Drillable
REMOTE · MCP.DRILLABLE.COM · SCANNED AUG 3
A multi-domain reference corpus where every answer drills down to its cited, verified source.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 8 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability38
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 22766 tokens (~2845/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · mcp.drillable.com
claude mcp add --transport http com-drillable-gateway https://mcp.drillable.com/
[mcp_servers.com-drillable-gateway] url = "https://mcp.drillable.com/"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-drillable-gateway": {
"type": "remote",
"url": "https://mcp.drillable.com/",
"enabled": true
}
}
} openclaw mcp add com-drillable-gateway --url https://mcp.drillable.com/ --transport streamable-http
mcp_servers:
com-drillable-gateway:
url: "https://mcp.drillable.com/" {
"mcpServers": {
"com-drillable-gateway": {
"type": "http",
"url": "https://mcp.drillable.com/"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “compute” rewrote its description, which is the text the model reads security
- Tool “search” rewrote its description, which is the text the model reads security
- Tool “lookup” rewrote its description, which is the text the model reads security
- Tool “enumerate” rewrote its description, which is the text the model reads security
- 2 Aug 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- 31 Jul 26 +2
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 29 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 54
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://mcp.drillable.com
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.drillable.com | CN=YE2,O=Let's Encrypt,C=US | 8 Jun 2026 | 6 Sept 2026 | ECDSA 256 | ECDSA-SHA384 | 5541bf554fcdf73b55d6e5ad8b7382551c2 |
| SANs: mcp.drillable.com | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
DNSSEC insecure
Validation of mcp.drillable.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| drillable.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.drillable.com | Verified | 200 | |
| http (plaintext) | http://mcp.drillable.com | HTTPS enforced | 301 | https://mcp.drillable.com/ |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
call Call a domain verb ~123
Invoke a domain verb discovered via `describe`: call(domain, tool, args). Identical to the namespaced tool surface — every answer drills to its source; a miss is a typed abstention (logged as demand), never a guess. Do NOT invent tool names — take them from `describe`.
| Name | Type | Req | Description |
|---|---|---|---|
| args | object | — | Arguments for that verb, per its describe() inputSchema. |
| domain | string | yes | The mounted domain (e.g. 'cocktail'). |
| tool | string | yes | The domain verb to invoke (e.g. 'reachable_cocktails'). |
No output schema declared.
No examples provided.
compute Count or group a domain's records ~4,446
A deterministic AGGREGATE over ONE corpus's COMPLETE set — the calculated-query shape ("how many X", "break X down by Y", "which is most common"). Requires `domain`; optional `filter` scopes the set (e.g. {"spirit":"gin"}); optional `by` (a record field) returns the count PER value, sorted, with the largest. Built ON `enumerate`, so it inherits the completeness contract: over an INCOMPLETE set it ABSTAINS rather than undercount. It counts on GROUND and refuses to crown a "best"/worth ranking (that has no oracle — the user's call). For the records/categories themselves use `enumerate`. Mounted corpora: acupuncture, cocktail, camera, law, copyright, trademark, music-theory, supplements, writing-style, minecraft-dungeons, spanish, medical-denials, languages, behavioral-econ, baseball, agent-practices, pokemon, mcp, readability, citations, relay, models, self-oracle, recall-traps, units, tax, physics, logic, astronomy, biology, geography, medicine, chemistry, calendar, math, eurorack, building-codes, cooking, personal-finance, stardew, coffee, electronics, physiology, diving, decibels, gearing, colorimetry, subnetting, textile-gauge, first-aid, statistics, chess-endgames, woodworking, rating-systems, tuning, check-digits, paper-sizes, wire-gauge, preferred-numbers, swe-claim-denial, psychology, roman-numerals, minecraft-mods, encodings, strength-training, hardiness-zones, terraria, unix-permissions, aspect-ratio, number-bases, resistor-color-code, cognitive-psychology, braille, semver, cron, unicode, timezones, metar, incoterms, soundex, glob, ieee754, http-status, zigbee, uuid, base-encodings, percent-encoding, dms-coordinates, gray-code, hashing, classical-ciphers, hamming-code, geohash, mac-address, poker-hands, capacitor-codes, iso-duration, dice-probability, scrabble-score, wind-chill, mach-number, saffir-simpson, dataviz, patents, chords, dtmf, shoe-size, crc, base58, bech32, base85, reed-solomon, theoretical-ecology, string-similarity, checksums, compression, pr…
| Name | Type | Req | Description |
|---|---|---|---|
| by | string | — | Optional: a record field to group the count by (e.g. 'family'). Omit for a plain count. Discover fields via `enumerate`. |
| domain | string | yes | The corpus to compute over (required). |
| filter | object | — | Optional faceted constraints to scope the set (e.g. {"spirit":"gin"}). |
No output schema declared.
No examples provided.
describe Describe a domain's tools ~123
Discover the fleet's deeper machinery. No args → every mounted domain with its verbs grouped by rung (lookup → composability → contested → frontier). With `domain` → that domain's full tool list with descriptions and input schemas. Invoke anything it lists via `call`. Use this whenever the spine (lookup/search/verify) is too shallow for the question — e.g. "what can I make/patch/cover with MY inventory", contested claims, open questions.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | Optional: one domain's full tool schemas (e.g. 'cocktail'). |
No output schema declared.
No examples provided.
enumerate List a domain's categories or complete set ~4,399
List broad CATEGORIES or the COMPLETE set within ONE corpus — the shape `search` cannot serve (search returns a ranked, capped sample, not the whole set). Requires `domain`. Returns every category axis with exact counts, and — with an optional `filter` (faceted constraints, e.g. {"spirit":"gin"}) — the COMPLETE record set scoped by it, marked `complete`. A count/aggregate is sound ONLY over a complete set; an incomplete return is flagged, never silently undercounted (the completeness contract). Use for "what kinds are there", "all the X", "how many X"; for one record use `lookup`/`search`. Discover a domain's facets via `describe`. The special domain `directory` enumerates the FLEET itself — the algorithm domains drillable holds (declared registry tags, faceted by class/grain; e.g. "what algorithms are there?"). Mounted corpora: acupuncture, cocktail, camera, law, copyright, trademark, music-theory, supplements, writing-style, minecraft-dungeons, spanish, medical-denials, languages, behavioral-econ, baseball, agent-practices, pokemon, mcp, readability, citations, relay, models, self-oracle, recall-traps, units, tax, physics, logic, astronomy, biology, geography, medicine, chemistry, calendar, math, eurorack, building-codes, cooking, personal-finance, stardew, coffee, electronics, physiology, diving, decibels, gearing, colorimetry, subnetting, textile-gauge, first-aid, statistics, chess-endgames, woodworking, rating-systems, tuning, check-digits, paper-sizes, wire-gauge, preferred-numbers, swe-claim-denial, psychology, roman-numerals, minecraft-mods, encodings, strength-training, hardiness-zones, terraria, unix-permissions, aspect-ratio, number-bases, resistor-color-code, cognitive-psychology, braille, semver, cron, unicode, timezones, metar, incoterms, soundex, glob, ieee754, http-status, zigbee, uuid, base-encodings, percent-encoding, dms-coordinates, gray-code, hashing, classical-ciphers, hamming-code, geohash, mac-address, poker-hands, capacitor-codes, iso-durat…
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The corpus to enumerate (required), e.g. 'cocktail'. |
| filter | object | — | Optional faceted constraints to scope the complete set (e.g. {"family":"sour"}). |
No output schema declared.
No examples provided.
lookup Look up a concept ~4,411
Define a concept/term from a domain's glossary (e.g. 'stir', 'crop-factor', 'roughness'). Routes to each domain's lookup_concept; pass `domain` to target one, omit to fan out. For entities/records use `search`. Abstains on a miss, which is logged as a gap (the demand signal) — there is no report_gap verb. For COMPUTED quantities (molar mass, date math, unit conversions) a miss will point you to the right compute verb — follow it via `describe`/`call` rather than re-searching. Mounted corpora: acupuncture, cocktail, camera, law, copyright, trademark, music-theory, supplements, writing-style, minecraft-dungeons, spanish, medical-denials, languages, behavioral-econ, baseball, agent-practices, pokemon, mcp, readability, citations, relay, models, self-oracle, recall-traps, units, tax, physics, logic, astronomy, biology, geography, medicine, chemistry, calendar, math, eurorack, building-codes, cooking, personal-finance, stardew, coffee, electronics, physiology, diving, decibels, gearing, colorimetry, subnetting, textile-gauge, first-aid, statistics, chess-endgames, woodworking, rating-systems, tuning, check-digits, paper-sizes, wire-gauge, preferred-numbers, swe-claim-denial, psychology, roman-numerals, minecraft-mods, encodings, strength-training, hardiness-zones, terraria, unix-permissions, aspect-ratio, number-bases, resistor-color-code, cognitive-psychology, braille, semver, cron, unicode, timezones, metar, incoterms, soundex, glob, ieee754, http-status, zigbee, uuid, base-encodings, percent-encoding, dms-coordinates, gray-code, hashing, classical-ciphers, hamming-code, geohash, mac-address, poker-hands, capacitor-codes, iso-duration, dice-probability, scrabble-score, wind-chill, mach-number, saffir-simpson, dataviz, patents, chords, dtmf, shoe-size, crc, base58, bech32, base85, reed-solomon, theoretical-ecology, string-similarity, checksums, compression, prng, bloom-filter, computus, hyperloglog, peppers, search-heuristics, tomatoes, solar-times, blood-alcohol, maid…
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | Optional: restrict to one domain (e.g. 'acupuncture'). |
| query | string | yes | The concept/entity to resolve. |
No output schema declared.
No examples provided.
notify_when_held Ask to hear when a missing answer lands ~114
Register your user's standing interest in a question the corpus can't answer yet: when it becomes answerable, they get one email. Call this ONLY when the user themselves asked to be told — ask them first, this session, and use the email they give you now; never volunteer an address you hold from context or memory. One call per question.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | The email the user gave you this session for this purpose. | |
| query | string | yes | The question to follow, as the user asked it. |
No output schema declared.
No examples provided.
search Search the corpora ~4,399
Search the mounted corpora by query. Routes to each domain's search tool; pass `domain` to target one. Empty results are logged as gaps. For COMPUTED quantities (molar mass, age/date math, unit conversions) this verb will miss and surface a cross-verb hint (e.g. compute_molar_mass) — follow that hint via `describe`/`call` rather than retrying search. Mounted corpora: acupuncture, cocktail, camera, law, copyright, trademark, music-theory, supplements, writing-style, minecraft-dungeons, spanish, medical-denials, languages, behavioral-econ, baseball, agent-practices, pokemon, mcp, readability, citations, relay, models, self-oracle, recall-traps, units, tax, physics, logic, astronomy, biology, geography, medicine, chemistry, calendar, math, eurorack, building-codes, cooking, personal-finance, stardew, coffee, electronics, physiology, diving, decibels, gearing, colorimetry, subnetting, textile-gauge, first-aid, statistics, chess-endgames, woodworking, rating-systems, tuning, check-digits, paper-sizes, wire-gauge, preferred-numbers, swe-claim-denial, psychology, roman-numerals, minecraft-mods, encodings, strength-training, hardiness-zones, terraria, unix-permissions, aspect-ratio, number-bases, resistor-color-code, cognitive-psychology, braille, semver, cron, unicode, timezones, metar, incoterms, soundex, glob, ieee754, http-status, zigbee, uuid, base-encodings, percent-encoding, dms-coordinates, gray-code, hashing, classical-ciphers, hamming-code, geohash, mac-address, poker-hands, capacitor-codes, iso-duration, dice-probability, scrabble-score, wind-chill, mach-number, saffir-simpson, dataviz, patents, chords, dtmf, shoe-size, crc, base58, bech32, base85, reed-solomon, theoretical-ecology, string-similarity, checksums, compression, prng, bloom-filter, computus, hyperloglog, peppers, search-heuristics, tomatoes, solar-times, blood-alcohol, maidenhead-locator, brewing, celestial-navigation, electrochemistry, fluid-mechanics, information-theory, structural-mechanics, rege…
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | Optional: restrict to one domain. |
| query | string | yes | What to search for. |
No output schema declared.
No examples provided.
verify Verify claims against sources ~382
Check claims against the corpora. SINGLE: verify({claim}) grounds one claim (core/verify truth-referee verdict where a domain surfaces it, else a corpus-grounding badge). RECEIPT: verify({claims:[…]}) claim-CHECKS each assertion and returns a TYPED per-claim verdict (verified / corrected / abstained) + drilled value + source, as a structured receipt (rides the response → portable to any client). Each claim is graded one of two ways: RECOGNITION-FREE — give `op` + `params` + `asserted` (STATE the computation you ran; it is RE-EXECUTED with no catalog match, so it grades NOVEL inputs too — the strongest form), or CATALOG-MATCH — give `claim` + `asserted` (matched to a covered record). Pass `asserted` (your own answer) to have it GRADED, not just grounded — the receipt corrects a confidently-wrong claim the model can't catch itself. A claim with no receipt line is unverified.
| Name | Type | Req | Description |
|---|---|---|---|
| asserted | string | — | With a single `claim`/`op`: your answer, graded against the re-executed truth. |
| claim | string | — | A single claim to check (back-compat / catalog-match). For several, use `claims`. |
| claims | array | — | Receipt mode: the claims to check. Each item is {claim?, op?, params?, asserted?, domain?} (or a bare string). |
| domain | string | — | Optional: restrict to one domain. |
| op | string | — | Recognition-free single check: the computation you performed (e.g. 'compare_decimal'). Discover ops via the recall-traps check_claim verb (no args). |
| params | object | — | Recognition-free single check: inputs for `op`. |
No output schema declared.
No examples provided.