{"name":"ZeroWorker MCP Trust Gate","trustEvidence":{"enabled":true,"policy":"mcp-trust-evidence-v1","mode":"non_invoking_public_metadata","defaultWhenEnabled":true,"callerOptOut":"options.trustEvidence=false","registryHint":"options.registryName","persistence":false,"note":"Protocol, Official Registry and public OAuth metadata evidence; available only when MCP_TRUST_EVIDENCE_ENABLED=true. Best-effort, non-invoking, no OAuth flow, no safety certification; vulnerabilityGate semantics unchanged."},"version":"0.3.0","tagline":"Check before connecting. Turn feedback into better MCPs.","purpose":"ZeroWorker MCP Trust Gate connects MCP users and developers through security checks and feedback. Users can build pre-connection checks into their workflows; developers can self-check their MCPs and use Provider Insights to read protected, consented weekly feedback for endpoints they control.","discovery":{"canonical":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/discovery.json","endpoint":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp","serverCard":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp/server-card","guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp-guide","registryMetadata":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/server.json"},"accessModel":"paid_or_recurring_free","safety":"No tools/call execution, no exploit payloads, no target credentials, and no proxying of normal MCP tool payloads. Public HTTP(S) MCP endpoints only; production requires HTTPS.","endpoints":{"demo":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/demo","quickstart":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/quickstart","buyer":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/buyer.mjs","buyerEnvExample":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/buyer.env.example","health":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/health","samples":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/sample?case=affected","analyze":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze","products":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/products","llms":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/llms.txt","skill":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/SKILL.md","skillAlias":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/skill.md","securityTxt":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/.well-known/security.txt","robots":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/robots.txt","x402":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/.well-known/x402","openapi":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/openapi.json","paymentPolicy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/payment-policy","historyPolicy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/history-policy","complimentaryPolicy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/complimentary-policy","clientToken":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/client-token","developers":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers","providerReports":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers/reports","providerPolicy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/provider-policy"},"freeAccess":{"version":"complimentary-discovery-v1","enabled":true,"accessModel":"recurring_free_with_optional_feedback","message":"Ongoing free access available: POST /v1/client-token with {}. Reuse your token. One check per rolling 24h plus nine unlocked by one honest previous-use report. Client quotas and shared capacity apply; no paid upgrade is required to keep using available free grants.","walletRequired":false,"accountRequired":false,"quotaScope":"anonymous_client_not_verified_person","daily":{"count":1,"rollingHours":24},"contribution":{"count":9,"rollingHours":24,"unlockHours":24,"requires":"One unused observation token and an honest report; subsequent unlocked calls need no report"},"clientToken":{"method":"POST","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/client-token","headers":{"Content-Type":"application/json"},"body":{},"responseField":"anonymousClientToken","reuseForDays":90},"analyze":{"method":"POST","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze","headers":{"Content-Type":"application/json"},"bodyExample":{"url":"https://your-public-mcp.example/mcp","access":{"mode":"complimentary","clientToken":"YOUR_SAVED_CLIENT_TOKEN"}}},"onLimit":"Wait for your allowance or explicitly authorize x402 payment. Do not rotate client tokens to evade quotas. No automatic charge follows a 402.","reportTrust":"unverified_self_report","policy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/complimentary-policy","guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/llms.txt","browser":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/complimentary","browserTrial":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/complimentary","developers":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers"},"developerCapabilities":{"guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers","selfCheck":{"status":"available","method":"POST","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze","purpose":"Check your public MCP before release and after updates using the same evidence agents see."},"providerInsights":{"status":"available","releaseStatus":"released","apiAvailable":true,"purpose":"Owner-scoped, consented aggregate feedback to help MCP developers understand reported use, failures and reasons for not using their MCP.","currentSharing":"explicit_new_ticket_consent_only","sharingConsentAvailable":true,"dashboard":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers/reports","policy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/provider-policy","claims":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/provider-claims","ownership":"Endpoint control must be verified before sharing any provider report.","evidence":"Unverified self-reports; not a user count, benchmark, security score or safety certification."}},"phases":{"phase1":"Static inspection of MCP catalog metadata, poisoning indicators, Unicode, schemas, capabilities and observable authentication posture. No tool invocation or runtime-output inspection.","phase2":"Hash-based catalog history and change comparison on observed catalogs. Unchanged observations update counters without creating a new version. Coverage changes establish a separate baseline."},"payment":{"enabled":true,"protocol":"x402 v2","price":"$0.005","network":"eip155:8453","networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"paymentOptions":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xad277cf8B5D9fa5008D06cBdBE349F5DF3c0Cc8f","currency":"USDC","price":"$0.005","amount":"5000"},{"scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","payTo":"EtmJof6dunotKvh18rBhfqeML5kZp6gCUmiY6MSf4qjb","currency":"USDC","price":"$0.005","amount":"5000"}],"currency":"USDC","accountRequired":false,"apiKeyRequired":false,"reportRequired":false,"policy":"Rate limits, body-size limits, Content-Type, and JSON syntax are checked before the x402 challenge. MCP target semantics and public-DNS safety are checked after payment authorization but before any target fetch; unsuccessful resource responses are not successful settlements in the authorization flow.","contract":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/payment-policy"},"zeroWorkerFamily":{"current":{"name":"ZeroWorker MCP Trust Gate","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev","useWhen":"MCP security checks and feedback for users and developers. Choose paid access without reporting or recurring free access within limits. Check known vulnerabilities, static metadata risks and catalog changes before connecting; consented feedback helps developers understand user decisions."},"webAction":{"name":"ZeroWorker Web Action API","url":"https://zeroworker-web-action-api.zeroworker-lab.workers.dev","demo":"https://zeroworker-web-action-api.zeroworker-lab.workers.dev/demo","useWhen":"Before browser automation: inspect forms, SPA/CAPTCHA signals, and decide whether direct HTTP or a browser is the better route."},"security":{"name":"ZeroWorker Security API","url":"https://zeroworker-security-api.zeroworker-lab.workers.dev","sample":"https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/sample","useWhen":"When you already have CVE identifiers and want EPSS, CISA KEV, ransomware-use, deterministic score, and tier enrichment."}},"x-zeroworker-mcp":{"endpoint":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp","serverCard":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp/server-card","guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp-guide","registryMetadata":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/server.json","transport":"streamable-http","supportedProtocolVersions":["2025-11-25","2025-06-18","2025-03-26"]}}