No, not as the registry describes it. 1 declared endpoint failed the MCP initialize handshake on 2026-11-12 — the protocol's own way of asking a server to identify itself. No tool was ever called.
ERR-2026-2353
Its declared address answered neither a request nor a TLS handshake on 2026-11-13, across 7 cases. This is a weaker finding than a host that does not exist: a server can be temporarily down.
ERR-2026-1644, ERR-2026-8749, ERR-2026-8750, ERR-2026-8751, ERR-2026-8752, ERR-2026-8753, ERR-2026-8754
8 open records, observed 2026-09-10. Every claim below carries the command that disproves it. If one is wrong, it should be withdrawn — 1300 have been across the whole registry.
The declared endpoint answered the handshake with a server error.
ERR-2026-1644 | https://mcp-x402-gitlab-main.onrender.com/mcp | removed initialize returned HTTP 404 | checked 2026-11-13, 20 times |
ERR-2026-8749 | https://sml-agent-products.onrender.com/agent-safety/mcp | http_error initialize returned HTTP 503 | checked 2026-11-12, 3 times |
ERR-2026-8750 | https://bid-cast.onrender.com/mcp | http_error initialize returned HTTP 503 | checked 2026-11-12, 3 times |
ERR-2026-8751 | https://sml-quant-terminal.onrender.com/mcp | http_error initialize returned HTTP 503 | checked 2026-11-12, 3 times |
ERR-2026-8752 | https://sml-robinhood-rwa-intelligence.onrender.com/mcp | http_error initialize returned HTTP 503 | checked 2026-11-12, 3 times |
ERR-2026-8753 | https://sml-agent-products.onrender.com/ticker-research/mcp | http_error initialize returned HTTP 503 | checked 2026-11-12, 3 times |
ERR-2026-8754 | https://sml-agent-products.onrender.com/token-verdict/mcp | http_error initialize returned HTTP 503 | checked 2026-11-12, 3 times |
Check it yourself:
curl -s -X POST https://mcp-x402-gitlab-main.onrender.com/mcp -H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"check","version":"1"}}}'
The endpoint this registry entry declares returns 404 or 410 to the MCP initialize handshake.
ERR-2026-2353 | https://mcp-x402-gitlab-main.onrender.com/mcp | removed initialize returned HTTP 404 | checked 2026-11-12, 3 times |
Check it yourself:
curl -s -X POST https://mcp-x402-gitlab-main.onrender.com/mcp -H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"check","version":"1"}}}'
Also filed as: com.scriptmasterlabs, com.scriptmasterlabs/agent-safety, com.scriptmasterlabs/quant-terminal, com.scriptmasterlabs/robinhood-rwa, com.scriptmasterlabs/squeezeos, com.scriptmasterlabs/ticker-research, com.scriptmasterlabs/token-verdict, com.scriptmasterlabs/x402-gateway. One page, because two sweeps named the same subject differently and the record that mattered was on the page nobody would open.
Run its check. If the answer differs from what is written, say so here and it will be withdrawn — 1300 already have been. A record nobody can contest is a record asking to be trusted, which is the opposite of the point.
You arrived here about one subject. For any other — before you use it — one request, no account and no key:
GET https://apidefects.com/check?tool=<identity>
<identity> is whatever you already hold: an MCP registry entry (io.github.owner/repo), a deployment URL, an OpenAPI document URL, an npm or PyPI package name, or a host. The answer is one of three — defects_known, examined_nothing_open, or never_examined — and the third is not a clean bill of health. If you speak MCP, this registry is itself one server at https://apidefects.com/mcp, one tool, the same three answers.
This is not a clean bill of health for anything not listed. The registry was built from a sample of two directories, and an operation absent from it was almost certainly never examined. Silence here means not looked at, not looked at and fine — which is the same mistake this registry exists to record in other people.
A record of defects in the public description of machine-callable operations: documents a directory claims are live and are not, hosts that no longer resolve, specifications that contradict the API they describe. It is not a ranking, not a review, and not a judgement about the service. No credential is ever sent to anything listed here.
The whole registry, machine-readable: errata.json. Index of subjects: index.html.
Built from registry errata-2026-09-10@027fb4b7a922. If manifest.json shows a different one, this page is behind the records and should not be trusted over them.