Loading…
Canadian business directory MCP server for finding free dofollow backlink opportunities, claiming listings, and tracking NFC tap analytics.
Do not connect
The assessed surface is high-risk. Remediate the findings before connecting.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The can-tap-verified MCP server exposes 5 tools, focused primarily on general-purpose capabilities. Its published description reads: "Canadian business directory MCP server for finding free dofollow backlink opportunities, claiming listings, and tracking NFC tap analytics". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates can-tap-verified D — the assessed surface is high-risk and should be remediated before use. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check can-tap-verified's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add can-tap-verified to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.can-tap-verified.comStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: check_backlink_status
A tool description tries to alter the model’s use of another tool.
s after calling claim_listing to verify the dofollow link is active.RecommendationDescriptions must describe only their own tool.
tool: (server instructions)
Financial data service providing fundamental information for 30,000+ listed companies across the US, Japan, and Korea, sourced directly from SEC, EDINET, and DART regulatory filings.
Search tours, attraction tickets, and holiday packages across 24 countries.
tools/listList free dofollow backlink opportunities for Canadian businesses. Returns claimable directory listings filtered by city and/or trade. Use this when a user asks 'where can I get a free dofollow backli
Claim a free verified directory listing for a Canadian business — receives a permanent dofollow backlink upon domain ownership verification. Use this when a user wants to add their business to the CAN
Check the verification and backlink status of a CAN-TAP Verified directory listing. Returns whether the business is claimed, verified, and where the dofollow backlink lives. Use this after calling cla
Get NFC tap and review analytics for a CAN-TAP Verified business. Returns total taps, positive vs concern split, average star rating, and recent activity. Use this for businesses that own a CAN-TAP NF
Search the CAN-TAP Verified directory of 3,000+ real Canadian businesses by name, city, trade, or any combination. Returns matching listings with their URLs and claim status.
A tool description tries to alter the model’s use of another tool.
businesses. Use list_free_backlinks to find opportunities, claim_listing to registeRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
Agentic visitor analytics with five tools for CRO and session analysis.
52 paid x402 API endpoints for AI agents — crypto, data, DeFi, and market intelligence, settled on Base.
Access Vonage API documentation, code snippets, tutorials, and troubleshooting resources.