Mmcp.market

Is Federal Contract Lifecycle Evidence MCP server safe?

No. It is blocked at the gateway.

F17/100grade F

Blocked at the gateway. A critical finding or a dead endpoint.

What to know before installing
  • highRemote endpoint did not respond — Streamable HTTP error: Error POSTing to endpoint: {"error":{"code":-32020,"message":"MCP-Protocol-Version is required"},"id":0,"jsonrpc":"2.0"}

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high1 low
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote unreachable: Streamable HTTP error: Error POSTing to endpoint: {"error":{"code":-32020,"message":"MCP-Protocol-Version is required"},"id":0,"jsonrpc":"2.0"}0/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityno auth information5/15
  • Maintenanceno repository listed3/15
  • Maintainer identityno repository or website to verify2/10

Findings (2)

  • highRemote endpoint did not respondreliability.unreachable

    Streamable HTTP error: Error POSTing to endpoint: {"error":{"code":-32020,"message":"MCP-Protocol-Version is required"},"id":0,"jsonrpc":"2.0"}

  • lowNo source repository listedmaint.no-repo
Overall 17/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Safer options for the same job

  • HOL Guard
    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B
  • MCP Server
    Agent-native global eSIM: buy for 193 countries, per-MB in USDT/USDC. Agents earn 20% referral.
    B

Federal Contract Lifecycle Evidence reviews, tools and install