{"note":"Convenience discovery manifest. The authoritative x402 payment requirements are returned by the paid endpoint in the HTTP 402 response.","service":"ZeroWorker MCP Trust Gate","description":"MCP security checks and feedback for users and developers. Choose paid access without reports, or ongoing free access within limits: POST /v1/client-token; 1 check/24h + 1 for a previous-use report. Check URL/DNS, metadata/schema/auth, OSV/CVE risk and catalog drift before connecting. Verified owners can read consented weekly reports. ALLOW/BLOCK/UNKNOWN uses caller-confirmed versions. No tool execution or safety certification. Terms: /complimentary-policy.","purpose":"ZeroWorker MCP Trust Gate connects MCP users and developers through security checks and feedback. Users can build pre-connection checks into their workflows; developers can self-check their MCPs and use Provider Insights to read protected, consented weekly feedback for endpoints they control.","discovery":{"canonical":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/discovery.json","endpoint":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp","serverCard":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp/server-card","guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp-guide","registryMetadata":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/server.json"},"accessModel":"paid_or_recurring_free","freeAccess":{"version":"complimentary-discovery-v1","enabled":true,"accessModel":"recurring_free_with_optional_feedback","message":"Ongoing free access available: POST /v1/client-token with {}. Reuse your token. One check per rolling 24h plus nine unlocked by one honest previous-use report. Client quotas and shared capacity apply; no paid upgrade is required to keep using available free grants.","walletRequired":false,"accountRequired":false,"quotaScope":"anonymous_client_not_verified_person","daily":{"count":1,"rollingHours":24},"contribution":{"count":9,"rollingHours":24,"unlockHours":24,"requires":"One unused observation token and an honest report; subsequent unlocked calls need no report"},"clientToken":{"method":"POST","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/client-token","headers":{"Content-Type":"application/json"},"body":{},"responseField":"anonymousClientToken","reuseForDays":90},"analyze":{"method":"POST","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze","headers":{"Content-Type":"application/json"},"bodyExample":{"url":"https://your-public-mcp.example/mcp","access":{"mode":"complimentary","clientToken":"YOUR_SAVED_CLIENT_TOKEN"}}},"onLimit":"Wait for your allowance or explicitly authorize x402 payment. Do not rotate client tokens to evade quotas. No automatic charge follows a 402.","reportTrust":"unverified_self_report","policy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/complimentary-policy","guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/llms.txt","browser":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/complimentary","browserTrial":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/complimentary","developers":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers"},"developerCapabilities":{"guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers","selfCheck":{"status":"available","method":"POST","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze","purpose":"Check your public MCP before release and after updates using the same evidence agents see."},"providerInsights":{"status":"available","releaseStatus":"released","apiAvailable":true,"purpose":"Owner-scoped, consented aggregate feedback to help MCP developers understand reported use, failures and reasons for not using their MCP.","currentSharing":"explicit_new_ticket_consent_only","sharingConsentAvailable":true,"dashboard":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/developers/reports","policy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/provider-policy","claims":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/provider-claims","ownership":"Endpoint control must be verified before sharing any provider report.","evidence":"Unverified self-reports; not a user count, benchmark, security score or safety certification."}},"version":"0.3.0","resource":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze","method":"POST","protocol":"x402 v2","price":"$0.005","network":"eip155:8453","networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"paymentOptions":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xad277cf8B5D9fa5008D06cBdBE349F5DF3c0Cc8f","currency":"USDC","price":"$0.005","amount":"5000"},{"scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","payTo":"EtmJof6dunotKvh18rBhfqeML5kZp6gCUmiY6MSf4qjb","currency":"USDC","price":"$0.005","amount":"5000"}],"mimeType":"application/json","primaryOutput":"vulnerabilityGate.decision: ALLOW | BLOCK | UNKNOWN","enforcementModel":"Client-side pre-connect gate; normal MCP payloads are not proxied.","freeDemo":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/demo","historyPolicy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/history-policy","phases":{"phase1":"Static inspection of MCP catalog metadata, poisoning indicators, Unicode, schemas, capabilities and observable authentication posture. No tool invocation or runtime-output inspection.","phase2":"Hash-based catalog history and change comparison on observed catalogs. Unchanged observations update counters without creating a new version. Coverage changes establish a separate baseline."},"openapi":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/openapi.json","paymentPolicy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/payment-policy","settlement":{"service":"ZeroWorker MCP Trust Gate","version":"0.3.0","protocol":"x402 v2 authorization flow","resource":{"method":"POST","url":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze"},"price":"$0.005","network":"eip155:8453","networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"paymentOptions":[{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xad277cf8B5D9fa5008D06cBdBE349F5DF3c0Cc8f","currency":"USDC","price":"$0.005","amount":"5000"},{"scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","payTo":"EtmJof6dunotKvh18rBhfqeML5kZp6gCUmiY6MSf4qjb","currency":"USDC","price":"$0.005","amount":"5000"}],"paymentSelection":"Choose one entry from the live PAYMENT-REQUIRED accepts array; the primary network field is retained for compatibility. No automatic bridging or double payment.","historyPolicy":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/history-policy","historyPurchaseScope":"The fee buys the current analysis, not a monitoring subscription or a permanent archival/retrieval guarantee. No public history-query endpoint is provided. options.catalogHistory=false opts out of that request's history recording; it does not erase previous history.","chargedWhen":["A valid x402 payment authorization is supplied and /v1/analyze completes successfully with HTTP 200.","Reachable=false, auth-required, no-CVE, or weak/empty component evidence can still be successful chargeable analysis outcomes when the pipeline completes normally."],"notChargedWhen":["Transport hardening rejects the request before payment authorization (rate limit, body size, Content-Type, or malformed JSON).","The server returns an HTTP 402 challenge and the caller does not provide a valid payment authorization.","MCP semantic validation or public-DNS safety fails after authorization, before target fetch (400/422).","Payment setup or promised Security API enrichment fails and the paid resource returns 503."],"sequencing":"transport checks -> x402 authorization -> MCP input/DNS safety -> target probe -> OSV -> Security enrichment -> successful resource -> settlement","privacy":"PAYMENT-SIGNATURE values and raw User-Agent values are not logged; only presence/settlement state, allowlisted offered/selected/settled network IDs and coarse client class are recorded. A selected network is an unverified client claim, not proof of payment."},"x-zeroworker-mcp":{"endpoint":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp","serverCard":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp/server-card","guide":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/mcp-guide","registryMetadata":"https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/server.json","transport":"streamable-http","supportedProtocolVersions":["2025-11-25","2025-06-18","2025-03-26"]}}