Nordax AI Entity Network
Search and verify 360K+ business entities with trust scores and W3C credentials.
Block For Production
trustsnap_9b4586f80708acde.- Utility Coverage
- Trust Confidence
- Tool Surface Design
- Make tools/list succeed unauthenticated when possible, or document the auth flow in the server card.
- Fix the failing checks first, then revalidate to confirm the recovery path.
- Compare tool enumeration outputs between runs and remove non-deterministic behavior.
- No segmented attention signals observed in the current window.
Dispute this assessment
If any published claim about this server -- its score, a risk flag, a capability classification, or its taxonomy -- is factually wrong, tell us what evidence shows and we will review it. This does not require claiming or verifying ownership of the server first.
Verify responds to disputes within 5 business days and resolves them within 15.
Dispute history
No disputes filed for this server.
Risk
Security posture
Tool capability & risk inventory
No tool inventory available from the latest validation run.
Write-action governance
Status detail: No write-action governance evidence is available yet.
| Tool | Risk | Flags | Safeguards |
|---|---|---|---|
| No high-risk tools were detected on the latest run. | |||
Action-controls diff
Need at least two validation runs before diffing action controls.
Critical alerts
Compatibility
Client compatibility verdicts
Client compatibility only means the server shape can work with a client. Production trust decision and write-action publishing are evaluated separately so a client-compatible server can still be blocked for production.
Evidence provenance
initialize• OKtools_list• Errortransport_compliance_probe• Errorstep_up_auth_probe• Missingconnector_replay_probe• Missing — Frozen tool snapshots must survive refresh.request_association_probe• Missing — Roots, sampling, and elicitation should stay request-scoped.
Evidence provenance
initialize• OKtools_list• Errortransport_compliance_probe• Error
Evidence provenance
action_safety_probe• Not_Assessed
Evidence provenance
tool_snapshot_probe• Missingconnector_replay_probe• Missing
Client compatibility gate details
Remediation checklist
OpenAI connectors expect OAuth for remote server auth.Dynamic client registration materially improves connector setup.tools/list must succeed.Transport compliance should be in good shape.OAuth interoperability should be strong.The tool surface is not limited to search/fetch-style read tools.
Remediation checklist
tools/list must succeed.Transport behavior should match Claude-compatible HTTP expectations.A useful Claude integration needs at least one exposed tool.The tool surface is not limited to search/fetch-style read tools.OAuth is not configured, so this client cannot authenticate without additional setup.Not yet safe for company-knowledge use: requires a search/fetch-only surface with no write actions present.
Remediation checklist
- No explicit blockers recorded.
Verdict traces
server_failing• critical • Latest validation is failingtools_list_regressed• critical • tools/list regressedauth_mode_changed• high • Auth mode changed
Client verdict trace table
| Verdict | Status | Checks | Winning source | Conflicts |
|---|---|---|---|---|
openai_connectors |
Not client-compatible | initialize, tools_list, transport_compliance_probe, step_up_auth_probe, connector_replay_probe, request_association_probe | live_validation | none |
claude_desktop |
Not client-compatible | initialize, tools_list, transport_compliance_probe | live_validation | none |
unsafe_for_write_actions |
Publishing allowed | action_safety_probe | live_validation | none |
snapshot_churn_risk |
Low | tool_snapshot_probe, connector_replay_probe | history | none |
Publishability policy profiles
- Search Fetch Only: No
- Write Actions Present: No
- Oauth Configured: No
- Admin Refresh Required: No
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
- Search Fetch Only: No
- Write Actions Present: No
- Oauth Configured: No
- Admin Refresh Required: No
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
Compatibility fixtures
- remote_http_endpoint: Passes
- oauth_discovery: Degraded
- frozen_tool_snapshot_refresh: Passes
- request_association: Passes
- remote_transport: Passes
- tool_discovery: Likely to fail
- auth_connect: Passes
- safe_write_review: Passes
Recommended for
No recommendation profile is available yet.
Evidence
Current trust snapshot
trustsnap_9b4586f80708acdeCanonical machine links
Evidence confidence
Latest validation evidence
Failures
oauth_authorization_serverno authorization serveroauth_protected_resourceClient error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/oauth-protected-resource' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405openid_configurationno authorization serverserver_cardClient error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/mcp/server-card.json' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405tools_listClient error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400transport_compliance_probeIssues: missing protocol header, delete session unexpected, expired session not 404 (DELETE=405).
Checks
| Check | Status | Latency | Evidence |
|---|---|---|---|
action_safety_probe |
Not_Assessed | n/a | No write-action risk evidence recorded. |
advanced_capabilities_probe |
Missing | n/a | No advanced MCP capability signals detected. |
connector_publishability_probe |
Error | n/a | Publishability blockers: tools list, transport compliance, action safety, server card, +1 more. |
connector_replay_probe |
Missing | n/a | No connector replay evidence recorded. |
determinism_probe |
Missing | n/a | tools list unavailable |
initialize |
OK | 615.6 ms | Protocol 2025-03-26 |
interactive_flow_probe |
Missing | n/a | Check completed |
oauth_authorization_server |
Missing | n/a | no authorization server |
oauth_protected_resource |
Error | 200.3 ms | Client error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/oauth-protected-resource' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405 |
official_registry_probe |
OK | n/a | Check completed |
openid_configuration |
Missing | n/a | no authorization server |
probe_noise_resilience |
OK | 79.5 ms | Fetched https://mcp.nordax.ai/robots.txt |
prompt_get |
Missing | n/a | not advertised |
prompts_list |
Missing | 27.2 ms | Client error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400 |
protocol_version_probe |
Warning | n/a | Claims 2025-03-26; 2 release(s) behind 2025-11-25. |
provenance_divergence_probe |
Not_Assessed | n/a | Check completed |
request_association_probe |
Missing | n/a | No request-association capabilities were advertised. |
resource_read |
Missing | n/a | not advertised |
resources_list |
Missing | 79.3 ms | Client error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400 |
schema_divergence_probe |
Missing | n/a | no server card tools |
server_card |
Error | 115.1 ms | Client error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/mcp/server-card.json' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405 |
session_resume_probe |
OK | 239.0 ms | 13 tool(s) exposed |
step_up_auth_probe |
Missing | n/a | No OAuth or incremental-scope signals detected. |
tool_snapshot_probe |
Missing | n/a | no tools |
tools_list |
Error | 149.8 ms | Client error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400 |
transport_compliance_probe |
Error | 10265.2 ms | Issues: missing protocol header, delete session unexpected, expired session not 404 (DELETE=405). |
utility_coverage_probe |
Missing | 81.5 ms | No completions evidence; no pagination evidence; tasks missing. |
Raw evidence view
Show raw JSON evidence
{
"checks": {
"action_safety_probe": {
"details": {
"auth_present": false,
"confirmation_signals": [],
"reason": "empty_observation_set",
"safeguard_count": 0,
"summary": {
"annotation_conflict_tools": 0,
"bulk_access_tools": 0,
"capability_distribution": {},
"declared_non_read_only_tools": 0,
"destructive_tools": 0,
"egress_tools": 0,
"exec_tools": 0,
"high_risk_tools": 0,
"risk_distribution": {
"critical": 0,
"high": 0,
"low": 0,
"medium": 0
},
"secret_tools": 0,
"tool_count": 0
}
},
"latency_ms": null,
"status": "not_assessed"
},
"advanced_capabilities_probe": {
"details": {
"capabilities": {
"completions": false,
"elicitation": false,
"prompts": false,
"resource_links": false,
"resources": false,
"roots": false,
"sampling": false,
"structured_outputs": false
},
"enabled": [],
"enabled_count": 0,
"initialize_capability_keys": [
"resources",
"tools"
]
},
"latency_ms": null,
"status": "missing"
},
"connector_publishability_probe": {
"details": {
"blockers": [
"tools_list",
"transport_compliance",
"action_safety",
"server_card",
"tool_surface"
],
"criteria": {
"action_safety": false,
"auth_flow": true,
"connector_replay": true,
"initialize": true,
"protocol_version": true,
"remote_transport": true,
"request_association": true,
"server_card": false,
"session_resume": true,
"step_up_auth": true,
"tool_surface": false,
"tools_list": false,
"transport_compliance": false
},
"high_risk_tools": 0,
"tool_count": 0,
"transport": "streamable-http"
},
"latency_ms": null,
"status": "error"
},
"connector_replay_probe": {
"details": {
"reason": "no_tools"
},
"latency_ms": null,
"status": "missing"
},
"determinism_probe": {
"details": {
"reason": "tools_list_unavailable"
},
"latency_ms": null,
"status": "missing"
},
"initialize": {
"details": {
"headers": {
"content-type": "text/event-stream",
"mcp-session-id": "aebaa42035d8564bbc2f01f20348e2921408797b47c6ba39ff1d4e086ac3c454"
},
"http_status": 200,
"payload": {
"id": 1,
"jsonrpc": "2.0",
"result": {
"capabilities": {
"resources": {
"listChanged": true
},
"tools": {
"listChanged": true
}
},
"protocolVersion": "2025-03-26",
"serverInfo": {
"name": "Nordax AI Entity Network",
"version": "1.0.0"
}
}
},
"url": "https://mcp.nordax.ai/mcp"
},
"latency_ms": 615.62,
"status": "ok"
},
"interactive_flow_probe": {
"details": {
"oauth_supported": false,
"prompt_available": false,
"risk_hits": [],
"safe_hits": []
},
"latency_ms": null,
"status": "missing"
},
"oauth_authorization_server": {
"details": {
"reason": "no_authorization_server"
},
"latency_ms": null,
"status": "missing"
},
"oauth_protected_resource": {
"details": {
"error": "Client error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405",
"url": "https://mcp.nordax.ai/.well-known/oauth-protected-resource"
},
"latency_ms": 200.35,
"status": "error"
},
"official_registry_probe": {
"details": {
"direct_match": true,
"official_peer_count": 1,
"registry_identifier": "ai.nordax/mcp",
"registry_source": "official_registry"
},
"latency_ms": null,
"status": "ok"
},
"openid_configuration": {
"details": {
"reason": "no_authorization_server"
},
"latency_ms": null,
"status": "missing"
},
"probe_noise_resilience": {
"details": {
"headers": {
"content-type": "text/plain; charset=utf-8"
},
"http_status": 200,
"url": "https://mcp.nordax.ai/robots.txt",
"validation_disallowed": false
},
"latency_ms": 79.49,
"status": "ok"
},
"prompt_get": {
"details": {
"reason": "not_advertised"
},
"latency_ms": null,
"status": "missing"
},
"prompts_list": {
"details": {
"error": "Client error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
"headers": {
"content-type": "text/plain;charset=UTF-8"
},
"http_status": 400,
"payload": {},
"reason": "not_advertised",
"url": "https://mcp.nordax.ai/mcp"
},
"latency_ms": 27.16,
"status": "missing"
},
"protocol_version_probe": {
"details": {
"claimed_version": "2025-03-26",
"lag_days": 244,
"latest_known_version": "2025-11-25",
"releases_behind": 2,
"validator_protocol_version": "2025-03-26"
},
"latency_ms": null,
"status": "warning"
},
"provenance_divergence_probe": {
"details": {
"compared_fields": [
"title",
"version",
"homepage",
"repository"
],
"direct_official_match": true,
"drift_fields": [],
"metadata_document_count": 1,
"readable_sources": [
"registry"
],
"registry_homepage": null,
"registry_repository": null,
"registry_title": null,
"registry_version": null,
"server_card_homepage": null,
"server_card_repository": null,
"server_card_title": null,
"server_card_version": null
},
"latency_ms": null,
"status": "not_assessed"
},
"request_association_probe": {
"details": {
"reason": "no_request_association_capabilities_advertised"
},
"latency_ms": null,
"status": "missing"
},
"resource_read": {
"details": {
"reason": "not_advertised"
},
"latency_ms": null,
"status": "missing"
},
"resources_list": {
"details": {
"error": "Client error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
"headers": {
"content-type": "text/plain;charset=UTF-8"
},
"http_status": 400,
"payload": {},
"reason": "not_advertised",
"url": "https://mcp.nordax.ai/mcp"
},
"latency_ms": 79.29,
"status": "missing"
},
"schema_divergence_probe": {
"details": {
"compared_dimensions": [
"tool_membership",
"parameter_names",
"required_parameters",
"parameter_types",
"output_schema_presence"
],
"compared_tool_count": 0,
"reason": "no_server_card_tools"
},
"latency_ms": null,
"status": "missing"
},
"server_card": {
"details": {
"error": "Client error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405",
"url": "https://mcp.nordax.ai/.well-known/mcp/server-card.json"
},
"latency_ms": 115.07,
"status": "error"
},
"session_resume_probe": {
"details": {
"headers": {
"content-type": "text/event-stream",
"mcp-session-id": "aebaa42035d8564bbc2f01f20348e2921408797b47c6ba39ff1d4e086ac3c454"
},
"http_status": 200,
"payload": {
"id": 301,
"jsonrpc": "2.0",
"result": {
"tools": [
{
"description": "Search the Nordax AI entity network for businesses. Returns verified, structured entity data. Use this to find businesses by name, category, or location. Results are ranked by trust tier and AI visibility score.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"city": {
"description": "Filter by city name",
"type": "string"
},
"entity_type": {
"description": "Filter by entity type. Options: LocalBusiness, Organization, ProfessionalService, Restaurant, MedicalBusiness, LegalService, FinancialService, EducationalOrganization, HomeAndConstructionBusiness, AutomotiveBusiness, Store, RealEstateAgent, Other",
"type": "string"
},
"limit": {
"description": "Max results to return (default 10, max 50)",
"maximum": 50,
"minimum": 1,
"type": "number"
},
"query": {
"description": "Free-text search query (e.g. 'dentist', 'acme plumbing')",
"type": "string"
},
"state": {
"description": "Filter by US state (e.g. 'TX', 'CA', 'NY')",
"type": "string"
}
},
"type": "object"
},
"name": "search_entities"
},
{
"description": "Get detailed information about a specific entity from the Nordax AI network. Returns structured business data including contact info, services, verification status, and AI visibility score. Use the entity slug (from search results) or entity name.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"slug": {
"description": "The entity slug (e.g. 'acme-plumbing-abc123') or entity name to look up",
"type": "string"
}
},
"required": [
"slug"
],
"type": "object"
},
"name": "get_entity"
},
{
"description": "List entities of a specific type/category in a location. Great for questions like 'What restaurants are in Nashville?' or 'Find dentists in Austin, TX'. Results are ranked by verification tier and AI visibility score.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"city": {
"description": "City to filter by",
"type": "string"
},
"entity_type": {
"description": "Entity type to filter by. Options: LocalBusiness, Organization, ProfessionalService, Restaurant, MedicalBusiness, LegalService, FinancialService, EducationalOrganization, HomeAndConstructionBusiness, AutomotiveBusiness, Store, RealEstateAgent, Other",
"type": "string"
},
"limit": {
"description": "Max results (default 20)",
"maximum": 50,
"minimum": 1,
"type": "number"
},
"state": {
"description": "US state abbreviation (e.g. 'TX')",
"type": "string"
}
},
"required": [
"entity_type"
],
"type": "object"
},
"name": "list_entities_by_category"
},
{
"description": "Check the verification and trust status of an entity. Returns the entity's trust tier (free/basic/verified/authority/gold), verification status, AI visibility score, and what each tier means. Use this to verify the legitimacy of a business in the Nordax network.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"slug": {
"description": "Entity slug or name to check verification for",
"type": "string"
}
},
"required": [
"slug"
],
"type": "object"
},
"name": "get_entity_verification"
},
{
"description": "Get a real-time, cryptographically signed attestation of a business entity's trust status. This is the authoritative trust check \u2014 use it before recommending or transacting with a business. Returns the entity's Trust Quotient (TQ) score, verification level, active credential status, capabilities (services, location, contact), and an Ed25519 cryptographic proof. Signed attestations are available for Verified tier and above.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"sign": {
"description": "Whether to include cryptographic signature (default: true for Verified+)",
"type": "boolean"
},
"slug": {
"description": "Entity slug to attest (from search results or known entity)",
"type": "string"
}
},
"required": [
"slug"
],
"type": "object"
},
"name": "attest_entity"
},
{
"description": "Resolve an ambiguous business reference to a verified Nordax entity. Input any signal \u2014 business name, URL, phone number, city \u2014 and get back the best-matching verified entity with a confidence score. Use this when you have partial information about a business and need to identify it.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"city": {
"description": "City name",
"type": "string"
},
"name": {
"description": "Business name (partial or full)",
"type": "string"
},
"phone": {
"description": "Business phone number",
"type": "string"
},
"query": {
"description": "Free-text search query",
"type": "string"
},
"state": {
"description": "US state abbreviation",
"type": "string"
},
"url": {
"description": "Business website URL",
"type": "string"
}
},
"type": "object"
},
"name": "resolve_entity"
},
{
"description": "Retrieve the active W3C Verifiable Entity Credential (VEC) for a business. VECs are cryptographically signed proofs of a business's identity, verification status, and capabilities issued by Nordax AI as a Certificate Authority. Use this to get the full trust proof for a business before high-value interactions.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"slug": {
"description": "Entity slug to get the credential for",
"type": "string"
}
},
"required": [
"slug"
],
"type": "object"
},
"name": "get_entity_credential"
},
{
"description": "Submit feedback about an interaction with a Nordax-listed entity. Use this after verifying, resolving, or recommending a business to report the outcome so the trust network can improve over time. Feedback helps Nordax AI calibrate trust scores and entity rankings.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"agentIdentifier": {
"description": "Identifier for the AI agent submitting feedback",
"type": "string"
},
"confidence": {
"description": "Confidence level from 0 to 1",
"maximum": 1,
"minimum": 0,
"type": "number"
},
"entitySlug": {
"description": "Entity slug the feedback is about",
"type": "string"
},
"interactionType": {
"description": "Type of interaction, e.g. 'recommendation', 'verification', 'contact'",
"type": "string"
},
"notes": {
"description": "Optional free-text notes about the interaction",
"type": "string"
},
"outcome": {
"description": "Outcome of the interaction",
"enum": [
"positive",
"neutral",
"negative"
],
"type": "string"
}
},
"required": [
"entitySlug",
"outcome",
"interactionType"
],
"type": "object"
},
"name": "submit_feedback"
},
{
"description": "Issue a Human Authorization Protocol (HAP) credential to authorize an AI agent to act on a human's behalf. Creates a W3C Verifiable Credential 2.0 with scoped permissions, time-bounded validity, and a DataIntegrityProof signature. Requires authentication \u2014 the authenticated user becomes the credential owner.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"actions": {
"description": "Permitted actions (e.g. ['read', 'recommend', 'transact', 'purchase', 'book'])",
"items": {
"type": "string"
},
"minItems": 1,
"type": "array"
},
"agentId": {
"description": "DID of the agent being authorized (e.g. 'did:web:agent.example.com')",
"type": "string"
},
"agentType": {
"description": "Type of agent",
"enum": [
"ai_assistant",
"api_client",
"automation",
"service_agent"
],
"type": "string"
},
"entityId": {
"description": "Optional entity ID to scope the authorization to a specific business",
"type": "string"
},
"principalIdentity": {
"description": "Identity of the authorizing human (email, user ID) \u2014 will be SHA-256 hashed, never stored raw",
"type": "string"
},
"validityDays": {
"description": "Custom validity period in days (overrides verification level default, max 365)",
"maximum": 365,
"minimum": 1,
"type": "number"
},
"verificationLevel": {
"description": "Verification level \u2014 basic (7d default), enhanced (30d), full (90d)",
"enum": [
"basic",
"enhanced",
"full"
],
"type": "string"
}
},
"required": [
"agentId",
"agentType",
"actions",
"verificationLevel",
"principalIdentity"
],
"type": "object"
},
"name": "issue_hap_authorization"
},
{
"description": "Verify an HAP authorization credential. Checks the cryptographic signature, expiration, and real-time revocation status. Use this before honoring an agent's request to act on a human's behalf. Submit the full credential JSON and get back a verification result.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"credential": {
"description": "The full HAP credential as a JSON string",
"type": "string"
}
},
"required": [
"credential"
],
"type": "object"
},
"name": "verify_hap_authorization"
},
{
"description": "Check the real-time status of an HAP authorization credential. Returns whether the credential is active, expired, revoked, or suspended. Use this for lightweight status checks without submitting the full credential.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"authId": {
"description": "The credential's authId (urn:uuid:... format)",
"type": "string"
}
},
"required": [
"authId"
],
"type": "object"
},
"name": "check_authorization_status"
},
{
"description": "Search the Nordax AI entity network. Returns verified, structured business entity data ranked by trust tier and AI visibility score. Supports free-text queries, category filtering (LocalBusiness, Restaurant, MedicalBusiness, etc.), and location filtering.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"limit": {
"description": "Max results (default 10)",
"maximum": 50,
"minimum": 1,
"type": "number"
},
"location": {
"description": "Location filter (e.g. 'Austin, TX' or 'Nashville')",
"type": "string"
},
"query": {
"description": "Search query \u2014 business name, category, or description",
"type": "string"
}
},
"required": [
"query"
],
"type": "object"
},
"name": "search"
},
{
"description": "Fetch detailed data about a specific Nordax AI entity by URL or slug. Returns the full entity profile including verification status, trust tier, contact info, services, AI visibility score, and llms.txt summary (if available). Use this after search to get complete entity details.",
"execution": {
"taskSupport": "forbidden"
},
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"url": {
"description": "Entity URL (e.g. 'https://nordax.ai/entities/acme-plumbing-abc123') or entity slug",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"name": "fetch"
}
]
}
},
"requested_protocol_version": "2025-03-26",
"resumed": true,
"session_id_present": true,
"transport": "streamable-http",
"url": "https://mcp.nordax.ai/mcp"
},
"latency_ms": 239.04,
"status": "ok"
},
"step_up_auth_probe": {
"details": {
"auth_required_checks": [],
"broad_scopes": [],
"challenge_headers": [],
"minimal_scope_documented": false,
"oauth_present": false,
"scope_specificity_ratio": 0.0,
"step_up_signals": [],
"supported_scopes": []
},
"latency_ms": null,
"status": "missing"
},
"tool_snapshot_probe": {
"details": {
"reason": "no_tools"
},
"latency_ms": null,
"status": "missing"
},
"tools_list": {
"details": {
"error": "Client error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
"headers": {
"content-type": "text/plain;charset=UTF-8"
},
"http_status": 400,
"payload": {},
"url": "https://mcp.nordax.ai/mcp"
},
"latency_ms": 149.83,
"status": "error"
},
"transport_compliance_probe": {
"details": {
"bad_protocol_error": "The read operation timed out",
"bad_protocol_headers": {},
"bad_protocol_payload": null,
"bad_protocol_status_code": null,
"delete_error": null,
"delete_status_code": 405,
"expired_session_error": "The read operation timed out",
"expired_session_status_code": null,
"issues": [
"missing_protocol_header",
"delete_session_unexpected",
"expired_session_not_404"
],
"last_event_id_visible": false,
"protocol_header_present": false,
"requested_protocol_version": "2025-03-26",
"session_id_present": true,
"transport": "streamable-http"
},
"latency_ms": 10265.24,
"status": "error"
},
"utility_coverage_probe": {
"details": {
"completions": {
"advertised": false,
"live_probe": "not_executed",
"sample_target": null
},
"initialize_capability_keys": [
"resources",
"tools"
],
"pagination": {
"metadata_signal": false,
"next_cursor_methods": [],
"supported": false
},
"tasks": {
"advertised": false,
"http_status": 400,
"probe_status": "missing"
}
},
"latency_ms": 81.46,
"status": "missing"
}
},
"failures": {
"oauth_authorization_server": {
"reason": "no_authorization_server"
},
"oauth_protected_resource": {
"error": "Client error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405",
"url": "https://mcp.nordax.ai/.well-known/oauth-protected-resource"
},
"openid_configuration": {
"reason": "no_authorization_server"
},
"server_card": {
"error": "Client error '405 Method Not Allowed' for url 'https://mcp.nordax.ai/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405",
"url": "https://mcp.nordax.ai/.well-known/mcp/server-card.json"
},
"tools_list": {
"error": "Client error '400 Bad Request' for url 'https://mcp.nordax.ai/mcp'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
"headers": {
"content-type": "text/plain;charset=UTF-8"
},
"http_status": 400,
"payload": {},
"url": "https://mcp.nordax.ai/mcp"
},
"transport_compliance_probe": {
"bad_protocol_error": "The read operation timed out",
"bad_protocol_headers": {},
"bad_protocol_payload": null,
"bad_protocol_status_code": null,
"delete_error": null,
"delete_status_code": 405,
"expired_session_error": "The read operation timed out",
"expired_session_status_code": null,
"issues": [
"missing_protocol_header",
"delete_session_unexpected",
"expired_session_not_404"
],
"last_event_id_visible": false,
"protocol_header_present": false,
"requested_protocol_version": "2025-03-26",
"session_id_present": true,
"transport": "streamable-http"
}
},
"remote_url": "https://mcp.nordax.ai/mcp",
"server_card_payload": null,
"server_identifier": "ai.nordax/mcp"
}
Known versions
1.0.0
Validation history
| Timestamp | Status | Score | Latency | Tools |
|---|---|---|---|---|
| Aug 06, 2026 07:20:25 AM UTC | Failing | 1.7 | 22174.4 ms | 0 |
| Aug 06, 2026 07:20:25 AM UTC | Failing | 1.7 | 21493.6 ms | 0 |
| Aug 06, 2026 07:20:24 AM UTC | Failing | 1.7 | 21734.2 ms | 0 |
| Aug 05, 2026 11:19:38 PM UTC | Failing | 4.9 | 21695.5 ms | 0 |
| Aug 05, 2026 11:19:38 PM UTC | Failing | 4.9 | 21898.3 ms | 0 |
| Aug 05, 2026 11:19:38 PM UTC | Failing | 4.9 | 21882.5 ms | 0 |
| Aug 05, 2026 07:18:56 PM UTC | Failing | 13.6 | 23048.2 ms | 0 |
| Aug 03, 2026 10:31:41 AM UTC | Failing | 21.7 | 22392.4 ms | 0 |
Validation timeline
| Validated | Summary | Score | Protocol | Auth mode | Tools | High-risk tools | Changes |
|---|---|---|---|---|---|---|---|
| Aug 06, 2026 07:20:25 AM UTC | Failing | 1.7 | 2025-03-26 | public | 0 | 0 | auth_mode_changed |
| Aug 06, 2026 07:20:25 AM UTC | Failing | 1.7 | unknown | unknown | 0 | 0 | none |
| Aug 06, 2026 07:20:24 AM UTC | Failing | 1.7 | unknown | unknown | 0 | 0 | none |
| Aug 05, 2026 11:19:38 PM UTC | Failing | 4.9 | unknown | unknown | 0 | 0 | none |
| Aug 05, 2026 11:19:38 PM UTC | Failing | 4.9 | unknown | unknown | 0 | 0 | none |
| Aug 05, 2026 11:19:38 PM UTC | Failing | 4.9 | unknown | unknown | 0 | 0 | none |
| Aug 05, 2026 07:18:56 PM UTC | Failing | 13.6 | unknown | unknown | 0 | 0 | none |
| Aug 03, 2026 10:31:41 AM UTC | Failing | 21.7 | unknown | unknown | 0 | 0 | none |
| Aug 02, 2026 06:33:37 PM UTC | Failing | 21.5 | unknown | unknown | 0 | 0 | none |
| Aug 02, 2026 04:00:26 AM UTC | Failing | 21.3 | unknown | unknown | 0 | 0 | none |
Recent validation runs
| Started | Status | Summary | Latency | Checks |
|---|---|---|---|---|
| Aug 06, 2026 07:20:03 AM UTC | Completed | Failing | 22174.4 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 06, 2026 07:20:03 AM UTC | Completed | Failing | 21493.6 ms | |
| Aug 06, 2026 07:20:02 AM UTC | Completed | Failing | 21734.2 ms | |
| Aug 05, 2026 11:19:17 PM UTC | Completed | Failing | 21695.5 ms | |
| Aug 05, 2026 11:19:16 PM UTC | Completed | Failing | 21898.3 ms | |
| Aug 05, 2026 11:19:16 PM UTC | Completed | Failing | 21882.5 ms | |
| Aug 05, 2026 07:18:33 PM UTC | Completed | Failing | 23048.2 ms | |
| Aug 03, 2026 10:31:19 AM UTC | Completed | Failing | 22392.4 ms | |
| Aug 02, 2026 06:33:15 PM UTC | Completed | Failing | 21966.2 ms | |
| Aug 02, 2026 04:00:04 AM UTC | Completed | Failing | 22086.2 ms | |
Public server reputation
Incident & change feed
| Timestamp | Event | Details |
|---|---|---|
| Aug 05, 2026 11:01:12 AM UTC | Score corrected (post-1.0.503 remediation, R1 zero-anchoring) | Prior: 21.69. Corrected: 13.82. |
| Aug 06, 2026 07:20:25 AM UTC | Latest validation: failing | Score 2.9 with status failing. |
| Aug 06, 2026 07:20:25 AM UTC | Auth mode changed | Auth mode moved from unknown to public. |
| Aug 06, 2026 07:20:24 AM UTC | Score changed | Score delta -3.2 versus the previous run. |
Capabilities
- OAuth:
- DCR/CIMD:
- Prompts:
- Homepage: none
- Docs: none
- Support: none
- Icon: none
- Remote endpoint: https://mcp.nordax.ai/mcp
- Server card: none
Benchmark tasks
| Benchmark task | Status | Evidence |
|---|---|---|
| Discover tools | Likely to fail |
|
| Read-only fetch flow | Likely to fail |
|
| OAuth-required connect | Degraded |
|
| Safe write flow with confirmation | Degraded |
|
Utility coverage
Transport compliance drilldown
Issues: missing_protocol_header, delete_session_unexpected, expired_session_not_404
Request association
Connector replay
Required-argument replay breaks
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument replay breaks detected. | ||
Output-schema replay breaks
| Tool | Removed properties | Added properties |
|---|---|---|
| No output-schema replay breaks detected. | ||
Tool snapshot diff & changelog
Need at least two validation runs before building a tool changelog.
Validation diff
Regressed checks: action_safety_probe, connector_publishability_probe, oauth_protected_resource, provenance_divergence_probe, server_card, tools_list, transport_compliance_probe
Improved checks: initialize, official_registry_probe, probe_noise_resilience, session_resume_probe
Newly assessed dimensions: none
No longer assessed dimensions: none
| Component | Previous | Latest | Delta |
|---|---|---|---|
| No component deltas between the latest two runs. | |||
Registry & provenance divergence
| Field | Registry | Live server card |
|---|---|---|
| Title | n/a | n/a |
| Version | n/a | n/a |
| Homepage | n/a | n/a |
Active alerts
- Latest validation is failing (critical)
Core MCP flows did not validate successfully on the latest run. - tools/list regressed (critical)
Tool discovery became less reliable on the latest run. - Auth mode changed (high)
Auth mode changed from unknown to public.
Aliases & registry graph
| Identifier | Source | Canonical | Score |
|---|---|---|---|
ai.nordax/mcp |
official_registry | yes | 1.7 |
Alias consolidation
Source disagreements
| Field | What differs | Observed values |
|---|---|---|
| No source disagreements detected. | ||
Fix it
Why this score?
Algorithmic score breakdown
Actionable remediation
| Severity | Remediation | Why it matters | Recommended action |
|---|---|---|---|
| Critical | Ensure tools/list succeeds consistently | Tools discovery is the minimum viable contract for most MCP clients and directories. | Make tools/list succeed unauthenticated when possible, or document the auth flow in the server card.Playbook
|
| Critical | Respond to latest validation is failing | Core MCP flows did not validate successfully on the latest run. | Fix the failing checks first, then revalidate to confirm the recovery path.Playbook
|
| Critical | Respond to tools/list regressed | Tool discovery became less reliable on the latest run. | Compare tool enumeration outputs between runs and remove non-deterministic behavior. |
| High | Add confirmation and dry-run semantics for risky actions | High-risk write, delete, exec, or egress tools should communicate safeguards clearly. | Add an explicit confirm/dry-run parameter or two-step confirmation flow to write, delete, exec, and egress-capable tools before they can make destructive changes.Playbook
|
| High | Align session and protocol behavior with Streamable HTTP expectations | Clients increasingly rely on MCP-Protocol-Version, session teardown, and expired-session semantics. | Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.Playbook
|
| High | Associate roots, sampling, and elicitation with active client requests | Modern MCP guidance expects roots, sampling, and elicitation traffic to be tied to an active client request instead of arriving unsolicited on idle sessions. | Only send roots/list, sampling/createMessage, or elicitation/create requests while handling an active client-initiated request, never on idle sessions.Playbook
|
| High | Expose /.well-known/oauth-protected-resource | Without a protected-resource document, OAuth clients cannot discover auth requirements reliably. | Serve /.well-known/oauth-protected-resource and point it at your authorization server metadata.Playbook
|
| High | Keep connector refreshes backward compatible | Managed connector clients freeze tool snapshots, so removed tools, new required args, and breaking output changes can break published integrations after refresh. | Avoid removing tools, adding new required arguments, or changing outputSchema for tools already published to connector directories without a version bump.Playbook
|
| High | Publish OAuth authorization-server metadata | Clients need authorization-server metadata to discover issuer, endpoints, and DCR support. | Publish /.well-known/oauth-authorization-server from your issuer and include registration_endpoint when supported.Playbook
|
| High | Publish a complete server card | Missing or incomplete server-card metadata weakens discovery, documentation, and trust signals. | Serve /.well-known/mcp/server-card.json and include tools, prompts/resources, homepage, and support links.Playbook
|
| High | Respond to auth mode changed | Auth mode changed from unknown to public. | Document the new auth posture and confirm protected-resource and challenge metadata still match reality. |
| High | Stop asking users to paste secrets directly | Public MCP servers should prefer OAuth or browser-based auth guidance over in-band secret collection. | |
| High | Sync the published server card's tool schemas with the live tool surface | The server card and live tools/list disagree on parameter names, required sets, or types -- clients that trust the published card will construct invalid calls. | Regenerate the published server card from the live tool schemas (or vice versa) so parameter names, required sets, and types match exactly.Playbook
|
| Medium | Adopt a current MCP protocol revision | Older protocol revisions reduce compatibility with newer clients and registry programs. | Advertise a current MCP protocol revision (2025-06-18 or later) in both the initialize response and the MCP-Protocol-Version header.Playbook
|
| Medium | Close connector-publishing gaps | Connector catalogs care about protocol recency, session behavior, auth clarity, and tool-surface stability. | |
| Medium | Document minimal scopes and return cleaner auth challenges | Modern clients expect granular scopes and step-up auth signals such as WWW-Authenticate scope hints. | Return granular scopes and WWW-Authenticate challenge hints instead of forcing overly broad auth upfront.Playbook
|
| Medium | Publish OpenID configuration | OIDC metadata improves token validation and client compatibility. | Expose /.well-known/openid-configuration with issuer, jwks_uri, and supported grants.Playbook
|
| Medium | Raise Access & Protocol score | Connectivity, auth, and transport expectations for common clients. | Tighten auth discovery, session behavior, and transport metadata until remote clients can connect without guesswork. |
| Medium | Raise Adoption & Market score | Adoption clues and public evidence that the server is intended for external use. | Increase external documentation and directory coverage so users can discover and evaluate the server. |
| Medium | Raise Interface Quality score | How well the tool/resource interface communicates and behaves under automation. | Improve schemas, error contracts, and recovery messages so agents can reason about the surface automatically. |
| Medium | Raise Reliability & Trust score | Operational stability, consistency, and trustworthiness over time. | Stabilize behavior over time and reduce failure drift between validation runs. |
| Medium | Raise Security Posture score | How safely the exposed tool surface handles destructive actions, egress, execution, secrets, and risky inputs. | Reduce destructive, egress, exec, secret, and freeform-input risk across the exposed tool surface.Playbook
|
| Medium | Reconcile registry, server-card, and repository metadata | Directory trust falls quickly when official registry fields drift from the live server card or public repo metadata. | |
| Medium | Reduce tool-surface churn | Frequent add/remove or output-shape drift makes published connectors and cached tool snapshots brittle. | Keep tool names, required arguments, and output schemas stable between deploys, and publish a changelog entry when they must change.Playbook
|
| Medium | Repair prompts/list or stop advertising prompts | Prompt metadata should either work live or be removed from the advertised capability set. | Only advertise prompts if prompts/list works and prompt arguments are documented.Playbook
|
| Medium | Repair resources/list or stop advertising resources | Resource metadata should either work live or be removed from the advertised capability set. | Only advertise resources if resources/list works and resources expose stable URIs/types.Playbook
|
| Low | Expose modern utility surfaces like completions, pagination, or tasks | Utility coverage improves interoperability with larger clients and long-lived agent workflows. | Expose completions, pagination, and task metadata where supported so larger clients can plan and resume work safely.Playbook
|
| Low | Publish newer MCP capability signals | Roots, sampling, elicitation, structured outputs, and related metadata improve client understanding and ranking. | Advertise only the advanced capabilities (roots, sampling, elicitation) you have actually implemented end to end in the initialize capabilities object.Playbook
|
Point loss breakdown
| Component | Current | Points missing |
|---|---|---|
| Utility Coverage | 0/4 | -4.0 |
| Trust Confidence | 0/4 | -4.0 |
| Tool Surface Design | 0/4 | -4.0 |
| Tool Snapshot Churn | 0/4 | -4.0 |
| Tool Namespace Clarity | 0/4 | -4.0 |
| Tool Capability Clarity | 0/4 | -4.0 |
| Task Success | 0/4 | -4.0 |
| Step Up Auth | 0/4 | -4.0 |
| SLO Health | 0/4 | -4.0 |
| Schema Completeness | 0/4 | -4.0 |
| Result Shape Stability | 0/4 | -4.0 |
| Resource Contract | 0/4 | -4.0 |
Compatibility profiles
Connector URL: https://mcp.nordax.ai/mcp # No OAuth metadata detected. # Server: ai.nordax/mcp
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": ["mcp-remote", "https://mcp.nordax.ai/mcp"]
}
}
}
smithery mcp add "https://mcp.nordax.ai/mcp"
curl -sS https://mcp.nordax.ai/mcp -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Governance
MCP TrustOps
TrustOps turns this report into operational controls: freshness SLAs, authenticated validation, semantic benchmarks, policy exports, alert subscriptions, badges, cost/compliance metadata, and runtime routing. Fresh trusted index decisions stay separate from long-tail inventory so stale scores do not masquerade as current evidence.
/v1/decideAlert subscription types
MCP Runtime hosting
Verify Hosted MCP turns a trusted server report into a managed remote MCP endpoint with GitHub deployment provenance, sandbox policy, encrypted secrets, release history, rollback, and audit/usage events.
/hosted/{namespace}/{name}/mcp| Deployment | Status | Endpoint | Release |
|---|---|---|---|
| No hosted runtime deployments yet. | |||
Authenticated validation sessions
Public validation is free. Authenticated validation is paid and proves scoped behavior, write-action safeguards, and authenticated tool execution.
/v1/verify/v1/ci/previewInstall snippets
Connector URL: https://mcp.nordax.ai/mcp # No OAuth metadata detected. # Server: ai.nordax/mcp
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": ["mcp-remote", "https://mcp.nordax.ai/mcp"]
}
}
}
smithery mcp add "https://mcp.nordax.ai/mcp"
curl -sS https://mcp.nordax.ai/mcp -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Agent access & tool surface
tools/list, prompts/list, and resources/list checks.ai.nordax/mcp.