Connect
8 clients · secrets stay placeholdersQuality 87 / 100good
protocol75 · weight 25
- warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a
protocol.statelessonly applies to 2026-07-28 servers
- pass
protocol.transportstreamable HTTP
- n/a
protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
- n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
- n/a
auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
- pass
tools.descriptionsevery tool has a description
- pass
tools.description_lengthdescriptions are concise
- pass
tools.schemasevery tool has an object input schema
- pass
tools.annotations6 of 6 tools declare readOnlyHint or destructiveHint
- pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass
tools.token_costabout 1,093 tokens to load every tool
- pass
tools.api_dumptools are not a one-to-one API dump
dependencies67 · weight 15
- pass
deps.known_vulnsno known advisory in 98 resolved packages
- fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
- pass
6 tools, about 1,093 tokens to load them all · tool set 9875e87233ef · checked 2026-10-20 11:08 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Trust 86 / 100
+repository +namespace-matches-repo +reachable +uptime-93% ~updated-158d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
@h2-papers/[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Official server.json
{
"name": "io.github.h2-papers/mcp-server",
"title": "水素分子医学文献データベース — Molecular hydrogen medical literature (H2 Papers)",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://h2-papers.org/mcp",
"type": "streamable-http"
}
],
"version": "0.1.1",
"packages": [
{
"version": "0.1.0",
"transport": {
"type": "stdio"
},
"identifier": "@h2-papers/mcp-server",
"registryType": "npm"
}
],
"repository": {
"url": "https://github.com/h2-papers/h2-papers-mcp-server",
"source": "github"
},
"description": "PubMed molecular-hydrogen medical literature with delivery-aware safety notes inline."
}