Loading…
Licensed, rights-cleared content for AI agents — verifiable license keys + EU AI Act attestation.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 7 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The opedd MCP server exposes 17 tools, focused primarily on filesystem capabilities. Its published description reads: "Licensed, rights-cleared content for AI agents — verifiable license keys + EU AI Act attestation". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates opedd F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Data-exfiltration parameters" and "Metadata dictates tool-call ordering". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check opedd's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add opedd to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.opedd.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Look up a piece of content on the Opedd registry by URL. Returns the article title, publisher, available license types, and pricing (human republication price and AI training/inference price). Always
Purchase a content license from the Opedd protocol using a Stripe payment method. Returns a license key (format: OP-XXXX-XXXX) and a certificate URL. The buyer receives a Handshake Email with their li
Verify the authenticity of an Opedd license key. Returns license details including: article title, publisher, license type, issue date, amount paid, buyer info, and blockchain proof status. Use this t
Browse the public Opedd license registry. Returns recently issued licenses and licensable content. Filter by publisher_id to explore all content from a specific publisher. Filter by article_id to see
Browse the public Opedd publisher catalog via GET /publisher-directory. Returns paginated publishers with article counts, pricing (per-article + annual + monthly-forward-feed), plan, and sample articl
Detect the content platform behind a URL via POST /detect-platform (Phase 12 Wave 3 W3.1). Public no-auth lookup. Given a URL, identifies what platform powers it (Substack / Beehiiv / Ghost / Medium /
Fetch a publisher's RSL Standard manifest via GET /rsl-manifest (Phase 12 Wave 1 W1.1). Public no-auth endpoint — discovery surface for AI agents/crawlers wanting to know what's licensable from a publ
Purchase a bulk enterprise license covering multiple publishers (Phase 10). Returns a Stripe client_secret for payment completion + the enterprise_license_id. After payment, an ent_* access key is ema
Retrieve the full body of a licensed article using a buyer API token (opedd_buyer_live_* canonical; opedd_buyer_test_* for sandbox). Requires OPEDD_BUYER_TOKEN env var (create one at opedd.com/license
List articles from a buyer's licensed catalog via GET /enterprise-license (Phase 10 + 11). Content contract: flat-fee scopes (custom/platform_wide) include full content_body; METERED (filtered-scope)
Bulk-export a buyer's licensed catalog via GET /enterprise-license?format=ndjson (Phase 11 M3). Returns up to 1000 articles per call (collected from line-delimited JSON wire format). Same per-scope co
Browse per-event audit rows for the authenticated buyer via GET /buyer-audit (Phase 9.x). Each row carries license_terms + Tempo on-chain attestation (merkle_root + inclusion_proof when blockchain_sta
Fetch the authenticated buyer's account profile + masked API key list via GET /buyer-account. Returns the enterprise_buyers row (contact_email, buyer_org, created_at, etc.) plus a list of all buyer-si
Issue a signed JWT attesting to EU AI Act Article 53 compliance for a specific license via GET /eu-ai-act/article-53-attestation (Phase 12 Wave 1 W1.4). Returns a freshly-signed HS256 JWT regulators c
Generate a procurement-defense compliance dossier via GET /buyer-compliance-report (Phase 11 M4). Per-row dossier shape: 25+ fields including 17 RAG-essential article fields + full license_terms + on_
List all licensable articles for the authenticated publisher (requires OPEDD_PUB_BEARER, or legacy OPEDD_API_KEY). Returns articles with titles, descriptions, pricing, and sales statistics. Use articl
Push your published articles to Opedd so they can be licensed to AI buyers (requires OPEDD_PUB_BEARER — your opedd_pub_ publisher key). Send 1–100 articles per call; batch larger back-catalogues into
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: lookup_content
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: lookup_content
The text tells the model WHEN to call this tool relative to others ("always call first", "before any other tool", "chain to X tool") — a toxic-flow injection that hijacks the agent’s orchestration rather than describing the tool.
ference price). Always call this first to check if content is licensable and what it cRecommendationTool metadata must describe only the tool, never sequence the agent’s calls.
tool: purchase_license
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "article_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: publisher_directory
A tool description tries to alter the model’s use of another tool.
distinct from `browse_registry` (which lists issued LICENSES, not publishers).RecommendationDescriptions must describe only their own tool.
tool: detect_platform
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ethod, required_credentials, instructions}. The archive_method + forward_meRecommendationRemove side-channel parameters; constrain tool inputs.
tool: rsl_get
A tool description tries to alter the model’s use of another tool.
, JWT-auth, via article_53_attestation tool).RecommendationDescriptions must describe only their own tool.
tool: purchase_enterprise_license
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "buyer_webhook_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: get_content
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ing a buyer API token (opedd_buyer_live_* canonical; opedd_buyer_testRecommendationRemove side-channel parameters; constrain tool inputs.
tool: list_feed
A tool description tries to alter the model’s use of another tool.
rticle text via get_content (each retrieval is billed). Returns JSON-formatRecommendationDescriptions must describe only their own tool.
tool: stream_feed_ndjson
A tool description tries to alter the model’s use of another tool.
er_call') — use get_content for article text. Each article emits one usage_RecommendationDescriptions must describe only their own tool.
tool: get_audit_events
A tool description tries to alter the model’s use of another tool.
s 90-day cap on get_compliance_dossier). Attestation inclusion proof is included on evRecommendationDescriptions must describe only their own tool.
tool: get_buyer_account
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
rofile + masked API key list via GET /buyer-account. Returns the enterpRecommendationRemove side-channel parameters; constrain tool inputs.
tool: article_53_attestation
A tool description tries to alter the model’s use of another tool.
at lives on the rsl_get tool (jsonld=true variant). Never conflate. OptRecommendationDescriptions must describe only their own tool.
tool: get_compliance_dossier
A tool description tries to alter the model’s use of another tool.
s 30-day cap on get_audit_events). For annual audits, paginate via _meta.next_cuRecommendationDescriptions must describe only their own tool.
tool: list_publisher_content
A tool description tries to alter the model’s use of another tool.
se licenses via purchase_license.RecommendationDescriptions must describe only their own tool.
tool: push_content
A tool description tries to alter the model’s use of another tool.
de companion to list_publisher_content: use it to onboard your archive or push new conRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: purchase_license
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "purchase_license"RecommendationScope tools to the minimum needed.
tool: publisher_directory
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "publisher_directory"RecommendationScope tools to the minimum needed.
tool: detect_platform
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "detect_platform"RecommendationScope tools to the minimum needed.
tool: rsl_get
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "rsl_get"RecommendationScope tools to the minimum needed.
tool: purchase_enterprise_license
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "purchase_enterprise_license"RecommendationScope tools to the minimum needed.
tool: get_content
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "get_content"RecommendationScope tools to the minimum needed.
tool: get_buyer_account
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "get_buyer_account"RecommendationScope tools to the minimum needed.
tool: get_compliance_dossier
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "get_compliance_dossier"RecommendationScope tools to the minimum needed.
tool: push_content
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "push_content"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.