.
- Remove export, bulk, mutating, and high-blast-radius exposure before certifying company-knowledge use.
- Satisfy OAuth, compatibility, and connector-refresh requirements before using the Messages API remote MCP path.
Remediation checklist
- Add a clearer auth boundary around risky write actions.
- Add confirmation or dry-run semantics for: create_checkout_session, create_forecast, generate_report, ingest_url_data_source, regenerate_forecast_narrative.
- Constrain or sandbox exec-capable tools before publishing broadly.
- Resolve the blocking production-readiness verdict before treating this as write-safe.
Verdict traces
- No active alert triggers.
Client verdict trace table
| Verdict | Status | Checks | Winning source | Conflicts |
|---|---|---|---|---|
openai_connectors |
Not client-compatible | initialize, tools_list, transport_compliance_probe, step_up_auth_probe, connector_replay_probe, request_association_probe | live_validation | none |
claude_desktop |
Not client-compatible | initialize, tools_list, transport_compliance_probe | live_validation | none |
unsafe_for_write_actions |
Publishing blocked | action_safety_probe | live_validation | none |
snapshot_churn_risk |
Low | tool_snapshot_probe, connector_replay_probe | history | none |
Publishability policy profiles
- Search Fetch Only: No
- Write Actions Present: Yes
- Oauth Configured: No
- Admin Refresh Required: No
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
- Search Fetch Only: No
- Write Actions Present: Yes
- Oauth Configured: No
- Admin Refresh Required: No
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
Compatibility fixtures
- remote_http_endpoint: Passes
- oauth_discovery: Degraded
- frozen_tool_snapshot_refresh: Passes
- request_association: Not Assessed
- remote_transport: Passes
- tool_discovery: Passes
- auth_connect: Passes
- safe_write_review: Degraded
Recommended for
Evidence
Current trust snapshot
trustsnap_1611d07a529088e3Canonical machine links
Evidence confidence
Latest validation evidence
Failures
oauth_authorization_serverno authorization serveroauth_protected_resourceClient error '404 Not Found' for url 'https://claribi.com/.well-known/oauth-protected-resource' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404openid_configurationno authorization serverserver_cardClient error '404 Not Found' for url 'https://claribi.com/.well-known/mcp/server-card.json' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404transport_compliance_probeIssues: missing session id, missing protocol header, bad protocol not rejected (bad protocol=200).
Checks
| Check | Status | Latency | Evidence |
|---|---|---|---|
action_safety_probe |
Error | n/a | 3 high-risk, 3 exec-capable, 3 egress-capable, 11 declared non-read-only, non-read capabilities: write, exec, financial tool(s); no clear auth boundary; safeguards=4; confirmation=none. |
advanced_capabilities_probe |
Warning | n/a | Only 3 capability signal(s): prompts, resources, structured outputs. |
connector_publishability_probe |
Warning | n/a | Publishability blockers: protocol version, session resume, step up auth, transport compliance, +3 more. |
connector_replay_probe |
OK | n/a | Backward compatible with no breaking tool-surface changes. |
determinism_probe |
OK | 114.8 ms | Check completed |
initialize |
OK | 281.1 ms | Protocol 2025-03-26 |
instruction_tool_reference_probe |
OK | n/a | Check completed |
interactive_flow_probe |
OK | n/a | Check completed |
oauth_authorization_server |
Missing | n/a | no authorization server |
oauth_protected_resource |
Error | 323.9 ms | Client error '404 Not Found' for url 'https://claribi.com/.well-known/oauth-protected-resource' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404 |
official_registry_probe |
Missing | n/a | Check completed |
openid_configuration |
Missing | n/a | no authorization server |
probe_noise_resilience |
OK | 326.6 ms | Fetched https://claribi.com/robots.txt |
prompt_get |
Missing | n/a | not advertised |
prompts_list |
OK | 112.3 ms | 0 prompt(s) exposed |
protocol_version_probe |
Warning | n/a | Claims 2025-03-26; 2 release(s) behind 2025-11-25. |
provenance_divergence_probe |
Not_Assessed | n/a | Check completed |
request_association_probe |
Missing | n/a | No request-association capabilities were advertised. |
resource_read |
Missing | n/a | not advertised |
resources_list |
OK | 109.8 ms | 0 resource item(s) exposed |
schema_divergence_probe |
Missing | n/a | no server card tools |
server_card |
Error | 118.2 ms | Client error '404 Not Found' for url 'https://claribi.com/.well-known/mcp/server-card.json' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404 |
session_resume_probe |
Warning | n/a | no session id |
step_up_auth_probe |
Missing | n/a | No OAuth or incremental-scope signals detected. |
tool_snapshot_probe |
OK | n/a | Check completed |
tools_list |
OK | 116.7 ms | 26 tool(s) exposed |
transport_compliance_probe |
Error | 115.2 ms | Issues: missing session id, missing protocol header, bad protocol not rejected (bad protocol=200). |
utility_coverage_probe |
Missing | 112.8 ms | No completions evidence; no pagination evidence; tasks missing. |
Known versions
- No versions recorded.
Public server reputation
Benchmark tasks
| Benchmark task | Status | Evidence |
|---|---|---|
| Discover tools | Passes |
|
| Read-only fetch flow | Degraded |
|
| OAuth-required connect | Degraded |
|
| Safe write flow with confirmation | Likely to fail |
|
Utility coverage
Tool snapshot diff & changelog
Required-argument changes
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument changes detected. | ||
Output-schema drift
| Tool | Previous properties | Latest properties |
|---|---|---|
| No output-schema drift detected. | ||
Validation diff
Regressed checks: none
Improved checks: none
Newly assessed dimensions: none
No longer assessed dimensions: none
| Component | Previous | Latest | Delta |
|---|---|---|---|
official_registry_presence_score | 3.0 | 2.0 | -1.0 |
Registry & provenance divergence
Active alerts
No active alerts for the current server state.
Aliases & registry graph
| Identifier | Source | Canonical | Identity evidence | Score |
|---|---|---|---|---|
ICS-cz/claribi-mcp |
glama_registry | yes | canonical | 58.3 |
Alias consolidation
Strong alias identity requires matching remote URL, server-card URL, repository slug, or explicit registry cross-reference; shared provider namespace alone is not identity.
Source disagreements
| Field | What differs | Observed values |
|---|---|---|
| No source disagreements detected. | ||
Fix it
Why this score?
Algorithmic score breakdown
1 component(s) not assessed for this run: Provenance Divergence
Experimental candidate components
Actionable remediation
| Severity | Remediation | Why it matters | Recommended action |
|---|---|---|---|
| High | Add confirmation and dry-run semantics for risky actions | High-risk write, delete, exec, or egress tools should communicate safeguards clearly. | Add an explicit confirm/dry-run parameter or two-step confirmation flow to write, delete, exec, and egress-capable tools before they can make destructive changes.Playbook
|
| High | Align session and protocol behavior with Streamable HTTP expectations | Clients increasingly rely on MCP-Protocol-Version, session teardown, and expired-session semantics. | Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.Playbook
|
| High | Expose /.well-known/oauth-protected-resource | Without a protected-resource document, OAuth clients cannot discover auth requirements reliably. | Serve /.well-known/oauth-protected-resource and point it at your authorization server metadata.Playbook
|
| High | Publish OAuth authorization-server metadata | Clients need authorization-server metadata to discover issuer, endpoints, and DCR support. | Publish /.well-known/oauth-authorization-server from your issuer and include registration_endpoint when supported.Playbook
|
| High | Publish a complete server card | Missing or incomplete server-card metadata weakens discovery, documentation, and trust signals. | Serve /.well-known/mcp/server-card.json and include tools, prompts/resources, homepage, and support links.Playbook
|
| Medium | Adopt a current MCP protocol revision | Older protocol revisions reduce compatibility with newer clients and registry programs. | Advertise a current MCP protocol revision (2025-06-18 or later) in both the initialize response and the MCP-Protocol-Version header.Playbook
|
| Medium | Close connector-publishing gaps | Connector catalogs care about protocol recency, session behavior, auth clarity, and tool-surface stability. | Resolve every blocker named by connector_publishability_probe, then rerun it before submitting or refreshing a connector listing.Playbook
|
| Medium | Document minimal scopes and return cleaner auth challenges | Modern clients expect granular scopes and step-up auth signals such as WWW-Authenticate scope hints. | Return granular scopes and WWW-Authenticate challenge hints instead of forcing overly broad auth upfront.Playbook
|
| Medium | Publish OpenID configuration | OIDC metadata improves token validation and client compatibility. | Expose /.well-known/openid-configuration with issuer, jwks_uri, and supported grants.Playbook
|
| Medium | Raise Adoption & Market score | Adoption clues and public evidence that the server is intended for external use. | Increase external documentation and directory coverage so users can discover and evaluate the server. |
| Medium | Support resumable HTTP sessions cleanly | Modern MCP clients increasingly expect resumable session behavior on streamable HTTP transports. | Persist session state keyed by Mcp-Session-Id and honor Last-Event-ID on GET reconnects so clients can resume a dropped Streamable HTTP session.Playbook
|
| Low | Expose modern utility surfaces like completions, pagination, or tasks | Utility coverage improves interoperability with larger clients and long-lived agent workflows. | Expose completions, pagination, and task metadata where supported so larger clients can plan and resume work safely.Playbook
|
| Low | Publish newer MCP capability signals | Roots, sampling, elicitation, structured outputs, and related metadata improve client understanding and ranking. | Advertise only the advanced capabilities (roots, sampling, elicitation) you have actually implemented end to end in the initialize capabilities object.Playbook
|
| Low | Publish or reconcile the server in the official MCP registry | Official registry presence improves discovery confidence and cross-source consistency. | Create or update the official MCP registry entry with the canonical MCP endpoint and matching repository metadata, then rerun official_registry_probe.Playbook
|
Point loss breakdown
| Component | Current | Points missing |
|---|---|---|
| Utility Coverage | 0/4 | -4.0 |
| Transport Compliance | 0/4 | -4.0 |
| Step-Up Auth | 0/4 | -4.0 |
| Request Association | 0/4 | -4.0 |
| Recovery Semantics | 0/4 | -4.0 |
| OAuth Interop | 0/4 | -4.0 |
| Error Contract Quality | 0/4 | -4.0 |
| Supply Chain Signal | 0/4 | -4.0 |
| Least Privilege Scope | 1/4 | -3.0 |
| Execution / Sandbox Safety | 1/4 | -3.0 |
| Egress / SSRF Resilience | 1/4 | -3.0 |
| Connector Publishability | 1/4 | -3.0 |
Technical compatibility profiles
These scores measure technical client compatibility only. Client publishability and production readiness are evaluated separately against policy, transport, and write-surface blockers.
Connector URL: https://claribi.com/mcp/v1/ # No OAuth metadata detected. # Server: ICS-cz/claribi-mcp
{
"mcpServers": {
"claribi-mcp": {
"command": "npx",
"args": ["mcp-remote", "https://claribi.com/mcp/v1/"]
}
}
}
smithery mcp add "https://claribi.com/mcp/v1/"
curl -sS https://claribi.com/mcp/v1/ -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Governance
MCP TrustOps
TrustOps turns this report into operational controls: validation targets and SLAs, authenticated validation, semantic benchmarks, policy exports, alert subscriptions, badges, cost/compliance metadata, and runtime routing. Fresh trusted index decisions stay separate from long-tail inventory so stale scores do not masquerade as current evidence.
/v1/decideAlert subscription types
MCP Runtime hosting
Verify Hosted MCP turns a trusted server report into a managed remote MCP endpoint with GitHub deployment provenance, sandbox policy, encrypted secrets, release history, rollback, and audit/usage events.
/hosted/{namespace}/{name}/mcp| Deployment | Status | Endpoint | Release |
|---|---|---|---|
| No hosted runtime deployments yet. | |||
Authenticated validation sessions
Public validation is free. Authenticated validation is paid and proves scoped behavior, write-action safeguards, and authenticated tool execution.
/v1/verify/v1/ci/previewInstall snippets
Connector URL: https://claribi.com/mcp/v1/ # No OAuth metadata detected. # Server: ICS-cz/claribi-mcp
{
"mcpServers": {
"claribi-mcp": {
"command": "npx",
"args": ["mcp-remote", "https://claribi.com/mcp/v1/"]
}
}
}
smithery mcp add "https://claribi.com/mcp/v1/"
curl -sS https://claribi.com/mcp/v1/ -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Agent access & tool surface
tools/list, prompts/list, and resources/list checks.ICS-cz/claribi-mcp.History
Validation history
| Timestamp | Status | Score | Latency | Tools |
|---|---|---|---|---|
| Aug 15, 2026 03:56:56 AM UTC | Healthy | 58.3 | 2285.5 ms | 26 |
| Aug 14, 2026 03:55:01 PM UTC | Healthy | 58.9 | 2512.3 ms | 26 |
| Aug 14, 2026 03:23:22 AM UTC | Healthy | 58.9 | 2189.8 ms | 26 |
| Aug 14, 2026 03:23:18 AM UTC | Healthy | 58.9 | 2129.3 ms | 26 |
| Aug 13, 2026 08:46:57 PM UTC | Healthy | 58.9 | 2016.6 ms | 26 |
| Aug 13, 2026 08:45:02 PM UTC | Healthy | 58.9 | 2624.4 ms | 26 |
| Aug 13, 2026 08:35:29 AM UTC | Healthy | 59.4 | 2147.9 ms | 26 |
| Aug 12, 2026 08:14:58 PM UTC | Healthy | 59.4 | 2055.1 ms | 26 |
| Aug 12, 2026 08:11:40 AM UTC | Healthy | 59.4 | 2067.0 ms | 26 |
| Aug 11, 2026 08:11:09 PM UTC | Healthy | 59.4 | 2202.8 ms | 26 |
Validation timeline
| Validated | Summary | Score | Protocol | Auth mode | Tools | High-risk tools | Changes |
|---|---|---|---|---|---|---|---|
| Aug 15, 2026 03:56:56 AM UTC | Healthy | 58.3 | 2025-03-26 | public | 26 | 3 | none |
| Aug 14, 2026 03:55:01 PM UTC | Healthy | 58.9 | 2025-03-26 | public | 26 | 3 | none |
| Aug 14, 2026 03:23:22 AM UTC | Healthy | 58.9 | 2025-03-26 | public | 26 | 3 | none |
| Aug 14, 2026 03:23:18 AM UTC | Healthy | 58.9 | 2025-03-26 | public | 26 | 3 | none |
| Aug 13, 2026 08:46:57 PM UTC | Healthy | 58.9 | 2025-03-26 | public | 26 | 3 | none |
| Aug 13, 2026 08:45:02 PM UTC | Healthy | 58.9 | 2025-03-26 | public | 26 | 3 | none |
| Aug 13, 2026 08:35:29 AM UTC | Healthy | 59.4 | 2025-03-26 | public | 26 | 3 | none |
| Aug 12, 2026 08:14:58 PM UTC | Healthy | 59.4 | 2025-03-26 | public | 26 | 3 | none |
| Aug 12, 2026 08:11:40 AM UTC | Healthy | 59.4 | 2025-03-26 | public | 26 | 3 | none |
| Aug 11, 2026 08:11:09 PM UTC | Healthy | 59.4 | 2025-03-26 | public | 26 | 3 | none |
Recent validation runs
| Started | Status | Summary | Latency | Checks |
|---|---|---|---|---|
| Aug 15, 2026 03:56:54 AM UTC | Completed | Healthy | 2285.5 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, instruction_tool_reference_probe, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 14, 2026 03:54:59 PM UTC | Completed | Healthy | 2512.3 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, instruction_tool_reference_probe, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 14, 2026 03:23:19 AM UTC | Completed | Healthy | 2189.8 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, instruction_tool_reference_probe, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 14, 2026 03:23:16 AM UTC | Completed | Healthy | 2129.3 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, instruction_tool_reference_probe, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 13, 2026 08:46:55 PM UTC | Completed | Healthy | 2016.6 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 13, 2026 08:45:00 PM UTC | Completed | Healthy | 2624.4 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 13, 2026 08:35:26 AM UTC | Completed | Healthy | 2147.9 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 12, 2026 08:14:56 PM UTC | Completed | Healthy | 2055.1 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 12, 2026 08:11:38 AM UTC | Completed | Healthy | 2067.0 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 11, 2026 08:11:07 PM UTC | Completed | Healthy | 2202.8 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
Incident & change feed
| Timestamp | Event | Details |
|---|---|---|
| Aug 15, 2026 03:56:56 AM UTC | Latest validation: healthy | Score 58.3 with status healthy. |
| Aug 15, 2026 03:56:56 AM UTC | Score changed | Score delta -0.5 versus the previous run. |
| Aug 05, 2026 11:01:16 AM UTC | Score corrected (post-1.0.503 remediation, R1 zero-anchoring) | Prior: 68.72. Corrected: 65.41. |
Technical details
Raw evidence view
Show raw JSON evidence
Large evidence payload summarized to keep this page fast. Full raw evidence remains available from the JSON report.
{
"checks": {
"count": 28,
"items": {
"action_safety_probe": {
"auth_present": false,
"safeguard_count": 4,
"status": "error"
},
"advanced_capabilities_probe": {
"status": "warning"
},
"connector_publishability_probe": {
"status": "warning"
},
"connector_replay_probe": {
"status": "ok"
},
"determinism_probe": {
"latency_ms": 114.77,
"status": "ok"
},
"initialize": {
"http_status": 200,
"latency_ms": 281.15,
"payload_omitted": true,
"status": "ok"
},
"instruction_tool_reference_probe": {
"status": "ok"
},
"interactive_flow_probe": {
"status": "ok"
},
"oauth_authorization_server": {
"reason": "no_authorization_server",
"status": "missing"
},
"oauth_protected_resource": {
"latency_ms": 323.86,
"reason": "Client error '404 Not Found' for url 'https://claribi.com/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"status": "error"
},
"official_registry_probe": {
"status": "missing"
},
"openid_configuration": {
"reason": "no_authorization_server",
"status": "missing"
},
"probe_noise_resilience": {
"http_status": 200,
"latency_ms": 326.56,
"status": "ok"
},
"prompt_get": {
"reason": "not_advertised",
"status": "missing"
},
"prompts_list": {
"http_status": 200,
"latency_ms": 112.32,
"payload_omitted": true,
"status": "ok"
},
"protocol_version_probe": {
"status": "warning"
},
"provenance_divergence_probe": {
"status": "not_assessed"
},
"request_association_probe": {
"reason": "no_request_association_capabilities_advertised",
"status": "missing"
},
"resource_read": {
"reason": "not_advertised",
"status": "missing"
},
"resources_list": {
"http_status": 200,
"latency_ms": 109.85,
"payload_omitted": true,
"status": "ok"
},
"schema_divergence_probe": {
"reason": "no_server_card_tools",
"status": "missing"
},
"server_card": {
"latency_ms": 118.2,
"reason": "Client error '404 Not Found' for url 'https://claribi.com/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"status": "error"
},
"session_resume_probe": {
"reason": "no_session_id",
"status": "warning"
},
"step_up_auth_probe": {
"status": "missing"
},
"tool_snapshot_probe": {
"status": "ok"
},
"tools_list": {
"http_status": 200,
"latency_ms": 116.65,
"payload_omitted": true,
"status": "ok",
"tool_count": 26,
"tool_names_preview": [
"check_integration_status",
"check_pricing",
"create_checkout_session",
"create_forecast",
"generate_report",
"get_analysis_status",
"get_billing_status",
"get_dashboard",
"get_data_source_schema",
"get_forecast",
"get_forecast_run",
"get_forecast_trust",
"get_report",
"get_usage",
"ingest_url_data_source",
"list_dashboards",
"list_data_sources",
"list_forecasts",
"list_reports",
"regenerate_forecast_narrative",
"register_account",
"request_oauth_integration_url",
"run_analysis",
"run_forecast",
"upload_data_source"
]
},
"transport_compliance_probe": {
"latency_ms": 115.17,
"protocol_header_present": false,
"status": "error"
},
"utility_coverage_probe": {
"latency_ms": 112.81,
"status": "missing"
}
},
"omitted_count": 0
},
"failures": {
"count": 5,
"items": {
"oauth_authorization_server": {},
"oauth_protected_resource": {},
"openid_configuration": {},
"server_card": {},
"transport_compliance_probe": {}
},
"omitted_count": 0
},
"message": "Raw evidence is summarized in HTML to keep server detail pages fast. Use the JSON report or evidence API for the full payload.",
"remote_url": "https://claribi.com/mcp/v1/",
"server_card": {
"name": null,
"raw_payload_omitted": false,
"version": null
},
"server_identifier": "ICS-cz/claribi-mcp",
"truncated": true
}
Capabilities
- OAuth:
- DCR/CIMD:
- Prompts:
- Homepage: https://glama.ai/mcp/servers/x17aszv4v1
- Docs: none
- Support: https://github.com/ICS-cz/claribi-mcp
- Icon: none
- Remote endpoint: https://claribi.com/mcp/v1/
- Directory listing: none
- Server card: none
Transport compliance drilldown
Issues: missing_session_id, missing_protocol_header, bad_protocol_not_rejected
Request association
Connector replay
Required-argument replay breaks
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument replay breaks detected. | ||
Output-schema replay breaks
| Tool | Removed properties | Added properties |
|---|---|---|
| No output-schema replay breaks detected. | ||