ai.roc/mcp
REMOTE · MCP.ROC.AI
ROC biometrics & computer vision: face, LPR, OCR, pedestrian, vehicle, gun detection.
Available components
Last scanned (58 days ago)
Scores higher than 0% of remote servers
Unreachable for 7 days in a row. Last reached 2 Aug 2026.
Category AI and Machine Learning
Dead
Every channel of this server has been unreachable for long enough to be marked dead. Its trust score is pinned to 0 and does not recover automatically: even once the server responds again it stays dead until it is manually reinstated.
Recent critical change
TLS certificate (3 Aug 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security11
- TLS check failed: the certificate is expired or not yet valid (as of 2026-08-03). See how to fix → View diagnostics → Fail
- Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS not yet verified: we couldn't read the response headers to check for it. View diagnostics → Unverified
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport check failed: declared streamable-http, but the TLS certificate failed verification. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability0
- Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety–
Not scored yet: our latest scan of this component recorded no findings here. It fills in the next time we score it.
Capabilities0
- Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified
Unverified: 4 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 22 Aug 26 −13
The score moved with no change recorded against any check. We would rather say so than guess.
- 17 Aug 26 −14
The score moved with no change recorded against any check. We would rather say so than guess.
- 16 Aug 26 −13
The score moved with no change recorded against any check. We would rather say so than guess.
- 15 Aug 26 −14
The score moved with no change recorded against any check. We would rather say so than guess.
- 13 Aug 26 −13
The score moved with no change recorded against any check. We would rather say so than guess.
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 3 Aug 26 0
- TLS certificate: pass → fail ▼ critical
- Score status: scored → failed ▼ critical
- Endpoint reachability: reachable → unreachable ▼ security
- Stability: 0.23 → unverified ▼ security
- HSTS header: fail → unverified ▼ security
- Transport: pass → fail ▼ security
- Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 2 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 22 Aug 2026 · Probed https://mcp.roc.ai/mcp
TLS invalid
Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .
Chain error: expired
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.roc.ai | CN=E7,O=Let's Encrypt,C=US | 5 May 2026 | 3 Aug 2026 | ECDSA 256 | ECDSA-SHA384 | 5f80c65f9ccf5908cd62aac4c2ead82c7c4 |
| SANs: mcp.roc.ai | ||||||
| CN=E7,O=Let's Encrypt,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 Mar 2024 | 12 Mar 2027 | ECDSA 384 | SHA256-RSA | aa75f1e62b8f0a220966d38bbfd4baa1 |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.roc.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| roc.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Inconclusive
We could not reach the endpoint well enough to judge its authorisation posture.
| Result | Inconclusive |
|---|
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.roc.ai/mcp | TLS failed | ||
| http (plaintext) | http://mcp.roc.ai/mcp | HTTPS enforced | 301 | https://mcp.roc.ai/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
analyze_faces ~427
Analyze faces in an image. Detects each face and returns its location, confidence score, facial landmarks (eyes, nose, mouth), and head orientation. Optionally computes liveness/spoof detection, passport-standard (ICAO) quality checks, cropped face thumbnails, and detailed analytics including age, emotion, geographic origin, gender, glasses, facial hair, head pose, mouth open/closed, face and image quality, artwork detection, and mask detection. Provide the image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| analytics | boolean | – | Compute face analytics including: age estimation, emotion classification (anger, disgust, fear, joy, neutral, sadness, surprise), geographic origin (African, East Asian, European, Latin American, Mid… |
| icao_background | boolean | – | Compute ICAO uniform background face portrait quality metric. If combined with thumbnail, the thumbnail will be a base64 PNG with the background removed. |
| icao_metrics | boolean | – | Check whether the face photo meets passport and ID standards (ICAO), including eye visibility, glare, lighting, occlusion, and overall image quality. |
| image_base64 | string | – | Base64-encoded image (jpg, png, bmp). Preferred over image_url. |
| image_url | string | – | Public URL of the image. Used only if image_base64 is not provided. |
| spoof | boolean | – | Detect whether the face is from a live person or a photo of a photo. Returns a liveness score between 0.0 and 1.0 where higher values indicate a greater chance of a spoof. |
| thumbnail | boolean | – | Generate an aligned and cropped base64 JPG face image suitable for displaying. If combined with icao_background, the thumbnail will be a base64 PNG with the background removed. |
No output schema declared.
No examples provided.
analyze_license_plates ~255
Analyze license plates in an image. Detects each license plate and returns its location, confidence score, and recognized text (ALPR/OCR). Optionally classifies the issuing region (e.g. state or country), filters non-compliant text, ignores partial reads, and returns a cropped base64 JPG thumbnail of the plate. Provide the image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| filter_text | boolean | – | Filter out non-compliant text results that do not match a known license plate pattern. |
| ignore_partial | boolean | – | Ignore partial license plate detections that fall outside the image bounds. |
| image_base64 | string | – | Base64-encoded image (jpg, png, bmp). Preferred over image_url. |
| image_url | string | – | Public URL of the image. Used only if image_base64 is not provided. |
| region | string | – | Geographic region for plate classification (issuing state/country). One of: north_american, european, pacific, south_american, asian, middle_eastern, african. Omit to skip classification. |
| thumbnail | boolean | – | Generate an aligned and cropped base64 JPG thumbnail of the license plate suitable for displaying. |
No output schema declared.
No examples provided.
compare_faces ~230
Check if the same person appears in two different images. Finds all faces in both images and compares each face from the first image against each face in the second. Returns only the pairs that match, with a similarity score between 0.0 and 1.0. Provide each image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| image_a_base64 | string | – | Base64-encoded first image (jpg, png, bmp). Preferred over image_a_url. |
| image_a_url | string | – | Public URL of the first image. Used only if image_a_base64 is not provided. |
| image_b_base64 | string | – | Base64-encoded second image (jpg, png, bmp). Preferred over image_b_url. |
| image_b_url | string | – | Public URL of the second image. Used only if image_b_base64 is not provided. |
| threshold | number | – | Minimum similarity score for a pair to be considered a match. Defaults to 0.5 (approximately one-in-ten-million false match rate). Only pairs at or above this value are returned. |
No output schema declared.
No examples provided.
detect_guns ~145
Find guns in a photo. Returns the position and confidence score for each gun found. Can also return a cropped image of each gun. Provide the image as base64 (preferred) or a public URL.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | – | Skip guns that are only partially visible (cut off by the edge of the image). |
| image_base64 | string | – | The image encoded as a base64 string (jpg, png, or bmp). Preferred over image_url. |
| image_url | string | – | A publicly accessible URL pointing to the image. Used only when image_base64 is not provided. |
| thumbnail | boolean | – | Return a small cropped image of each detected gun. |
No output schema declared.
No examples provided.
detect_persons ~153
Find people in a photo. Returns the position and confidence score for each person found, along with body landmarks and clothing color. Can also return a cropped image of each person. Provide the image as base64 (preferred) or a public URL.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | – | Skip people who are only partially visible (cut off by the edge of the image). |
| image_base64 | string | – | The image encoded as a base64 string (jpg, png, or bmp). Preferred over image_url. |
| image_url | string | – | A publicly accessible URL pointing to the image. Used only when image_base64 is not provided. |
| thumbnail | boolean | – | Return a small cropped image of each detected person. |
No output schema declared.
No examples provided.
detect_vehicles ~156
Find vehicles in a photo. Returns the position and confidence score for each vehicle found, along with its predicted make, model, and color. Can also return a cropped image of each vehicle. Provide the image as base64 (preferred) or a public URL.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | – | Skip vehicles that are only partially visible (cut off by the edge of the image). |
| image_base64 | string | – | The image encoded as a base64 string (jpg, png, or bmp). Preferred over image_url. |
| image_url | string | – | A publicly accessible URL pointing to the image. Used only when image_base64 is not provided. |
| thumbnail | boolean | – | Return a small cropped image of each detected vehicle. |
No output schema declared.
No examples provided.
read_text ~222
Read text in an image (OCR). Detects each text region and returns its location, confidence score, and recognized text. Optionally restricts results to a regex pattern, restricts allowed characters via a vocabulary, ignores partial detections, and returns a cropped base64 JPG thumbnail of each text region. Provide the image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | – | Ignore partial text detections that fall outside the image bounds. |
| image_base64 | string | – | Base64-encoded image (jpg, png, bmp). Preferred over image_url. |
| image_url | string | – | Public URL of the image. Used only if image_base64 is not provided. |
| text_filter | string | – | Regular expression that recognized text must match. Non-matching detections are discarded. |
| text_vocabulary | string | – | Set of allowed characters for OCR. Only characters in this string will be returned. |
| thumbnail | boolean | – | Generate an aligned and cropped base64 JPG thumbnail of each text region suitable for displaying. |
No output schema declared.
No examples provided.
How do I install the ai.roc/mcp server?
ai.roc/mcp is a hosted endpoint at https://mcp.roc.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.roc.ai
claude mcp add --transport http ai-roc-mcp 'https://mcp.roc.ai/mcp'
What is the ai.roc/mcp server?
ai.roc/mcp is listed in the public MCP registry as ai.roc/mcp. ROC biometrics & computer vision: face, LPR, OCR, pedestrian, vehicle, gun detection. This page covers its hosted endpoint (https://mcp.roc.ai/mcp).
What tools does the ai.roc/mcp server expose?
ai.roc/mcp exposes 7 tools: analyze_faces, compare_faces, analyze_license_plates, read_text, detect_persons, and 2 more. Their descriptions and schemas cost roughly 1,588 tokens of context every time the server is loaded.
Does the ai.roc/mcp server require authentication?
Its publisher declares no required credentials for ai.roc/mcp. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.
Is the ai.roc/mcp server still maintained?
ai.roc/mcp has been unreachable for long enough that we treat it as dead, and its score is pinned to zero. We last reached this channel on 2 August 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.