What this company’s API or MCP server gives an anonymous stranger: transport, whether anything answers without credentials, CORS, response headers and, when an MCP server replies, which of its tools can be called with no key. Scanned live, on request, because a security verdict months old is worse than none.
What this company’s API or MCP server gives an anonymous stranger: transport, whether anything answers without credentials, CORS, response headers and, when an MCP server replies, which of its tools can be called with no key. Scanned live, on request, because a security verdict months old is worse than none.
