An agent can connect on its own if it already holds KANBAN_AI_TOKEN, X_SUPABASE_ACCESS_TOKEN, X_MCP_API_KEY.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
Placeholders to fill from your own secret store: ${KANBAN_AI_TOKEN}, ${X_SUPABASE_ACCESS_TOKEN}, ${X_MCP_API_KEY}. The registry never accepts secret values.
Quality – / 100not scored
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocoln/a · weight 25
n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
Tool list unknown · checked 2026-10-20 10:03 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.