SSRS2
REMOTE · SSRS2.NET · 3 COMPONENTS
Markdown to editable PowerPoint, Word, PDF; checks, edits and previews RDLC/RDL reports.
Available components
Last scanned (12 hours ago)
Scores higher than 47% of remote servers
Reachable. Last reached 17 Oct 2026.
Category Documents and Files
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security66
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability49
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3748 tokens (~624/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Oct 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- “describe_report” added an optional parameter “part” cosmetic
- 16 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “convert_report” rewrote its description, which is the text the model reads security
- Tool “validate_report” rewrote its description, which is the text the model reads security
- Server version: 1.5.0 → 1.5.1 functional
- 15 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 14 Oct 26 63
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Oct 2026 · Probed https://ssrs2.net/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=ssrs2.net | CN=WE1,O=Google Trust Services,C=US | 9 Sept 2026 | 8 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 8f3a8bf2c13830621335db7ebf4dd868 |
| SANs: ssrs2.net, *.ssrs2.net | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of ssrs2.net. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| net. | present | 37331 | 13 | Verified |
| ssrs2.net. | present | 2371 | 13 | Verified |
| ssrs2.net. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://ssrs2.net/mcp | Verified | 200 | |
| http (plaintext) | http://ssrs2.net/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
compare_reports Group reports by structure ~176
Groups report definitions (RDL or RDLC) by structure, to plan one change across many: a group's reports have the same items, datasets, parameters and code modules and differ only in places, texts and looks, so one set of operations naming their items changes them alike. Returns groups, the largest first: structure (edit_report's structure), roles (what role:signature and the like name there), differs (how its first report differs from the first group's), places (items placed otherwise), and versions: each report and its version.
| Name | Type | Req | Description |
|---|---|---|---|
| detail | string|null | – | "full": each group's reports listed too, beside their versions. |
| reports | object | yes | The reports by name: {"Receipt_de-CH.rdlc": "<the report's XML>", ...}; 50 at most, 20 MB in all. |
No output schema declared.
No examples provided.
convert_report Convert a report to a file ~431
Converts a report (RDL or RDLC) or Markdown (a document, or slides) with SSRS2 (Report Viewer's rules) to pptx (PowerPoint's own text boxes, tables and pictures, a slide per page: a Markdown deck becomes a deck), pdf, docx, xlsx, mhtml, tiff, png (the first page), csv or xml. It is checked first, as validate_report checks it: with errors nothing is written. Returns validate_report's answer and written: the file's name and size, url (downloaded once, within ten minutes), curl (the command that saves it), and what it holds read back as PowerPoint (slides) or Word and a PDF reader (document) get it. help: ["answers"] says more.
| Name | Type | Req | Description |
|---|---|---|---|
| culture | string|null | – | The culture of a report that names no Language (en-US, de-CH); left out, en-US. |
| format | string|null | – | pptx (default), pdf, docx, xlsx, mhtml, tiff, png, csv or xml. |
| help | – | – | true, or topics (["markdown", "decks"]): the reference only. |
| markdown | string|null | – | Markdown's text: a document, or slides with marp: true. Give rdlc or markdown. |
| name | string|null | – | The file's name, without its extension (default: the Markdown's title, else report). |
| parameters | object|null | – | Report parameter values by name (a multi-value one's separated by commas). |
| pictures | object|null | – | The pictures the Markdown names, by its paths: {"images/chart.png": "<base64>"}; 5 MB each, 20 MB in all. |
| rdlc | string|null | – | The report definition's XML (RDL or RDLC). Give rdlc or markdown. |
| sampleData | – | – | Rows per dataset: {"DataSet": [{"Field": value}]}, dates as ISO text. Left out, made up from the fields' types. |
No output schema declared.
No examples provided.
describe_report Outline a report ~227
Outlines a report definition (RDL or RDLC) to plan a change: its page, datasets and fields, parameters, and every item top to bottom with its kind, place and size in cm, what it shows and does (hidden, toggled, page breaks), and its role (title, table, totals, declaration, signature...), which role:signature and the like name in edit_report and validate_report whatever the report calls the item. Returns version (edit_report's baseVersion) and outline; with item, that part's XML as written, with its lines (to copy an edit's find from).
| Name | Type | Req | Description |
|---|---|---|---|
| detail | string|null | – | "full": every text whole and why each role was guessed. |
| item | string|null | – | One part in full: a name, a role (role:signature) or a path (WorkInstructions/TablixRow[3]): its outline and XML. |
| part | integer | – | Outline part, from 1. |
| rdlc | string | yes | The report definition's XML (RDL or RDLC). |
No output schema declared.
No examples provided.
edit_report Change a report ~505
Changes a report definition (RDL, RDLC) given as its XML by operations (the SSRS2 designer's own), all or none. The text is patched (the rest as it was), then checked: its new problems and pages said. The answer's rdlc is the changed report (past 200 KB, url and curl: a download within ten minutes). Operations ("op"): dataset, parameter, page, header, footer, code, textbox, table, matrix, list, chart, gauge, indicator, databar, sparkline, image, barcode, subreport, line, rectangle, set, remove, space, move, swap, copy, field, column, remove_column, row, total, group, sort, widths, filter. A new item goes "after" or "before" an item or a role (role:signature), "in" a container or "at":[x, y] cm. Call help: ["textbox","set"] first: their words.
| Name | Type | Req | Description |
|---|---|---|---|
| baseVersion | string|null | – | describe_report's version. |
| check | boolean | – | Check after (default true). |
| detail | string|null | – | "full": every item, the diff whole. |
| dryRun | boolean | – | The diff, not the report. |
| edits | – | – | Or exact replacements: [{find, replace, in?, all?}]. |
| fit | boolean | – | With keepPages: a block that costs rows is written in the form checked to keep them. |
| help | – | – | Operations' names, or true. |
| keepPages | boolean | – | Refuse a change that would print more pages, or at fewer table rows (variants, rowCounts too). |
| maxPages | integer|null | – | Refuse a report printing more pages. |
| operations | array|null | – | The operations, in order. |
| parameters | object|null | – | Parameter values. |
| pictures | object|null | – | Pictures an image names by its file: {"path": "<base64>"}. |
| rdlc | string|null | – | The report's XML. |
| rewrite | boolean | – | Write anew a report that cannot be patched. |
| rowCounts | – | – | As validate_report's: {DataSet: "1..30"}. |
| sampleData | – | – | Rows: {DataSet: [{Field: value}]}. |
| summary | string|null | – | Said back. |
| variants | – | – | As validate_report's; their pages said. |
No output schema declared.
No examples provided.
render_preview Render a report's pages ~487
Renders a report definition (RDL or RDLC) or Markdown (a document, or slides: a page each) with SSRS2, the Report Viewer engine, and returns its pages as PNG, as a PDF of it would show them: a JSON summary first (what validate_report answers, no need to validate first; madeUpRows; conversion for Markdown, what it approximated at its lines; text, what the pages print, page by page in reading order, where values are read exactly), then an image per page, or one image of numbered thumbnails (sheet) to see a deck or a long report whole. A report with errors is not rendered. help: ["answers"] says more.
| Name | Type | Req | Description |
|---|---|---|---|
| culture | string|null | – | The culture of a report that names no Language (en-US, de-CH); left out, en-US. |
| dpi | integer | – | The images' dots per inch, 48 to 200 (default 96: an A4 page is 794 x 1123 pixels). |
| firstPage | integer | – | The first page to return (default 1). |
| help | – | – | true, or topics (["markdown", "decks"]): the reference only. |
| madeUpRows | – | – | "all": every made-up row in the answer, not a summary. |
| markdown | string|null | – | Markdown's text: a document, or slides with marp: true. Give rdlc or markdown. |
| pages | integer|null | – | Pages to return: 3 by default, 10 at most; with sheet, 30. |
| parameters | object|null | – | Report parameter values by name (a multi-value one's separated by commas). |
| pictures | object|null | – | The pictures the Markdown names, by its paths: {"images/chart.png": "<base64>"}; 5 MB each, 20 MB in all. |
| rdlc | string|null | – | The report definition's XML (RDL or RDLC). Give rdlc or markdown. |
| sampleData | – | – | Rows per dataset: {"DataSet": [{"Field": value}]}, dates as ISO text. Left out, made up from the fields' types. |
| sheet | boolean | – | One image of up to 30 pages as numbered thumbnails, too small to read: look at a page itself for that. |
No output schema declared.
No examples provided.
validate_report Validate a report ~549
Checks a report definition (RDL or RDLC) or Markdown with SSRS2's engine (Report Viewer's rules): XML, schema, every expression compiled, then a run with rows through every page. Returns ok, a summary and diagnostics (code, severity, item, property, expression, line, message, hint); atRunTime counts what failed as it ran (#Error cells). Call it after each change until ok is true and atRunTime absent. Expressions are Visual Basic and may only compute (restrictedCode). Also layout, expect, variants, rowCounts and the report as it was (baselineRdlc): help: ["checks"].
| Name | Type | Req | Description |
|---|---|---|---|
| baselineRdlc | string|null | – | The report as it was (its XML): only new warnings are said, with pages before. |
| culture | string|null | – | The culture of a report that names no Language (en-US, de-CH); left out, en-US. |
| expect | – | – | Rules: {"order": ["role:table", "Block?", "role:signature"]}, samePage, page, pages, maxPages, noOverlap. An item named and not printed fails its rule, unless written Name? (a variant may hide it). |
| help | – | – | true, or topics (["markdown", "decks"]): the reference only. |
| layout | – | – | true, or names and roles (role:signature): where each item printed, its page and place in cm. |
| madeUpRows | – | – | "all": every made-up row in the answer, not a summary. |
| markdown | string|null | – | Markdown's text: a document, or slides with marp: true. Give rdlc or markdown. |
| parameters | object|null | – | Report parameter values by name (a multi-value one's separated by commas). |
| pictures | object|null | – | The pictures the Markdown names, by its paths: {"images/chart.png": "<base64>"}; 5 MB each, 20 MB in all. |
| rdlc | string|null | – | The report definition's XML (RDL or RDLC). Give rdlc or markdown. |
| render | boolean | – | false: the definition only, no expression runs. |
| rowCounts | – | – | {"Requests": "1..30"}: the pages of each count and the first that adds a page. |
| sampleData | – | – | Rows per dataset: {"DataSet": [{"Field": value}]}, dates as ISO text. Left out, made up from the fields' types. |
| variants | – | – | Renders again with rows changed: [{"name": "no deposit", "sampleData": {"Deposit": null}}]. |
No output schema declared.
No examples provided.
How do I install the SSRS2 MCP server?
SSRS2 is a hosted endpoint at https://ssrs2.net/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · ssrs2.net
claude mcp add --transport http antoinegou-ssrs2 'https://ssrs2.net/mcp'
What is the SSRS2 MCP server?
SSRS2 is an MCP server listed in the public MCP registry as io.github.AntoineGou/ssrs2. Markdown to editable PowerPoint, Word, PDF; checks, edits and previews RDLC/RDL reports. This page covers its hosted endpoint (https://ssrs2.net/mcp).
Is the SSRS2 MCP server safe to use?
SSRS2 scores 65 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the SSRS2 MCP server expose?
SSRS2 exposes 6 tools: convert_report, compare_reports, render_preview, describe_report, edit_report, validate_report. Their descriptions and schemas cost roughly 2,375 tokens of context every time the server is loaded.
Does the SSRS2 MCP server require authentication?
No. We connected to SSRS2 without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the SSRS2 MCP server still maintained?
SSRS2 is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.