Accredible MCP by usefulapi
REMOTE · ACCREDIBLE.USEFULAPI.IO
Read Accredible credentials, groups, designs, analytics, skills; issue one credential as a draft.
Available components
Last scanned (23 hours ago)
Scores higher than 47% of remote servers
Reachable. Last reached 16 Oct 2026.
Category Education and Research
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security78
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability79
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2940 tokens (~154/item across 19 items; 19 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 19 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 +3
- The server rewrote its instructions, which are the text every model session reads security
- The server now declares the “prompts” capability functional
- First check of Schema quality: 100 functional
- New prompt “getting_started” functional
- Server version: 1.0.0 → 1.1.0 functional
- 13 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- 12 Oct 26 60
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 16 Oct 2026 · Probed https://accredible.usefulapi.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=usefulapi.io | CN=WE1,O=Google Trust Services,C=US | 13 Sept 2026 | 12 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | d9be3287b0fde9630e825ba1f79bff3f |
| SANs: usefulapi.io, *.usefulapi.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of accredible.usefulapi.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 57355 | 8 | Verified |
| usefulapi.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 302 |
WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://accredible.usefulapi.io/.well-known/oauth-protected-resource/mcp"
Bearer realm="OAuth", resource_metadata="https://accredible.usefulapi.io/.well-known/oauth-protected-resource/mcp" Protected resource metadata
| Document | https://accredible.usefulapi.io/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://accredible.usefulapi.io/mcp |
| Authorisation server | https://accredible.usefulapi.io |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://accredible.usefulapi.io/mcp | Redirected | 302 | https://usefulapi.io/accredible/ |
| http (plaintext) | http://accredible.usefulapi.io/mcp | Inconclusive | 302 | http://accredible.usefulapi.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
accredible_get_credential Get a credential ~85
One credential in full: recipient, group, issue and expiry dates, published state, public URL, evidence items, references, custom attributes and skills. The id is the numeric credential id or the custom id your organization set. GET /v1/credentials/{id}.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Credential id (numeric) or the custom credential id (license_id). |
No output schema declared.
No examples provided.
accredible_get_credential_analytics Get a credential's analytics events ~71
The analytics events of one credential (recipient views, shares, privacy changes, verification and so on) with timestamps. Read-only despite being a POST. POST /v1/credentials/analytics/{id}.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Credential id (numeric) or the custom credential id. |
No output schema declared.
No examples provided.
accredible_get_data_export Get a data export ~55
One data export: department, status and, once completed, the download links of its files. GET /v1/data_exports/{id}.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Data export id (accredible_list_data_exports). |
No output schema declared.
No examples provided.
accredible_get_department Get a department ~53
One department: name, description, URL, branding and meta_data. GET /v1/departments/{department_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| department_id | integer | yes | Department id (accredible_search_departments lists them). |
No output schema declared.
No examples provided.
accredible_get_design Get a design ~50
One badge or certificate design with its settings. GET /v1/designs/{design_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| design_id | integer | yes | Design id (accredible_search_designs or a group's design_id). |
No output schema declared.
No examples provided.
accredible_get_group Get a group ~62
One group in full: name, course name and description, learning outcomes, design ids, language, skills and dates. GET /v1/issuer/groups/{group_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| group_id | integer | yes | Group id (accredible_search_groups lists them). |
No output schema declared.
No examples provided.
accredible_get_issuer Get the issuer (account) ~53
The Accredible issuer (organization) behind the API key: id, name, e-mail, remaining credential credits (certificate_left), language and URL. Good first call. GET /v1/issuer/details.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
accredible_get_team_member Get a team member ~69
One team member of the account: name, e-mail and permissions per department. Which members are visible depends on the key (an account-wide key sees all, a department key its own department). GET /v1/team_members/{id}.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Team member id. |
No output schema declared.
No examples provided.
accredible_issue_credential Issue a credential to ONE recipient ~490
WRITE: creates ONE credential (badge or certificate) for ONE recipient in an existing group. By default it is created UNPUBLISHED (a draft: no e-mail is sent and no credit is used); publish it later in the Accredible Dashboard. With publish=true the credential is published immediately: Accredible then SENDS AN E-MAIL to the recipient (as configured in the group's e-mail settings) and uses one credential credit of the account; an account without credits keeps it unpublished. A sandbox-mode setting in the Dashboard overrides publish. Not idempotent: calling twice creates two credentials (set credential_id to your own unique id to be able to find it again). No evidence, references, bulk issuing, edits or deletes. POST /v1/credentials.
| Name | Type | Req | Description |
|---|---|---|---|
| complete | boolean | – | Whether the achievement is complete (default true); false marks it in progress. |
| credential_id | string | – | Your own unique id for this credential (license_id); Accredible assigns one if omitted. |
| custom_attributes | object | – | Custom attribute values merged into the design, e.g. {"Location": "London"} (keys must exist: accredible_search_attribute_keys). |
| description | string | – | Credential/course description; required only when the group has no course description. |
| expired_on | string | – | Expiry date YYYY-MM-DD (default none). |
| group_id | integer | yes | The group the credential belongs to (accredible_search_groups); it supplies the design and course texts. |
| issued_on | string | – | Issue date YYYY-MM-DD (default today). |
| meta_data | object | – | Key/value strings you attached to the object's meta_data when you created it; matches objects carrying these pairs. |
| name | string | – | Credential/course name; required only when the group has no course name. |
| private | boolean | – | Make the credential private: visible only to the recipient after signing in to credential.net. |
| publish | boolean | – | Default false: create an unpublished draft (no e-mail). true: publish now, which e-mails the recipient and uses one credit. |
| recipient_email | string | yes | The recipient's e-mail address (exactly one recipient). |
| recipient_id | string | – | Your own id for the recipient (maps recipients to credentials across e-mail changes). |
| recipient_name | string | yes | The recipient's full name as printed on the credential. |
No output schema declared.
No examples provided.
accredible_list_analytics List credential analytics events ~156
Account-wide credential analytics events (views, shares, downloads and similar), optionally for a date range, group or department. Paged (default 100 per page). GET /v1/analytics.
| Name | Type | Req | Description |
|---|---|---|---|
| department_id | integer | – | Only events of credentials in this department. |
| end_date | string | – | Only events before this date (YYYY-MM-DD). |
| group_id | integer | – | Only events of credentials in this group. |
| page | integer | – | Page number, 1-based (default 1). Use meta.next_page from the previous reply. |
| page_size | integer | – | Results per page (default 100). |
| start_date | string | – | Only events after this date (YYYY-MM-DD). |
No output schema declared.
No examples provided.
accredible_list_data_exports List data exports ~58
Data exports of the departments the key can access: department, status (scheduled, processing, completed, errored) and download links of completed files. Exports are created in the Accredible Dashboard. GET /v1/data_exports.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
accredible_list_skill_frameworks List skill frameworks ~141
The skills frameworks (O*NET, ESCO, NACE or your own) enabled for a department, each with its published versions. Needs a plan that includes skills frameworks (otherwise HTTP 403 plan_not_entitled). Paged, max 10 per page. GET /v1/skill_frameworks.
| Name | Type | Req | Description |
|---|---|---|---|
| department_id | integer | yes | Department to list frameworks for (required, also for department keys). |
| page | integer | – | Page number, 1-based (default 1). Use meta.next_page from the previous reply. |
| page_size | integer | – | Results per page, 1-10 (default 5). |
No output schema declared.
No examples provided.
accredible_search_attribute_keys Search custom attribute keys ~147
List the custom attribute keys (placeholders such as a grade or date that credential designs and e-mails merge in); useful to know which custom_attributes a credential can carry. Paged: pass meta.next_page as page. POST /v1/attribute_keys/search (a read-only search).
| Name | Type | Req | Description |
|---|---|---|---|
| department_id | integer | – | Only keys of this department. |
| kind | string | – | Attribute kind. |
| name | string | – | Attribute key name. |
| page | integer | – | Page number, 1-based (default 1). Use meta.next_page from the previous reply. |
| page_size | integer | – | Results per page, 1-100 (default 50). |
No output schema declared.
No examples provided.
accredible_search_collections Search collections ~166
List collections (sets of groups shown together). Filters: ids, name (substring), public. Paged: pass meta.next_page as page. POST /v1/collections/search (a read-only search).
| Name | Type | Req | Description |
|---|---|---|---|
| ids | array | – | Only these collection ids (UUIDs). |
| name | string | – | Part of the collection name. |
| page | integer | – | Page number, 1-based (default 1). Use meta.next_page from the previous reply. |
| page_size | integer | – | Results per page, 1-100 (default 50). |
| public | boolean | – | true = only public collections, false = only non-public. |
| sort_by | string | – | Sort field. |
| sort_order | string | – | Sort direction (default asc). |
No output schema declared.
No examples provided.
accredible_search_credentials Search credentials ~433
Search issued credentials (badges and certificates) with filters that combine with AND, newest first by default. Returns id, uuid, encoded_id, recipient name/e-mail, group, issued_on, expired_on, published state (approve), whether the recipient opened or engaged, and meta. Paging: size + offset (first 10 000 results) OR cursor: when the reply has next_cursor pass it as cursor for the next page (cursor and offset cannot be combined). POST /v2/credentials/search (a read-only search).
| Name | Type | Req | Description |
|---|---|---|---|
| created_after | string | – | Created on or after this date (YYYY-MM-DD). |
| cursor | string | – | The next_cursor of the previous reply. Not with offset. |
| expires_after | string | – | Expires on or after this date (YYYY-MM-DD). |
| expires_before | string | – | Expires on or before this date (YYYY-MM-DD). |
| group_id | integer | – | Only credentials of this group (accredible_search_groups lists group ids). |
| issued_after | string | – | Issued on or after this date (YYYY-MM-DD). |
| issued_before | string | – | Issued on or before this date (YYYY-MM-DD). |
| license_id | string | – | The custom credential id your organization set when issuing. |
| offset | integer | – | Records to skip (offset paging, max 9950). Not with cursor. |
| published | boolean | – | true = only published credentials, false = only unpublished drafts; omit for both. |
| recipient_email | string | – | Exact recipient e-mail address. |
| recipient_id | string | – | The recipient id your organization set when issuing. |
| recipient_name | string | – | Exact recipient name. |
| size | integer | – | Results per page, 1-100 (default 50). |
| sort_by | string | – | Sort field (default: the API's order). |
| sort_order | string | – | Sort direction (default desc when sort_by is set). |
| updated_after | string | – | Updated on or after this date (YYYY-MM-DD). |
| uuid | string | – | Credential UUID. |
No output schema declared.
No examples provided.
accredible_search_departments Search departments ~139
List departments (independent organization units with their own designs, groups and branding). An account-wide key sees all, a department key only its own. Paged: pass meta.next_page as page. POST /v1/departments/search (a read-only search).
| Name | Type | Req | Description |
|---|---|---|---|
| meta_data | object | – | Key/value strings you attached to the object's meta_data when you created it; matches objects carrying these pairs. |
| page | integer | – | Page number, 1-based (default 1). Use meta.next_page from the previous reply. |
| page_size | integer | – | Results per page, 1-100 (default 50). |
No output schema declared.
No examples provided.
accredible_search_designs Search designs ~80
List badge and certificate designs, optionally by kind or meta_data. POST /v1/designs/search (a read-only search).
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | – | Design kind, for example badge or certificate. |
| meta_data | object | – | Key/value strings you attached to the object's meta_data when you created it; matches objects carrying these pairs. |
No output schema declared.
No examples provided.
accredible_search_groups Search groups ~263
Search groups (an achievement such as a course or qualification that credentials belong to). Filters combine with AND; name and course_name match partially. Returns id, name, course name and description, design ids, language and dates. Paged: pass meta.next_page as page. POST /v1/issuer/groups/search (a read-only search).
| Name | Type | Req | Description |
|---|---|---|---|
| collection_ids | array | – | Only groups linked to any of these collection UUIDs. |
| course_name | string | – | Part of the course name. |
| department_id | integer | – | Only groups of this department (must be accessible to the key). |
| ids | array | – | Only these group ids. |
| meta_data | object | – | Key/value strings you attached to the object's meta_data when you created it; matches objects carrying these pairs. |
| name | string | – | Part of the group name. |
| page | integer | – | Page number, 1-based (default 1). Use meta.next_page from the previous reply. |
| page_size | integer | – | Results per page, 1-100 (default 50). |
| updated_after | string | – | Only groups updated after this date (YYYY-MM-DD). |
| updated_before | string | – | Only groups updated before this date (YYYY-MM-DD). |
No output schema declared.
No examples provided.
accredible_search_skills Search skills in a framework version ~163
Search the skills of one published skills-framework version by name or the publisher's identifier (partial, case-insensitive, at least 2 characters). Paged, max 50 per page. GET /v1/skill_frameworks/{id}/versions/{version_id}/skills.
| Name | Type | Req | Description |
|---|---|---|---|
| framework_id | integer | yes | Skill framework id (accredible_list_skill_frameworks). |
| page | integer | – | Page number, 1-based (default 1). Use meta.next_page from the previous reply. |
| page_size | integer | – | Results per page, 1-50 (default 50). |
| query | string | yes | Text to search for (min 2 characters). |
| version_id | integer | yes | Version id from the framework's versions array. |
No output schema declared.
No examples provided.
How do I install the Accredible MCP by usefulapi server?
Accredible MCP by usefulapi is a hosted endpoint at https://accredible.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · accredible.usefulapi.io
claude mcp add --transport http io-usefulapi-accredible 'https://accredible.usefulapi.io/mcp'
What is the Accredible MCP by usefulapi server?
Accredible MCP by usefulapi is listed in the public MCP registry as io.usefulapi/accredible. Read Accredible credentials, groups, designs, analytics, skills; issue one credential as a draft. This page covers its hosted endpoint (https://accredible.usefulapi.io/mcp).
Is the Accredible MCP by usefulapi server safe to use?
Accredible MCP by usefulapi scores 64 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Accredible MCP by usefulapi server expose?
Accredible MCP by usefulapi exposes 19 tools: accredible_get_issuer, accredible_search_credentials, accredible_get_credential, accredible_get_credential_analytics, accredible_list_analytics, and 14 more. Their descriptions and schemas cost roughly 2,734 tokens of context every time the server is loaded.
Does the Accredible MCP by usefulapi server require authentication?
Yes. Accredible MCP by usefulapi asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Accredible MCP by usefulapi server still maintained?
Accredible MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 16 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.