# ProofRail MCP Release Certifier

> MCP deployment checks: required tools, schema drift and verifiable receipts. Free preflight.

- name: io.github.kaattaallaa-sketch/proofrail
- version: 0.4.1
- connection class: unknown (unknown)
- trust: 50/100 flags: no-repository, unreachable
- quality: 72/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.kaattaallaa-sketch%2Fproofrail
- tools: https://api.protogrid.dev/v1/servers/io.github.kaattaallaa-sketch%2Fproofrail/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "proofrail": {
      "type": "http",
      "url": "https://drkdm4jd-8767.uks1.devtunnels.ms/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 0
- freshness: 100
- provenance: 45
- drivers: +website -unreachable(9 failures) +updated-20d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 72/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 7 of 8 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 7 of 8 tools declare all four hints; missing: mcp_release_certify (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass `tools.token_cost`: about 1,662 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 25 (weight 15)

- warn `stability.changes`: 13 tool changes in 30 days
- fail `stability.rug_pull`: 5 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 8, about 1,662 tokens to load them all
- tool set hash: a321314cb57b05d359969ef0f43400d4
- tools last changed: 2026-09-30T22:38:05.742Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.kaattaallaa-sketch/proofrail.svg)](https://protogrid.dev/servers/io.github.kaattaallaa-sketch/proofrail)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-09-30 `mcp_release_certify` changed (description, inputSchema) **meaning changed**
  - before: Full certification for an MCP server before deploy, upgrade, or trust. Payment-gated; returns deterministic PASS, FAIL, or PARTIAL evidence. If you have a target_url, call mcp_release_preflight first for a free no-payment compatibility check; use quote_certification only for price and network details.
  - after: Paid MCP server verification and certification with deployment contract checks: require named tools with required_tools, compare baseline_schema_hashes from a previous certification, and receive ALLOW/BLOCK/REVIEW evidence. Certification before deploy, upgrade, or trust. Returns deterministic PASS, FAIL, or PARTIAL evidence. Call with target_url; when payment is absent the x402 layer returns payment requirements/challenge, then the client pays and retries the same call. Use mcp_release_preflight first for a free no-payment compatibility check, or quote_certification(target_url) for an exact buy_now action.
- 2026-09-30 `quote_certification` changed (description, inputSchema, annotations) **meaning changed**
  - before: Free: get certification price, network, payment mode, and checks before payment
  - after: FREE, read-only, no arguments required for a general MCP verification/certification quote: get price and network before payment. Pass target_url to receive the exact buy_now action.
- 2026-09-30 `mcp_release_preflight` changed (description)
  - before: FREE, no payment: test an MCP endpoint now for reachability, protocol negotiation, tool count, and schema issue count before buying a full evidence receipt.
  - after: FREE, no payment: run an MCP server verification and compatibility preflight now for reachability, protocol negotiation, tool count, and schema issue count before buying a full evidence receipt.
- 2026-09-30 `find_mcp_servers` changed (description, inputSchema)
  - before: FREE, read-only: find currently reachable public MCP servers for a task or capability from ProofRail's autonomous catalog. Searches names, URLs, repositories, and observed tool names; returns PASS/ok candidates with optional x402 certification offers. Cached results only.
  - after: FREE, read-only: find currently reachable public MCP servers from ProofRail's autonomous catalog. Call with no arguments for the most stable current PASS/ok candidates, or provide query for task/capability search across names, URLs, repositories, and observed tool names. Returns optional x402 certification offers. Cached results only.
- 2026-09-30 `proofrail_info` changed (description, annotations) **meaning changed**
  - before: ProofRail capabilities and payment mode
  - after: FREE, read-only: ProofRail MCP verification, MCP server verification, compatibility preflight, certification capabilities, and payment mode
- 2026-09-30 `health` changed (annotations)
- 2026-09-30 `mcp_radar_changes` added
  - FREE, read-only: inspect changes observed between ProofRail's two latest autonomous MCP Radar scans. Cached results only; this does not trigger a live scan.
- 2026-09-30 `find_mcp_servers` added
  - FREE, read-only: find currently reachable public MCP servers for a task or capability from ProofRail's autonomous catalog. Searches names, URLs, repositories, and observed tool names; returns PASS/ok candidates with optional x402 certification offers. Cached results only.
- 2026-09-30 `mcp_radar_snapshot` added
  - FREE, read-only: inspect ProofRail's latest autonomous scan of public MCP endpoints discovered from public registries. This returns cached point-in-time results and does not trigger a live scan.
- 2026-09-30 `mcp_release_certify` changed (description)
  - before: Certify an MCP server before deploy, upgrade, or trust. Payment-gated; returns deterministic PASS, FAIL, or PARTIAL evidence. Call quote_certification first for free price and network details.
  - after: Full certification for an MCP server before deploy, upgrade, or trust. Payment-gated; returns deterministic PASS, FAIL, or PARTIAL evidence. If you have a target_url, call mcp_release_preflight first for a free no-payment compatibility check; use quote_certification only for price and network details.

Full history: https://api.protogrid.dev/v1/servers/io.github.kaattaallaa-sketch%2Fproofrail/changes

## Remotes

- https://drkdm4jd-8767.uks1.devtunnels.ms/mcp (streamable-http, auth none, reachable false, uptime30d 0.375)

## Packages

_none_

## Tools (8)

- `find_mcp_servers`: FREE, read-only: find currently reachable public MCP servers from ProofRail's autonomous catalog. Call with no arguments for the most stable current PASS/ok candidates, or provide query for task/capability search across names, URLs, repositories, and observed tool names. Returns optional x402 certification offers. Cached results only.
- `health`: ProofRail process health
- `mcp_radar_changes`: FREE, read-only: inspect changes observed between ProofRail's two latest autonomous MCP Radar scans. Cached results only; this does not trigger a live scan.
- `mcp_radar_snapshot`: FREE, read-only: inspect ProofRail's latest autonomous scan of public MCP endpoints discovered from public registries. This returns cached point-in-time results and does not trigger a live scan.
- `mcp_release_certify`: Paid MCP server verification and certification with deployment contract checks: require named tools with required_tools, compare baseline_schema_hashes from a previous certification, and receive ALLOW/BLOCK/REVIEW evidence. Certification before deploy, upgrade, or trust. Returns deterministic PASS, FAIL, or PARTIAL evidence. Call with target_url; when payment is absent the x402 layer returns payment requirements/challenge, then the client pays and retries the same call. Use mcp_release_preflight first for a free no-payment compatibility check, or quote_certification(target_url) for an exact buy_now action.
- `mcp_release_preflight`: FREE, no payment: run an MCP server verification and compatibility preflight now for reachability, protocol negotiation, tool count, and schema issue count before buying a full evidence receipt.
- `proofrail_info`: FREE, read-only: ProofRail MCP verification, MCP server verification, compatibility preflight, certification capabilities, and payment mode
- `quote_certification`: FREE, read-only, no arguments required for a general MCP verification/certification quote: get price and network before payment. Pass target_url to receive the exact buy_now action.