Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "fedlin-mcp-server": {
      "type": "http",
      "url": "https://mcp.fedlin.com/mcp"
    }
  }
}

claude mcp add --transport http fedlin-mcp-server https://mcp.fedlin.com/mcp

[mcp_servers.fedlin-mcp-server]
url = "https://mcp.fedlin.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "fedlin-mcp-server": {
      "type": "remote",
      "url": "https://mcp.fedlin.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "fedlin-mcp-server": {
      "type": "http",
      "url": "https://mcp.fedlin.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=fedlin-mcp-server&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLmZlZGxpbi5jb20vbWNwIn0%3D"
}

{
  "servers": {
    "fedlin-mcp-server": {
      "type": "http",
      "url": "https://mcp.fedlin.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "fedlin-mcp-server": {
      "httpUrl": "https://mcp.fedlin.com/mcp"
    }
  }
}

extensions:
  "fedlin-mcp-server":
    enabled: true
    name: "fedlin-mcp-server"
    type: streamable_http
    uri: "https://mcp.fedlin.com/mcp"
    timeout: 300

Quality 83 / 100good

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene71 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_agent_exposure_scanner (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); scan_security_headers (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); scan_post_quantum (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 414 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changes1 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

4 tools, about 414 tokens to load them all · tool set c7ba04258fb2 · tools last changed 2026-10-07 · checked 2026-10-20 12:13 UTC

Tool changes

2026-10-07get_agent_exposure_scanneradded
Get the free FEDLIN Agent Exposure Scanner: a local, read-only tool that finds where AI agents on your machine can reach sensitive data (health and personal identifiers) and secrets. Returns install and run instructions. The scan runs entirely on your machine; nothing sensitive leaves it.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 95 / 100

provenance85

liveness99

freshness100

hygiene100

+repository +dns-namespace +website +reachable +uptime-97% +updated-13d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.fedlin.com/mcp` streamable-http	none	no (1 failures)	96%	328 ms	2026-07-28	2026-10-20

Tools (4)

`get_agent_exposure_scanner`	Get the free FEDLIN Agent Exposure Scanner: a local, read-only tool that finds where AI agents on your machine can reach sensitive data (health and personal identifiers) and secrets. Returns install and run instructions. The scan runs entirely on your machine; nothing sensitive leaves it.
`scan_domain_trust`	Audit a domain's DNS, TLS, certificates, and email authentication (SPF/DKIM/DMARC/DNSSEC).
`scan_post_quantum`	Check whether a domain's TLS is using post-quantum (hybrid ML-KEM) key exchange.
`scan_security_headers`	Grade a domain's HTTP security headers (HSTS, CSP, and more).

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.fedlin/fedlin-mcp-server",
  "title": "FEDLIN Scanners",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.fedlin.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.1.0",
  "repository": {
    "url": "https://github.com/fedlinllc/fedlin-mcp-server",
    "source": "github"
  },
  "websiteUrl": "https://fedlin.com/scan/",
  "description": "Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP."
}