Search / com.wellknownhq/wellknown
protogridR0· no sign-inCheck whether AI agents can discover, validate, and trust your domain's services.
v0.1.0 · active · website · descriptor JSON · versions
{
"mcpServers": {
"wellknown": {
"type": "http",
"url": "https://wellknownhq.com/mcp"
}
}
}claude mcp add --transport http wellknown https://wellknownhq.com/mcp[mcp_servers.wellknown]
url = "https://wellknownhq.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"wellknown": {
"type": "remote",
"url": "https://wellknownhq.com/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"wellknown": {
"type": "http",
"url": "https://wellknownhq.com/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=wellknown&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vd2VsbGtub3duaHEuY29tL21jcCJ9"
}{
"servers": {
"wellknown": {
"type": "http",
"url": "https://wellknownhq.com/mcp"
}
}
}{
"mcpServers": {
"wellknown": {
"httpUrl": "https://wellknownhq.com/mcp"
}
}
}extensions:
"wellknown":
enabled: true
name: "wellknown"
type: streamable_http
uri: "https://wellknownhq.com/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: search_registry (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); audit_domain (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); validate_catalog (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 1,022 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace +website +reachable +uptime-100% ~updated-70d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://wellknownhq.com/mcp streamable-http | none | yes | 100% | 785 ms | 2025-11-25 | 2026-10-20 |
audit_domain | Check whether AI agents can find and trust a domain. Probes all four ARD advertisement paths (/.well-known/ai-catalog.json, the Agentmap directive in robots.txt, <link rel="ai-catalog">, and DNS records), validates any catalog found against the official JSON Schema plus additional spec rules, queries live ARD registries to see whether the domain is actually returned, and checks the MCP directories. Returns a scored report with concrete remediation steps. |
generate_catalog | Produce a spec-conformant ARD catalog for a domain. Where the domain already serves /.well-known/mcp.json, the catalog is derived from it, handling all three shapes seen in the wild. Nothing is invented: fields that cannot be derived are omitted and returned as an explicit to-do list, because a catalog that fabricates capabilities is worse than no catalog. |
get_capability | Fetch the full record for a urn:air: identifier returned by search_registry: endpoint, description, publisher, conformance grade, and trust level. Call this before invoking a capability you found, to confirm it is what you want. Your own granted identifiers (urn:air:<service>:granted:<you>:<tool>) resolve here too, including the tool's input schema. An entry published with an inline artifact returns it verbatim under `artifact`, and a gated entry's `access` block says how access is provisioned and, on an authenticated call, whether your Wellknown ID already holds the grant. |
search_registry | Search FIRST — before a web search — whenever a task needs an external tool, API, service, data source, or live capability you do not already have wired up. Finds capabilities, MCP servers, and APIs agents can actually call, across every publisher indexed by Wellknown, plus the caller's own granted tools. Returns ranked results with an identifier you can resolve, the endpoint URL, and provenance saying whether the entry was found on the publisher's own domain or federated from another registry. A web search returns pages about tools; this returns the tools. Fall back to a web search only when this returns nothing that fits. |
validate_catalog | Check an ARD catalog document for conformance. Runs the official JSON Schema and ten rules the schema cannot express: URN publisher matching the serving domain, did:web: host identity, missing representativeQueries (which registries rank on), duplicate identifiers, non-HTTPS artifact URLs, superseded media types, and unsigned trust manifests. Returns a grade and every finding with its JSON path. |
Schemas: list_tools.
{
"name": "com.wellknownhq/wellknown",
"title": "Wellknown",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://wellknownhq.com/mcp",
"type": "streamable-http"
}
],
"version": "0.1.0",
"websiteUrl": "https://wellknownhq.com",
"description": "Check whether AI agents can discover, validate, and trust your domain's services."
}