Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "checkbox": {
      "type": "http",
      "url": "https://app.checkbox.site/mcp",
      "headers": {
        "Authorization": "Bearer ${CHECKBOX_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http checkbox https://app.checkbox.site/mcp --header "Authorization: Bearer ${CHECKBOX_TOKEN}"

[mcp_servers.checkbox]
url = "https://app.checkbox.site/mcp"
bearer_token_env_var = "CHECKBOX_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "checkbox": {
      "type": "remote",
      "url": "https://app.checkbox.site/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:CHECKBOX_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "checkbox": {
      "type": "http",
      "url": "https://app.checkbox.site/mcp",
      "headers": {
        "Authorization": "Bearer ${CHECKBOX_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=checkbox&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBwLmNoZWNrYm94LnNpdGUvbWNwIiwiaGVhZGVycyI6eyJBdXRob3JpemF0aW9uIjoiQmVhcmVyICR7Q0hFQ0tCT1hfVE9LRU59In19"
}

{
  "servers": {
    "checkbox": {
      "type": "http",
      "url": "https://app.checkbox.site/mcp",
      "headers": {
        "Authorization": "Bearer ${CHECKBOX_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "checkbox": {
      "httpUrl": "https://app.checkbox.site/mcp",
      "headers": {
        "Authorization": "Bearer ${CHECKBOX_TOKEN}"
      }
    }
  }
}

extensions:
  "checkbox":
    enabled: true
    name: "checkbox"
    type: streamable_http
    uri: "https://app.checkbox.site/mcp"
    headers:
      "Authorization": "Bearer ${CHECKBOX_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${CHECKBOX_TOKEN}. The registry never accepts secret values.

Quality 100 / 100strong

protocoln/a · weight 25

n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)

authorization100 · weight 15

pass
auth.prmProtected Resource Metadata (RFC 9728) published
pass
auth.as_metadataauthorization server metadata reachable
pass
auth.cimdClient ID Metadata Documents supported
n/a
auth.secret_in_urlno templated URL

tool hygienen/a · weight 30

n/a
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dump, tools.hidden_texttool list unknown (behind auth, not probed, or empty)

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pull, stability.new_linkstool list unknown

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledependencies not resolved yet

Tool list unknown · checked 2026-11-14 06:30 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance85

liveness100

freshness100

hygiene100

+repository +dns-namespace +website +reachable +uptime-100% +updated-0d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@checkbox-site/[email protected] npmnot resolved yet; dependencies are read once a day

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://app.checkbox.site/mcp` streamable-http	oauth2 AS: https://app.checkbox.site	yes	100%	367 ms	–	2026-11-14

package	registry	version	runtime	secrets
`@checkbox-site/mcp`	npm	0.4.2	–	`CHECKBOX_API_KEY`

Tools (0)

No tools observed. Tools appear once a credential-free probe can list them.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "site.checkbox/checkbox",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "docs": "https://checkbox.site/docs/mcp",
      "openapi": "https://app.checkbox.site/v1/openapi.json",
      "summary": "Free checks of subscription checkouts (Stripe Checkout, Payment Links), terms, click-to-cancel cancellation flows and renewal reminder emails against U.S. auto-renewal laws (FTC ROSCA and the laws of 27 states, DC and New York City, including California and New York), with corrected Stripe Checkout parameters, disclosure text and email templates. Not legal advice.",
      "keywords": [
        "auto-renewal",
        "auto-renewal law",
        "automatic renewal",
        "ROSCA",
        "click-to-cancel",
        "Stripe Checkout",
        "subscription compliance",
        "cancellation",
        "renewal reminder",
        "renewal reminder emails",
        "subscription cancellation",
        "California ARL",
        "New York",
        "FTC",
        "negative option",
        "Stripe subscription compliance",
        "click to cancel",
        "subscription"
      ],
      "llms_txt": "https://checkbox.site/llms.txt"
    }
  },
  "title": "Checkbox: subscription auto-renewal law checks",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://app.checkbox.site/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Optional. Clients that implement MCP OAuth sign in without it (browser approval). Otherwise Bearer <Checkbox API key> (ck_test_… or ck_live_…)."
        }
      ]
    }
  ],
  "version": "1.0.6",
  "packages": [
    {
      "version": "0.4.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@checkbox-site/mcp",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "CHECKBOX_API_KEY",
          "isSecret": true,
          "description": "Optional. Checkbox API key (ck_test_… or ck_live_…). Without it, the setup_checkbox tool returns an approval link for the human, then test-mode keys. Free at https://app.checkbox.site/sign-up"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/checkbox-site/checkbox",
    "source": "github",
    "subfolder": "mcp"
  },
  "websiteUrl": "https://checkbox.site/docs/mcp",
  "description": "Auto-renewal law checks (ROSCA, click-to-cancel) for Stripe Checkout, cancellation, renewal emails"
}