Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.getgapup/gapup-mcp

REMOTE · MCP.GAPUP.IO · SCANNED SEP 20

271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.

Available components

0 this week 79 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability72
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 62820 tokens (~210/item across 298 items; 279 tools + 19 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage88
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 57% of tool parameters carry a description.Partial
  • Structured output schemas are declared (59% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 279 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 280 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the io.github.getgapup/gapup-mcp server?

io.github.getgapup/gapup-mcp is a hosted endpoint at https://mcp.gapup.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.gapup.io

# add to Claude Code
claude mcp add --transport http getgapup-gapup-mcp 'https://mcp.gapup.io/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "getgapup-gapup-mcp": {
      "url": "https://mcp.gapup.io/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "getgapup-gapup-mcp": {
      "type": "http",
      "url": "https://mcp.gapup.io/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.getgapup-gapup-mcp]
url = "https://mcp.gapup.io/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "getgapup-gapup-mcp": {
      "type": "remote",
      "url": "https://mcp.gapup.io/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add getgapup-gapup-mcp --url 'https://mcp.gapup.io/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  getgapup-gapup-mcp:
    url: "https://mcp.gapup.io/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "getgapup-gapup-mcp": {
      "Transport": "http",
      "Url": "https://mcp.gapup.io/mcp"
    }
  }
}
# add to Vellum
assistant mcp add getgapup-gapup-mcp -t streamable-http -u 'https://mcp.gapup.io/mcp'
// mcp.json
{
  "mcpServers": {
    "getgapup-gapup-mcp": {
      "type": "http",
      "url": "https://mcp.gapup.io/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 19 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 18 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 17 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 16 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 15 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 14 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 13 Sept 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Probed https://mcp.gapup.io/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=gapup.io CN=YE1,O=Let's Encrypt,C=US 17 Aug 2026 15 Nov 2026 ECDSA 256 ECDSA-SHA384 51c0b87de7bec3a6ae783fb3d63f32cc99f
SANs: *.gapup.io, gapup.io
CN=YE1,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 5ddd70dd31f801c85c186a7a04b80afe
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of mcp.gapup.io. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
io. present 57355 8 Verified
gapup.io. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains; preload
x-content-type-options nosniff

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.gapup.io/mcp Verified 200
http (plaintext) http://mcp.gapup.io/mcp HTTPS enforced 301 https://mcp.gapup.io/mcp
MCP tools · 279 exposed · ~61,867 tokens partial

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
cloud_cost_ri_optimizer ~178

No description provided.

NameTypeReqDescription
asyncboolean
cloud_providerstringyes
instance_familystringyes
regionstringyes
termstring
utilizationnumber
NameTypeReqDescription
break_even_monthsnumber
cost_savings_percentagenumber
on_demand_costnumber
recommended_ri_quantitynumber
regional_demand_scorenumber
ri_costnumber
sourcesarray
statusstringyes
warningsarray

No examples provided.

code_review_depth_optimizer ~188

No description provided.

NameTypeReqDescription
asyncboolean
repositorystringyes
riskTolerancestring
teamSizenumber
timeRangeDaysnumberyes
NameTypeReqDescription
recommendationobject
sourcesarray
statusstringyes
warningsarray

No examples provided.

comp_benchmark_geo_delta ~227

No description provided.

NameTypeReqDescription
asyncboolean
baseSalarynumber
currencystring
hqLocationstringyes
jobRolestringyes
localLocationstringyes
NameTypeReqDescription
adjustedSalarynumber
benchmarkDeltanumber
confidenceScorenumber
costOfLivingMultipliernumber
sourcesarray
statusstringyes
taxImpactnumber
warningsarray

No examples provided.

comp_plan_architect ~177

No description provided.

NameTypeReqDescription
asyncboolean
companyobjectyes
currentChallengesarrayyes
geographystring
preferredStructurestring
salesTeamobjectyes
targetsobjectyes

No output schema declared.

No examples provided.

competitive_deep_dive ~411

No description provided.

NameTypeReqDescription
asyncboolean
companystringyes
competitorsarray
depthstring
NameTypeReqDescription
companystringyes
comparisonarrayyes
depth_usedstringyes
domain_resolvedstring|nullyes
generated_atstringyes
kpisarrayyes
positioningobjectyes
pricing_radararrayyes
qualityobjectyes
signalsarrayyes
sourcesarrayyes
wayback_timelinearrayyes

No examples provided.

competitive_deep_dive_async ~242

No description provided.

NameTypeReqDescription
companystringyes
competitorsarray
depthstring
NameTypeReqDescription
eta_secondsnumberyes
job_idstringyes
statusstringyes
submitted_atstringyes

No examples provided.

competitive_deep_dive_result ~102

No description provided.

NameTypeReqDescription
job_idstringyes

Structured output declared, but exposes no named fields.

No examples provided.

competitor_intel ~248

No description provided.

NameTypeReqDescription
asyncboolean
competitorsarrayyes
focusstring
selfCompanyobjectyes
NameTypeReqDescription
competitorMovesarrayyes
executiveSummarystringyes
kpisarray
presenterScriptarrayyes
pricingRadararray
recommendationsarrayyes
sourcesarray

No examples provided.

competitor_moves ~166

No description provided.

NameTypeReqDescription
asyncboolean
competitorsarrayyes
focusstring
selfCompanyobjectyes

No output schema declared.

No examples provided.

competitor_pricing_radar ~161

No description provided.

NameTypeReqDescription
asyncboolean
competitorsarrayyes
focusstring
selfCompanyobjectyes

No output schema declared.

No examples provided.

competitor_pricing_scrape ~237

No description provided.

NameTypeReqDescription
asyncboolean
urlstringyes
NameTypeReqDescription
billing_model_signalsarrayyes
domainstringyes
estimated_price_rangeobjectyes
has_enterprise_tierbooleanyes
has_free_tierbooleanyes
plan_names_detectedarrayyes
pricing_foundbooleanyes
quality_scorenumberyes
raw_price_signalsarrayyes
statusstringyes
tiersarrayyes
url_fetchedstringyes
warningsarrayyes

No examples provided.

competitor_profiles ~156

No description provided.

NameTypeReqDescription
asyncboolean
competitorsarrayyes
focusstring
selfCompanyobjectyes

No output schema declared.

No examples provided.

competitor_recommendations ~169

No description provided.

NameTypeReqDescription
asyncboolean
competitorsarrayyes
focusstring
selfCompanyobjectyes

No output schema declared.

No examples provided.

content_audience_profile ~159

No description provided.

NameTypeReqDescription
asyncboolean
entity_idstringyes
entity_typestring
NameTypeReqDescription
audience_facetsobjectyes
entity_idstringyes
entity_typestringyes
provenanceobjectyes

No examples provided.

content_catalog ~197

No description provided.

NameTypeReqDescription
asyncboolean
domainstringyes
limitinteger
namestring
NameTypeReqDescription
countintegeryes
domainstringyes
franchisesarrayyes

No examples provided.

content_compare ~288

No description provided.

NameTypeReqDescription
asyncboolean
entity_astringyes
entity_bstringyes
entity_typestring
NameTypeReqDescription
a_tag_countintegeryes
b_tag_countintegeryes
entity_astringyes
entity_bstringyes
entity_typestringyes
shared_by_facetobjectyes
shared_countintegeryes
shared_tagsarrayyes
similaritynumberyes
unique_to_aarrayyes
unique_to_barrayyes

No examples provided.

content_discovery ~264

No description provided.

NameTypeReqDescription
asyncboolean
domainstringyes
limitinteger
querystring
tagstring
NameTypeReqDescription
countintegeryes
domainstringyes
franchisesarrayyes
methodstringyes
querystring|null
tagstring|null

No examples provided.

content_engine ~139

No description provided.

NameTypeReqDescription
asyncboolean
brandobjectyes
clusterobjectyes
maxArticlesPerMonthintegeryes
monthsintegeryes

No output schema declared.

No examples provided.

content_enrichment ~229

No description provided.

NameTypeReqDescription
asyncboolean
entity_idstringyes
entity_typestring
NameTypeReqDescription
entity_idstringyes
entity_typestring
provenanceobjectyes
tag_countintegeryes
tagsarrayyes

No examples provided.

content_evergreen_score_analyzer ~171

No description provided.

NameTypeReqDescription
asyncboolean
fromDatestring
toDatestring
urlstringyes
NameTypeReqDescription
backlinkCountnumber
backlinkDomainsnumber
evergreenScorenumberyes
firstSeenstring
lastSeenstring
sourcesarrayyes
statusstringyes
trafficTrendstringyes
warningsarrayyes

No examples provided.

content_provenance ~176

No description provided.

NameTypeReqDescription
asyncboolean
entity_idstringyes
entity_typestring
NameTypeReqDescription
entity_idstringyes
entity_typestringyes
freshness_summaryobjectyes
lineagearrayyes

No examples provided.

content_ranking ~358

No description provided.

NameTypeReqDescription
asyncboolean
available_onlyboolean
criterionstring
directionstring
domainstringyes
genrestring
limitinteger
year_frominteger
year_tointeger
NameTypeReqDescription
available_onlyboolean
countintegeryes
criterionstringyes
directionstring
domainstringyes
genrestring|null
rankingarrayyes
year_frominteger|null
year_tointeger|null

No examples provided.

content_similar ~185

No description provided.

NameTypeReqDescription
asyncboolean
entity_idstringyes
entity_typestring
limitinteger
NameTypeReqDescription
countintegeryes
entity_idstringyes
methodstringyes
similararrayyes
source_provenanceobjectyes

No examples provided.

content_taxonomy ~111

No description provided.

NameTypeReqDescription
asyncboolean
domainstringyes
NameTypeReqDescription
domainstringyes
facet_countintegeryes
tag_countintegeryes
taxonomyobjectyes

No examples provided.

contract_risk_scanner ~135

No description provided.

NameTypeReqDescription
asyncboolean
contractContextobjectyes
contractTextstringyes
focusstring

No output schema declared.

No examples provided.

corporate_registry_lookup ~390

No description provided.

NameTypeReqDescription
asyncboolean
company_namestringyes
countrystring
identifierstring
NameTypeReqDescription
company_namestringyes
directorsarrayyes
filings_recentarrayyes
freshnessstringyes
identifierstringyes
incorporation_datestring|null
jurisdictionstringyes
legal_formstring|null
legal_namestring|null
quality_scorenumberyes
registered_addressstring|null
registrystringyes
share_capitalobject|null
shareholdersarrayyes
sourcesarrayyes
statusstringyes

No examples provided.

court_filings_multi ~430

No description provided.

NameTypeReqDescription
asyncboolean
date_fromstring
date_tostring
jurisdictionarray
party_namestringyes
NameTypeReqDescription
by_jurisdictionobjectyes
casesarrayyes
jurisdictions_searchedarrayyes
party_namestringyes
quality_scorenumberyes
signalsarrayyes
sourcesarrayyes
statusstringyes

No examples provided.

crm_connector ~285

No description provided.

NameTypeReqDescription
asyncboolean
credentialsobject
dataobjectyes
modestringyes
providerstringyes
NameTypeReqDescription
data_synced
modestringyes
providerstringyes
quality_scorenumberyes
resource_idstring
signalsarrayyes
sourcesarrayyes
statusstringyes
successbooleanyes
urlstring

No examples provided.

cross_sell_reco ~144

No description provided.

NameTypeReqDescription
accountobjectyes
asyncboolean
companyobjectyes
portfolioarrayyes

No output schema declared.

No examples provided.

crypto_wallet_intel ~670

No description provided.

NameTypeReqDescription
addressstringyes
asyncboolean
chainstring
min_value_usdnumber
modestringyes
period_daysnumber
NameTypeReqDescription
addressstringyes
chains_analyzedarrayyes
counterpartiesarray
defi_positionsarray
modestringyes
pnl_estimateobject
quality_scorenumberyes
signalsarrayyes
sourcesarrayyes
statusstringyes
token_flowsarray
wallet_profileobject

No examples provided.

customer_marketing ~170

No description provided.

NameTypeReqDescription
asyncboolean
companyobjectyes
contentBudgetEurnumber
customersarrayyes
goalsarrayyes
productobjectyes
targetUseCasesarray

No output schema declared.

No examples provided.

customer_voice_synth ~149

No description provided.

NameTypeReqDescription
asyncboolean
companyobjectyes
dataSourcesarrayyes
repositioningFocusstring
targetSegmentsarrayyes

No output schema declared.

No examples provided.

cve_security_lookup ~478

No description provided.

NameTypeReqDescription
asyncboolean
max_resultsnumber
modestring
published_afterstring
querystringyes
severity_minstring
NameTypeReqDescription
modestringyes
quality_scorenumberyes
querystringyes
signalsarrayyes
sourcesarrayyes
statusstringyes
vulnerabilitiesarrayyes

No examples provided.

cyber_risk_auditor ~162

No description provided.

NameTypeReqDescription
asyncboolean
companyobjectyes
currentPostureobjectyes
focusstring
techStackobjectyes

No output schema declared.

No examples provided.

deal_coach ~153

No description provided.

NameTypeReqDescription
asyncboolean
buyingCommitteearrayyes
dealobjectyes
focusstring
knownContextstringyes

No output schema declared.

No examples provided.

deal_structurer ~138

No description provided.

NameTypeReqDescription
asyncboolean
companyobjectyes
dealobjectyes

No output schema declared.

No examples provided.

dependency_vulnerability_scan ~399

No description provided.

NameTypeReqDescription
asyncboolean
include_transitiveboolean
manifest_contentstringyes
modestringyes
severity_minstring
NameTypeReqDescription
dependencies_parsednumberyes
ecosystemstringyes
modestringyes
quality_scorenumberyes
recommendationsarrayyes
sourcesarrayyes
statusstringyes
summaryobjectyes
vulnerabilitiesarrayyes

No examples provided.

discovery_prep ~145

No description provided.

NameTypeReqDescription
asyncboolean
contactobjectyes
meetingGoalstring
ourOfferstringyes
prospectobjectyes

No output schema declared.

No examples provided.

diversity_inclusion_metrics ~146

No description provided.

NameTypeReqDescription
ambitionsstringyes
asyncboolean
companyobjectyes
currentStateobjectyes
focusstring
regulatoryContextarray

No output schema declared.

No examples provided.

domain_tech_fingerprint ~262

No description provided.

NameTypeReqDescription
asyncboolean
depthstringyes
focusstringyes
target_domainstringyes

No output schema declared.

No examples provided.

dora_metrics_deep_dive ~184

No description provided.

NameTypeReqDescription
asyncboolean
branchstring
repostringyes
sincestring
untilstring
NameTypeReqDescription
metricsobject
sourcesarray
statusstringyes
warningsarray

No examples provided.

dora_operational_resilience_stress_tes ~179

No description provided.

NameTypeReqDescription
asyncboolean
entityTypestringyes
existingMitigationsarray
failureDurationHoursnumberyes
ictServiceTypestringyes
impactRadiusstringyes
NameTypeReqDescription
recommendedMitigationsarrayyes
regulatoryGapsarrayyes
resilienceScorenumberyes
simulationTimestampstring
sourcesarrayyes
statusstringyes
warningsarray

No examples provided.

dpdp_consent_artifact_generator ~193

No description provided.

NameTypeReqDescription
asyncboolean
dataCategoriesarray
dataSubjectIdstringyes
legalBasisstringyes
processingPurposestringyes
retentionPeriodDaysnumber
NameTypeReqDescription
artifactobject
sourcesarray
statusstringyes
warningsarray

No examples provided.

dual_use_export_risk_mapper ~151

No description provided.

NameTypeReqDescription
asyncboolean
bomItemsarrayyes
includeSourcesboolean
NameTypeReqDescription
resultsarray
sourcesarray
statusstringyes
warningsarray

No examples provided.

dual_use_tech_diversion_monitor ~180

No description provided.

NameTypeReqDescription
asyncboolean
companyIdstring
routeobject
shipmentIdstring
techCategorystring
NameTypeReqDescription
diversionRisknumber
matchesarray
sourcesarray
statusstringyes
warningsarray

No examples provided.

earnings_reviewer ~152

No description provided.

NameTypeReqDescription
analystFocusstring
asyncboolean
companyobjectyes
quarterobjectyes
secFilingContextstring
transcriptExcerptstringyes

No output schema declared.

No examples provided.

earnings_transcript_signals ~435

No description provided.

NameTypeReqDescription
asyncboolean
company_or_tickerstringyes
langstring
quarterstring
transcript_textstring

No output schema declared.

No examples provided.

Common questions

What is the io.github.getgapup/gapup-mcp server?

io.github.getgapup/gapup-mcp is listed in the public MCP registry as io.github.getgapup/gapup-mcp. 271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call. This page covers its hosted endpoint (https://mcp.gapup.io/mcp).

Is the io.github.getgapup/gapup-mcp server safe to use?

io.github.getgapup/gapup-mcp scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

Does the io.github.getgapup/gapup-mcp server require authentication?

No. We connected to io.github.getgapup/gapup-mcp without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.github.getgapup/gapup-mcp server still maintained?

io.github.getgapup/gapup-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.