An agent can connect after a one-time OAuth consent by a human.Remote endpoint behind OAuth 2. Tokens stay with the agent; the registry only exposes the authorization metadata.
Placeholders to fill from your own secret store: ${CHINACARAPI_MCP_TOKEN}, ${X_CHINA_KEY}. The registry never accepts secret values.
Quality 83 / 100good
protocoln/a · weight 25
n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorization83 · weight 15
pass
auth.prmProtected Resource Metadata (RFC 9728) published
pass
auth.as_metadataauthorization server metadata reachable
warn
auth.cimdonly Dynamic Client Registration, deprecated in 2026-07-28 in favour of CIMD
n/a
auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
n/a
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
Tool list unknown · checked 2026-10-19 10:20 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Live used car listings from South Korea (Encar, KB Chachacha, K Car) and China (Dongchedi, Che168).
Official server.json
{
"name": "io.github.ThatMojo/chinacarapi-mcp",
"title": "ChinaCarAPI - Chinese used cars",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://mcp.chinacarapi.com/mcp",
"type": "streamable-http",
"headers": [
{
"name": "Authorization",
"isSecret": true,
"description": "Optional: Bearer <your ChinaCarAPI key>. Without it the server starts the OAuth flow (paste the key once in the browser)."
},
{
"name": "x-china-key",
"isSecret": true,
"description": "Optional: the ChinaCarAPI key as a separate header, when Authorization carries an EnCarAPI key."
}
]
}
],
"version": "1.6.0",
"repository": {
"url": "https://github.com/ThatMojo/encarapi-mcp",
"source": "github"
},
"websiteUrl": "https://chinacarapi.com/?utm_source=mcp_registry&utm_medium=encarapi-mcp",
"description": "Live used car listings from China (Dongchedi, Che168) in English, with inspection reports."
}