{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T13:56:39.657Z","url":"https://verifymcp.io/servers/com-stackduke-radar/radar","markdownUrl":"https://verifymcp.io/servers/com-stackduke-radar/radar.md","server":{"slug":"com-stackduke-radar","name":"Stackduke Radar","registryName":"com.stackduke/radar","description":"Read-only answers about tool changes in the public MCP servers on Stackduke's tracker. No sign-in.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"radar","type":"remote","identifier":"https://radar.stackduke.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-stackduke-radar/radar","version":"0.1.0","transport":null,"scoredAt":"2026-11-06T02:13:51.553Z"},"score":{"total":74,"tier":"medium","status":"scored","weekDelta":4,"history":[{"date":"2026-11-06","total":74},{"date":"2026-11-05","total":73},{"date":"2026-11-04","total":73},{"date":"2026-11-03","total":72},{"date":"2026-11-02","total":72},{"date":"2026-11-01","total":71},{"date":"2026-10-31","total":71},{"date":"2026-10-30","total":70},{"date":"2026-10-29","total":70},{"date":"2026-10-28","total":70},{"date":"2026-10-27","total":69}]},"categories":[{"name":"Endpoint Security","score":74,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":66,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 681 tokens (~170/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"170","items":"4","tools":"4","tokens":"681","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":33,"verdict":"partial","reasons":["Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"10"}}]},{"name":"Tool Coverage","score":95,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","83% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"83"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"radar","type":"remote","identifier":"https://radar.stackduke.com/mcp","withdrawn":false,"score":74,"current":true,"url":"https://verifymcp.io/servers/com-stackduke-radar/radar","markdownUrl":"https://verifymcp.io/servers/com-stackduke-radar/radar.md"}],"facts":[{"label":"Endpoint","value":"https://radar.stackduke.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"list_tracked_servers","title":"List tracked MCP servers","description":"Lists the official vendor MCP servers that Stackduke's public tracker follows. For each: its tool count, its tools counted by kind (money, destructive, send, write, unclear, read), when it was last checked and when its tools were last listed. Only these servers are covered. The tracker data is published about once a day. Read-only: answers come from Stackduke's published tracker data, and no vendor's server is contacted.","inputs":[],"outputs":[{"name":"data_as_of","type":"string","required":true,"description":"When the tracker data was published."},{"name":"servers","type":"array","required":true,"description":null},{"name":"source","type":"string","required":true,"description":"The tracker page this answer is drawn from."},{"name":"summary","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":101},{"name":"get_server_capabilities","title":"Get a server's tools by kind","description":"Gives the tool names on one tracked vendor MCP server, grouped by the most serious thing each tool is counted as able to do: money (move or spend money), destructive (changes that cannot be undone, such as deleting), send (send messages or publish to other people), write (create or change things), unclear, or read (labelled as only reading). Labels come from Stackduke's open-source scanner: the server's own annotations where it sends them, otherwise a guess from the tool's name that leans to the more serious kind. They are not verified by calling the tools, and they do not mean a server is safe. Tool descriptions are never included. A server the tracker does not follow gets a 'not covered' answer.","inputs":[{"name":"kind","type":"string","required":false,"description":"Optional. Only the tools counted as this kind."},{"name":"vendor","type":"string","required":true,"description":"The server, by id or name, for example \"huggingface\" or \"Microsoft Learn\"."}],"outputs":[{"name":"covered","type":"boolean","required":true,"description":null},{"name":"covered_vendors","type":"array","required":false,"description":null},{"name":"data_as_of","type":"string","required":true,"description":"When the tracker data was published."},{"name":"groups","type":"array","required":false,"description":null},{"name":"last_listed","type":"string|null","required":false,"description":null},{"name":"name","type":"string","required":false,"description":null},{"name":"names_withheld","type":"integer","required":false,"description":null},{"name":"source","type":"string","required":true,"description":"The tracker page this answer is drawn from."},{"name":"summary","type":"string","required":true,"description":null},{"name":"tool_count","type":"integer|null","required":false,"description":null},{"name":"vendor","type":"string","required":false,"description":null},{"name":"vendor_asked","type":"string","required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":203},{"name":"get_recent_changes","title":"Get recent tool changes","description":"Gives the changes seen to one tracked vendor MCP server's tool list in the last 1 to 30 days (default 7): tools added and removed, tools changed with the fields that changed (title, description, input or output schema, annotations), and tools now counted as able to do more than before. Each change is dated as seen between two checks, because the tracker compares one listing with the next. The answer also says how many checks were made in the period, which ones failed, and any stretch that was not watched. A change made and undone between two checks is not seen. Changed text is never quoted. A server the tracker does not follow gets a 'not covered' answer.","inputs":[{"name":"days","type":"integer","required":false,"description":"How many days back to look, 1 to 30. Default 7."},{"name":"vendor","type":"string","required":true,"description":"The server, by id or name, for example \"huggingface\" or \"Microsoft Learn\"."}],"outputs":[{"name":"changes","type":"array","required":false,"description":null},{"name":"checks_in_period","type":"integer","required":false,"description":null},{"name":"covered","type":"boolean","required":true,"description":null},{"name":"covered_vendors","type":"array","required":false,"description":null},{"name":"data_as_of","type":"string","required":true,"description":"When the tracker data was published."},{"name":"days","type":"integer","required":false,"description":null},{"name":"failed_checks","type":"array","required":false,"description":null},{"name":"failed_checks_total","type":"integer","required":false,"description":null},{"name":"last_listed","type":"string|null","required":false,"description":null},{"name":"listings_in_period","type":"integer","required":false,"description":null},{"name":"name","type":"string","required":false,"description":null},{"name":"older_changes_may_be_missing","type":"boolean","required":false,"description":null},{"name":"period","type":"object","required":false,"description":null},{"name":"source","type":"string","required":true,"description":"The tracker page this answer is drawn from."},{"name":"summary","type":"string","required":true,"description":null},{"name":"unwatched_stretches","type":"array","required":false,"description":null},{"name":"vendor","type":"string","required":false,"description":null},{"name":"vendor_asked","type":"string","required":false,"description":null},{"name":"watched_from","type":"string|null","required":false,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":199},{"name":"find_tool","title":"Find a tool by name","description":"Finds which tracked vendor MCP servers list a tool with a given name, and the kind each is counted as. By default it matches the whole name, ignoring case; with match set to 'contains' it finds names containing the text (at least 3 characters). Searches only the servers the tracker follows, at their latest listing.","inputs":[{"name":"match","type":"string","required":false,"description":null},{"name":"name","type":"string","required":true,"description":"A tool name, for example \"delete_issue\"."}],"outputs":[{"name":"data_as_of","type":"string","required":true,"description":"When the tracker data was published."},{"name":"match","type":"string","required":false,"description":null},{"name":"matches","type":"array","required":true,"description":null},{"name":"query","type":"string","required":true,"description":null},{"name":"servers_searched","type":"array","required":false,"description":null},{"name":"source","type":"string","required":true,"description":"The tracker page this answer is drawn from."},{"name":"summary","type":"string","required":true,"description":null},{"name":"total_matches","type":"integer","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":97}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T02:13:51.000Z","track":"remote","endpoint":"https://radar.stackduke.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=stackduke.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-22T14:18:46Z","notAfter":"2027-01-20T15:18:43Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"radar.stackduke.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"stackduke.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-27","recent":[{"id":"chg_01a1aea2-4153-7ddb-8704-64302e524fde","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/com-stackduke-radar/radar#chg-chg_01a1aea2-4153-7ddb-8704-64302e524fde"},{"id":"chg_01a1a456-609d-796a-9430-08493dca11f2","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-stackduke-radar/radar#chg-chg_01a1a456-609d-796a-9430-08493dca11f2"},{"id":"chg_01a19a09-7e27-7b14-98cd-ce0de2947c46","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-stackduke-radar/radar#chg-chg_01a19a09-7e27-7b14-98cd-ce0de2947c46"},{"id":"chg_01a18fbb-c9c7-76fc-9906-3f8639db2b3e","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-stackduke-radar/radar#chg-chg_01a18fbb-c9c7-76fc-9906-3f8639db2b3e"},{"id":"chg_01a18048-6686-72f4-89c8-20d2a9829325","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/com-stackduke-radar/radar#chg-chg_01a18048-6686-72f4-89c8-20d2a9829325"},{"id":"chg_01a18048-6687-732f-bf0e-21a06764ff73","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/com-stackduke-radar/radar#chg-chg_01a18048-6687-732f-bf0e-21a06764ff73"},{"id":"chg_01a17b5f-7551-7f26-aca9-e01684ffcc07","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-stackduke-radar/radar#chg-chg_01a17b5f-7551-7f26-aca9-e01684ffcc07"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-stackduke-radar/radar/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-stackduke-radar/radar","markdown":"https://verifymcp.io/servers/com-stackduke-radar/radar.md","changelogJson":"https://verifymcp.io/servers/com-stackduke-radar/radar/changelog.json","changelogRss":"https://verifymcp.io/servers/com-stackduke-radar/radar.xml","external":[{"label":"Remote endpoint","href":"https://radar.stackduke.com/mcp"},{"label":"Website","href":"https://stackduke.com/tracker"}]}}