Is RunOnProof — Payment Decision and Agent ID MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highWrite-action tools reachable without authentication
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
1 high
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 509ms20/20
- Tool poisoning16 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
Overall 57/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what RunOnProof — Payment Decision and Agent ID does
- X402 Payment SafetyAuthorize x402 payments before signing with request-bound, signed safety decisions.not reviewedGrowingA
POPCORN MCPSigned time and SHA-256 witness receipts for agents, with offline verification and x402 payment.not reviewedGrowingB- Pulse VerityRead crypto reference prices and verify signed receipts. Includes limited keyless samples.not reviewedGrowingB
RunOnProof — Payment Decision and Agent ID reviews, tools and install