Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "autopia": {
      "type": "http",
      "url": "https://autopia-mcp.onrender.com/mcp",
      "headers": {
        "Authorization": "Bearer ${AUTOPIA_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http autopia https://autopia-mcp.onrender.com/mcp --header "Authorization: Bearer ${AUTOPIA_TOKEN}"

[mcp_servers.autopia]
url = "https://autopia-mcp.onrender.com/mcp"
bearer_token_env_var = "AUTOPIA_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "autopia": {
      "type": "remote",
      "url": "https://autopia-mcp.onrender.com/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:AUTOPIA_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "autopia": {
      "type": "http",
      "url": "https://autopia-mcp.onrender.com/mcp",
      "headers": {
        "Authorization": "Bearer ${AUTOPIA_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=autopia&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXV0b3BpYS1tY3Aub25yZW5kZXIuY29tL21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke0FVVE9QSUFfVE9LRU59In19"
}

{
  "servers": {
    "autopia": {
      "type": "http",
      "url": "https://autopia-mcp.onrender.com/mcp",
      "headers": {
        "Authorization": "Bearer ${AUTOPIA_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "autopia": {
      "httpUrl": "https://autopia-mcp.onrender.com/mcp",
      "headers": {
        "Authorization": "Bearer ${AUTOPIA_TOKEN}"
      }
    }
  }
}

extensions:
  "autopia":
    enabled: true
    name: "autopia"
    type: streamable_http
    uri: "https://autopia-mcp.onrender.com/mcp"
    headers:
      "Authorization": "Bearer ${AUTOPIA_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${AUTOPIA_TOKEN}. The registry never accepts secret values.

Quality 75 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,675 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes9 tool changes in 30 days
fail
stability.rug_pull3 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

9 tools, about 1,675 tokens to load them all · tool set 22fba4ab2cbf · tools last changed 2026-10-13 · checked 2026-10-20 02:01 UTC

Tool changes

2026-10-13get_request_statuschangeddescription, annotations
before
Status of a target request: pending | running | done | failed, with the run id and summary once processed.
after · 94% of words in common
Status of a target request (pending, running, done or failed), with the run id and summary once processed.
2026-10-13request_targetchangeddescription, annotations
before
The API you are about to call is NOT covered (not in list_tools)? Ask the compendium to test it. Pass a target object: { name, spec_url (OpenAPI 3 document), category?, include_paths?, baseline? (valid values for required params per path), optional_values?, server? }. Scope: public read-only APIs with no credentials (no headers accepted). The request is validated now (spec fetched and parsed, battery planned) and processed rules-only on the worker's next pass; use get_request_status with the returned id. Requires a per-user key. Quota: 3 requests per key per day.
after · 59% of words in common
Queues a public, read-only, credential-free API for probing, from a target object { name, spec_url (OpenAPI 3 document), category?, include_paths?, baseline? (valid values for required params per path), optional_values?, server? }. The spec is fetched and parsed and the battery planned immediately; probing runs rules-only on the worker's next pass. Requires a per-user key; quota 3 requests per key per day. Returns a request id for get_request_status.
2026-10-13get_version_diffchangeddescription, annotations
before
What changed in verified BEHAVIOR between two spec versions of an API (changed / added / removed claims), as opposed to what changed in the spec text. Version ids come from list_versions.
after · 77% of words in common
What changed in verified behavior between two spec versions of an API (changed, added and removed claims), as opposed to what changed in the spec text.
2026-10-13get_tool_docschangeddescription, input schema, annotationsmeaning changed
before
READ THIS BEFORE YOUR FIRST CALL to an API the compendium covers. Pass the host or URL you are about to call (api.github.com, https://registry.npmjs.org/-/v1/search) or the tool name. Returns a Markdown behavior sheet built only from verified claims: where the API contradicts its spec first, then sibling differences, undocumented rules, and per-endpoint behavior (error shapes, pagination, validation, auth). Each line cites the trial ids that back it. One read; no need to repeat it in the same session. brief=true returns only spec divergences, undocumented rules, and auth / pagination / error behavior (about a third of the size). Pass the request path (or a full URL as tool) to get ONLY the endpoint you are about to call plus a one-line index of the others; descend to another by passing its path.
after · 46% of words in common
The verified behavior sheet for an API: Markdown built only from verified claims, with spec contradictions first, then sibling differences, undocumented rules, and per-endpoint behavior (error shapes, pagination, validation, auth), every line citing trial ids. Accepts a tool name, a host, or the full URL about to be called; a URL or path scopes the sheet to that endpoint plus a one-line index of the others. Brief by default (what would change the request); full=true adds per-parameter validation, response shapes and all evidence ids.
2026-10-13search_claimschangeddescription, annotations
before
Call this when an API call FAILED or behaved unexpectedly: an unexpected 4xx/5xx, a parameter that seems ignored, an odd page, wrong filter results. Full-text search over verified claims with the host and the symptom, e.g. "github per_page 500", "npm search size 0", "is latitude required on /v1/forecast". Optionally restrict to one API (name, host or URL). Compact evidence unless verbose=true.
after · 81% of words in common
Full-text search over verified claims by host and symptom, e.g. "github per_page 500", "npm search size 0", "is latitude required on /v1/forecast": the lookup for an unexpected 4xx/5xx, a parameter that seems ignored, an odd page, or wrong filter results. Optionally restricted to one API (name, host or URL). Compact evidence unless verbose=true.
2026-10-13get_divergenceschangeddescription, annotations
before
Where the live API CONTRADICTS its own OpenAPI spec: documented limits not enforced, types not validated, required params not required, enums that accept other values. Read before trusting a spec-generated client or SDK for this API. Compact evidence; verbose=true adds response previews.
after · 63% of words in common
Where the live API contradicts its own OpenAPI spec: documented limits not enforced, types not validated, required parameters not required, enums accepting other values. Compact evidence; verbose=true adds response previews.
2026-10-13get_tool_knowledgechangeddescription, annotations
before
Every VERIFIED claim about an API as structured records (latest version by default), paginated, spec divergences flagged, each with compact evidence (trial id, probe, status, request line). Use when you need to filter by kind or process claims programmatically; for the one-read summary before calling the API use get_tool_docs. verbose=true adds response previews.
after · 61% of words in common
Every verified claim about an API as structured records (latest version by default): paginated, filterable by kind, spec divergences flagged, each with compact evidence (trial id, probe, status, request line). verbose=true adds response previews.
2026-10-13list_versionschangeddescription, annotationsmeaning changed
before
Spec versions of one API, newest first, each fingerprinted by its spec hash. Use with get_version_diff when a spec changed and you want to know what changed in BEHAVIOR.
after · 42% of words in common
The spec versions recorded for one API, newest first, each fingerprinted by its spec hash. The ids identify versions for get_version_diff.
2026-10-13list_toolschangeddescription, annotationsmeaning changed
before
Which APIs the compendium covers, each with the HOSTS its trials hit (match the URL you are about to call), trust tier, version count and verified-claim / divergence counts. Call once per session; then get_tool_docs for the host you are about to call.
after · 43% of words in common
The APIs the compendium covers: each with the hosts its trials hit, trust tier, version count, and counts of verified claims and spec divergences.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-7d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://autopia-mcp.onrender.com/mcp` streamable-http	none	yes	100%	260 ms	2025-11-25	2026-10-19

Tools (9)

`get_divergences`read-only	Where the live API contradicts its own OpenAPI spec: documented limits not enforced, types not validated, required parameters not required, enums accepting other values. Compact evidence; verbose=true adds response previews.
`get_request_status`read-only	Status of a target request (pending, running, done or failed), with the run id and summary once processed.
`get_tool_docs`read-only	The verified behavior sheet for an API: Markdown built only from verified claims, with spec contradictions first, then sibling differences, undocumented rules, and per-endpoint behavior (error shapes, pagination, validation, auth), every line citing trial ids. Accepts a tool name, a host, or the full URL about to be called; a URL or path scopes the sheet to that endpoint plus a one-line index of the others. Brief by default (what would change the request); full=true adds per-parameter validation, response shapes and all evidence ids.
`get_tool_knowledge`read-only	Every verified claim about an API as structured records (latest version by default): paginated, filterable by kind, spec divergences flagged, each with compact evidence (trial id, probe, status, request line). verbose=true adds response previews.
`get_version_diff`read-only	What changed in verified behavior between two spec versions of an API (changed, added and removed claims), as opposed to what changed in the spec text.
`list_tools`read-only	The APIs the compendium covers: each with the hosts its trials hit, trust tier, version count, and counts of verified claims and spec divergences.
`list_versions`read-only	The spec versions recorded for one API, newest first, each fingerprinted by its spec hash. The ids identify versions for get_version_diff.
`request_target`	Queues a public, read-only, credential-free API for probing, from a target object { name, spec_url (OpenAPI 3 document), category?, include_paths?, baseline? (valid values for required params per path), optional_values?, server? }. The spec is fetched and parsed and the battery planned immediately; probing runs rules-only on the worker's next pass. Requires a per-user key; quota 3 requests per key per day. Returns a request id for get_request_status.
`search_claims`read-only	Full-text search over verified claims by host and symptom, e.g. "github per_page 500", "npm search size 0", "is latitude required on /v1/forecast": the lookup for an unexpected 4xx/5xx, a parameter that seems ignored, an odd page, or wrong filter results. Optionally restricted to one API (name, host or URL). Compact evidence unless verbose=true.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.MaydayTrey/autopia",
  "title": "Autopia",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://autopia-mcp.onrender.com/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Optional. 'Bearer <key>' raises the per-user quota and enables request_target; reads work anonymously without it."
        }
      ]
    }
  ],
  "version": "0.3.1",
  "repository": {
    "url": "https://github.com/MaydayTrey/autopia",
    "source": "github"
  },
  "websiteUrl": "https://maydaytrey.github.io/autopia/",
  "description": "Verified, reproduced behavior of public HTTP APIs: spec gaps, errors, pagination, auth."
}