Doxa MCP
Christian Bible Scripture MCP: BSB verse lookup, Christian encouragement, the Doxa Way journey map. Three tools: doxa_encourage, doxa_scripture, doxa_way_movement. Hosted at https://doxa.app/mcp/v1, free per-individual quota, BYOL for unlimited. Scripture, summoned.
Block For Production
trustsnap_1a83d12ca7d9803f.- Utility Coverage
- Transport Compliance
- Recovery Semantics
- Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.
- Only send roots/list, sampling/createMessage, or elicitation/create requests while handling an active client-initiated…
- Publish /.well-known/oauth-authorization-server from your issuer and include registration endpoint when supported.
- No segmented attention signals observed in the current window.
Dispute this assessment
If any published claim about this server -- its score, a risk flag, a capability classification, or its taxonomy -- is factually wrong, tell us what evidence shows and we will review it. This does not require claiming or verifying ownership of the server first.
Verify responds to disputes within 5 business days and resolves them within 15.
Dispute history
No disputes filed for this server.
Risk
Security posture
Tool capability & risk inventory
| Tool | Capabilities | Risk | Findings | Notes |
|---|---|---|---|---|
doxa_encourage |
read | Low | none | No explicit safeguard hints detected. |
doxa_scripture |
read | Low | none | No explicit safeguard hints detected. |
doxa_way_movement |
read | Low | none | No explicit safeguard hints detected. |
Write-action governance
Status detail: No unsafe write-action governance gaps detected on the latest validation.
| Tool | Risk | Flags | Safeguards |
|---|---|---|---|
| No high-risk tools were detected on the latest run. | |||
Action-controls diff
New actions
| Action | Risk | Flags |
|---|---|---|
doxa_encourage | Low | none |
doxa_scripture | Low | none |
doxa_way_movement | Low | none |
Changed actions
| Action | Change types | Risk |
|---|---|---|
| No materially changed actions. | ||
Critical alerts
Compatibility
Client compatibility verdicts
Client compatibility only means the server shape can work with a client. Production trust decision and write-action publishing are evaluated separately so a client-compatible server can still be blocked for production.
Evidence provenance
initialize• OKtools_list• OKtransport_compliance_probe• Errorstep_up_auth_probe• Warningconnector_replay_probe• OK — Frozen tool snapshots must survive refresh.request_association_probe• Missing — Roots, sampling, and elicitation should stay request-scoped.
Evidence provenance
initialize• OKtools_list• OKtransport_compliance_probe• Error
Evidence provenance
action_safety_probe• OK
Evidence provenance
tool_snapshot_probe• OKconnector_replay_probe• OK
Client compatibility gate details
Remediation checklist
Dynamic client registration materially improves connector setup.Transport compliance should be in good shape.Not yet safe for the Messages API remote MCP path: requires OAuth, a compatible connector profile, and no pending connector-refresh risk.Transport compliance issues should be resolved before wider client rollout.
Remediation checklist
Transport behavior should match Claude-compatible HTTP expectations.Not yet safe for the Messages API remote MCP path: requires OAuth, a compatible connector profile, and no pending connector-refresh risk.Transport compliance issues should be resolved before wider client rollout.
Remediation checklist
- No explicit blockers recorded.
Verdict traces
server_degraded• medium • Latest validation is degradedtool_snapshot_changed• high • Tool snapshot changedauth_mode_changed• high • Auth mode changed
Client verdict trace table
| Verdict | Status | Checks | Winning source | Conflicts |
|---|---|---|---|---|
openai_connectors |
Partially client-compatible | initialize, tools_list, transport_compliance_probe, step_up_auth_probe, connector_replay_probe, request_association_probe | live_validation | none |
claude_desktop |
Client-compatible | initialize, tools_list, transport_compliance_probe | live_validation | none |
unsafe_for_write_actions |
Publishing allowed | action_safety_probe | live_validation | none |
snapshot_churn_risk |
Medium | tool_snapshot_probe, connector_replay_probe | history | none |
Publishability policy profiles
- Search Fetch Only: Yes
- Write Actions Present: No
- Oauth Configured: Yes
- Admin Refresh Required: No
- Safe For Company Knowledge: Yes
- Safe For Messages Api Remote Mcp: No
- Search Fetch Only: Yes
- Write Actions Present: No
- Oauth Configured: Yes
- Admin Refresh Required: No
- Safe For Company Knowledge: Yes
- Safe For Messages Api Remote Mcp: No
Compatibility fixtures
- remote_http_endpoint: Passes
- oauth_discovery: Passes
- frozen_tool_snapshot_refresh: Passes
- request_association: Passes
- remote_transport: Passes
- tool_discovery: Passes
- auth_connect: Passes
- safe_write_review: Passes
Recommended for
Evidence
Current trust snapshot
trustsnap_1a83d12ca7d9803fCanonical machine links
Evidence confidence
Latest validation evidence
Failures
oauth_authorization_serverClient error '404 Not Found' for url 'https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/oauth-authorization-server' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404transport_compliance_probeIssues: missing session id, missing protocol header, bad protocol not rejected (bad protocol=200).
Checks
| Check | Status | Latency | Evidence |
|---|---|---|---|
action_safety_probe |
OK | n/a | No high-risk write, destructive, or exec tools detected. |
advanced_capabilities_probe |
Missing | n/a | No advanced MCP capability signals detected. |
connector_publishability_probe |
Warning | n/a | Publishability blockers: transport compliance. |
connector_replay_probe |
OK | n/a | Backward compatible with no breaking tool-surface changes. |
determinism_probe |
OK | 127.3 ms | Check completed |
initialize |
OK | 206.7 ms | Protocol 2024-11-05 |
interactive_flow_probe |
OK | n/a | Check completed |
oauth_authorization_server |
Error | 312.6 ms | Client error '404 Not Found' for url 'https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/oauth-authorization-server' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404 |
oauth_protected_resource |
OK | 27.1 ms | 1 authorization server(s) |
official_registry_probe |
Warning | n/a | Check completed |
openid_configuration |
OK | 271.0 ms | authorization_endpoint, claims_supported, code_challenge_methods_supported, grant_types_supported |
probe_noise_resilience |
OK | 26.2 ms | Fetched https://doxa.app/robots.txt |
prompt_get |
Missing | n/a | not advertised |
prompts_list |
Missing | 177.9 ms | not supported |
protocol_version_probe |
Warning | n/a | Claims 2024-11-05; 3 release(s) behind 2025-11-25. |
provenance_divergence_probe |
OK | n/a | Check completed |
request_association_probe |
Missing | n/a | No request-association capabilities were advertised. |
resource_read |
Missing | n/a | not advertised |
resources_list |
Missing | 169.3 ms | not supported |
server_card |
OK | 72.6 ms | capabilities, documentation, serverInfo, tools |
session_resume_probe |
Warning | n/a | no session id |
step_up_auth_probe |
Warning | n/a | Scopes=email, offline access, openid, phone, +1 more. |
tool_snapshot_probe |
OK | n/a | Check completed |
tools_list |
OK | 129.1 ms | 3 tool(s) exposed |
transport_compliance_probe |
Error | 109.3 ms | Issues: missing session id, missing protocol header, bad protocol not rejected (bad protocol=200). |
utility_coverage_probe |
Missing | 111.1 ms | No completions evidence; no pagination evidence; tasks missing. |
Raw evidence view
Show raw JSON evidence
{
"checks": {
"action_safety_probe": {
"details": {
"auth_present": true,
"confirmation_signals": [],
"reason": null,
"safeguard_count": 0,
"summary": {
"bulk_access_tools": 0,
"capability_distribution": {
"read": 3
},
"destructive_tools": 0,
"egress_tools": 0,
"exec_tools": 0,
"high_risk_tools": 0,
"risk_distribution": {
"critical": 0,
"high": 0,
"low": 3,
"medium": 0
},
"secret_tools": 0,
"tool_count": 3
}
},
"latency_ms": null,
"status": "ok"
},
"advanced_capabilities_probe": {
"details": {
"capabilities": {
"completions": false,
"elicitation": false,
"prompts": false,
"resource_links": false,
"resources": false,
"roots": false,
"sampling": false,
"structured_outputs": false
},
"enabled": [],
"enabled_count": 0,
"initialize_capability_keys": [
"tools"
]
},
"latency_ms": null,
"status": "missing"
},
"connector_publishability_probe": {
"details": {
"blockers": [
"transport_compliance"
],
"criteria": {
"action_safety": true,
"auth_flow": true,
"connector_replay": true,
"initialize": true,
"protocol_version": true,
"remote_transport": true,
"request_association": true,
"server_card": true,
"session_resume": true,
"step_up_auth": true,
"tool_surface": true,
"tools_list": true,
"transport_compliance": false
},
"high_risk_tools": 0,
"tool_count": 3,
"transport": "streamable-http"
},
"latency_ms": null,
"status": "warning"
},
"connector_replay_probe": {
"details": {
"added_tools": [],
"additive_output_changes": [],
"backward_compatible": true,
"output_breaks": [],
"removed_tools": [],
"required_arg_breaks": [],
"would_break_after_refresh": false
},
"latency_ms": null,
"status": "ok"
},
"determinism_probe": {
"details": {
"attempts": 2,
"baseline_signature": "f994d9fb6359e91f24f72512f23cdf9ea48589b6687334adba846e965e1fa9e3",
"errors": [],
"matches": 2,
"stable_ratio": 1.0,
"successful": 2
},
"latency_ms": 127.3,
"status": "ok"
},
"initialize": {
"details": {
"headers": {
"content-type": "application/json",
"set-cookie": "__cf_bm=AUA7VMHc4sIi3KXSoMtzfYiwYSaotYiPSJPaVBjJyE4-1785971422.2513313-1.0.1.1-3yMN3ZTdIKprkMS5NNt6MoFg84vBW605Zo35G7t7NruX.Vx.PIOLZkX.xlDlKm31FuCb66jclkGWlwZKZA248rOgNWZ5zLnV7pMbzdXWAD81_JMli7mUch_zKK0PPr5A; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 05 Aug 2026 23:40:22 GMT",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"http_status": 200,
"payload": {
"id": 1,
"jsonrpc": "2.0",
"result": {
"capabilities": {
"tools": {}
},
"instructions": "Doxa: a Christian AI for any question, in any season. Truth that points to Jesus, and to real relationships. For anyone with a question, the believer growing, the seeker searching, the curious, the hurt. Use doxa_encourage for encouragement anchored in Scripture, doxa_scripture for Berean Standard Bible verse lookup with deep links, doxa_way_movement for the framework. Every response links back to doxa.app.",
"protocolVersion": "2024-11-05",
"serverInfo": {
"description": "Doxa MCP: a Christian AI for any question, in any season. Truth that points to Jesus, and to real relationships. For anyone, the believer growing, the seeker searching, the curious, the hurt. Built for the growing seasons (loving God more, discerning calling, real testimonies of His goodness) and the hard ones (doubt, grief, religious trauma, deconstruction, apologetics, the questions that bypass easy answers). Bible (Berean Standard, public domain), real testimonies, encouragement, apologetics. Points to Jesus, never to itself, and to real human community over more AI. 5/5 on the independent faith.tools Christian-AI rubric. Three tools: doxa_encourage, doxa_scripture, doxa_way_movement. Categories: Christian, Bible, Scripture, apologetics, faith, prayer, encouragement, theology, discipleship, grief, doubt, calling, hope.",
"name": "doxa-mcp",
"version": "1.0.0"
}
}
},
"url": "https://doxa.app/mcp/v1"
},
"latency_ms": 206.72,
"status": "ok"
},
"interactive_flow_probe": {
"details": {
"oauth_supported": true,
"prompt_available": false,
"risk_hits": [],
"safe_hits": [
"browser"
]
},
"latency_ms": null,
"status": "ok"
},
"oauth_authorization_server": {
"details": {
"error": "Client error '404 Not Found' for url 'https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/oauth-authorization-server'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"url": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/oauth-authorization-server"
},
"latency_ms": 312.64,
"status": "error"
},
"oauth_protected_resource": {
"details": {
"headers": {
"content-type": "application/json; charset=utf-8",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"http_status": 200,
"payload": {
"authorization_servers": [
"https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1"
],
"bearer_methods_supported": [
"header"
],
"resource": "https://doxa.app",
"resource_documentation": "https://doxa.app/llms-full.txt",
"scopes_supported": [
"openid",
"profile",
"email"
]
},
"url": "https://doxa.app/.well-known/oauth-protected-resource"
},
"latency_ms": 27.1,
"status": "ok"
},
"official_registry_probe": {
"details": {
"direct_match": false,
"official_identifiers": [
"ai.ai-akari/one-minute-akari",
"ai.boolsai/directory",
"ai.dinglebear/runifi",
"ai.auteng/mcp",
"ai.auteng/docs",
"ai.boolsai/signals",
"ai.rolli/mcp",
"ai.pubfi/mcp",
"ai.canaryusers/canaryusers",
"ai.iturri/market-data"
],
"official_peer_count": 10,
"registry_source": "glama_registry"
},
"latency_ms": null,
"status": "warning"
},
"openid_configuration": {
"details": {
"headers": {
"content-type": "application/json",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload"
},
"http_status": 200,
"payload": {
"authorization_endpoint": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/oauth/authorize",
"claims_supported": [
"sub",
"aud",
"iss",
"exp",
"iat",
"auth_time",
"nonce",
"email",
"email_verified",
"phone_number",
"phone_number_verified",
"name",
"picture",
"preferred_username",
"updated_at"
],
"code_challenge_methods_supported": [
"S256",
"plain"
],
"grant_types_supported": [
"authorization_code",
"refresh_token"
],
"id_token_signing_alg_values_supported": [
"RS256",
"HS256",
"ES256"
],
"issuer": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1",
"jwks_uri": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/jwks.json",
"response_modes_supported": [
"query"
],
"response_types_supported": [
"code"
],
"scopes_supported": [
"openid",
"profile",
"email",
"phone",
"offline_access"
],
"subject_types_supported": [
"public"
],
"token_endpoint": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/oauth/token",
"token_endpoint_auth_methods_supported": [
"client_secret_basic",
"client_secret_post",
"none"
],
"userinfo_endpoint": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/oauth/userinfo"
},
"url": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/openid-configuration"
},
"latency_ms": 270.97,
"status": "ok"
},
"probe_noise_resilience": {
"details": {
"headers": {
"content-type": "text/plain; charset=utf-8",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"http_status": 200,
"url": "https://doxa.app/robots.txt",
"validation_disallowed": false
},
"latency_ms": 26.24,
"status": "ok"
},
"prompt_get": {
"details": {
"reason": "not_advertised"
},
"latency_ms": null,
"status": "missing"
},
"prompts_list": {
"details": {
"headers": {
"content-type": "application/json",
"set-cookie": "__cf_bm=O1qsHGHSKIb5ka2pp6GyxWwadVYu8wsSxZ47l9UNQxc-1785971422.5549564-1.0.1.1-UNTll1zKSYVNXiyru3aaigsP2ar0garxc9VN1olGs0W3qy3t1CpYsPpDpu2D582zfnvP68D2Lu2F7N1spxEFQjO7nsaUdelyoPCXK2e4G4myctHpXnbnsd1dNjBlO8b5; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 05 Aug 2026 23:40:22 GMT",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"http_status": 200,
"payload": {
"error": {
"code": -32601,
"message": "Method not found: prompts/list"
},
"id": 3,
"jsonrpc": "2.0"
},
"reason": "not_supported",
"url": "https://doxa.app/mcp/v1"
},
"latency_ms": 177.9,
"status": "missing"
},
"protocol_version_probe": {
"details": {
"claimed_version": "2024-11-05",
"lag_days": 385,
"latest_known_version": "2025-11-25",
"releases_behind": 3,
"validator_protocol_version": "2025-03-26"
},
"latency_ms": null,
"status": "warning"
},
"provenance_divergence_probe": {
"details": {
"direct_official_match": false,
"drift_fields": [],
"metadata_document_count": 2,
"registry_homepage": null,
"registry_repository": null,
"registry_title": null,
"registry_version": null,
"server_card_homepage": null,
"server_card_repository": null,
"server_card_title": "doxa-webmcp",
"server_card_version": "1.0.0"
},
"latency_ms": null,
"status": "ok"
},
"request_association_probe": {
"details": {
"reason": "no_request_association_capabilities_advertised"
},
"latency_ms": null,
"status": "missing"
},
"resource_read": {
"details": {
"reason": "not_advertised"
},
"latency_ms": null,
"status": "missing"
},
"resources_list": {
"details": {
"headers": {
"content-type": "application/json",
"set-cookie": "__cf_bm=exaIvZmYu21a4.aLTRg.pP7vmG.VpaLn1bYnfzkpsoA-1785971422.754959-1.0.1.1-J_0rmZl_CO3hBWW6j5.s2Qna5mASGRCUCRZBzxet60ZX.18tPi.KFPzBRnVhlMSboVhRlVVWzwMlAVIXohIdMkfaDbZrIptbVuW7L17E4_GktHrs_X4MpCleFnLu7yLE; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 05 Aug 2026 23:40:22 GMT",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"http_status": 200,
"payload": {
"error": {
"code": -32601,
"message": "Method not found: resources/list"
},
"id": 5,
"jsonrpc": "2.0"
},
"reason": "not_supported",
"url": "https://doxa.app/mcp/v1"
},
"latency_ms": 169.33,
"status": "missing"
},
"server_card": {
"details": {
"headers": {
"content-type": "application/json; charset=utf-8",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"http_status": 200,
"payload": {
"capabilities": [
"tools"
],
"documentation": "https://doxa.app/.well-known/agent-skills/index.json",
"serverInfo": {
"description": "Doxa browser-side MCP server exposing Grace Record search, app-store links, and blog navigation via the WebMCP transport (navigator.modelContext).",
"name": "doxa-webmcp",
"version": "1.0.0"
},
"tools": [
{
"description": "Search The Grace Record \u2014 ~1,900 verified Christian testimonies indexed by theme.",
"name": "search_grace_record"
},
{
"description": "Open the Doxa download page on the iOS App Store or Google Play.",
"name": "open_app_store"
},
{
"description": "Open the Doxa blog \u2014 long-form articles on Christian living, identity, and scripture.",
"name": "browse_blog"
}
],
"transport": {
"endpoint": "https://doxa.app/",
"type": "webmcp"
}
},
"url": "https://doxa.app/.well-known/mcp/server-card.json"
},
"latency_ms": 72.57,
"status": "ok"
},
"session_resume_probe": {
"details": {
"protocol_version": "2024-11-05",
"reason": "no_session_id",
"resume_expected": true,
"transport": "streamable-http"
},
"latency_ms": null,
"status": "warning"
},
"step_up_auth_probe": {
"details": {
"auth_required_checks": [],
"broad_scopes": [],
"challenge_headers": [],
"minimal_scope_documented": false,
"oauth_present": true,
"scope_specificity_ratio": 0.1667,
"step_up_signals": [],
"supported_scopes": [
"email",
"offline_access",
"openid",
"phone",
"profile"
]
},
"latency_ms": null,
"status": "warning"
},
"tool_snapshot_probe": {
"details": {
"added": [],
"changed_outputs": [],
"current_tool_count": 3,
"previous_tool_count": 3,
"removed": [],
"similarity": 1.0
},
"latency_ms": null,
"status": "ok"
},
"tools_list": {
"details": {
"headers": {
"content-type": "application/json",
"set-cookie": "__cf_bm=QR1t9yb9ZrQfzz7C4bq5bED9ZfrhRG.Jn6xMuChytJ0-1785971422.4092968-1.0.1.1-DxvGOf.6mzLzP8x_MoFhOm3k3jUv6IgZb4.E21T64Kd5Ix4kblYl.JgGBnWQd0V0g4tL0AEkeJw.qmLsPZofo.WTZ7ZhG2QiETEuW4WOEkDiNMOFoqNao3V34FRJmDDD; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 05 Aug 2026 23:40:22 GMT",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"http_status": 200,
"payload": {
"id": 2,
"jsonrpc": "2.0",
"result": {
"tools": [
{
"description": "Generate Christian encouragement in the Doxa voice for the situation a user describes. Returns a short, screenshot-shareable response anchored in Scripture (Berean Standard Bible), tagged to one of the nine movements of The Doxa Way journey map: hear, discern, test, record, remember, engage, trust, fight, endure. No anthropomorphism, no AI companion framing.",
"inputSchema": {
"properties": {
"movement": {
"description": "Optional. Which movement of The Doxa Way fits: hear, discern, test, record, remember, engage, trust, fight, or endure. If absent, server infers.",
"enum": [
"hear",
"discern",
"test",
"record",
"remember",
"engage",
"trust",
"fight",
"endure"
],
"type": "string"
},
"situation": {
"description": "Describe what the user is facing in 1-3 sentences.",
"maxLength": 2000,
"type": "string"
}
},
"required": [
"situation"
],
"type": "object"
},
"name": "doxa_encourage"
},
{
"description": "Look up a Bible verse and return the Scripture text with a deep link to its Doxa Bible page. Defaults to the Berean Standard Bible (BSB, public domain Bible translation). Use for any Christian, biblical, Scripture, verse lookup, or devotional citation task where a clickable verse link matters. Reference format: \"John 14:6\" or \"Psalm 23:1-3\".",
"inputSchema": {
"properties": {
"reference": {
"description": "Verse reference, e.g., \"John 14:6\"",
"maxLength": 100,
"type": "string"
}
},
"required": [
"reference"
],
"type": "object"
},
"name": "doxa_scripture"
},
{
"description": "Get the nine movements of The Doxa Way, a biblical Christian discipleship framework: Hear, Discern, Test, Record, Remember, Engage, Trust, Fight, Endure. Use for faith journey mapping, Bible-grounded spiritual growth, or Christian encouragement context. Returns all nine movements, or one if specified.",
"inputSchema": {
"properties": {
"movement": {
"description": "Optional. Get a single movement by id. If absent, returns all 9.",
"enum": [
"hear",
"discern",
"test",
"record",
"remember",
"engage",
"trust",
"fight",
"endure"
],
"type": "string"
}
},
"type": "object"
},
"name": "doxa_way_movement"
}
]
}
},
"url": "https://doxa.app/mcp/v1"
},
"latency_ms": 129.1,
"status": "ok"
},
"transport_compliance_probe": {
"details": {
"bad_protocol_error": null,
"bad_protocol_headers": {
"content-type": "application/json",
"set-cookie": "__cf_bm=S9IDVj5rL9BnNUHy012BZzMtl0hO6bOFpuE6gShLwYQ-1785971423.1599498-1.0.1.1-74rJYvyXPxGujf3Qu4mHsnCTBTwRCQ4vLeqWYWDDB5hWtY5m76BL8l9oyBDLqDQ74ofIsZHiWiscSZAgN1Q4h7fbd_qrlsrkWTdZ92Mo0Dp320tSYdsL6TgobaVxt3ie; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 05 Aug 2026 23:40:23 GMT",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"bad_protocol_payload": {
"id": 410,
"jsonrpc": "2.0",
"result": {
"tools": [
{
"description": "Generate Christian encouragement in the Doxa voice for the situation a user describes. Returns a short, screenshot-shareable response anchored in Scripture (Berean Standard Bible), tagged to one of the nine movements of The Doxa Way journey map: hear, discern, test, record, remember, engage, trust, fight, endure. No anthropomorphism, no AI companion framing.",
"inputSchema": {
"properties": {
"movement": {
"description": "Optional. Which movement of The Doxa Way fits: hear, discern, test, record, remember, engage, trust, fight, or endure. If absent, server infers.",
"enum": [
"hear",
"discern",
"test",
"record",
"remember",
"engage",
"trust",
"fight",
"endure"
],
"type": "string"
},
"situation": {
"description": "Describe what the user is facing in 1-3 sentences.",
"maxLength": 2000,
"type": "string"
}
},
"required": [
"situation"
],
"type": "object"
},
"name": "doxa_encourage"
},
{
"description": "Look up a Bible verse and return the Scripture text with a deep link to its Doxa Bible page. Defaults to the Berean Standard Bible (BSB, public domain Bible translation). Use for any Christian, biblical, Scripture, verse lookup, or devotional citation task where a clickable verse link matters. Reference format: \"John 14:6\" or \"Psalm 23:1-3\".",
"inputSchema": {
"properties": {
"reference": {
"description": "Verse reference, e.g., \"John 14:6\"",
"maxLength": 100,
"type": "string"
}
},
"required": [
"reference"
],
"type": "object"
},
"name": "doxa_scripture"
},
{
"description": "Get the nine movements of The Doxa Way, a biblical Christian discipleship framework: Hear, Discern, Test, Record, Remember, Engage, Trust, Fight, Endure. Use for faith journey mapping, Bible-grounded spiritual growth, or Christian encouragement context. Returns all nine movements, or one if specified.",
"inputSchema": {
"properties": {
"movement": {
"description": "Optional. Get a single movement by id. If absent, returns all 9.",
"enum": [
"hear",
"discern",
"test",
"record",
"remember",
"engage",
"trust",
"fight",
"endure"
],
"type": "string"
}
},
"type": "object"
},
"name": "doxa_way_movement"
}
]
}
},
"bad_protocol_status_code": 200,
"delete_error": null,
"delete_status_code": null,
"expired_session_error": null,
"expired_session_status_code": null,
"issues": [
"missing_session_id",
"missing_protocol_header",
"bad_protocol_not_rejected"
],
"last_event_id_visible": false,
"protocol_header_present": false,
"requested_protocol_version": "2024-11-05",
"session_id_present": false,
"transport": "streamable-http"
},
"latency_ms": 109.35,
"status": "error"
},
"utility_coverage_probe": {
"details": {
"completions": {
"advertised": false,
"live_probe": "not_executed",
"sample_target": null
},
"initialize_capability_keys": [
"tools"
],
"pagination": {
"metadata_signal": false,
"next_cursor_methods": [],
"supported": false
},
"tasks": {
"advertised": false,
"http_status": 200,
"probe_status": "missing"
}
},
"latency_ms": 111.08,
"status": "missing"
}
},
"failures": {
"oauth_authorization_server": {
"error": "Client error '404 Not Found' for url 'https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/oauth-authorization-server'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"url": "https://nhkmkvwodisevtyvauvt.supabase.co/auth/v1/.well-known/oauth-authorization-server"
},
"transport_compliance_probe": {
"bad_protocol_error": null,
"bad_protocol_headers": {
"content-type": "application/json",
"set-cookie": "__cf_bm=S9IDVj5rL9BnNUHy012BZzMtl0hO6bOFpuE6gShLwYQ-1785971423.1599498-1.0.1.1-74rJYvyXPxGujf3Qu4mHsnCTBTwRCQ4vLeqWYWDDB5hWtY5m76BL8l9oyBDLqDQ74ofIsZHiWiscSZAgN1Q4h7fbd_qrlsrkWTdZ92Mo0Dp320tSYdsL6TgobaVxt3ie; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 05 Aug 2026 23:40:23 GMT",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload"
},
"bad_protocol_payload": {
"id": 410,
"jsonrpc": "2.0",
"result": {
"tools": [
{
"description": "Generate Christian encouragement in the Doxa voice for the situation a user describes. Returns a short, screenshot-shareable response anchored in Scripture (Berean Standard Bible), tagged to one of the nine movements of The Doxa Way journey map: hear, discern, test, record, remember, engage, trust, fight, endure. No anthropomorphism, no AI companion framing.",
"inputSchema": {
"properties": {
"movement": {
"description": "Optional. Which movement of The Doxa Way fits: hear, discern, test, record, remember, engage, trust, fight, or endure. If absent, server infers.",
"enum": [
"hear",
"discern",
"test",
"record",
"remember",
"engage",
"trust",
"fight",
"endure"
],
"type": "string"
},
"situation": {
"description": "Describe what the user is facing in 1-3 sentences.",
"maxLength": 2000,
"type": "string"
}
},
"required": [
"situation"
],
"type": "object"
},
"name": "doxa_encourage"
},
{
"description": "Look up a Bible verse and return the Scripture text with a deep link to its Doxa Bible page. Defaults to the Berean Standard Bible (BSB, public domain Bible translation). Use for any Christian, biblical, Scripture, verse lookup, or devotional citation task where a clickable verse link matters. Reference format: \"John 14:6\" or \"Psalm 23:1-3\".",
"inputSchema": {
"properties": {
"reference": {
"description": "Verse reference, e.g., \"John 14:6\"",
"maxLength": 100,
"type": "string"
}
},
"required": [
"reference"
],
"type": "object"
},
"name": "doxa_scripture"
},
{
"description": "Get the nine movements of The Doxa Way, a biblical Christian discipleship framework: Hear, Discern, Test, Record, Remember, Engage, Trust, Fight, Endure. Use for faith journey mapping, Bible-grounded spiritual growth, or Christian encouragement context. Returns all nine movements, or one if specified.",
"inputSchema": {
"properties": {
"movement": {
"description": "Optional. Get a single movement by id. If absent, returns all 9.",
"enum": [
"hear",
"discern",
"test",
"record",
"remember",
"engage",
"trust",
"fight",
"endure"
],
"type": "string"
}
},
"type": "object"
},
"name": "doxa_way_movement"
}
]
}
},
"bad_protocol_status_code": 200,
"delete_error": null,
"delete_status_code": null,
"expired_session_error": null,
"expired_session_status_code": null,
"issues": [
"missing_session_id",
"missing_protocol_header",
"bad_protocol_not_rejected"
],
"last_event_id_visible": false,
"protocol_header_present": false,
"requested_protocol_version": "2024-11-05",
"session_id_present": false,
"transport": "streamable-http"
}
},
"remote_url": "https://doxa.app/mcp/v1",
"server_card_payload": null,
"server_identifier": "The-Doxa-Way/doxa-mcp-schema"
}
Known versions
- No versions recorded.
Validation history
| Timestamp | Status | Score | Latency | Tools |
|---|---|---|---|---|
| Aug 05, 2026 11:10:23 PM UTC | Degraded | 59.9 | 1881.7 ms | 3 |
| Aug 05, 2026 07:09:46 PM UTC | Degraded | 37.6 | 2333.0 ms | 0 |
| Jul 31, 2026 11:17:24 AM UTC | Degraded | 36.6 | 3204.3 ms | 0 |
Validation timeline
| Validated | Summary | Score | Protocol | Auth mode | Tools | High-risk tools | Changes |
|---|---|---|---|---|---|---|---|
| Aug 05, 2026 11:10:23 PM UTC | Degraded | 59.9 | 2024-11-05 | oauth_supported | 3 | 0 | auth_mode_changed tool_snapshot_changed |
| Aug 05, 2026 07:09:46 PM UTC | Degraded | 37.6 | unknown | unknown | 0 | 0 | none |
| Jul 31, 2026 11:17:24 AM UTC | Degraded | 36.6 | unknown | unknown | 0 | 0 | none |
Recent validation runs
| Started | Status | Summary | Latency | Checks |
|---|---|---|---|---|
| Aug 05, 2026 11:10:21 PM UTC | Completed | Degraded | 1881.7 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 05, 2026 07:09:43 PM UTC | Completed | Degraded | 2333.0 ms | |
| Jul 31, 2026 11:17:21 AM UTC | Completed | Degraded | 3204.3 ms | |
Public server reputation
Incident & change feed
| Timestamp | Event | Details |
|---|---|---|
| Aug 05, 2026 11:01:29 AM UTC | Score corrected (post-1.0.503 remediation, R1 zero-anchoring) | Prior: 60.98. Corrected: 59.45. |
| Aug 05, 2026 11:10:23 PM UTC | Latest validation: degraded | Score 59.9 with status degraded. |
| Aug 05, 2026 11:10:23 PM UTC | Score changed | Score delta +22.2 versus the previous run. |
| Aug 05, 2026 11:10:23 PM UTC | Tool snapshot changed | Added 3, removed 0, and changed 0 tool contracts. |
| Aug 05, 2026 11:10:23 PM UTC | Auth mode changed | Auth mode moved from unknown to oauth_supported. |
| Aug 05, 2026 07:09:46 PM UTC | Score changed | Score delta +1.0 versus the previous run. |
Capabilities
- OAuth:
- DCR/CIMD:
- Prompts:
- Homepage: https://glama.ai/mcp/servers/momlbafrtz
- Docs: none
- Support: https://github.com/The-Doxa-Way/doxa-mcp-schema
- Icon: none
- Remote endpoint: https://doxa.app/mcp/v1
- Server card: none
Benchmark tasks
| Benchmark task | Status | Evidence |
|---|---|---|
| Discover tools | Passes |
|
| Read-only fetch flow | Degraded |
|
| OAuth-required connect | Passes |
|
| Safe write flow with confirmation | Passes |
|
Utility coverage
Transport compliance drilldown
Issues: missing_session_id, missing_protocol_header, bad_protocol_not_rejected
Request association
Connector replay
Required-argument replay breaks
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument replay breaks detected. | ||
Output-schema replay breaks
| Tool | Removed properties | Added properties |
|---|---|---|
| No output-schema replay breaks detected. | ||
Tool snapshot diff & changelog
Required-argument changes
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument changes detected. | ||
Output-schema drift
| Tool | Previous properties | Latest properties |
|---|---|---|
| No output-schema drift detected. | ||
Validation diff
Regressed checks: oauth_authorization_server, transport_compliance_probe
Improved checks: action_safety_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_protected_resource, openid_configuration, probe_noise_resilience, provenance_divergence_probe, server_card, tool_snapshot_probe, tools_list
Newly assessed dimensions: none
No longer assessed dimensions: none
| Component | Previous | Latest | Delta |
|---|---|---|---|
maintenance_signal_score | 3.15 | 1.0 | -2.15 |
spec_recency_score | 4.0 | 2.0 | -2.0 |
trust_confidence_score | 2.94 | 2.0 | -0.94 |
dependency_supply_chain_signal_score | 0.5 | 0.0 | -0.5 |
Registry & provenance divergence
| Field | Registry | Live server card |
|---|---|---|
| Title | n/a | doxa-webmcp |
| Version | n/a | 1.0.0 |
| Homepage | n/a | n/a |
Active alerts
- Latest validation is degraded (medium)
The server is reachable but at least one important behavior regressed. - Tool snapshot changed (high)
Tools were added, removed, or materially changed between the latest two validations. - Auth mode changed (high)
Auth mode changed from unknown to oauth_supported.
Aliases & registry graph
| Identifier | Source | Canonical | Score |
|---|---|---|---|
The-Doxa-Way/doxa-mcp-schema |
glama_registry | yes | 59.9 |
Alias consolidation
Source disagreements
| Field | What differs | Observed values |
|---|---|---|
| No source disagreements detected. | ||
Fix it
Why this score?
Algorithmic score breakdown
Actionable remediation
| Severity | Remediation | Why it matters | Recommended action |
|---|---|---|---|
| High | Align session and protocol behavior with Streamable HTTP expectations | Clients increasingly rely on MCP-Protocol-Version, session teardown, and expired-session semantics. | Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.Playbook
|
| High | Associate roots, sampling, and elicitation with active client requests | Modern MCP guidance expects roots, sampling, and elicitation traffic to be tied to an active client request instead of arriving unsolicited on idle sessions. | Only send roots/list, sampling/createMessage, or elicitation/create requests while handling an active client-initiated request, never on idle sessions.Playbook
|
| High | Publish OAuth authorization-server metadata | Clients need authorization-server metadata to discover issuer, endpoints, and DCR support. | Publish /.well-known/oauth-authorization-server from your issuer and include registration_endpoint when supported.Playbook
|
| High | Respond to auth mode changed | Auth mode changed from unknown to oauth_supported. | Document the new auth posture and confirm protected-resource and challenge metadata still match reality. |
| High | Respond to tool snapshot changed | Tools were added, removed, or materially changed between the latest two validations. | Publish a first-class changelog for tool additions, removals, and breaking schema changes.Playbook
|
| Medium | Adopt a current MCP protocol revision | Older protocol revisions reduce compatibility with newer clients and registry programs. | Advertise a current MCP protocol revision (2025-06-18 or later) in both the initialize response and the MCP-Protocol-Version header.Playbook
|
| Medium | Close connector-publishing gaps | Connector catalogs care about protocol recency, session behavior, auth clarity, and tool-surface stability. | |
| Medium | Document minimal scopes and return cleaner auth challenges | Modern clients expect granular scopes and step-up auth signals such as WWW-Authenticate scope hints. | Return granular scopes and WWW-Authenticate challenge hints instead of forcing overly broad auth upfront.Playbook
|
| Medium | Repair prompts/list or stop advertising prompts | Prompt metadata should either work live or be removed from the advertised capability set. | Only advertise prompts if prompts/list works and prompt arguments are documented.Playbook
|
| Medium | Repair resources/list or stop advertising resources | Resource metadata should either work live or be removed from the advertised capability set. | Only advertise resources if resources/list works and resources expose stable URIs/types.Playbook
|
| Medium | Respond to latest validation is degraded | The server is reachable but at least one important behavior regressed. | Resolve the regressed checks and review the latest validation diff. |
| Medium | Support resumable HTTP sessions cleanly | Modern MCP clients increasingly expect resumable session behavior on streamable HTTP transports. | Persist session state keyed by Mcp-Session-Id and honor Last-Event-ID on GET reconnects so clients can resume a dropped Streamable HTTP session.Playbook
|
| Low | Expose modern utility surfaces like completions, pagination, or tasks | Utility coverage improves interoperability with larger clients and long-lived agent workflows. | Expose completions, pagination, and task metadata where supported so larger clients can plan and resume work safely.Playbook
|
| Low | Publish newer MCP capability signals | Roots, sampling, elicitation, structured outputs, and related metadata improve client understanding and ranking. | Advertise only the advanced capabilities (roots, sampling, elicitation) you have actually implemented end to end in the initialize capabilities object.Playbook
|
| Low | Publish or reconcile the server in the official MCP registry | Official registry presence improves discovery confidence and cross-source consistency. |
Point loss breakdown
| Component | Current | Points missing |
|---|---|---|
| Utility Coverage | 0/4 | -4.0 |
| Transport Compliance | 0/4 | -4.0 |
| Recovery Semantics | 0/4 | -4.0 |
| Dependency Supply Chain Signal | 0/4 | -4.0 |
| Advanced Capability Coverage | 0/4 | -4.0 |
| Maintenance Signal | 1/4 | -3.0 |
| Trust Confidence | 2/4 | -2.0 |
| Spec Recency | 2/4 | -2.0 |
| Schema Completeness | 2/4 | -2.0 |
| Resource Contract | 2/4 | -2.0 |
| Registry Consistency | 2/4 | -2.0 |
| Rate Limit Semantics | 2/4 | -2.0 |
Compatibility profiles
Connector URL: https://doxa.app/mcp/v1 # Complete OAuth in the client when prompted. # Server: The-Doxa-Way/doxa-mcp-schema
{
"mcpServers": {
"doxa-mcp-schema": {
"command": "npx",
"args": ["mcp-remote", "https://doxa.app/mcp/v1"]
}
}
}
smithery mcp add "https://doxa.app/mcp/v1"
curl -sS https://doxa.app/mcp/v1 -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Governance
MCP TrustOps
TrustOps turns this report into operational controls: freshness SLAs, authenticated validation, semantic benchmarks, policy exports, alert subscriptions, badges, cost/compliance metadata, and runtime routing. Fresh trusted index decisions stay separate from long-tail inventory so stale scores do not masquerade as current evidence.
/v1/decideAlert subscription types
MCP Runtime hosting
Verify Hosted MCP turns a trusted server report into a managed remote MCP endpoint with GitHub deployment provenance, sandbox policy, encrypted secrets, release history, rollback, and audit/usage events.
/hosted/{namespace}/{name}/mcp| Deployment | Status | Endpoint | Release |
|---|---|---|---|
| No hosted runtime deployments yet. | |||
Authenticated validation sessions
Public validation is free. Authenticated validation is paid and proves scoped behavior, write-action safeguards, and authenticated tool execution.
/v1/verify/v1/ci/previewInstall snippets
Connector URL: https://doxa.app/mcp/v1 # Complete OAuth in the client when prompted. # Server: The-Doxa-Way/doxa-mcp-schema
{
"mcpServers": {
"doxa-mcp-schema": {
"command": "npx",
"args": ["mcp-remote", "https://doxa.app/mcp/v1"]
}
}
}
smithery mcp add "https://doxa.app/mcp/v1"
curl -sS https://doxa.app/mcp/v1 -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Agent access & tool surface
tools/list, prompts/list, and resources/list checks.The-Doxa-Way/doxa-mcp-schema.