# FEDLIN Scanners

> Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.

- name: com.fedlin/fedlin-mcp-server
- version: 1.1.0
- connection class: unknown (unknown)
- trust: 74/100
- quality: 83/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.fedlin%2Ffedlin-mcp-server
- tools: https://api.protogrid.dev/v1/servers/com.fedlin%2Ffedlin-mcp-server/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "fedlin-mcp-server": {
      "type": "http",
      "url": "https://mcp.fedlin.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 28
- freshness: 100
- provenance: 85
- drivers: +repository +dns-namespace +website -unreachable(1 failures) +updated-13d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 83/100 (good)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_agent_exposure_scanner (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); scan_security_headers (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); scan_post_quantum (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 414 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: 1 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 4, about 414 tokens to load them all
- tool set hash: c7ba04258fb2f23190bfe090eb509ccc
- tools last changed: 2026-10-07T18:38:03.308Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.fedlin/fedlin-mcp-server.svg)](https://protogrid.dev/servers/com.fedlin/fedlin-mcp-server)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-07 `get_agent_exposure_scanner` added
  - Get the free FEDLIN Agent Exposure Scanner: a local, read-only tool that finds where AI agents on your machine can reach sensitive data (health and personal identifiers) and secrets. Returns install and run instructions. The scan runs entirely on your machine; nothing sensitive leaves it.

Full history: https://api.protogrid.dev/v1/servers/com.fedlin%2Ffedlin-mcp-server/changes

## Remotes

- https://mcp.fedlin.com/mcp (streamable-http, auth none, reachable false, uptime30d 0.9576271)

## Packages

_none_

## Tools (4)

- `get_agent_exposure_scanner`: Get the free FEDLIN Agent Exposure Scanner: a local, read-only tool that finds where AI agents on your machine can reach sensitive data (health and personal identifiers) and secrets. Returns install and run instructions. The scan runs entirely on your machine; nothing sensitive leaves it.
- `scan_domain_trust`: Audit a domain's DNS, TLS, certificates, and email authentication (SPF/DKIM/DMARC/DNSSEC).
- `scan_post_quantum`: Check whether a domain's TLS is using post-quantum (hybrid ML-KEM) key exchange.
- `scan_security_headers`: Grade a domain's HTTP security headers (HSTS, CSP, and more).