EarlyFra.me — Stateful Edge Webhook Orchestration & MCP Server
REMOTE · RELAY.EARLYFRA.ME
Stateful edge webhook fan-out to 4 targets, with confluence traps and human approval gates.
Available components
Last scanned (16 hours ago)
Scores higher than 74% of remote servers
Reachable. Last reached 22 Oct 2026.
Category Workflow Automation
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security89
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token. See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability67
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2715 tokens (~142/item across 19 items; 19 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage94
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 83% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 19 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 21 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Oct 26 +3
- Tool “inspect_live_telemetry” rewrote its description, which is the text the model reads security
- MCP protocol: fail → pass ▲ functional
- MCP protocol version: 2025-03-26 → 2025-11-25 functional
- Server version: 7.0.0 → 7.1.2 functional
- “replay_historical_signal” reworded the description of “route_id” cosmetic
- 19 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: 116 → 142 ▼ functional
- Tool coverage: 78% → 83% ▲ functional
- Stability: unverified → 0.03 ▲ functional
- Server version: 6.2.0 → 7.0.0 functional
- New tool “extract_schema_tokens” functional
- New tool “inspect_inbound_payload” functional
- New tool “preview_alert_template” functional
- New tool “update_route_template” functional
- 18 Oct 26 73
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 22 Oct 2026 · Probed https://relay.earlyfra.me/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=earlyfra.me | CN=WE1,O=Google Trust Services,C=US | 14 Oct 2026 | 12 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | efde852eaab4dd1313adfcaa9b562ca8 |
| SANs: earlyfra.me, relay.earlyfra.me, *.relay.earlyfra.me | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of relay.earlyfra.me. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| me. | present | 45352 | 8 | Verified |
| earlyfra.me. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Challenged, unverified
The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.
| Result | Challenged, unverified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | accelerometer=(), camera=(), geolocation=(), gyroscope=(), microphone=(), payment=() |
Protected resource metadata
| Retrieved | No |
|---|---|
| Problem | no_resource_metadata |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://relay.earlyfra.me/mcp | Verified | 200 | |
| http (plaintext) | http://relay.earlyfra.me/mcp | HTTPS enforced | 301 | https://relay.earlyfra.me/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
arm_confluence_trap Arm a multi-signal confluence trap ~214
Programmatically arm or disarm a route's stateful signal gate: entity scope field, required confluence tags, sliding window and per-entity cooldown. Requires the Neural Frame tier. Use it to wait for N independent confirmations on the same entity before the route fires.
| Name | Type | Req | Description |
|---|---|---|---|
| cooldown_sec | number | – | Mute repeat signals for the same entity for N seconds after firing (0 = off) |
| enabled | boolean | – | Set false to disarm the trap without clearing the rest of the route |
| entity_field | string | – | Dot-notation payload field that scopes the trap (default ticker) |
| required_tags | array | – | Signal legs that must ALL arrive inside the window, e.g. ["15m","1h"] |
| route_id | string | yes | Target route ID (e.g. rt_1) |
| tag_field | string | – | Field identifying the leg (default timeframe) |
| window_sec | number | – | Confluence sliding window in seconds (30-86400, default 900) |
No output schema declared.
No examples provided.
claim_subscription Claim a paid subscription ~69
Exchange the claim_token from subscribe_plan for the provisioned Master Passkey. Poll until status is "completed"; returns api_key, tier, quota_limit and expiry.
| Name | Type | Req | Description |
|---|---|---|---|
| claim_token | string | yes | claim_token returned by subscribe_plan |
| order_id | string | yes | order_id returned by subscribe_plan |
No output schema declared.
No examples provided.
create_or_update_route Create or update a fan-out route ~187
Programmatically deploy or update a 1-to-4 fan-out route on the global edge (requires Neural Frame tier for write operations via MCP).
| Name | Type | Req | Description |
|---|---|---|---|
| ai_enrich | boolean | – | Inject {{ai_summary}} and {{ai_sentiment}} into payload |
| custom_webhook_url | string | – | – |
| dedup_window_sec | number | – | – |
| discord_webhook_url | string | – | – |
| filter_logic | string | – | – |
| filters | array | – | – |
| id | string | – | Route ID (e.g. rt_1) or 'new' to create a new route |
| name | string | yes | Human-readable route label |
| slack_webhook_url | string | – | – |
| telegram_bot_url | string | – | – |
| telegram_chat_id | string | – | – |
| template_body | string | – | – |
| template_title | string | – | – |
No output schema declared.
No examples provided.
extract_schema_tokens Extract template tokens from live traffic ~169
The Intelligent Schema Extractor as an agent call: walks every retained inbound payload for a route and returns the {{dot.paths}} you can reference in a template — nested objects as data.object.amount, array projections as commits[].message — each with its inferred type, sample values, how many webhooks carried it and its presence ratio. Pass template_body to also see which of its tokens the traffic actually fills and how the cleaned alert renders: a token the payload lacks is dropped together with its label, so one ingest URL can serve several sources without leaking "RSI:" into the message.
| Name | Type | Req | Description |
|---|---|---|---|
| route_id | string | – | Route to extract from (defaults to every retained webhook on the passkey) |
| template_body | string | – | Optional draft body: adds resolved_tokens, omitted_tokens and rendered_preview |
No output schema declared.
No examples provided.
get_subscription_status Read subscription and quota status ~34
Return the authenticated passkey's tier, plan, quota usage, expiry, routes, registered agent identity and callback delivery history.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
inspect_inbound_payload Inspect raw inbound payloads ~159
Read the bytes a sender actually POSTed to an ingest URL, before any parsing, enrichment or filtering — one execution by event_id, or the newest few for a route. Telemetry reports what the edge decided; this reports what arrived, which is what a template has to be written against. Read-only and never charges quota.
| Name | Type | Req | Description |
|---|---|---|---|
| event_id | string | – | Inspect one retained execution in full (from inspect_live_telemetry or query_signal_memory) |
| limit | number | – | Max events to return when listing (1-25, default 5) |
| route_id | string | – | Optional route_id to list the newest retained inbounds for (e.g. rt_1). Omit to cover every route on the passkey. |
No output schema declared.
No examples provided.
inspect_live_telemetry Inspect live telemetry ~83
Fetch the latest 25 webhook execution logs (delivered and dropped signals, inbound edge location, per-target delivery latency in ms, and rescued JSON fields) from Edge Isolate RAM.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max log items to return (1-25) |
| route_id | string | – | Optional route_id filter (e.g. rt_1) |
No output schema declared.
No examples provided.
list_plans List agent-purchasable plans ~44
Return every subscription and credit top-up an AI agent can buy programmatically, with prices, quotas, accepted crypto currencies, and the checkout/claim endpoints. No authentication required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_routes List webhook routes ~42
List all deployed 1-to-4 webhook routes, isolated whk_ ingest URLs, filter rules, and quota metrics for the authenticated EarlyFra.me Master Passkey.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
preview_alert_template Preview a template against a payload ~230
Dry-run a template against a payload without saving a route or charging quota: returns the rendered title and body, the exact JSON each configured destination would receive, which tokens were omitted because the payload did not carry them, and how the noise gate, confluence and approval gates would judge the same body. Send raw_payload to test an arbitrary body, or event_id to replay one of your real retained webhooks.
| Name | Type | Req | Description |
|---|---|---|---|
| custom_body_template | string | – | Override the JSON remapper sent to the custom webhook for this preview only |
| event_id | string | – | Or replay one of your retained inbound webhooks by event_id (takes precedence over raw_payload) |
| raw_payload | string | – | Body to test — JSON, plain text or form-encoded. The edge rescues unstructured text into fields. |
| route_id | string | – | Use a saved route's destinations, filters and gates (defaults to the first route) |
| template_body | string | – | Override the route's body template for this preview only |
| template_title | string | – | Override the route's title template for this preview only |
No output schema declared.
No examples provided.
purchase_quota_boost Buy a credit top-up ~92
Create a crypto checkout that adds extra webhook quota to an existing paid passkey (e.g. agent_credit_100k, apex_overage_500k). Poll claim_subscription afterwards.
| Name | Type | Req | Description |
|---|---|---|---|
| pack | string | yes | Credit pack plan_id, e.g. agent_credit_100k or apex_overage_500k |
| pay_currency | string | – | Settlement currency, default usdttrc20 |
No output schema declared.
No examples provided.
query_signal_memory Query the edge signal memory ~146
Read the durable state plane for a Master Passkey: recently archived webhook executions (delivered / filtered / retry_pending / dlq_failed) and the signal legs currently parked in a confluence window, so an agent can see what is waiting, what failed, and what has already fired.
| Name | Type | Req | Description |
|---|---|---|---|
| entity_key | string | – | Optional entity scope filter, matching the route's stateful_gate.entity_field (e.g. SOLUSDT) |
| limit | number | – | Max rows per bucket (1-50, default 20) |
| route_id | string | – | Optional route_id filter (e.g. rt_1) |
| status_filter | string | – | Optional archive status filter |
No output schema declared.
No examples provided.
replay_historical_signal Replay a historical signal ~135
Re-run an ARCHIVED webhook against the route's CURRENT filter, enrichment, blackout, confluence and template rules — a time-travel backtest against real past traffic. dry_run=true reports the exact rule evaluation and transformed output without dispatching anything.
| Name | Type | Req | Description |
|---|---|---|---|
| dry_run | boolean | – | true (default) = report only; false = re-dispatch through the current rules |
| event_id | string | yes | Archived event_id to replay (from query_signal_memory or inspect_live_telemetry) |
| route_id | string | – | Optional route whose current rules should be applied; defaults to the route that received the archived event |
No output schema declared.
No examples provided.
rotate_route_token Rotate a route ingest token ~55
Cryptographically rotate a route's public whk_... webhook ingest token without altering the Master Passkey. The previous URL stops working immediately.
| Name | Type | Req | Description |
|---|---|---|---|
| route_id | string | yes | Target route ID (e.g. rt_1) |
No output schema declared.
No examples provided.
set_agent_callback Register an agent lifecycle callback ~51
Register, rotate, or clear the HTTPS webhook that receives HMAC-signed subscription lifecycle events for this passkey.
| Name | Type | Req | Description |
|---|---|---|---|
| callback_url | string | yes | HTTPS endpoint, or an empty string to clear the callback |
No output schema declared.
No examples provided.
simulate_webhook_frame Dry-run a webhook payload ~72
Run a zero-quota dry-run simulation of a raw plain-text or JSON webhook payload against a route's filter rules, templates, and Edge AI synthesis.
| Name | Type | Req | Description |
|---|---|---|---|
| raw_payload | string | yes | Raw plain-text or JSON webhook payload to test |
| route_id | string | – | Optional route_id to test against |
No output schema declared.
No examples provided.
subscribe_plan Buy a subscription (machine-payable) ~215
Create a crypto checkout for a subscription plan and receive a concrete deposit address so an autonomous agent or treasury can settle it without a browser. Poll claim_subscription afterwards to obtain the Master Passkey.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | object | – | Optional agent identity recorded on the subscription |
| callback_url | string | – | HTTPS endpoint that receives HMAC-signed subscription.activated / quota.topped_up lifecycle events |
| string | yes | Owner/operator email for receipts and passkey recovery | |
| existing_api_key | string | – | Existing ef_live_... passkey when renewing, upgrading, or buying a credit top-up |
| metadata | object | – | Optional opaque metadata (<= 1024 bytes) stored with the subscription |
| pay_currency | string | – | Settlement currency, e.g. usdttrc20 (default), usdterc20, usdc, btc, eth, sol |
| plan_id | string | yes | Plan from list_plans, e.g. neural_monthly, pro_monthly, agent_credit_100k |
No output schema declared.
No examples provided.
synthesize_edge_ai Synthesize Edge AI signal enrichment ~61
Run EarlyFra.me Edge AI over a raw webhook payload (JSON, form, or plain text) and return ai_summary, ai_sentiment and ai_score. Requires Neural Frame.
| Name | Type | Req | Description |
|---|---|---|---|
| raw_payload | string | yes | Raw payload text or JSON to analyse |
No output schema declared.
No examples provided.
update_route_template Save a route template ~170
Write template_title, template_body and the custom JSON remapper onto an existing route in one call. The edit is partial: every field you leave out keeps its stored value, so destinations, noise-gate rules and stateful gates survive a template-only change. Requires the Neural Frame tier, and charges no quota — but the saved route starts shaping live traffic immediately.
| Name | Type | Req | Description |
|---|---|---|---|
| custom_body_template | string | – | JSON remapper for the 4th destination. Must stay valid JSON once placeholders are substituted. |
| route_id | string | yes | Target route ID (e.g. rt_1) |
| template_body | string | – | New body template, up to 600 characters |
| template_title | string | – | New title template. An empty string clears it; omit the field to keep the current one. |
No output schema declared.
No examples provided.
How do I install the EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… server?
EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… is a hosted endpoint at https://relay.earlyfra.me/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · relay.earlyfra.me
claude mcp add --transport http me-earlyfra-earlyframe-mcp 'https://relay.earlyfra.me/mcp'
What is the EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… server?
EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… is listed in the public MCP registry as me.earlyfra/earlyframe-mcp. Stateful edge webhook fan-out to 4 targets, with confluence traps and human approval gates. This page covers its hosted endpoint (https://relay.earlyfra.me/mcp).
Is the EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… server safe to use?
EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… server expose?
EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… exposes 19 tools: list_routes, inspect_live_telemetry, simulate_webhook_frame, create_or_update_route, rotate_route_token, and 14 more. Their descriptions and schemas cost roughly 2,228 tokens of context every time the server is loaded.
Does the EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… server require authentication?
Yes. EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… server still maintained?
EarlyFra.me — Stateful Edge Webhook Orchestration & MCP… is still listed as active in the MCP registry. We last reached this channel on 22 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.