MCP Developer Readiness Scorecard

One scorecard for the question "is my MCP server ready to ship?" It rolls up six sections — tool-definition quality, server.json registry-readiness, OAuth 2.1 authorization, transport security, tool-poisoning hygiene, and spec-revision compliance — into a single graded report with per-section sub-scores and a prioritized gap list. OpenChainGraph node ART-18 — emits a §4 hash-anchored artifact for chain composition.

⚠ A self-assessment rollup over the same rules as the per-section tools — it does not inspect a live server. For each weak section, open the linked tool to validate the actual artifact. Re-verify against the live MCP spec.

MCP Composite 6 Sections Zero PII Client-Side · No Network §4 Hash-Anchored

Ask your agent

Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

Run the AINumbers MCP tool `score_mcp_server_readiness`. Task: Roll up caller-supplied yes/partial/no answers across six MCP ship-readiness sections (tool definitions, server.json/registry, OAuth 2.1, transport security, tool-poisoning hygiene, spec-revision compliance) into an overall 0-100 score and a prioritized gap list.
Call it with arguments: {"policy_parameters":{"answers":{"tooldef_schema":"yes","tooldef_desc":"yes","tooldef_ann":"yes","serverjson_name":"yes","serverjson_meta":"yes","serverjson_pkg":"yes","oauth_prm":"yes","oauth_aud":"yes","oauth_pass":"yes","transport_origin":"yes","transport_bind":"yes","poison_clean":"yes","poison_trust":"yes","spec_rev":"yes","spec_stateless":"yes"}}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-18-mcp-developer-readiness-scorecard.html#p=v1.H4sIAAAAAAAA_wFNAbL-eyJhbnN3ZXJzIjp7InRvb2xkZWZfc2NoZW1hIjoieWVzIiwidG9vbGRlZl9kZXNjIjoieWVzIiwidG9vbGRlZl9hbm4iOiJ5ZXMiLCJzZXJ2ZXJqc29uX25hbWUiOiJ5ZXMiLCJzZXJ2ZXJqc29uX21ldGEiOiJ5ZXMiLCJzZXJ2ZXJqc29uX3BrZyI6InllcyIsIm9hdXRoX3BybSI6InllcyIsIm9hdXRoX2F1ZCI6InllcyIsIm9hdXRoX3Bhc3MiOiJ5ZXMiLCJ0cmFuc3BvcnRfb3JpZ2luIjoieWVzIiwidHJhbnNwb3J0X2JpbmQiOiJ5ZXMiLCJwb2lzb25fY2xlYW4iOiJ5ZXMiLCJwb2lzb25fdHJ1c3QiOiJ5ZXMiLCJzcGVjX3JldiI6InllcyIsInNwZWNfc3RhdGVsZXNzIjoieWVzIn19_yYnjE0BAAA