ai.roc/mcp
REMOTE · MCP.ROC.AI · SCANNED AUG 3
ROC biometrics & computer vision: face, LPR, OCR, pedestrian, vehicle, gun detection.
Available components
Recent critical change
TLS certificate (3 Aug 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security11
- TLS check failed: the certificate is expired or not yet valid (as of 2026-08-03). See how to fix → View diagnostics → Fail
- Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS not yet verified: we couldn't read the response headers to check for it. View diagnostics → Unverified
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport check failed: declared streamable-http, but the TLS certificate failed verification. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability0
- Schema not yet verified: we couldn't read the endpoint's schema.Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage not yet verified: we couldn't read the endpoint's tools.Unverified
Capabilities0
- Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified
Unverified: 4 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · mcp.roc.ai
claude mcp add --transport http ai-roc-mcp https://mcp.roc.ai/mcp
[mcp_servers.ai-roc-mcp] url = "https://mcp.roc.ai/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ai-roc-mcp": {
"type": "remote",
"url": "https://mcp.roc.ai/mcp",
"enabled": true
}
}
} openclaw mcp add ai-roc-mcp --url https://mcp.roc.ai/mcp --transport streamable-http
mcp_servers:
ai-roc-mcp:
url: "https://mcp.roc.ai/mcp" {
"mcpServers": {
"ai-roc-mcp": {
"type": "http",
"url": "https://mcp.roc.ai/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 0
- TLS certificate: pass → fail ▼ critical
- Score status: scored → failed ▼ critical
- Endpoint reachability: reachable → unreachable ▼ security
- HSTS header: fail → unverified ▼ security
- Stability: 0.23 → unverified ▼ security
- Transport: pass → fail ▼ security
- Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 2 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 29 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 64
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://mcp.roc.ai/mcp
TLS invalid
Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .
Chain error: expired
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.roc.ai | CN=E7,O=Let's Encrypt,C=US | 5 May 2026 | 3 Aug 2026 | ECDSA 256 | ECDSA-SHA384 | 5f80c65f9ccf5908cd62aac4c2ead82c7c4 |
| SANs: mcp.roc.ai | ||||||
| CN=E7,O=Let's Encrypt,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 Mar 2024 | 12 Mar 2027 | ECDSA 384 | SHA256-RSA | aa75f1e62b8f0a220966d38bbfd4baa1 |
DNSSEC insecure
Validation of mcp.roc.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| roc.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Inconclusive
We could not reach the endpoint well enough to judge its authorisation posture.
| Result | Inconclusive |
|---|
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.roc.ai/mcp | TLS failed | ||
| http (plaintext) | http://mcp.roc.ai/mcp | HTTPS enforced | 301 | https://mcp.roc.ai/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
analyze_faces ~427
Analyze faces in an image. Detects each face and returns its location, confidence score, facial landmarks (eyes, nose, mouth), and head orientation. Optionally computes liveness/spoof detection, passport-standard (ICAO) quality checks, cropped face thumbnails, and detailed analytics including age, emotion, geographic origin, gender, glasses, facial hair, head pose, mouth open/closed, face and image quality, artwork detection, and mask detection. Provide the image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| analytics | boolean | — | Compute face analytics including: age estimation, emotion classification (anger, disgust, fear, joy, neutral, sadness, surprise), geographic origin (African, East Asian, European, Latin American, Mid… |
| icao_background | boolean | — | Compute ICAO uniform background face portrait quality metric. If combined with thumbnail, the thumbnail will be a base64 PNG with the background removed. |
| icao_metrics | boolean | — | Check whether the face photo meets passport and ID standards (ICAO), including eye visibility, glare, lighting, occlusion, and overall image quality. |
| image_base64 | string | — | Base64-encoded image (jpg, png, bmp). Preferred over image_url. |
| image_url | string | — | Public URL of the image. Used only if image_base64 is not provided. |
| spoof | boolean | — | Detect whether the face is from a live person or a photo of a photo. Returns a liveness score between 0.0 and 1.0 where higher values indicate a greater chance of a spoof. |
| thumbnail | boolean | — | Generate an aligned and cropped base64 JPG face image suitable for displaying. If combined with icao_background, the thumbnail will be a base64 PNG with the background removed. |
No output schema declared.
No examples provided.
analyze_license_plates ~255
Analyze license plates in an image. Detects each license plate and returns its location, confidence score, and recognized text (ALPR/OCR). Optionally classifies the issuing region (e.g. state or country), filters non-compliant text, ignores partial reads, and returns a cropped base64 JPG thumbnail of the plate. Provide the image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| filter_text | boolean | — | Filter out non-compliant text results that do not match a known license plate pattern. |
| ignore_partial | boolean | — | Ignore partial license plate detections that fall outside the image bounds. |
| image_base64 | string | — | Base64-encoded image (jpg, png, bmp). Preferred over image_url. |
| image_url | string | — | Public URL of the image. Used only if image_base64 is not provided. |
| region | string | — | Geographic region for plate classification (issuing state/country). One of: north_american, european, pacific, south_american, asian, middle_eastern, african. Omit to skip classification. |
| thumbnail | boolean | — | Generate an aligned and cropped base64 JPG thumbnail of the license plate suitable for displaying. |
No output schema declared.
No examples provided.
compare_faces ~230
Check if the same person appears in two different images. Finds all faces in both images and compares each face from the first image against each face in the second. Returns only the pairs that match, with a similarity score between 0.0 and 1.0. Provide each image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| image_a_base64 | string | — | Base64-encoded first image (jpg, png, bmp). Preferred over image_a_url. |
| image_a_url | string | — | Public URL of the first image. Used only if image_a_base64 is not provided. |
| image_b_base64 | string | — | Base64-encoded second image (jpg, png, bmp). Preferred over image_b_url. |
| image_b_url | string | — | Public URL of the second image. Used only if image_b_base64 is not provided. |
| threshold | number | — | Minimum similarity score for a pair to be considered a match. Defaults to 0.5 (approximately one-in-ten-million false match rate). Only pairs at or above this value are returned. |
No output schema declared.
No examples provided.
detect_guns ~145
Find guns in a photo. Returns the position and confidence score for each gun found. Can also return a cropped image of each gun. Provide the image as base64 (preferred) or a public URL.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | — | Skip guns that are only partially visible (cut off by the edge of the image). |
| image_base64 | string | — | The image encoded as a base64 string (jpg, png, or bmp). Preferred over image_url. |
| image_url | string | — | A publicly accessible URL pointing to the image. Used only when image_base64 is not provided. |
| thumbnail | boolean | — | Return a small cropped image of each detected gun. |
No output schema declared.
No examples provided.
detect_persons ~153
Find people in a photo. Returns the position and confidence score for each person found, along with body landmarks and clothing color. Can also return a cropped image of each person. Provide the image as base64 (preferred) or a public URL.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | — | Skip people who are only partially visible (cut off by the edge of the image). |
| image_base64 | string | — | The image encoded as a base64 string (jpg, png, or bmp). Preferred over image_url. |
| image_url | string | — | A publicly accessible URL pointing to the image. Used only when image_base64 is not provided. |
| thumbnail | boolean | — | Return a small cropped image of each detected person. |
No output schema declared.
No examples provided.
detect_vehicles ~156
Find vehicles in a photo. Returns the position and confidence score for each vehicle found, along with its predicted make, model, and color. Can also return a cropped image of each vehicle. Provide the image as base64 (preferred) or a public URL.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | — | Skip vehicles that are only partially visible (cut off by the edge of the image). |
| image_base64 | string | — | The image encoded as a base64 string (jpg, png, or bmp). Preferred over image_url. |
| image_url | string | — | A publicly accessible URL pointing to the image. Used only when image_base64 is not provided. |
| thumbnail | boolean | — | Return a small cropped image of each detected vehicle. |
No output schema declared.
No examples provided.
read_text ~222
Read text in an image (OCR). Detects each text region and returns its location, confidence score, and recognized text. Optionally restricts results to a regex pattern, restricts allowed characters via a vocabulary, ignores partial detections, and returns a cropped base64 JPG thumbnail of each text region. Provide the image as base64 (preferred) or a public URL as fallback.
| Name | Type | Req | Description |
|---|---|---|---|
| ignore_partial | boolean | — | Ignore partial text detections that fall outside the image bounds. |
| image_base64 | string | — | Base64-encoded image (jpg, png, bmp). Preferred over image_url. |
| image_url | string | — | Public URL of the image. Used only if image_base64 is not provided. |
| text_filter | string | — | Regular expression that recognized text must match. Non-matching detections are discarded. |
| text_vocabulary | string | — | Set of allowed characters for OCR. Only characters in this string will be returned. |
| thumbnail | boolean | — | Generate an aligned and cropped base64 JPG thumbnail of each text region suitable for displaying. |
No output schema declared.
No examples provided.