{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T16:32:35.291Z","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp.md","server":{"slug":"com-getsmokerun-smoke-run","name":"Smoke Run","registryName":"com.getsmokerun/smoke-run","description":"Free read-only teardown of a public site's money path, with the dollar at risk.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api-mcp","type":"remote","identifier":"https://getsmokerun.com/api/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp","version":"1.0.0","transport":null,"scoredAt":"2026-11-06T02:31:44.006Z"},"score":{"total":74,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-06","total":74},{"date":"2026-11-05","total":74},{"date":"2026-11-04","total":74}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":75,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 568 tokens (~142/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"142","items":"4","tools":"4","tokens":"568","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":7,"verdict":"partial","reasons":["Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"2"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"api-mcp","type":"remote","identifier":"https://getsmokerun.com/api/mcp","withdrawn":false,"score":74,"current":true,"url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp","markdownUrl":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://getsmokerun.com/api/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"run_revenue_check","title":null,"description":"Runs a read-only, from-outside revenue-path teardown of a public website and returns a dollar-proof report. Free and needs no key. It loads the site as a visitor, follows the money path (landing, call to action, lead form, checkout reachability, analytics presence), and reports where revenue is at risk. Each finding carries a confidence label: confirmed means it was reproduced from outside, likely means it was inferred from the public page, and unverifiable from outside means only a connected check can confirm it. Dollar figures are a conservative monthly floor and attach only to confirmed or likely findings. It never submits a form and never completes a charge.","inputs":[{"name":"api_key","type":"string","required":false,"description":"Optional. A Smoke Run API key. It lifts the free daily limit and is not required for a single check."},{"name":"url","type":"string","required":true,"description":"A public website address, for example https://example.com."}],"outputs":[{"name":"confidenceNote","type":"string","required":false,"description":null},{"name":"dollarsAtRisk","type":"number","required":false,"description":"Conservative monthly floor, summed from confirmed and likely findings only."},{"name":"findingCount","type":"integer","required":false,"description":"Total findings, which can exceed the number returned in findings."},{"name":"findings","type":"array","required":false,"description":null},{"name":"generatedAt","type":"string","required":false,"description":"ISO 8601 timestamp."},{"name":"headline","type":"string","required":false,"description":null},{"name":"moneySystem","type":"object","required":false,"description":null},{"name":"proof","type":"object","required":false,"description":"Keyed callers only. The dollar proof: siteUrl, headline, dollarsAtRisk, window, findings, generatedAt."},{"name":"runId","type":"string","required":false,"description":"Keyed callers only. The stored check id, readable later with get_latest_findings, list_checks or GET /api/v1/checks/{id}."},{"name":"siteUrl","type":"string","required":false,"description":null},{"name":"status","type":"string","required":false,"description":"inconclusive means the scan could not finish; it carries no findings, no dollar figure and says nothing about whether the money path works."},{"name":"window","type":"string","required":false,"description":"The period the dollar figure covers, for example \"per month\"."}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":189},{"name":"get_latest_findings","title":null,"description":"Returns the most recent revenue-path check for a given site, including its dollar-proof findings. Reads an account history, so it needs a Smoke Run API key. Returns an empty result when no check has been run for that site yet.","inputs":[{"name":"siteUrl","type":"string","required":true,"description":"A public website address, for example https://example.com."}],"outputs":[{"name":"found","type":"boolean","required":true,"description":"False when no check has been run for that site yet."},{"name":"proof","type":"object|null","required":true,"description":"The dollar proof of the latest check, or null when found is false."},{"name":"runId","type":"string","required":false,"description":null},{"name":"siteUrl","type":"string","required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":76},{"name":"get_money_system","title":null,"description":"Detects the revenue stack a public site runs on (payment processor, CRM or lead destination, email provider, booking tool, analytics and ad pixels) from its public page, and returns the funnel map. Free and needs no key. Each node notes what a connected check can verify end to end.","inputs":[{"name":"api_key","type":"string","required":false,"description":"Optional. A Smoke Run API key. It lifts the free daily limit and is not required for a single check."},{"name":"url","type":"string","required":true,"description":"A public website address, for example https://example.com."}],"outputs":[{"name":"detected","type":"boolean","required":true,"description":"False when nothing could be read from the page; the map is then empty, not an error."},{"name":"map","type":"array","required":true,"description":null},{"name":"siteUrl","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":117},{"name":"list_checks","title":null,"description":"Lists recent revenue-path checks for the authenticated account, newest first. An optional siteUrl narrows the list to one site.","inputs":[{"name":"limit","type":"integer","required":false,"description":"Optional. Max rows."},{"name":"siteUrl","type":"string","required":false,"description":"Optional. Narrow the list to one site."}],"outputs":[{"name":"checks","type":"array","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":60}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T02:31:43.000Z","track":"remote","endpoint":"https://getsmokerun.com/api/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=getsmokerun.com","issuer":"CN=YR2,O=Let's Encrypt,C=US","notBefore":"2026-11-02T11:24:21Z","notAfter":"2027-01-31T11:24:20Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=YR2,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"getsmokerun.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"getsmokerun.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-04","recent":[{"id":"chg_01a1aeb2-9ea0-7a12-b086-01376c16aac1","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1aeb2-9ea0-7a12-b086-01376c16aac1"},{"id":"chg_01a1a98c-8ee8-750e-bd5f-7b8bac7c4c54","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1a98c-8ee8-750e-bd5f-7b8bac7c4c54"},{"id":"chg_01a1a98c-8ee9-7576-a352-043e8dd0c846","kind":"check.appeared","summary":"First check of Tool coverage (100)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1a98c-8ee9-7576-a352-043e8dd0c846"},{"id":"chg_01a1a98c-8ee9-7cd8-9258-c7aa749a873e","kind":"tool.output_added","summary":"Tool “get_latest_findings” now declares an output schema","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1a98c-8ee9-7cd8-9258-c7aa749a873e"},{"id":"chg_01a1a98c-8eea-7a4c-ad68-819b9363a4fc","kind":"tool.output_added","summary":"Tool “get_money_system” now declares an output schema","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1a98c-8eea-7a4c-ad68-819b9363a4fc"},{"id":"chg_01a1a98c-8eeb-7206-a281-ebc73d4b46f4","kind":"tool.output_added","summary":"Tool “list_checks” now declares an output schema","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1a98c-8eeb-7206-a281-ebc73d4b46f4"},{"id":"chg_01a1a98c-8eeb-7862-b722-a1c2fb771c3b","kind":"tool.output_added","summary":"Tool “run_revenue_check” now declares an output schema","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1a98c-8eeb-7862-b722-a1c2fb771c3b"},{"id":"chg_01a1a5b5-c24b-712c-a577-84540ec752ae","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp#chg-chg_01a1a5b5-c24b-712c-a577-84540ec752ae"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp","markdown":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp.md","changelogJson":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-getsmokerun-smoke-run/api-mcp.xml","external":[{"label":"Remote endpoint","href":"https://getsmokerun.com/api/mcp"},{"label":"Website","href":"https://getsmokerun.com/"}]}}