MCP Verification Gate: check an MCP server or an A2A agent before you connect or delegate

{'type': 'object', 'required': ['endpoint'], 'properties': {'endpoint': {'type': 'string', 'description': 'https URL of the MCP endpoint to measure'}, 'allow_tool_call': {'type': 'boolean', 'description': 'Consent to executing one tool on the checked server, twice, with empty arguments. Only set this for a server you own. Default false.'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'pass': {'type': ['boolean', 'null']}, 'endpoint': {'type': 'string'}, 'reachable': {'description': 'Three-valued on purpose (gate58). true = measured and answered. false = measured and did not answer. null = NOT MEASURED. null is never to be read as a failing endpoint; it means this gate has nothing to say.'}, 'conditions': {'type': ['array', 'object']}, 'record_sha256': {'type': 'string', 'description': 'Hash of this verdict with record_sha256 and recompute_note removed. Recompute it yourself; verify_verdict does the same arithmetic.'}, 'recompute_note': {'type': 'string'}}, 'additionalProperties': True}

{'type': 'object', 'properties': {}, 'additionalProperties': False}

{'type': 'object', 'properties': {'tiers': {'type': ['array', 'object']}, 'conditions': {'type': ['array', 'object']}, 'not_verified': {'type': ['array', 'object', 'string']}}, 'description': 'Deterministic. Takes no arguments, looks nothing up, and returns the same document every time. It therefore declares no read-state field, and a structural probe will score it as unable to hold the difference between a failed read and an empty one. That score is correct and is left standing: this tool has no read to fail. Adding a state field it can never use would make the number look better and mean less.', 'additionalProperties': True}

{'type': 'object', 'required': ['endpoint'], 'properties': {'endpoint': {'type': 'string', 'description': 'https URL of the MCP endpoint to look up, exactly as it appears on the register'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'state': {'enum': ['verified', 'pending', 'held', 'watched', 'absent'], 'type': 'string', 'description': "verified = passed all measured conditions. pending = measured but not passing every one (often only because determinism needs the owner's consent). held = could not be reached. watched = on the list, not yet measured. absent = no row here at all."}, 'endpoint': {'type': 'string'}, 'verified': {'type': ['boolean', 'null'], 'description': 'true = latest measurement passed all measured conditions. null = not established here (see state). Never false: unmeasured or not-yet-passing is not a failure.'}, 'conditions': {'type': ['object', 'null']}, 'measured_at': {'type': ['string', 'null']}, 'on_register': {'type': 'boolean'}, 'recompute_url': {'type': 'string'}, 'record_sha256': {'type': ['string', 'null'], 'description': 'Hash of the latest verdict. Recompute it via recompute_url; no trust in this gate required.'}}, 'description': "A one-glance answer for an agent deciding whether to trust an MCP endpoint BEFORE connecting. Reads the register only; measures nothing. verified is true ONLY when the latest scheduled measurement passed every measured condition; it is null in every other case (pending, held, watched, absent), and never false, because this gate calls nothing a failure. The state enum says which case it is, so a consumer can tell 'not verified here' apart from 'the lookup failed' (that returns as a tool error, isError) and from 'measured and passing'.", 'additionalProperties': True}

{'type': 'object', 'required': ['endpoint'], 'properties': {'endpoint': {'type': 'string', 'description': 'https URL of the MCP endpoint to look up, exactly as it appears on the register'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'means': {'type': ['string', 'object']}, 'latest': {'type': ['object', 'null']}, 'endpoint': {'type': 'string'}, 'standing': {'type': ['string', 'null']}, 'on_register': {'type': 'boolean', 'description': 'true = this endpoint is on the register. false = the register was READ and this endpoint is not on it. If the register could not be read at all, this field is not returned: the call comes back as a tool error (isError), because absence and not-knowing are different answers.'}, 'does_not_mean': {'type': ['string', 'object']}, 'register_size': {'type': 'number'}}, 'additionalProperties': True}

{'type': 'object', 'required': ['agent'], 'properties': {'agent': {'type': 'string', 'description': 'https origin of the agent (https://agent.example) or the full URL of its agent card'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['record'], 'properties': {'record': {'type': 'object', 'description': 'The full verdict object as returned by check_conformance or GET /self'}}, 'additionalProperties': False}

{'type': 'object', 'properties': {'note': {'type': 'string'}, 'method': {'type': 'string'}, 'verified': {'type': ['boolean', 'null'], 'description': 'true = the verdict hashes to its own record_sha256, so it was not altered after issue. false = it was altered. This is a finding about the record, not an error.'}}, 'additionalProperties': True}