Loading…
Review before connecting
The findings on this server are worth reviewing before you connect an agent to it.
Scanned 1 hour ago
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The deltabot-utility-suite MCP server exposes 25 tools, focused primarily on general-purpose capabilities. It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates deltabot-utility-suite C — the findings are worth reviewing before you connect an agent to it. Its most notable findings include "No authorization on a public remote server" and "Over-broad tool surface". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check deltabot-utility-suite's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add deltabot-utility-suite to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://deltabot-x402-seller-production.up.railway.app/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Check JSON records for missing fields, data types, duplicates, and data shape. Costs $0.10 Base USDC.
Compare supplied public repository snapshots and return factual change and risk evidence. Costs $0.25 Base USDC.
Find added, removed, and changed API paths and operations between public OpenAPI snapshots. Costs $0.20 Base USDC.
Find added, removed, and changed fields in supplied public JSON snapshots. Costs $0.15 Base USDC.
Create factual release notes and dependency risk flags from supplied public metadata. Costs $0.20 Base USDC.
Website health report from a supplied HTTPS probe. Costs $0.15 Base USDC.
Broken-link report from supplied crawl evidence. Costs $0.15 Base USDC.
SEO metadata audit from supplied public page facts. Costs $0.15 Base USDC.
Sitemap and robots.txt audit from supplied public files. Costs $0.15 Base USDC.
TLS and security-header report from a supplied HTTPS probe. Costs $0.15 Base USDC.
DNS and domain snapshot from supplied public records. Costs $0.15 Base USDC.
CSV structure and completeness profile. Costs $0.10 Base USDC.
CSV-to-JSON conversion. Costs $0.10 Base USDC.
JSON Schema inference from a supplied JSON value. Costs $0.10 Base USDC.
JSON Schema validation. Costs $0.10 Base USDC.
Structured title, metadata, headings, and links extracted from HTML. Costs $0.10 Base USDC.
RSS or Atom feed change report from supplied snapshots. Costs $0.15 Base USDC.
Storefront price and availability change report from supplied snapshots. Costs $0.15 Base USDC.
Factual code-diff summary. Costs $0.15 Base USDC.
GitHub issue and pull-request digest from supplied public records. Costs $0.15 Base USDC.
Dependency license inventory from supplied metadata. Costs $0.15 Base USDC.
OpenAPI completeness and health score. Costs $0.15 Base USDC.
Wallet activity summary from supplied public transaction records. Costs $0.15 Base USDC.
Contract ABI change report from supplied ABI snapshots. Costs $0.20 Base USDC.
Structured changelog from supplied factual changes. Costs $0.15 Base USDC.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: release_dependency_risk
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "release_dependency_risk"RecommendationScope tools to the minimum needed.
Analyze web pages and entire sites for SEO, accessibility, performance, and security compliance. Generate detailed reports and actionable issue lists to improve site quality and user experien
Validates ZUGFeRD, Factur-X, and XRechnung e-invoices against EN 16931 with correction suggestions.
Tracks US tariff and trade-action changes from Federal Register documents and exposes them through an API for AI agents.
Instant rug-check for any EVM or Solana token, distilled to one clear 0-10 risk verdict.
Provides access to Bible translations, books, chapters, verses, and search functionality.
Remote-first MCP adapter for emitting Settlement Attestation Receipts; not a verifier.