← Back to search
Search • Shortlists • Rankings • Digests • Backfill • Incident feed • MCP API
io.github.hellosg/coderegistry

io.github.hellosg/coderegistry

Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.

JSON report • History API • Manage this server • Global feed
Status
Healthy
Score
76.5
Transport
streamable-http
Tools
16

Production readiness

Verdict
Needs remediation
Current validation evidence shows operational or discovery gaps that should be fixed first.
Critical alerts
0
Production verdicts degrade quickly when critical alerts are active.

Evidence confidence

Confidence score
65.0
Based on 20 recent validations, 26 captured checks, and validation age of 603.7 hours.
Live checks captured
26
More direct checks increase trust in the current verdict.
Validation age
603.7h
Lower age means fresher evidence.

Recommended for

Claude Desktop
Claude Desktop is marked compatible with score 83.
Smithery
Smithery is marked compatible with score 80.
Generic Streamable HTTP
Generic Streamable HTTP is marked compatible with score 100.

Client readiness verdicts

Ready for ChatGPT custom connector
Partial
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; Transport compliance should be in good shape.
Confidence: medium (65.0)
Evidence provenance
Winner: live_validation
Supporting sources: live_validation, history, server_card
Disagreements: none
  • initialize • OK
  • tools_list • OK
  • transport_compliance_probe • Error
  • step_up_auth_probe • Missing
  • connector_replay_probe • OK — Frozen tool snapshots must survive refresh.
  • request_association_probe • Missing — Roots, sampling, and elicitation should stay request-scoped.
Ready for Claude remote MCP
Ready
Transport behavior should match Claude-compatible HTTP expectations.
Confidence: medium (65.0)
Evidence provenance
Winner: live_validation
Supporting sources: live_validation, history, server_card
Disagreements: none
  • initialize • OK
  • tools_list • OK
  • transport_compliance_probe • Error
Unsafe for write actions
Yes
High-risk write, exec, or destructive tools need stronger auth and confirmation semantics.
Confidence: medium (65.0)
Evidence provenance
Winner: live_validation
Supporting sources: live_validation, history
Disagreements: none
  • action_safety_probe • Error
Snapshot churn risk
Low
No material tool-surface churn detected in the latest comparison.
Confidence: medium (65.0)
Evidence provenance
Winner: history
Supporting sources: history, live_validation
Disagreements: none
  • tool_snapshot_probe • OK
  • connector_replay_probe • OK

Why not ready by client

ChatGPT custom connector
Partial
Remediation checklist
  • No explicit blockers recorded.
Claude remote MCP
Ready
Remediation checklist
  • No explicit blockers recorded.
Write-safe publishing
Blocked
Remediation checklist
  • No explicit blockers recorded.

Verdict traces

Production verdict
Needs remediation
Current validation evidence shows operational or discovery gaps that should be fixed first.
Confidence: medium (65.0)
Winning source: live_validation
Triggering alerts
  • validation_stale • medium • Validation evidence is stale
Client verdict trace table
VerdictStatusChecksWinning sourceConflicts
openai_connectors Partial initialize, tools_list, transport_compliance_probe, step_up_auth_probe, connector_replay_probe, request_association_probe live_validation none
claude_desktop Ready initialize, tools_list, transport_compliance_probe live_validation none
unsafe_for_write_actions Yes action_safety_probe live_validation none
snapshot_churn_risk Low tool_snapshot_probe, connector_replay_probe history none

Publishability policy profiles

ChatGPT custom connector publishability
Caution
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; Transport compliance should be in good shape.
  • Search Fetch Only: No
  • Write Actions Present: Yes
  • Oauth Configured: No
  • Admin Refresh Required: No
  • Safe For Company Knowledge: No
  • Safe For Messages Api Remote Mcp: No
Claude remote MCP publishability
Ready
Transport behavior should match Claude-compatible HTTP expectations.
  • Search Fetch Only: No
  • Write Actions Present: Yes
  • Oauth Configured: No
  • Admin Refresh Required: No
  • Safe For Company Knowledge: No
  • Safe For Messages Api Remote Mcp: No

Compatibility fixtures

ChatGPT custom connector fixture
Degraded
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; Transport compliance should be in good shape.
  • remote_http_endpoint: Passes
  • oauth_discovery: Degraded
  • frozen_tool_snapshot_refresh: Passes
  • request_association: Passes
Anthropic remote MCP fixture
Degraded
Transport behavior should match Claude-compatible HTTP expectations.
  • remote_transport: Passes
  • tool_discovery: Passes
  • auth_connect: Passes
  • safe_write_review: Degraded

Authenticated validation sessions

Latest profile
remote_mcp
Authenticated session used
✕
Public score isolation
✓
Preview endpoint
/v1/verify
CI preview endpoint
/v1/ci/preview

Public server reputation

Validation success 7d
n/a
Validation success 30d
1.0
Mean time to recover
n/a
Breaking diffs 30d
0
Registry drift frequency 30d
0
Snapshot changes 30d
0

Incident & change feed

TimestampEventDetails
Apr 08, 2026 11:29:11 PM UTC Latest validation: healthy Score 76.5 with status healthy.

Capabilities

Use-case taxonomy
development productivity web security

Security posture

Tools analyzed
16
High-risk tools
10
Destructive tools
4
Exec tools
2
Egress tools
1
Secret tools
16
Bulk-access tools
3
Risk distribution
medium:6, high:8, critical:2

Tool capability & risk inventory

ToolCapabilitiesRiskFindingsNotes
create_account write network secrets Medium secret material access No explicit safeguard hints detected.
list_projects read write admin secrets High secret material access freeform input surface admin mutation No explicit safeguard hints detected.
get_project read write admin secrets High secret material access freeform input surface admin mutation No explicit safeguard hints detected.
create_project read write admin secrets High secret material access freeform input surface admin mutation No explicit safeguard hints detected.
delete_project write delete admin secrets High destructive operation secret material access freeform input surface admin mutation Safeguards hinted in metadata.
list_vaults read write admin secrets Medium secret material access freeform input surface admin mutation Safeguards hinted in metadata.
get_vault read write admin secrets Medium secret material access freeform input surface admin mutation Safeguards hinted in metadata.
create-code-vault read write delete exec network filesystem admin secrets export Critical destructive operation command execution arbitrary network egress bulk data access secret material access freeform input surface filesystem mutation admin mutation Safeguards hinted in metadata.
reanalyze-code-vault read write exec filesystem admin secrets export Critical command execution bulk data access secret material access freeform input surface filesystem mutation admin mutation Safeguards hinted in metadata.
delete-code-vault read write delete admin secrets High destructive operation secret material access freeform input surface admin mutation Safeguards hinted in metadata.
get-code-vault-summary read write network admin secrets Medium secret material access freeform input surface admin mutation Safeguards hinted in metadata.
get-code-vault-results read write network admin secrets Medium secret material access freeform input surface admin mutation Safeguards hinted in metadata.
get-code-vault-reports read write network admin secrets export High bulk data access secret material access freeform input surface admin mutation Safeguards hinted in metadata.
get_account read write admin secrets High secret material access freeform input surface admin mutation No explicit safeguard hints detected.
delete_account write delete admin secrets High destructive operation secret material access freeform input surface admin mutation Safeguards hinted in metadata.
rotate_api_key write admin secrets Medium secret material access freeform input surface admin mutation Safeguards hinted in metadata.

Write-action governance

Governance status
Error
Safe to publish
✕
Auth boundary
public_or_unclear
Blast radius
High
High-risk tools
10
Confirmation signals
none
Safeguard count
11

Status detail: 10 high-risk tool(s), 4 destructive tool(s), 2 exec-capable tool(s) are exposed without a clear auth boundary; 11 safeguard(s) and 0 confirmation signal(s) detected.

ToolRiskFlagsSafeguards
list_projects High secret material access freeform input surface admin mutation no
get_project High secret material access freeform input surface admin mutation no
create_project High secret material access freeform input surface admin mutation no
delete_project High destructive operation secret material access freeform input surface admin mutation yes
create-code-vault Critical destructive operation command execution arbitrary network egress bulk data access secret material access freeform input surface filesystem mutation admin mutation yes
reanalyze-code-vault Critical command execution bulk data access secret material access freeform input surface filesystem mutation admin mutation yes
delete-code-vault High destructive operation secret material access freeform input surface admin mutation yes
get-code-vault-reports High bulk data access secret material access freeform input surface admin mutation yes
get_account High secret material access freeform input surface admin mutation no
delete_account High destructive operation secret material access freeform input surface admin mutation yes

Action-controls diff

Snapshot changed
no
Disabled-by-default candidates
none
Manual review candidates
none
New actions
ActionRiskFlags
No newly added actions.
Changed actions
ActionChange typesRisk
No materially changed actions.

Why this score?

Access & Protocol
32/44
Connectivity, auth, and transport expectations for common clients.
Interface Quality
38/56
How well the tool/resource interface communicates and behaves under automation.
Security Posture
27.5/36
How safely the exposed tool surface handles destructive actions, egress, execution, secrets, and risky inputs.
Reliability & Trust
24/24
Operational stability, consistency, and trustworthiness over time.
Discovery & Governance
23.5/28
How well the server is documented, listed, and governed in public registries.
Adoption & Market
5/8
Adoption clues and public evidence that the server is intended for external use.

Algorithmic score breakdown

Auth Operability
2/4
Measures whether auth discovery and protected access behave predictably for clients.
Error Contract Quality
0/4
Grades machine-readable error structure, status alignment, and remediation hints.
Rate-Limit Semantics
2/4
Checks whether quota/throttle responses are deterministic and automation-friendly.
Schema Completeness
3/4
Completeness of tool descriptions, parameter docs, examples, and schema shape.
Backward Compatibility
4/4
Stability score across tool schema/name drift relative to prior validations.
SLO Health
4/4
Availability, latency, and burst-failure profile across recent validation history.
Security Hygiene
2.5/4
HTTPS posture, endpoint hygiene, and response-surface hardening checks.
Task Success
4/4
Can an agent reliably initialize, enumerate tools, and execute core MCP flows?
Trust Confidence
4/4
Confidence-adjusted reliability score that penalizes low evidence volume.
Abuse/Noise Resilience
4/4
How well the server preserves core behavior in the presence of noisy traffic patterns.
Prompt Contract
3/4
Quality of prompt metadata, argument shape, and prompt discoverability for clients.
Resource Contract
4/4
How completely resources and resource templates describe URIs, types, and usage shape.
Discovery Metadata
3/4
Homepage, docs, icon, repository, support, and license coverage for directory consumers.
Registry Consistency
2/4
Agreement between stored registry metadata, live server-card data, and current validation output.
Installability
4/4
How cleanly a real client can connect, initialize, enumerate tools, and proceed through auth.
Session Semantics
4/4
Determinism and state behavior across repeated MCP calls, including sticky-session surprises.
Tool Surface Design
3/4
Naming clarity, schema ergonomics, and parameter complexity across the tool surface.
Result Shape Stability
3/4
Stability of declared output schemas across validations, with penalties for drift or missing shapes.
OAuth Interop
3/4
Depth and client compatibility of OAuth/OIDC metadata beyond the minimal protected-resource check.
Recovery Semantics
0/4
Whether failures include actionable machine-readable next steps such as retry or upgrade guidance.
Maintenance Signal
4/4
Versioning, update recency, and historical validation cadence that indicate active stewardship.
Adoption Signal
2/4
Directory presence and distribution clues that suggest the server is intended for external use.
Freshness Confidence
4/4
Confidence that recent validations are current enough and dense enough to trust operationally.
Transport Fidelity
4/4
Whether declared transport metadata matches the observed endpoint behavior and response formats.
Spec Recency
4/4
How close the server’s claimed MCP protocol version is to the latest known public revision.
Session Resume
3/4
Whether Streamable HTTP session identifiers and resumed requests behave cleanly for real clients.
Step-Up Auth
3/4
Whether OAuth metadata and WWW-Authenticate challenges support granular, incremental consent instead of broad upfront scopes.
Transport Compliance
0/4
Checks session headers, protocol-version enforcement, session teardown, and expired-session behavior.
Utility Coverage
2/4
Signals support for completions, pagination, and task-oriented utility surfaces that larger clients increasingly expect.
Advanced Capability Coverage
3/4
Coverage of newer MCP surfaces like roots, sampling, elicitation, structured output, and related metadata.
Connector Publishability
3/4
How ready the server looks for client catalogs and managed connector programs.
Tool Snapshot Churn
4/4
Stability of the tool surface across recent validations, including add/remove and output-shape drift.
Connector Replay
4/4
Whether a previously published frozen connector snapshot would remain backward compatible after the latest tool refresh.
Request Association
3/4
Whether roots, sampling, and elicitation appear tied to active client requests instead of arriving unsolicited on idle sessions.
Interactive Flow Safety
3/4
Whether prompts and docs steer users toward safe auth flows instead of pasting secrets directly.
Action Safety
2/4
Risk-weighted view of destructive, exec, egress, and confirmation semantics across the tool surface.
Official Registry Presence
4/4
Whether the server appears directly or indirectly in the official MCP registry.
Provenance Divergence
4/4
How closely official registry metadata, the live server card, and public repo/package signals agree with each other.
Safety Transparency
4/4
Clarity of docs, auth disclosure, support links, and other trust signals visible to integrators.
Tool Capability Clarity
4/4
How clearly the tool surface communicates whether each action reads, writes, deletes, executes, or exports data.
Destructive Operation Safety
3/4
Penalizes delete/revoke/destroy style tools unless auth and safeguards reduce blast radius.
Egress / SSRF Resilience
3/4
Assesses arbitrary URL fetch, crawl, webhook, and remote-request exposure on the tool surface.
Execution / Sandbox Safety
3/4
Evaluates shell, code, script, and command-execution exposure and whether that surface appears contained.
Data Exfiltration Resilience
4/4
Assesses export, dump, backup, and bulk-read behavior against the surrounding auth and safeguard signals.
Least Privilege Scope
2/4
Rewards scoped auth metadata and penalizes broad or missing scopes around privileged tools.
Secret Handling Hygiene
4/4
Assesses secret-bearing tools, token leakage risk, and whether the public surface avoids obvious secret exposure.
Supply Chain Signal
2.5/4
Public metadata signal for repository, changelog, license, versioning, and recency that supports supply-chain trust.
Input Sanitization Safety
3/4
Penalizes risky freeform string inputs when schemas do not constrain URLs, code, paths, queries, or templates.
Tool Namespace Clarity
3/4
Measures naming uniqueness and ambiguity across the tool namespace to reduce collision and confusion risk.

Compatibility profiles

OpenAI Connectors
66.7
partial
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; Transport compliance should be in good shape.
Connector URL: https://integrator.app.thecoderegistry.com/api/ai/router
# No OAuth metadata detected.
# Server: io.github.hellosg/coderegistry
Claude Desktop
83.3
compatible
Transport behavior should match Claude-compatible HTTP expectations.
{
  "mcpServers": {
    "coderegistry": {
      "command": "npx",
      "args": ["mcp-remote", "https://integrator.app.thecoderegistry.com/api/ai/router"]
    }
  }
}
Smithery
80.0
compatible
Machine-readable failure semantics should be present.
smithery mcp add "https://integrator.app.thecoderegistry.com/api/ai/router"
Generic Streamable HTTP
100.0
compatible
No major blockers detected.
curl -sS https://integrator.app.thecoderegistry.com/api/ai/router -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'

Actionable remediation

SeverityRemediationWhy it mattersRecommended action
High Add confirmation and dry-run semantics for risky actions High-risk write, delete, exec, or egress tools should communicate safeguards clearly. Inspect the latest validation evidence and resolve the client-visible regression.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.
High Align session and protocol behavior with Streamable HTTP expectations Clients increasingly rely on MCP-Protocol-Version, session teardown, and expired-session semantics. Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.
Playbook
  • Return `Mcp-Session-Id` and `Mcp-Protocol-Version` headers consistently on streamable HTTP responses.
  • Honor `DELETE` session teardown and return `404` when a deleted session is reused.
  • Reject invalid protocol-version headers with `400 Bad Request`.
High Associate roots, sampling, and elicitation with active client requests Modern MCP guidance expects roots, sampling, and elicitation traffic to be tied to an active client request instead of arriving unsolicited on idle sessions. Inspect the latest validation evidence and resolve the client-visible regression.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.
High Expose /.well-known/oauth-protected-resource Without a protected-resource document, OAuth clients cannot discover auth requirements reliably. Serve /.well-known/oauth-protected-resource and point it at your authorization server metadata.
Playbook
  • Serve `/.well-known/oauth-protected-resource` from the same host as the MCP endpoint.
  • Point it at the authorization server metadata URL.
  • Confirm clients receive consistent auth hints before tool execution.
High Publish OAuth authorization-server metadata Clients need authorization-server metadata to discover issuer, endpoints, and DCR support. Publish /.well-known/oauth-authorization-server from your issuer and include registration_endpoint when supported.
Playbook
  • Publish `/.well-known/oauth-authorization-server` from the issuer.
  • Add `registration_endpoint` if DCR is supported.
  • Verify issuer, authorization, token, and jwks metadata are all reachable.
High Publish a complete server card Missing or incomplete server-card metadata weakens discovery, documentation, and trust signals. Serve /.well-known/mcp/server-card.json and include tools, prompts/resources, homepage, and support links.
Playbook
  • Publish `/.well-known/mcp/server-card.json`.
  • Include homepage, repository, support, tools, prompts/resources, and auth metadata.
  • Revalidate the server after publishing the card.
High Stop asking users to paste secrets directly Public MCP servers should prefer OAuth or browser-based auth guidance over in-band secret collection. Inspect the latest validation evidence and resolve the client-visible regression.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.
Medium Adopt a current MCP protocol revision Older protocol revisions reduce compatibility with newer clients and registry programs. Inspect the latest validation evidence and resolve the client-visible regression.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.
Medium Close connector-publishing gaps Connector catalogs care about protocol recency, session behavior, auth clarity, and tool-surface stability. Inspect the latest validation evidence and resolve the client-visible regression.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.
Medium Document minimal scopes and return cleaner auth challenges Modern clients expect granular scopes and step-up auth signals such as WWW-Authenticate scope hints. Return granular scopes and WWW-Authenticate challenge hints instead of forcing overly broad auth upfront.
Playbook
  • Advertise the narrowest viable scopes in OAuth metadata.
  • Return `WWW-Authenticate` challenges with scope or insufficient-scope hints when additional consent is needed.
  • Revalidate with both public discovery and auth-required flows.
Medium Publish OpenID configuration OIDC metadata improves token validation and client compatibility. Expose /.well-known/openid-configuration with issuer, jwks_uri, and supported grants.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.
Medium Respond to validation evidence is stale Latest validation is 603.7 hours old. Trigger a fresh validation run or increase scheduler priority for this server.
Playbook
  • Queue a new validation run now.
  • Inspect whether the scheduler priority should be raised for this server.
  • Do not rely on stale evidence for production decisions.
Medium Support resumable HTTP sessions cleanly Modern MCP clients increasingly expect resumable session behavior on streamable HTTP transports. Inspect the latest validation evidence and resolve the client-visible regression.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.
Low Expose modern utility surfaces like completions, pagination, or tasks Utility coverage improves interoperability with larger clients and long-lived agent workflows. Expose completions, pagination, and task metadata where supported so larger clients can plan and resume work safely.
Playbook
  • Advertise `completions`, pagination cursors, and `tasks` only when they are actually supported.
  • Return `nextCursor` on large list operations when pagination is available.
  • Document task support and whether it requires step-up auth.
Low Publish newer MCP capability signals Roots, sampling, elicitation, structured outputs, and related metadata improve client understanding and ranking. Inspect the latest validation evidence and resolve the client-visible regression.
Playbook
  • Inspect the latest validation evidence.
  • Resolve the highest-severity client-facing gap first.
  • Revalidate and confirm the score and verdict improve.

Point loss breakdown

ComponentCurrentPoints missing
Transport Compliance 0/4 -4.0
Recovery Semantics 0/4 -4.0
Error Contract 0/4 -4.0
Utility Coverage 2/4 -2.0
Registry Consistency 2/4 -2.0
Rate Limit Semantics 2/4 -2.0
Least Privilege Scope 2/4 -2.0
Auth Operability 2/4 -2.0
Adoption Signal 2/4 -2.0
Action Safety 2/4 -2.0
Security Hygiene 2.5/4 -1.5
Dependency Supply Chain Signal 2.5/4 -1.5

Validation diff

Score delta
0
Summary changed
no
Tool delta
0
Prompt delta
0
Auth mode changed
no
Write surface expanded
no
Protocol regressed
no
Registry drift changed
no

Regressed checks: none

Improved checks: none

ComponentPreviousLatestDelta
No component deltas between the latest two runs.

Tool snapshot diff & changelog

Snapshot changed
no
Added tools
none
Removed tools
none
Required-argument changes
ToolAdded required argsRemoved required args
No required-argument changes detected.
Output-schema drift
ToolPrevious propertiesLatest properties
No output-schema drift detected.

Connector replay

Status
OK
Backward compatible
✓
Would break after refresh
✕
Added tools
none
Removed tools
none
Additive output changes
none
Required-argument replay breaks
ToolAdded required argsRemoved required args
No required-argument replay breaks detected.
Output-schema replay breaks
ToolRemoved propertiesAdded properties
No output-schema replay breaks detected.

Transport compliance drilldown

Probe status
Error
Transport
streamable-http
Session header
no
Protocol header
no
Bad protocol response
200
DELETE teardown
n/a
Expired session retry
n/a
Last-Event-ID visible
no

Issues: missing_session_id, missing_protocol_header, bad_protocol_not_rejected

Request association

Status
Missing
Advertised capabilities
none
Observed idle methods
none
Violating methods
none
Probe HTTP status
n/a
Issues
none

Utility coverage

Probe status
Missing
Completions
not detected
Completion probe target: { "type": "resource", "uri": "resources://docs/index" }
Pagination
not detected
No nextCursor evidence.
Tasks
Missing
Advertised: no

Benchmark tasks

Benchmark taskStatusEvidence
Discover tools Passes
  • initialize • OK
  • tools_list • OK
Read-only fetch flow Passes
  • resource_read • OK
  • read_only_tool_surface • Missing
OAuth-required connect Degraded
  • oauth_protected_resource • Error
  • step_up_auth_probe • Missing
Safe write flow with confirmation Likely to fail
  • action_safety_probe • Error

Registry & provenance divergence

Probe status
OK
Direct official match
yes
Drift fields
none
FieldRegistryLive server card
Titlen/an/a
Versionn/an/a
Homepagen/an/a

Active alerts

Aliases & registry graph

IdentifierSourceCanonicalScore
io.github.hellosg/coderegistry official_registry yes 76.53

Alias consolidation

Canonical identifier
io.github.hellosg/coderegistry
Duplicate aliases
0
Registry sources
official_registry
Remote URLs
https://integrator.app.thecoderegistry.com/api/ai/router
Homepages
none
Source disagreements
FieldWhat differsObserved values
No source disagreements detected.

Install snippets

Openai Connectors
Connector URL: https://integrator.app.thecoderegistry.com/api/ai/router
# No OAuth metadata detected.
# Server: io.github.hellosg/coderegistry
Claude Desktop
{
  "mcpServers": {
    "coderegistry": {
      "command": "npx",
      "args": ["mcp-remote", "https://integrator.app.thecoderegistry.com/api/ai/router"]
    }
  }
}
Smithery
smithery mcp add "https://integrator.app.thecoderegistry.com/api/ai/router"
Generic Http
curl -sS https://integrator.app.thecoderegistry.com/api/ai/router -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'

Agent access & tool surface

Live server tools
create_account list_projects get_project create_project delete_project list_vaults get_vault create-code-vault
Observed from the latest live validation against https://integrator.app.thecoderegistry.com/api/ai/router. This is the target server surface, not Verify's own inspection tools.
Live capability counts
16 tools • 4 prompts • 36 resources
Counts come from the latest tools/list, prompts/list, and resources/list checks.
Inspect with Verify
search_servers recommend_servers get_server_report compare_servers
Use Verify itself to search, recommend, compare, and fetch the full report for io.github.hellosg/coderegistry.
Direct machine links
JSON report • Compare this server • Verify MCP API

Claims & monitoring

Server ownership

No verified maintainer claim recorded.

Watch subscriptions
0
Teams: none

Alert routing

Active watches
0
Generic webhooks
0
Slack routes
0
Teams routes
0
Email routes
0
WatchTeamChannelsMinimum severity
No active watch destinations.

Maintainer analytics

Validation Run Count
20
Average Latency Ms
617.52
Healthy Run Ratio Recent
1.0
Registry Presence Count
1
Active Alert Count
1
Watcher Count
0
Verified Claim
False
Taxonomy Tags
development, productivity, web, security
Score Trend
76.53, 76.53, 76.53, 76.53, 76.53, 76.53, 76.53, 76.53, 76.53, 76.53
Remediation Count
15
High Risk Tool Count
10
Destructive Tool Count
4
Exec Tool Count
2

Maintainer response quality

Score
16.67
Verified claim
✕
Support contact
✕
Changelog present
✕
Incident notes present
✕
Tool changes documented
✓
Annotation history
✕
Annotation count
0

Maintainer annotations

No maintainer annotations have been recorded yet.

Maintainer rebuttals & expected behavior

No maintainer rebuttals or expected-behavior overrides are recorded yet.

Latest validation evidence

Latest summary
Healthy
Validation profile
remote_mcp
Started
Apr 08, 2026 11:29:10 PM UTC
Latency
313.8 ms

Failures

Checks

CheckStatusLatencyEvidence
action_safety_probe Error n/a 10 high-risk, 4 destructive, 2 exec-capable tool(s); no clear auth boundary; safeguards=11; confirmation=none.
advanced_capabilities_probe Warning n/a Only 3 capability signal(s): prompts, resource links, resources.
connector_publishability_probe Warning n/a Publishability blockers: transport compliance, action safety, server card.
connector_replay_probe OK n/a Backward compatible with no breaking tool-surface changes.
determinism_probe OK 9.4 ms Check completed
initialize OK 28.5 ms Protocol 2024-11-05
interactive_flow_probe Missing n/a Check completed
oauth_authorization_server Missing n/a no authorization server
oauth_protected_resource Error 24.7 ms Client error '404 Not Found' for url 'https://integrator.app.thecoderegistry.com/.well-known/oauth-protected-resource' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404
official_registry_probe OK n/a Check completed
openid_configuration Missing n/a no authorization server
probe_noise_resilience OK 6.0 ms Fetched https://integrator.app.thecoderegistry.com/robots.txt
prompt_get OK 10.1 ms id, jsonrpc, result
prompts_list OK 8.7 ms 4 prompt(s) exposed
protocol_version_probe Warning n/a Claims 2024-11-05; 3 release(s) behind 2025-11-25.
provenance_divergence_probe OK n/a Check completed
request_association_probe Missing n/a No request-association capabilities were advertised.
resource_read OK 10.1 ms 1 resource content item(s) returned
resources_list OK 10.9 ms 36 resource item(s) exposed
server_card Error 73.1 ms Client error '404 Not Found' for url 'https://integrator.app.thecoderegistry.com/.well-known/mcp/server-card.json' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404
session_resume_probe Warning n/a no session id
step_up_auth_probe Missing n/a No OAuth or incremental-scope signals detected.
tool_snapshot_probe OK n/a Check completed
tools_list OK 10.8 ms 16 tool(s) exposed
transport_compliance_probe Error 11.9 ms Issues: missing session id, missing protocol header, bad protocol not rejected (bad protocol=200).
utility_coverage_probe Missing 13.4 ms No completions evidence; no pagination evidence; tasks missing.

Raw evidence view

Show raw JSON evidence 
{
  "checks": {
    "action_safety_probe": {
      "details": {
        "auth_present": false,
        "confirmation_signals": [],
        "safeguard_count": 11,
        "summary": {
          "bulk_access_tools": 3,
          "capability_distribution": {
            "admin": 15,
            "delete": 4,
            "exec": 2,
            "export": 3,
            "filesystem": 2,
            "network": 5,
            "read": 12,
            "secrets": 16,
            "write": 16
          },
          "destructive_tools": 4,
          "egress_tools": 1,
          "exec_tools": 2,
          "high_risk_tools": 10,
          "risk_distribution": {
            "critical": 2,
            "high": 8,
            "low": 0,
            "medium": 6
          },
          "secret_tools": 16,
          "tool_count": 16
        }
      },
      "latency_ms": null,
      "status": "error"
    },
    "advanced_capabilities_probe": {
      "details": {
        "capabilities": {
          "completions": false,
          "elicitation": false,
          "prompts": true,
          "resource_links": true,
          "resources": true,
          "roots": false,
          "sampling": false,
          "structured_outputs": false
        },
        "enabled": [
          "prompts",
          "resource_links",
          "resources"
        ],
        "enabled_count": 3,
        "initialize_capability_keys": [
          "prompts",
          "resources",
          "tools"
        ]
      },
      "latency_ms": null,
      "status": "warning"
    },
    "connector_publishability_probe": {
      "details": {
        "blockers": [
          "transport_compliance",
          "action_safety",
          "server_card"
        ],
        "criteria": {
          "action_safety": false,
          "auth_flow": true,
          "connector_replay": true,
          "initialize": true,
          "protocol_version": true,
          "remote_transport": true,
          "request_association": true,
          "server_card": false,
          "session_resume": true,
          "step_up_auth": true,
          "tool_surface": true,
          "tools_list": true,
          "transport_compliance": false
        },
        "high_risk_tools": 10,
        "tool_count": 16,
        "transport": "streamable-http"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "connector_replay_probe": {
      "details": {
        "added_tools": [],
        "additive_output_changes": [],
        "backward_compatible": true,
        "output_breaks": [],
        "removed_tools": [],
        "required_arg_breaks": [],
        "would_break_after_refresh": false
      },
      "latency_ms": null,
      "status": "ok"
    },
    "determinism_probe": {
      "details": {
        "attempts": 2,
        "baseline_signature": "a44b85dcd592437713c8c91fa104bff2c5d1624d49e8c863e01aef6fc18edc1e",
        "errors": [],
        "matches": 2,
        "stable_ratio": 1.0,
        "successful": 2
      },
      "latency_ms": 9.37,
      "status": "ok"
    },
    "initialize": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 1,
          "jsonrpc": "2.0",
          "result": {
            "capabilities": {
              "prompts": {},
              "resources": {},
              "tools": {}
            },
            "protocolVersion": "2024-11-05",
            "serverInfo": {
              "name": "code-registry",
              "version": "1.0.0"
            }
          }
        },
        "url": "https://integrator.app.thecoderegistry.com/api/ai/router"
      },
      "latency_ms": 28.52,
      "status": "ok"
    },
    "interactive_flow_probe": {
      "details": {
        "oauth_supported": false,
        "prompt_available": true,
        "risk_hits": [],
        "safe_hits": []
      },
      "latency_ms": null,
      "status": "missing"
    },
    "oauth_authorization_server": {
      "details": {
        "reason": "no_authorization_server"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "oauth_protected_resource": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://integrator.app.thecoderegistry.com/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://integrator.app.thecoderegistry.com/.well-known/oauth-protected-resource"
      },
      "latency_ms": 24.72,
      "status": "error"
    },
    "official_registry_probe": {
      "details": {
        "direct_match": true,
        "official_peer_count": 1,
        "registry_identifier": "io.github.hellosg/coderegistry",
        "registry_source": "official_registry"
      },
      "latency_ms": null,
      "status": "ok"
    },
    "openid_configuration": {
      "details": {
        "reason": "no_authorization_server"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "probe_noise_resilience": {
      "details": {
        "headers": {},
        "http_status": 404,
        "url": "https://integrator.app.thecoderegistry.com/robots.txt"
      },
      "latency_ms": 5.96,
      "status": "ok"
    },
    "prompt_get": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 4,
          "jsonrpc": "2.0",
          "result": {
            "prompt": {
              "arguments": [],
              "description": "Batch Analysis Prompt",
              "messages": [
                {
                  "content": "# Batch Analysis Prompt\n\n\"Analyze these 5 repositories and return a short summary for each with report URLs.\"",
                  "role": "user"
                }
              ],
              "name": "batch-analysis"
            }
          }
        },
        "prompt_name": "batch-analysis",
        "url": "https://integrator.app.thecoderegistry.com/api/ai/router"
      },
      "latency_ms": 10.07,
      "status": "ok"
    },
    "prompts_list": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 3,
          "jsonrpc": "2.0",
          "result": {
            "prompts": [
              {
                "arguments": [],
                "description": "Batch Analysis Prompt",
                "name": "batch-analysis"
              },
              {
                "arguments": [],
                "description": "Comparison Prompt",
                "name": "comparison"
              },
              {
                "arguments": [],
                "description": "First Analysis Prompt",
                "name": "first-analysis"
              },
              {
                "arguments": [],
                "description": "Specific Metrics Prompt",
                "name": "specific-metrics"
              }
            ]
          }
        },
        "url": "https://integrator.app.thecoderegistry.com/api/ai/router"
      },
      "latency_ms": 8.66,
      "status": "ok"
    },
    "protocol_version_probe": {
      "details": {
        "claimed_version": "2024-11-05",
        "lag_days": 385,
        "latest_known_version": "2025-11-25",
        "releases_behind": 3,
        "validator_protocol_version": "2025-03-26"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "provenance_divergence_probe": {
      "details": {
        "direct_official_match": true,
        "drift_fields": [],
        "metadata_document_count": 1,
        "registry_homepage": null,
        "registry_repository": null,
        "registry_title": null,
        "registry_version": null,
        "server_card_homepage": null,
        "server_card_repository": null,
        "server_card_title": null,
        "server_card_version": null
      },
      "latency_ms": null,
      "status": "ok"
    },
    "request_association_probe": {
      "details": {
        "reason": "no_request_association_capabilities_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "resource_read": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 6,
          "jsonrpc": "2.0",
          "result": {
            "contents": [
              {
                "mimeType": "text/markdown",
                "text": "# Code Registry MCP Resources\n\nUse the URIs below with resources/read.\n\n## Docs\n- resources://docs/index\n- resources://docs/agents\n- resources://docs/readme\n- resources://docs/changelog\n- resources://docs/license\n- resources://docs/api-reference\n- resources://docs/architecture\n- resources://docs/authentication\n- resources://docs/facets\n- resources://docs/getting-started\n- resources://docs/response-schemas\n- resources://docs/troubleshooting\n\n## Workflows\n- resources://examples/workflows/github-integration\n- resources://examples/workflows/local-repo-analysis\n- resources://examples/workflows/multi-project-setup\n\n## Use Cases\n- resources://examples/use-cases/due-diligence\n- resources://examples/use-cases/portfolio-monitoring\n- resources://examples/use-cases/security-audit\n- resources://examples/use-cases/tech-debt-analysis\n\n## Integrations\n- resources://integrations/automation/github-actions.yml\n- resources://integrations/automation/gitlab-ci.yml\n- resources://integrations/automation/jenkins-pipeline.groovy\n- resources://integrations/claude-api/README.md\n- resources://integrations/claude-api/python-example.py\n- resources://integrations/claude-api/typescript-example.ts\n- resources://integrations/claude-desktop/README.md\n- resources://integrations/claude-desktop/config.json\n- resources://integrations/cline/README.md\n- resources://integrations/cline/config.json\n- resources://integrations/cursor/README.md\n- resources://integrations/cursor/config.json\n- resources://integrations/custom-agents/README.md\n- resources://integrations/custom-agents/nodejs-client.js\n- resources://integrations/custom-agents/python-client.py\n\n## Schemas\n- resources://schemas/api-responses\n- resources://schemas/mcp-tools\n\n## Prompts\n- prompts://batch-analysis\n- prompts://comparison\n- prompts://first-analysis\n- prompts://specific-metrics\n",
                "uri": "resources://docs/index"
              }
            ]
          }
        },
        "resource_uri": "resources://docs/index",
        "url": "https://integrator.app.thecoderegistry.com/api/ai/router"
      },
      "latency_ms": 10.12,
      "status": "ok"
    },
    "resources_list": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 5,
          "jsonrpc": "2.0",
          "result": {
            "resources": [
              {
                "description": "Overview of available documentation, workflows, and prompts.",
                "mimeType": "text/markdown",
                "name": "Docs Index",
                "uri": "resources://docs/index"
              },
              {
                "description": "Agent-facing integration guide.",
                "mimeType": "text/markdown",
                "name": "AGENTS.md",
                "uri": "resources://docs/agents"
              },
              {
                "description": "Public MCP server overview.",
                "mimeType": "text/markdown",
                "name": "The Code Registry MCP Server",
                "uri": "resources://docs/readme"
              },
              {
                "description": "Release notes.",
                "mimeType": "text/markdown",
                "name": "Changelog",
                "uri": "resources://docs/changelog"
              },
              {
                "description": "License text.",
                "mimeType": "text/plain",
                "name": "LICENSE",
                "uri": "resources://docs/license"
              },
              {
                "description": "Documentation.",
                "mimeType": "text/markdown",
                "name": "MCP API Reference",
                "uri": "resources://docs/api-reference"
              },
              {
                "description": "Documentation.",
                "mimeType": "text/markdown",
                "name": "Architecture - Source Code Types",
                "uri": "resources://docs/architecture"
              },
              {
                "description": "Documentation.",
                "mimeType": "text/markdown",
                "name": "Authentication",
                "uri": "resources://docs/authentication"
              },
              {
                "description": "Documentation.",
                "mimeType": "text/markdown",
                "name": "Facet Glossary",
                "uri": "resources://docs/facets"
              },
              {
                "description": "Documentation.",
                "mimeType": "text/markdown",
                "name": "Getting Started",
                "uri": "resources://docs/getting-started"
              },
              {
                "description": "Documentation.",
                "mimeType": "text/markdown",
                "name": "Response Schemas",
                "uri": "resources://docs/response-schemas"
              },
              {
                "description": "Documentation.",
                "mimeType": "text/markdown",
                "name": "Troubleshooting",
                "uri": "resources://docs/troubleshooting"
              },
              {
                "description": "Workflow example.",
                "mimeType": "text/markdown",
                "name": "GitHub Integration Workflow",
                "uri": "resources://examples/workflows/github-integration"
              },
              {
                "description": "Workflow example.",
                "mimeType": "text/markdown",
                "name": "Local Repo Analysis Workflow",
                "uri": "resources://examples/workflows/local-repo-analysis"
              },
              {
                "description": "Workflow example.",
                "mimeType": "text/markdown",
                "name": "Multi-Project Setup",
                "uri": "resources://examples/workflows/multi-project-setup"
              },
              {
                "description": "Use-case example.",
                "mimeType": "text/markdown",
                "name": "M&A Due Diligence with Claude",
                "uri": "resources://examples/use-cases/due-diligence"
              },
              {
                "description": "Use-case example.",
                "mimeType": "text/markdown",
                "name": "Portfolio Monitoring",
                "uri": "resources://examples/use-cases/portfolio-monitoring"
              },
              {
                "description": "Use-case example.",
                "mimeType": "text/markdown",
                "name": "Security Audit",
                "uri": "resources://examples/use-cases/security-audit"
              },
              {
                "description": "Use-case example.",
                "mimeType": "text/markdown",
                "name": "Tech Debt Analysis",
                "uri": "resources://examples/use-cases/tech-debt-analysis"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/yaml",
                "name": "Analyze code on every PR",
                "uri": "resources://integrations/automation/github-actions.yml"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/yaml",
                "name": "GitLab CI example",
                "uri": "resources://integrations/automation/gitlab-ci.yml"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/plain",
                "name": "jenkins-pipeline",
                "uri": "resources://integrations/automation/jenkins-pipeline.groovy"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/markdown",
                "name": "Claude API Integration",
                "uri": "resources://integrations/claude-api/README.md"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/plain",
                "name": "Example of using Code Registry MCP via Claude API",
                "uri": "resources://integrations/claude-api/python-example.py"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/plain",
                "name": "typescript-example",
                "uri": "resources://integrations/claude-api/typescript-example.ts"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/markdown",
                "name": "Claude Desktop Setup",
                "uri": "resources://integrations/claude-desktop/README.md"
              },
              {
                "description": "Integration asset.",
                "mimeType": "application/json",
                "name": "config",
                "uri": "resources://integrations/claude-desktop/config.json"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/markdown",
                "name": "Cline (VS Code) Setup",
                "uri": "resources://integrations/cline/README.md"
              },
              {
                "description": "Integration asset.",
                "mimeType": "application/json",
                "name": "config",
                "uri": "resources://integrations/cline/config.json"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/markdown",
                "name": "Cursor Setup",
                "uri": "resources://integrations/cursor/README.md"
              },
              {
                "description": "Integration asset.",
                "mimeType": "application/json",
                "name": "config",
                "uri": "resources://integrations/cursor/config.json"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/markdown",
                "name": "Custom MCP Clients",
                "uri": "resources://integrations/custom-agents/README.md"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/plain",
                "name": "nodejs-client",
                "uri": "resources://integrations/custom-agents/nodejs-client.js"
              },
              {
                "description": "Integration asset.",
                "mimeType": "text/plain",
                "name": "python-client",
                "uri": "resources://integrations/custom-agents/python-client.py"
              },
              {
                "description": "Schema definition.",
                "mimeType": "application/json",
                "name": "api-responses",
                "uri": "resources://schemas/api-responses"
              },
              {
                "description": "Schema definition.",
                "mimeType": "application/json",
                "name": "mcp-tools",
                "uri": "resources://schemas/mcp-tools"
              }
            ]
          }
        },
        "url": "https://integrator.app.thecoderegistry.com/api/ai/router"
      },
      "latency_ms": 10.87,
      "status": "ok"
    },
    "server_card": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://integrator.app.thecoderegistry.com/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://integrator.app.thecoderegistry.com/.well-known/mcp/server-card.json"
      },
      "latency_ms": 73.1,
      "status": "error"
    },
    "session_resume_probe": {
      "details": {
        "protocol_version": "2024-11-05",
        "reason": "no_session_id",
        "resume_expected": true,
        "transport": "streamable-http"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "step_up_auth_probe": {
      "details": {
        "auth_required_checks": [],
        "broad_scopes": [],
        "challenge_headers": [],
        "minimal_scope_documented": false,
        "oauth_present": false,
        "scope_specificity_ratio": 0.0,
        "step_up_signals": [],
        "supported_scopes": []
      },
      "latency_ms": null,
      "status": "missing"
    },
    "tool_snapshot_probe": {
      "details": {
        "added": [],
        "changed_outputs": [],
        "current_tool_count": 16,
        "previous_tool_count": 16,
        "removed": [],
        "similarity": 1.0
      },
      "latency_ms": null,
      "status": "ok"
    },
    "tools_list": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 2,
          "jsonrpc": "2.0",
          "result": {
            "tools": [
              {
                "description": "Creates a new Code Registry account and returns API credentials. Cold starts can cause the first request to time out; retry with backoff. No API key required.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "Creates a new account and returns an API key.",
                  "examples": [
                    {
                      "email": "user@example.com",
                      "integrator_id": "desktop-agent",
                      "name": "User Name",
                      "team_name": "Example Org"
                    }
                  ],
                  "properties": {
                    "email": {
                      "description": "Account owner's email.",
                      "examples": [
                        "user@example.com"
                      ],
                      "format": "email",
                      "minLength": 1,
                      "type": "string"
                    },
                    "integrator_id": {
                      "description": "Optional integrator identifier (used for API key scoping).",
                      "examples": [
                        "desktop-agent"
                      ],
                      "type": "string"
                    },
                    "integrator_name": {
                      "description": "Optional integrator display name.",
                      "examples": [
                        "Desktop Agent"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Account owner's name.",
                      "examples": [
                        "User Name"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "team_name": {
                      "description": "Team or company name.",
                      "examples": [
                        "Example Org",
                        "John's Team"
                      ],
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "email",
                    "name",
                    "team_name"
                  ],
                  "type": "object"
                },
                "name": "create_account"
              },
              {
                "description": "Lists all projects for the authenticated team. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "No arguments required.",
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "list_projects"
              },
              {
                "description": "Returns a specific project by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "project_id"
                  ],
                  "type": "object"
                },
                "name": "get_project"
              },
              {
                "description": "Creates a project for a team user. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "description": {
                      "description": "Optional project description.",
                      "examples": [
                        "Optional text"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Project name.",
                      "examples": [
                        "New AI Project"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "user_id": {
                      "description": "User id (from create_account or get_account).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "user_id",
                    "name"
                  ],
                  "type": "object"
                },
                "name": "create_project"
              },
              {
                "description": "Deletes a project and its vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "project_id"
                  ],
                  "type": "object"
                },
                "name": "delete_project"
              },
              {
                "description": "Lists vaults within a project. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "project_id"
                  ],
                  "type": "object"
                },
                "name": "list_vaults"
              },
              {
                "description": "Returns a specific vault by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get_vault"
              },
              {
                "description": "Creates a code vault and queues the initial analysis. IMPORTANT: Always use LOCAL_AGENT (or AGENT) unless the user explicitly requests remote analysis or Docker is unavailable. LOCAL_AGENT runs locally via Docker; source code stays on the machine and only anonymous analysis data is uploaded. A Git repo is only required if you want Git-based insights (git-history, code-contributors). If Git insights are needed, the mounted path must be a standard Git repo containing a .git directory (not a .git file pointing to a worktree). The response includes next_steps.commands that must be executed to start the local agent. Use GIT/FILE_ARCHIVE only when the user provides a reachable URL plus read credentials (username/password or token). Cold starts can cause the first request to time out; retry with backoff. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "Creates a code vault and queues the initial analysis.",
                  "examples": [
                    {
                      "name": "Local Agent Vault",
                      "project_id": "<project_id>",
                      "source_type": "LOCAL_AGENT",
                      "user_id": "<user_id>"
                    },
                    {
                      "name": "Repo Vault",
                      "project_id": "<project_id>",
                      "source_type": "GIT",
                      "source_url": "https://github.com/org/repo.git",
                      "user_id": "<user_id>"
                    }
                  ],
                  "oneOf": [
                    {
                      "properties": {
                        "source_type": {
                          "enum": [
                            "LOCAL_AGENT",
                            "AGENT"
                          ]
                        }
                      },
                      "required": [
                        "project_id",
                        "user_id",
                        "name",
                        "source_type"
                      ]
                    },
                    {
                      "properties": {
                        "source_type": {
                          "enum": [
                            "GIT"
                          ]
                        }
                      },
                      "required": [
                        "project_id",
                        "user_id",
                        "name",
                        "source_type",
                        "source_url",
                        "username",
                        "password"
                      ]
                    },
                    {
                      "properties": {
                        "source_type": {
                          "enum": [
                            "FILE_ARCHIVE"
                          ]
                        }
                      },
                      "required": [
                        "project_id",
                        "user_id",
                        "name",
                        "source_type",
                        "source_url"
                      ]
                    }
                  ],
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "branch": {
                      "description": "Optional source branch name (GIT only).",
                      "examples": [
                        "main"
                      ],
                      "type": "string"
                    },
                    "description": {
                      "description": "Optional vault description.",
                      "type": "string"
                    },
                    "name": {
                      "description": "Vault name.",
                      "examples": [
                        "Customer Upload"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "password": {
                      "description": "Source password or personal access token (required for private GIT repos; must have read access).",
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id (from create_project).",
                      "minLength": 1,
                      "type": "string"
                    },
                    "source_type": {
                      "default": "LOCAL_AGENT",
                      "description": "Code source type. ALWAYS use LOCAL_AGENT (or AGENT) unless the user explicitly requests remote analysis or Docker is unavailable. LOCAL_AGENT runs locally via Docker; source code stays on the machine and only anonymous analysis data is uploaded. A Git repo is only required for Git-based insights (git-history, code-contributors). If you need those, ensure the mounted path is a standard Git repo containing a .git directory (not a .git file pointing to a worktree). Use GIT/FILE_ARCHIVE only when the user provides a reachable URL plus read credentials (username/password or token). Do NOT attempt GIT without credentials.",
                      "enum": [
                        "GIT",
                        "FILE_ARCHIVE",
                        "LOCAL_AGENT",
                        "AGENT"
                      ],
                      "examples": [
                        "LOCAL_AGENT"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "source_url": {
                      "description": "Repository or archive URL (required for GIT/FILE_ARCHIVE; ignored for LOCAL_AGENT/AGENT). Must be reachable by the platform. FILE_ARCHIVE accepts .zip/.tar URLs and supported Google Drive/Dropbox links.",
                      "examples": [
                        "https://github.com/org/repo.git"
                      ],
                      "format": "uri",
                      "minLength": 1,
                      "type": "string"
                    },
                    "user_id": {
                      "description": "User id (from create_account or get_account).",
                      "minLength": 1,
                      "type": "string"
                    },
                    "username": {
                      "description": "Source username (required for private GIT repos; must have read access).",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "create-code-vault"
              },
              {
                "description": "Creates a new analysis version for an existing code vault using its existing source settings. For LOCAL_AGENT, the response includes next_steps.commands and the local agent must be run again. For GIT/FILE_ARCHIVE, the re-analysis of the original code source is queued automatically. Note: summary/results/report tools always return the latest version only, so reanalysis replaces access to prior version data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "author": {
                      "description": "Optional author name override.",
                      "type": "string"
                    },
                    "comment": {
                      "description": "Optional version comment.",
                      "type": "string"
                    },
                    "user_id": {
                      "description": "Optional user id for attribution (from create_account or get_account).",
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "reanalyze-code-vault"
              },
              {
                "description": "Deletes a code vault and related analysis data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "delete-code-vault"
              },
              {
                "description": "Returns the latest version/status info for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get-code-vault-summary"
              },
              {
                "description": "Returns full facet results and AI insights for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. Facet meanings are documented in resources://docs/facets; AI Quotient is a code-quality metric (not AI-generated code). AI insights can take a few minutes after analysis completes; if ai_insights is empty, poll again and check ai_insights_status per facet (ready/processing/not_available). This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get-code-vault-results"
              },
              {
                "description": "Returns report URLs (snapshot/comparison) for a vault. Completion rules: if version is 1.0.0, snapshot indicates completion and comparison is null; for versions above 1.0.0, comparison indicates completion. If not ready, retry with exponential backoff (5s, 10s, 20s, 40s, max 60s). This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get-code-vault-reports"
              },
              {
                "description": "Returns the team owner account information. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "No arguments required.",
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "get_account"
              },
              {
                "description": "Deletes the team account plus all projects and vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "confirm": {
                      "description": "Set true to confirm deletion.",
                      "enum": [
                        true
                      ],
                      "type": "boolean"
                    }
                  },
                  "required": [
                    "confirm"
                  ],
                  "type": "object"
                },
                "name": "delete_account"
              },
              {
                "description": "Issues a fresh integrator API key. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "integrator_id": {
                      "description": "Optional integrator identifier (defaults to existing integrator or 'default').",
                      "examples": [
                        "desktop-agent"
                      ],
                      "type": "string"
                    },
                    "integrator_name": {
                      "description": "Optional integrator display name.",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "rotate_api_key"
              }
            ]
          }
        },
        "url": "https://integrator.app.thecoderegistry.com/api/ai/router"
      },
      "latency_ms": 10.78,
      "status": "ok"
    },
    "transport_compliance_probe": {
      "details": {
        "bad_protocol_error": null,
        "bad_protocol_headers": {
          "content-type": "application/json"
        },
        "bad_protocol_payload": {
          "id": 410,
          "jsonrpc": "2.0",
          "result": {
            "tools": [
              {
                "description": "Creates a new Code Registry account and returns API credentials. Cold starts can cause the first request to time out; retry with backoff. No API key required.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "Creates a new account and returns an API key.",
                  "examples": [
                    {
                      "email": "user@example.com",
                      "integrator_id": "desktop-agent",
                      "name": "User Name",
                      "team_name": "Example Org"
                    }
                  ],
                  "properties": {
                    "email": {
                      "description": "Account owner's email.",
                      "examples": [
                        "user@example.com"
                      ],
                      "format": "email",
                      "minLength": 1,
                      "type": "string"
                    },
                    "integrator_id": {
                      "description": "Optional integrator identifier (used for API key scoping).",
                      "examples": [
                        "desktop-agent"
                      ],
                      "type": "string"
                    },
                    "integrator_name": {
                      "description": "Optional integrator display name.",
                      "examples": [
                        "Desktop Agent"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Account owner's name.",
                      "examples": [
                        "User Name"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "team_name": {
                      "description": "Team or company name.",
                      "examples": [
                        "Example Org",
                        "John's Team"
                      ],
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "email",
                    "name",
                    "team_name"
                  ],
                  "type": "object"
                },
                "name": "create_account"
              },
              {
                "description": "Lists all projects for the authenticated team. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "No arguments required.",
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "list_projects"
              },
              {
                "description": "Returns a specific project by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "project_id"
                  ],
                  "type": "object"
                },
                "name": "get_project"
              },
              {
                "description": "Creates a project for a team user. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "description": {
                      "description": "Optional project description.",
                      "examples": [
                        "Optional text"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Project name.",
                      "examples": [
                        "New AI Project"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "user_id": {
                      "description": "User id (from create_account or get_account).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "user_id",
                    "name"
                  ],
                  "type": "object"
                },
                "name": "create_project"
              },
              {
                "description": "Deletes a project and its vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "project_id"
                  ],
                  "type": "object"
                },
                "name": "delete_project"
              },
              {
                "description": "Lists vaults within a project. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "project_id"
                  ],
                  "type": "object"
                },
                "name": "list_vaults"
              },
              {
                "description": "Returns a specific vault by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id.",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get_vault"
              },
              {
                "description": "Creates a code vault and queues the initial analysis. IMPORTANT: Always use LOCAL_AGENT (or AGENT) unless the user explicitly requests remote analysis or Docker is unavailable. LOCAL_AGENT runs locally via Docker; source code stays on the machine and only anonymous analysis data is uploaded. A Git repo is only required if you want Git-based insights (git-history, code-contributors). If Git insights are needed, the mounted path must be a standard Git repo containing a .git directory (not a .git file pointing to a worktree). The response includes next_steps.commands that must be executed to start the local agent. Use GIT/FILE_ARCHIVE only when the user provides a reachable URL plus read credentials (username/password or token). Cold starts can cause the first request to time out; retry with backoff. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "Creates a code vault and queues the initial analysis.",
                  "examples": [
                    {
                      "name": "Local Agent Vault",
                      "project_id": "<project_id>",
                      "source_type": "LOCAL_AGENT",
                      "user_id": "<user_id>"
                    },
                    {
                      "name": "Repo Vault",
                      "project_id": "<project_id>",
                      "source_type": "GIT",
                      "source_url": "https://github.com/org/repo.git",
                      "user_id": "<user_id>"
                    }
                  ],
                  "oneOf": [
                    {
                      "properties": {
                        "source_type": {
                          "enum": [
                            "LOCAL_AGENT",
                            "AGENT"
                          ]
                        }
                      },
                      "required": [
                        "project_id",
                        "user_id",
                        "name",
                        "source_type"
                      ]
                    },
                    {
                      "properties": {
                        "source_type": {
                          "enum": [
                            "GIT"
                          ]
                        }
                      },
                      "required": [
                        "project_id",
                        "user_id",
                        "name",
                        "source_type",
                        "source_url",
                        "username",
                        "password"
                      ]
                    },
                    {
                      "properties": {
                        "source_type": {
                          "enum": [
                            "FILE_ARCHIVE"
                          ]
                        }
                      },
                      "required": [
                        "project_id",
                        "user_id",
                        "name",
                        "source_type",
                        "source_url"
                      ]
                    }
                  ],
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "branch": {
                      "description": "Optional source branch name (GIT only).",
                      "examples": [
                        "main"
                      ],
                      "type": "string"
                    },
                    "description": {
                      "description": "Optional vault description.",
                      "type": "string"
                    },
                    "name": {
                      "description": "Vault name.",
                      "examples": [
                        "Customer Upload"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "password": {
                      "description": "Source password or personal access token (required for private GIT repos; must have read access).",
                      "type": "string"
                    },
                    "project_id": {
                      "description": "Project id (from create_project).",
                      "minLength": 1,
                      "type": "string"
                    },
                    "source_type": {
                      "default": "LOCAL_AGENT",
                      "description": "Code source type. ALWAYS use LOCAL_AGENT (or AGENT) unless the user explicitly requests remote analysis or Docker is unavailable. LOCAL_AGENT runs locally via Docker; source code stays on the machine and only anonymous analysis data is uploaded. A Git repo is only required for Git-based insights (git-history, code-contributors). If you need those, ensure the mounted path is a standard Git repo containing a .git directory (not a .git file pointing to a worktree). Use GIT/FILE_ARCHIVE only when the user provides a reachable URL plus read credentials (username/password or token). Do NOT attempt GIT without credentials.",
                      "enum": [
                        "GIT",
                        "FILE_ARCHIVE",
                        "LOCAL_AGENT",
                        "AGENT"
                      ],
                      "examples": [
                        "LOCAL_AGENT"
                      ],
                      "minLength": 1,
                      "type": "string"
                    },
                    "source_url": {
                      "description": "Repository or archive URL (required for GIT/FILE_ARCHIVE; ignored for LOCAL_AGENT/AGENT). Must be reachable by the platform. FILE_ARCHIVE accepts .zip/.tar URLs and supported Google Drive/Dropbox links.",
                      "examples": [
                        "https://github.com/org/repo.git"
                      ],
                      "format": "uri",
                      "minLength": 1,
                      "type": "string"
                    },
                    "user_id": {
                      "description": "User id (from create_account or get_account).",
                      "minLength": 1,
                      "type": "string"
                    },
                    "username": {
                      "description": "Source username (required for private GIT repos; must have read access).",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "create-code-vault"
              },
              {
                "description": "Creates a new analysis version for an existing code vault using its existing source settings. For LOCAL_AGENT, the response includes next_steps.commands and the local agent must be run again. For GIT/FILE_ARCHIVE, the re-analysis of the original code source is queued automatically. Note: summary/results/report tools always return the latest version only, so reanalysis replaces access to prior version data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "author": {
                      "description": "Optional author name override.",
                      "type": "string"
                    },
                    "comment": {
                      "description": "Optional version comment.",
                      "type": "string"
                    },
                    "user_id": {
                      "description": "Optional user id for attribution (from create_account or get_account).",
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "reanalyze-code-vault"
              },
              {
                "description": "Deletes a code vault and related analysis data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "delete-code-vault"
              },
              {
                "description": "Returns the latest version/status info for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get-code-vault-summary"
              },
              {
                "description": "Returns full facet results and AI insights for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. Facet meanings are documented in resources://docs/facets; AI Quotient is a code-quality metric (not AI-generated code). AI insights can take a few minutes after analysis completes; if ai_insights is empty, poll again and check ai_insights_status per facet (ready/processing/not_available). This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get-code-vault-results"
              },
              {
                "description": "Returns report URLs (snapshot/comparison) for a vault. Completion rules: if version is 1.0.0, snapshot indicates completion and comparison is null; for versions above 1.0.0, comparison indicates completion. If not ready, retry with exponential backoff (5s, 10s, 20s, 40s, max 60s). This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "vault_id": {
                      "description": "Vault id (from create-code-vault or list_vaults).",
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "vault_id"
                  ],
                  "type": "object"
                },
                "name": "get-code-vault-reports"
              },
              {
                "description": "Returns the team owner account information. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "description": "No arguments required.",
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "get_account"
              },
              {
                "description": "Deletes the team account plus all projects and vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "confirm": {
                      "description": "Set true to confirm deletion.",
                      "enum": [
                        true
                      ],
                      "type": "boolean"
                    }
                  },
                  "required": [
                    "confirm"
                  ],
                  "type": "object"
                },
                "name": "delete_account"
              },
              {
                "description": "Issues a fresh integrator API key. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
                "inputSchema": {
                  "additionalProperties": false,
                  "properties": {
                    "api_key": {
                      "description": "Optional API key for clients that cannot set X-API-Key headers.",
                      "examples": [
                        "tcr_ai_xxxxxxxxxxxx"
                      ],
                      "type": "string"
                    },
                    "integrator_id": {
                      "description": "Optional integrator identifier (defaults to existing integrator or 'default').",
                      "examples": [
                        "desktop-agent"
                      ],
                      "type": "string"
                    },
                    "integrator_name": {
                      "description": "Optional integrator display name.",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "rotate_api_key"
              }
            ]
          }
        },
        "bad_protocol_status_code": 200,
        "delete_error": null,
        "delete_status_code": null,
        "expired_session_error": null,
        "expired_session_status_code": null,
        "issues": [
          "missing_session_id",
          "missing_protocol_header",
          "bad_protocol_not_rejected"
        ],
        "last_event_id_visible": false,
        "protocol_header_present": false,
        "requested_protocol_version": "2024-11-05",
        "session_id_present": false,
        "transport": "streamable-http"
      },
      "latency_ms": 11.86,
      "status": "error"
    },
    "utility_coverage_probe": {
      "details": {
        "completions": {
          "advertised": false,
          "live_probe": "not_executed",
          "sample_target": {
            "type": "resource",
            "uri": "resources://docs/index"
          }
        },
        "initialize_capability_keys": [
          "prompts",
          "resources",
          "tools"
        ],
        "pagination": {
          "metadata_signal": false,
          "next_cursor_methods": [],
          "supported": false
        },
        "tasks": {
          "advertised": false,
          "http_status": 200,
          "probe_status": "missing"
        }
      },
      "latency_ms": 13.39,
      "status": "missing"
    }
  },
  "failures": {
    "oauth_authorization_server": {
      "reason": "no_authorization_server"
    },
    "oauth_protected_resource": {
      "error": "Client error '404 Not Found' for url 'https://integrator.app.thecoderegistry.com/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://integrator.app.thecoderegistry.com/.well-known/oauth-protected-resource"
    },
    "openid_configuration": {
      "reason": "no_authorization_server"
    },
    "server_card": {
      "error": "Client error '404 Not Found' for url 'https://integrator.app.thecoderegistry.com/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://integrator.app.thecoderegistry.com/.well-known/mcp/server-card.json"
    },
    "transport_compliance_probe": {
      "bad_protocol_error": null,
      "bad_protocol_headers": {
        "content-type": "application/json"
      },
      "bad_protocol_payload": {
        "id": 410,
        "jsonrpc": "2.0",
        "result": {
          "tools": [
            {
              "description": "Creates a new Code Registry account and returns API credentials. Cold starts can cause the first request to time out; retry with backoff. No API key required.",
              "inputSchema": {
                "additionalProperties": false,
                "description": "Creates a new account and returns an API key.",
                "examples": [
                  {
                    "email": "user@example.com",
                    "integrator_id": "desktop-agent",
                    "name": "User Name",
                    "team_name": "Example Org"
                  }
                ],
                "properties": {
                  "email": {
                    "description": "Account owner's email.",
                    "examples": [
                      "user@example.com"
                    ],
                    "format": "email",
                    "minLength": 1,
                    "type": "string"
                  },
                  "integrator_id": {
                    "description": "Optional integrator identifier (used for API key scoping).",
                    "examples": [
                      "desktop-agent"
                    ],
                    "type": "string"
                  },
                  "integrator_name": {
                    "description": "Optional integrator display name.",
                    "examples": [
                      "Desktop Agent"
                    ],
                    "type": "string"
                  },
                  "name": {
                    "description": "Account owner's name.",
                    "examples": [
                      "User Name"
                    ],
                    "minLength": 1,
                    "type": "string"
                  },
                  "team_name": {
                    "description": "Team or company name.",
                    "examples": [
                      "Example Org",
                      "John's Team"
                    ],
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "email",
                  "name",
                  "team_name"
                ],
                "type": "object"
              },
              "name": "create_account"
            },
            {
              "description": "Lists all projects for the authenticated team. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "description": "No arguments required.",
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  }
                },
                "type": "object"
              },
              "name": "list_projects"
            },
            {
              "description": "Returns a specific project by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "project_id": {
                    "description": "Project id.",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "project_id"
                ],
                "type": "object"
              },
              "name": "get_project"
            },
            {
              "description": "Creates a project for a team user. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "description": {
                    "description": "Optional project description.",
                    "examples": [
                      "Optional text"
                    ],
                    "type": "string"
                  },
                  "name": {
                    "description": "Project name.",
                    "examples": [
                      "New AI Project"
                    ],
                    "minLength": 1,
                    "type": "string"
                  },
                  "user_id": {
                    "description": "User id (from create_account or get_account).",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "user_id",
                  "name"
                ],
                "type": "object"
              },
              "name": "create_project"
            },
            {
              "description": "Deletes a project and its vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "project_id": {
                    "description": "Project id.",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "project_id"
                ],
                "type": "object"
              },
              "name": "delete_project"
            },
            {
              "description": "Lists vaults within a project. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "project_id": {
                    "description": "Project id.",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "project_id"
                ],
                "type": "object"
              },
              "name": "list_vaults"
            },
            {
              "description": "Returns a specific vault by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "vault_id": {
                    "description": "Vault id.",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "vault_id"
                ],
                "type": "object"
              },
              "name": "get_vault"
            },
            {
              "description": "Creates a code vault and queues the initial analysis. IMPORTANT: Always use LOCAL_AGENT (or AGENT) unless the user explicitly requests remote analysis or Docker is unavailable. LOCAL_AGENT runs locally via Docker; source code stays on the machine and only anonymous analysis data is uploaded. A Git repo is only required if you want Git-based insights (git-history, code-contributors). If Git insights are needed, the mounted path must be a standard Git repo containing a .git directory (not a .git file pointing to a worktree). The response includes next_steps.commands that must be executed to start the local agent. Use GIT/FILE_ARCHIVE only when the user provides a reachable URL plus read credentials (username/password or token). Cold starts can cause the first request to time out; retry with backoff. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "description": "Creates a code vault and queues the initial analysis.",
                "examples": [
                  {
                    "name": "Local Agent Vault",
                    "project_id": "<project_id>",
                    "source_type": "LOCAL_AGENT",
                    "user_id": "<user_id>"
                  },
                  {
                    "name": "Repo Vault",
                    "project_id": "<project_id>",
                    "source_type": "GIT",
                    "source_url": "https://github.com/org/repo.git",
                    "user_id": "<user_id>"
                  }
                ],
                "oneOf": [
                  {
                    "properties": {
                      "source_type": {
                        "enum": [
                          "LOCAL_AGENT",
                          "AGENT"
                        ]
                      }
                    },
                    "required": [
                      "project_id",
                      "user_id",
                      "name",
                      "source_type"
                    ]
                  },
                  {
                    "properties": {
                      "source_type": {
                        "enum": [
                          "GIT"
                        ]
                      }
                    },
                    "required": [
                      "project_id",
                      "user_id",
                      "name",
                      "source_type",
                      "source_url",
                      "username",
                      "password"
                    ]
                  },
                  {
                    "properties": {
                      "source_type": {
                        "enum": [
                          "FILE_ARCHIVE"
                        ]
                      }
                    },
                    "required": [
                      "project_id",
                      "user_id",
                      "name",
                      "source_type",
                      "source_url"
                    ]
                  }
                ],
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "branch": {
                    "description": "Optional source branch name (GIT only).",
                    "examples": [
                      "main"
                    ],
                    "type": "string"
                  },
                  "description": {
                    "description": "Optional vault description.",
                    "type": "string"
                  },
                  "name": {
                    "description": "Vault name.",
                    "examples": [
                      "Customer Upload"
                    ],
                    "minLength": 1,
                    "type": "string"
                  },
                  "password": {
                    "description": "Source password or personal access token (required for private GIT repos; must have read access).",
                    "type": "string"
                  },
                  "project_id": {
                    "description": "Project id (from create_project).",
                    "minLength": 1,
                    "type": "string"
                  },
                  "source_type": {
                    "default": "LOCAL_AGENT",
                    "description": "Code source type. ALWAYS use LOCAL_AGENT (or AGENT) unless the user explicitly requests remote analysis or Docker is unavailable. LOCAL_AGENT runs locally via Docker; source code stays on the machine and only anonymous analysis data is uploaded. A Git repo is only required for Git-based insights (git-history, code-contributors). If you need those, ensure the mounted path is a standard Git repo containing a .git directory (not a .git file pointing to a worktree). Use GIT/FILE_ARCHIVE only when the user provides a reachable URL plus read credentials (username/password or token). Do NOT attempt GIT without credentials.",
                    "enum": [
                      "GIT",
                      "FILE_ARCHIVE",
                      "LOCAL_AGENT",
                      "AGENT"
                    ],
                    "examples": [
                      "LOCAL_AGENT"
                    ],
                    "minLength": 1,
                    "type": "string"
                  },
                  "source_url": {
                    "description": "Repository or archive URL (required for GIT/FILE_ARCHIVE; ignored for LOCAL_AGENT/AGENT). Must be reachable by the platform. FILE_ARCHIVE accepts .zip/.tar URLs and supported Google Drive/Dropbox links.",
                    "examples": [
                      "https://github.com/org/repo.git"
                    ],
                    "format": "uri",
                    "minLength": 1,
                    "type": "string"
                  },
                  "user_id": {
                    "description": "User id (from create_account or get_account).",
                    "minLength": 1,
                    "type": "string"
                  },
                  "username": {
                    "description": "Source username (required for private GIT repos; must have read access).",
                    "type": "string"
                  }
                },
                "type": "object"
              },
              "name": "create-code-vault"
            },
            {
              "description": "Creates a new analysis version for an existing code vault using its existing source settings. For LOCAL_AGENT, the response includes next_steps.commands and the local agent must be run again. For GIT/FILE_ARCHIVE, the re-analysis of the original code source is queued automatically. Note: summary/results/report tools always return the latest version only, so reanalysis replaces access to prior version data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "author": {
                    "description": "Optional author name override.",
                    "type": "string"
                  },
                  "comment": {
                    "description": "Optional version comment.",
                    "type": "string"
                  },
                  "user_id": {
                    "description": "Optional user id for attribution (from create_account or get_account).",
                    "type": "string"
                  },
                  "vault_id": {
                    "description": "Vault id (from create-code-vault or list_vaults).",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "vault_id"
                ],
                "type": "object"
              },
              "name": "reanalyze-code-vault"
            },
            {
              "description": "Deletes a code vault and related analysis data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "vault_id": {
                    "description": "Vault id (from create-code-vault or list_vaults).",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "vault_id"
                ],
                "type": "object"
              },
              "name": "delete-code-vault"
            },
            {
              "description": "Returns the latest version/status info for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "vault_id": {
                    "description": "Vault id (from create-code-vault or list_vaults).",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "vault_id"
                ],
                "type": "object"
              },
              "name": "get-code-vault-summary"
            },
            {
              "description": "Returns full facet results and AI insights for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. Facet meanings are documented in resources://docs/facets; AI Quotient is a code-quality metric (not AI-generated code). AI insights can take a few minutes after analysis completes; if ai_insights is empty, poll again and check ai_insights_status per facet (ready/processing/not_available). This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "vault_id": {
                    "description": "Vault id (from create-code-vault or list_vaults).",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "vault_id"
                ],
                "type": "object"
              },
              "name": "get-code-vault-results"
            },
            {
              "description": "Returns report URLs (snapshot/comparison) for a vault. Completion rules: if version is 1.0.0, snapshot indicates completion and comparison is null; for versions above 1.0.0, comparison indicates completion. If not ready, retry with exponential backoff (5s, 10s, 20s, 40s, max 60s). This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible here. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "vault_id": {
                    "description": "Vault id (from create-code-vault or list_vaults).",
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "vault_id"
                ],
                "type": "object"
              },
              "name": "get-code-vault-reports"
            },
            {
              "description": "Returns the team owner account information. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "description": "No arguments required.",
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  }
                },
                "type": "object"
              },
              "name": "get_account"
            },
            {
              "description": "Deletes the team account plus all projects and vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "confirm": {
                    "description": "Set true to confirm deletion.",
                    "enum": [
                      true
                    ],
                    "type": "boolean"
                  }
                },
                "required": [
                  "confirm"
                ],
                "type": "object"
              },
              "name": "delete_account"
            },
            {
              "description": "Issues a fresh integrator API key. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.",
              "inputSchema": {
                "additionalProperties": false,
                "properties": {
                  "api_key": {
                    "description": "Optional API key for clients that cannot set X-API-Key headers.",
                    "examples": [
                      "tcr_ai_xxxxxxxxxxxx"
                    ],
                    "type": "string"
                  },
                  "integrator_id": {
                    "description": "Optional integrator identifier (defaults to existing integrator or 'default').",
                    "examples": [
                      "desktop-agent"
                    ],
                    "type": "string"
                  },
                  "integrator_name": {
                    "description": "Optional integrator display name.",
                    "type": "string"
                  }
                },
                "type": "object"
              },
              "name": "rotate_api_key"
            }
          ]
        }
      },
      "bad_protocol_status_code": 200,
      "delete_error": null,
      "delete_status_code": null,
      "expired_session_error": null,
      "expired_session_status_code": null,
      "issues": [
        "missing_session_id",
        "missing_protocol_header",
        "bad_protocol_not_rejected"
      ],
      "last_event_id_visible": false,
      "protocol_header_present": false,
      "requested_protocol_version": "2024-11-05",
      "session_id_present": false,
      "transport": "streamable-http"
    }
  },
  "remote_url": "https://integrator.app.thecoderegistry.com/api/ai/router",
  "server_card_payload": null,
  "server_identifier": "io.github.hellosg/coderegistry"
}

Known versions

Validation history

7 day score delta
+0.0
30 day score delta
+0.0
Recent healthy ratio
100%
Freshness
603.7h
TimestampStatusScoreLatencyTools
Apr 08, 2026 11:29:11 PM UTC Healthy 76.5 313.8 ms 16
Apr 07, 2026 11:28:27 PM UTC Healthy 76.5 995.6 ms 16
Apr 06, 2026 11:28:14 PM UTC Healthy 76.5 466.5 ms 16
Apr 05, 2026 11:27:24 PM UTC Healthy 76.5 343.0 ms 16
Apr 04, 2026 11:25:36 PM UTC Healthy 76.5 307.6 ms 16
Apr 03, 2026 11:24:15 PM UTC Healthy 76.5 317.8 ms 16
Apr 02, 2026 11:23:03 PM UTC Healthy 76.5 1110.1 ms 16
Apr 01, 2026 11:21:10 PM UTC Healthy 76.5 419.6 ms 16

Validation timeline

ValidatedSummaryScoreProtocolAuth modeToolsHigh-risk toolsChanges
Apr 08, 2026 11:29:11 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Apr 07, 2026 11:28:27 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Apr 06, 2026 11:28:14 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Apr 05, 2026 11:27:24 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Apr 04, 2026 11:25:36 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Apr 03, 2026 11:24:15 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Apr 02, 2026 11:23:03 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Apr 01, 2026 11:21:10 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Mar 31, 2026 11:18:24 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Mar 30, 2026 11:16:34 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Mar 29, 2026 11:12:56 PM UTC Healthy 76.5 2024-11-05 public 16 10 none
Mar 28, 2026 08:42:56 PM UTC Healthy 76.5 2024-11-05 public 16 10 none

Recent validation runs

StartedStatusSummaryLatencyChecks
Apr 08, 2026 11:29:10 PM UTC Completed Healthy 313.8 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Apr 07, 2026 11:28:26 PM UTC Completed Healthy 995.6 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Apr 06, 2026 11:28:14 PM UTC Completed Healthy 466.5 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Apr 05, 2026 11:27:24 PM UTC Completed Healthy 343.0 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Apr 04, 2026 11:25:35 PM UTC Completed Healthy 307.6 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Apr 03, 2026 11:24:15 PM UTC Completed Healthy 317.8 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Apr 02, 2026 11:23:02 PM UTC Completed Healthy 1110.1 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Apr 01, 2026 11:21:10 PM UTC Completed Healthy 419.6 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Mar 31, 2026 11:18:24 PM UTC Completed Healthy 415.6 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe
Mar 30, 2026 11:16:33 PM UTC Completed Healthy 554.7 ms action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe