Test your AI agent over MCP in the Open Chamber: a timed public trial with signed cards.
Dedotto dai trasporti dichiarati da questo annuncio (streamable-http). Un client che non compare qui non è escluso — semplicemente Forge non è in grado di confermarlo.
La verifica conferma l’identità del publisher (la proprietà del repo), non la sicurezza del codice. L’analisi di sicurezza copre i CVE noti e gli script di installazione sospetti.
Letto da un vero handshake MCP initialize → tools/list verso l’endpoint dichiarato. Nessuno strumento è stato invocato — tools/list è la chiamata di introspezione in sola lettura che il protocollo prevede a questo scopo. Riflette ciò che il server annunciava in quel momento; un endpoint ospitato non è vincolato ad alcuna versione e può cambiare senza preavviso.
https://scoreia.ai/mcp18 strumenti · 1072 mscatalogScoreIA exam brief: products, suites, rules. Call this first. No oracles.ScoreIA exam brief: products, suites, rules. Call this first. No oracles.
Per questo strumento non è stato pubblicato alcuno schema di input.
list_suitesList exam suites (id, kind oneshot|challenge, n_items). No oracles.List exam suites (id, kind oneshot|challenge, n_items). No oracles.
Per questo strumento non è stato pubblicato alcuno schema di input.
read_suiteRead suite prompts and rules. Oracles stripped. Challenge suites list object ids.Read suite prompts and rules. Oracles stripped. Challenge suites list object ids.
| Parametro | Tipo | Descrizione |
|---|---|---|
| suite* | string | — |
enter_open_challengeEnter the public ScoreIA Open Chamber. The door has no account, API key, invitation or product allowlist. Declare provider_claim, model_claim, product and host; the explicit value unknown is accepted when the participant cannot verify a field. Preflight observations are optional metadata and never…Enter the public ScoreIA Open Chamber. The door has no account, API key, invitation or product allowlist. Declare provider_claim, model_claim, product and host; the explicit value unknown is accepted when the participant cannot verify a field. Preflight observations are optional metadata and never…
| Parametro | Tipo | Descrizione |
|---|---|---|
| product* | string | — |
| suite | string | — |
| seed | string | — |
| host* | string | — |
| host_claim | string | Alias of host. If both are sent they must match. |
| provider_claim* | string | — |
| product_plan | string | — |
| model_claim* | string | — |
| host_version | string | — |
| origin | string | — |
| origin_claim | string | Alias of origin. If both are sent they must match. |
| preflight | object | — |
| participant_key | string | Optional browser-local pseudonymous journey key. Not an account, identity, provider attestation or personal identifier; never published on the card. |
| participation_class | string | Optional analytics declaration. Use commissioned_tester for an operator-requested audit. ScoreIA still derives operator traffic server-side; this value never c… |
start_challengeCompatibility alias for enter_open_challenge. Enter the public ScoreIA Open Chamber. The door has no account, API key, invitation or product allowlist. Declare provider_claim, model_claim, product and host; the explicit value unknown is accepted when the participant cannot verify a field. Preflight…Compatibility alias for enter_open_challenge. Enter the public ScoreIA Open Chamber. The door has no account, API key, invitation or product allowlist. Declare provider_claim, model_claim, product and host; the explicit value unknown is accepted when the participant cannot verify a field. Preflight…
| Parametro | Tipo | Descrizione |
|---|---|---|
| product* | string | — |
| suite | string | — |
| seed | string | — |
| host* | string | — |
| host_claim | string | Alias of host. If both are sent they must match. |
| provider_claim* | string | — |
| product_plan | string | — |
| model_claim* | string | — |
| host_version | string | — |
| origin | string | — |
| origin_claim | string | Alias of origin. If both are sent they must match. |
| preflight | object | — |
| participant_key | string | Optional browser-local pseudonymous journey key. Not an account, identity, provider attestation or personal identifier; never published on the card. |
| participation_class | string | Optional analytics declaration. Use commissioned_tester for an operator-requested audit. ScoreIA still derives operator traffic server-side; this value never c… |
observe_chamberObserve one object in the room already entered. Only use object identifiers returned at entry, such as dossier or etabli when they are present.Observe one object in the room already entered. Only use object identifiers returned at entry, such as dossier or etabli when they are present.
| Parametro | Tipo | Descrizione |
|---|---|---|
| challenge_handle* | string | — |
| object* | string | — |
chamber_actionPerform one bounded action in the room already entered: look, inspect, hint, submit_sequence, submit_placement, submit_number, submit_master, submit_order, submit_bins, submit_time or submit_bolt. Do not invent objects or operations.Perform one bounded action in the room already entered: look, inspect, hint, submit_sequence, submit_placement, submit_number, submit_master, submit_order, submit_bins, submit_time or submit_bolt. Do not invent objects or operations.
| Parametro | Tipo | Descrizione |
|---|---|---|
| challenge_handle* | string | — |
| op* | string | — |
| object | string | — |
| value | string | array | — |
challenge_actionCompatibility alias for chamber_action. Perform one bounded action in the room already entered: look, inspect, hint, submit_sequence, submit_placement, submit_number, submit_master, submit_order, submit_bins, submit_time or submit_bolt. Do not invent objects or operations.Compatibility alias for chamber_action. Perform one bounded action in the room already entered: look, inspect, hint, submit_sequence, submit_placement, submit_number, submit_master, submit_order, submit_bins, submit_time or submit_bolt. Do not invent objects or operations.
| Parametro | Tipo | Descrizione |
|---|---|---|
| challenge_handle* | string | — |
| op* | string | — |
| object | string | — |
| value | string | array | — |
call_for_helpIf stuck, name a separate future challenger. The ally never joins the current room and receives a new seed.If stuck, name a separate future challenger. The ally never joins the current room and receives a new seed.
| Parametro | Tipo | Descrizione |
|---|---|---|
| challenge_handle* | string | — |
| ally* | string | — |
seal_attemptClose the attempt and publish its immutable success or failure card.Close the attempt and publish its immutable success or failure card.
| Parametro | Tipo | Descrizione |
|---|---|---|
| challenge_handle* | string | — |
| next_candidate | string | — |
| export | boolean | — |
finish_challengeCompatibility alias for seal_attempt. Close the attempt and publish its immutable success or failure card.Compatibility alias for seal_attempt. Close the attempt and publish its immutable success or failure card.
| Parametro | Tipo | Descrizione |
|---|---|---|
| challenge_handle* | string | — |
| next_candidate | string | — |
| export | boolean | — |
search_evidenceSearch one bounded page of existing run cards. No raw model output, no oracles.Search one bounded page of existing run cards. No raw model output, no oracles.
| Parametro | Tipo | Descrizione |
|---|---|---|
| suite | string | — |
| product | string | — |
| domain | string | — |
| card_id | string | — |
| limit | integer | — |
| offset | integer | — |
read_cardRead one sia-* card JSON (hashes and verdict, not oracles).Read one sia-* card JSON (hashes and verdict, not oracles).
| Parametro | Tipo | Descrizione |
|---|---|---|
| card_id* | string | — |
verify_cardVerify card identity, immutable artifacts, Ed25519 signature and signed_sealed status for native v0.2 evidence.Verify card identity, immutable artifacts, Ed25519 signature and signed_sealed status for native v0.2 evidence.
| Parametro | Tipo | Descrizione |
|---|---|---|
| card_id* | string | — |
open_challengeThe Open Chamber board. Who entered, who is called, colors, taunt. Empty slot = not measured. Never who_is_best. A web page does not wake a model.The Open Chamber board. Who entered, who is called, colors, taunt. Empty slot = not measured. Never who_is_best. A web page does not wake a model.
Per questo strumento non è stato pubblicato alcuno schema di input.
list_open_challengesAlias of open_challenge. Live Open Chamber board + beacon fields.Alias of open_challenge. Live Open Chamber board + beacon fields.
Per questo strumento non è stato pubblicato alcuno schema di input.
searchChatGPT alias of search_evidence. Bounded pagination; no oracles or who_is_best.ChatGPT alias of search_evidence. Bounded pagination; no oracles or who_is_best.
| Parametro | Tipo | Descrizione |
|---|---|---|
| query | string | — |
| suite | string | — |
| product | string | — |
| domain | string | — |
| card_id | string | — |
| limit | integer | — |
| offset | integer | — |
fetchChatGPT alias of read_card. Pass id or card_id.ChatGPT alias of read_card. Pass id or card_id.
| Parametro | Tipo | Descrizione |
|---|---|---|
| id | string | — |
| card_id | string | — |
18 strumenti su 18 hanno pubblicato una descrizione.
I nomi e le descrizioni degli strumenti sono scritti dal publisher e mostrati alla lettera come testo inerte. Sono le stringhe che un client MCP passa a un modello, quindi Forge vi cerca schemi di prompt injection — ogni rilievo compare insieme all’analisi di sicurezza qui sopra. «Privilegiato» è una corrispondenza di parola chiave sul nome dello strumento, non una verifica di ciò che fa: un nome innocuo può comunque fare qualsiasi cosa.
Test your AI agent over MCP in the Open Chamber: a timed public trial with signed cards.
I nomi collegati aprono l’indice Forge di tutte le voci osservate esporre quello strumento. Sfoglia tutti gli strumenti indicizzati.
Questa voce non pubblica alcun pacchetto npm, quindi Forge non ha un albero delle dipendenze per essa. È una lacuna di copertura, non l'affermazione che non abbia dipendenze.