xmp4 — Semantic code knowledge for your stack

REMOTE · MCP.EXAMPLE4.AI · SCANNED AUG 3

OSS libs in your stack, really used: source, tests, callers. C#, Java, TS, Python, Rust, PHP+.

Available components

+3 this week 60 60 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security54

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
Authorisation not fully verified: no authorisation is required to call this server, and 16 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
HTTPS not yet verified: we couldn't determine whether a plaintext access path exists. View diagnostics → Unverified
The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass

Transport & Reachability100

Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass

Schema Quality & AI Usability63

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 3380 tokens (~211/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities40

Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28. See how to fix → Fail

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · mcp.example4.ai

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http ai-example4-xmp4 https://mcp.example4.ai/mcp

# ~/.codex/config.toml

[mcp_servers.ai-example4-xmp4]
url = "https://mcp.example4.ai/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-example4-xmp4": {
      "type": "remote",
      "url": "https://mcp.example4.ai/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add ai-example4-xmp4 --url https://mcp.example4.ai/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  ai-example4-xmp4:
    url: "https://mcp.example4.ai/mcp"

// mcp.json

{
  "mcpServers": {
    "ai-example4-xmp4": {
      "type": "http",
      "url": "https://mcp.example4.ai/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
29 Jul 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
28 Jul 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
26 Jul 26 57

First indexed and scored.

Show 5 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://mcp.example4.ai/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=mcp.example4.ai	CN=YR1,O=Let's Encrypt,C=US	31 Jul 2026	29 Oct 2026	RSA 2048	SHA256-RSA	508b3b76d30f75fb4affc8ee05cd5735aff
SANs: mcp.example4.ai
CN=YR1,O=Let's Encrypt,C=US (CA)	CN=Root YR,O=ISRG,C=US	3 Sept 2025	2 Sept 2028	RSA 2048	SHA256-RSA	a20253f15f2691c05dc1ce13b9bcca4e
CN=Root YR,O=ISRG,C=US (CA)	CN=ISRG Root X1,O=Internet Security Research Group,C=US	13 May 2026	2 Sept 2032	RSA 4096	SHA256-RSA	f24b6d17f9d9ad7cb1c9fea78782699f

DNSSEC secure

Validation of mcp.example4.ai. — Secure

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
ai.	present	3799	8	Verified
example4.ai.	present	7571	8	Verified
mcp.example4.ai.				Verified address RRset verified with the apex keys

Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result	No authorisation required
HTTP status	200

Header	Value
strict-transport-security	max-age=31536000; includeSubDomains; preload
x-content-type-options	nosniff
x-frame-options	SAMEORIGIN

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://mcp.example4.ai/mcp	Verified	200
http (plaintext)	http://mcp.example4.ai/mcp	Inconclusive	404

MCP tools — 16 exposed · ~3,306 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

xmp4_callees ~258

Find direct callees (methods called by) a symbol in a project. Navigate step-by-step by calling xmp4_callees again on interesting results.

Input Output Examples

Name	Type	Req	Description
docs	string	—	Include docs: none (default) \| summary \| full (xmp4_info only)
file_path	string	—	File path to disambiguate
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1; ignored by xmp4_info/xmp4_source)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
symbol_name	string	yes	Symbol name

No output schema declared.

No examples provided.

xmp4_callers ~251

Find direct callers of a symbol in a project. Navigate step-by-step by calling xmp4_callers again on interesting results.

Input Output Examples

Name	Type	Req	Description
docs	string	—	Include docs: none (default) \| summary \| full (xmp4_info only)
file_path	string	—	File path to disambiguate
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1; ignored by xmp4_info/xmp4_source)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
symbol_name	string	yes	Symbol name

No output schema declared.

No examples provided.

xmp4_deps ~173

List external dependencies of a project.

Input Output Examples

Name	Type	Req	Description
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…

No output schema declared.

No examples provided.

xmp4_grep ~341

Server-side regex text search over indexed project source files. Free tier: requires file_path (single file). Premium tier (XMP4_PREMIUM_GREP_WALK=true): allows file_glob multi-file walk. Prefer xmp4_tests_for/xmp4_usages for SCIP symbols — grep is for text not indexed (comments, literals, config keys).

Input Output Examples

Name	Type	Req	Description
case_sensitive	boolean	—	If true, search is case-sensitive (default false)
file_glob	string	—	Optional file glob for multi-file walk (premium tier). Set XMP4_PREMIUM_GREP_WALK=true to enable.
file_path	string	—	Single-file grep target, repo-relative (e.g. 'src/foo.rs'). Required in free tier.
max_results	integer	—	Maximum number of hits to collect before pagination (default 50, max 1000)
page	integer	—	Page number (1-based, default 1)
page_size	integer	—	Results per page (default 20, max 100)
pattern	string	yes	Regex pattern (case-insensitive by default)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…

No output schema declared.

No examples provided.

xmp4_guide ~28

Usage guide for xmp4 tools — read this first to learn the correct workflow

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

xmp4_hierarchy ~242

Get type hierarchy (base, interfaces, derived) for a symbol in a project.

Input Output Examples

Name	Type	Req	Description
docs	string	—	Include docs: none (default) \| summary \| full (xmp4_info only)
file_path	string	—	File path to disambiguate
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1; ignored by xmp4_info/xmp4_source)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
symbol_name	string	yes	Symbol name

No output schema declared.

No examples provided.

xmp4_info ~234

Get detailed information about a symbol in a project.

Input Output Examples

Name	Type	Req	Description
docs	string	—	Include docs: none (default) \| summary \| full (xmp4_info only)
file_path	string	—	File path to disambiguate
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1; ignored by xmp4_info/xmp4_source)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
symbol_name	string	yes	Symbol name

No output schema declared.

No examples provided.

xmp4_outline ~188

Get outline (all symbols) for a file in a project.

Input Output Examples

Name	Type	Req	Description
file_path	string	yes	File path
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…

No output schema declared.

No examples provided.

xmp4_projects ~118

Search and browse projects by language and name. Use this first to discover projects, then use other tools with the repo name.

Input Output Examples

Name	Type	Req	Description
language	string	—	Filter by language (e.g., Python, TypeScript, CSharp)
page	integer	—	Page number (1-based, default 1)
page_size	integer	—	Results per page (default 20, max 100)
query	string	—	Search by project name (case-insensitive contains)
repo	string	—	Filter by repository name

No output schema declared.

No examples provided.

xmp4_search ~243

Search symbols in a project. Use xmp4_projects first to find the project identifier.

Input Output Examples

Name	Type	Req	Description
kind	string	—	Filter by kind: Class, Method, Function, etc.
max_results	integer	—	Maximum results to return (default: 50). Kept as per-page upper bound alongside page_size.
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
query	string	yes	Search query (symbol name or pattern)

No output schema declared.

No examples provided.

xmp4_server ~19

Get server information, version, and capabilities

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

xmp4_source ~234

Extract source code for a symbol in a project.

Input Output Examples

Name	Type	Req	Description
docs	string	—	Include docs: none (default) \| summary \| full (xmp4_info only)
file_path	string	—	File path to disambiguate
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1; ignored by xmp4_info/xmp4_source)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
symbol_name	string	yes	Symbol name

No output schema declared.

No examples provided.

xmp4_symbol_at ~222

LSP-style position→symbol lookup. Given (file_path, line, column) returns the symbol whose occurrence covers that cursor position. line is 1-based; column is 0-based. Use after xmp4_outline/xmp4_view when you know coordinates and want the canonical symbol.

Input Output Examples

Name	Type	Req	Description
column	integer	—	Column number (0-based, default 0 = beginning of line)
file_path	string	yes	File path inside the project, relative to repo root
line	integer	—	Line number (1-based)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…

No output schema declared.

No examples provided.

xmp4_tests_for ~295

Find direct tests that exercise a given symbol (direct callers filtered to test-file candidates per language pattern: CSharp/Java/PHP: *Test(s).<ext>; Python: test_*.py / *_test.py; TypeScript/JavaScript: *.spec/test.{ts,js}; Rust: *_tests.rs / tests/; etc.).

Input Output Examples

Name	Type	Req	Description
docs	string	—	Include docs: none (default) \| summary \| full (xmp4_info only)
file_path	string	—	File path to disambiguate
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1; ignored by xmp4_info/xmp4_source)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
symbol_name	string	yes	Symbol name

No output schema declared.

No examples provided.

xmp4_usages ~237

Find all usages/references of a symbol in a project.

Input Output Examples

Name	Type	Req	Description
docs	string	—	Include docs: none (default) \| summary \| full (xmp4_info only)
file_path	string	—	File path to disambiguate
output_format	string	—	Output format: Compact (default) or Verbose
page	integer	—	Page number (1-based, default 1; ignored by xmp4_info/xmp4_source)
page_size	integer	—	Results per page (default 20, max 100)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
symbol_name	string	yes	Symbol name

No output schema declared.

No examples provided.

xmp4_view ~223

Read a raw file excerpt from an indexed project by line range. Use after xmp4_search/xmp4_outline locates the region of interest, or to expand a truncated xmp4_source snippet. Hard cap of 500 lines per call.

Input Output Examples

Name	Type	Req	Description
file_path	string	yes	File path inside the project, relative to repo root
from_line	integer	—	Starting line (1-based, default 1)
project	string	yes	Project id: 'repo/project' or 'repo/project/language'. Case-insensitive prefix match. Append '/Python'\|'/CSharp'\|'/Java'\|etc. only to disambiguate multi-language projects (e.g. 'django/Django/Python'…
to_line	integer	—	Ending line (inclusive, default from_line+49, hard cap 500 lines per call)

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	57
27 Jul	57
28 Jul	58
29 Jul	59
30 Jul	59
31 Jul	59
1 Aug	59
2 Aug	60
3 Aug	60