---
title: "MCP Server Check"
method: GET
path: "/api/util/mcp-check"
---

# MCP Server Check

`GET /api/util/mcp-check`

## Request

- Base URL: `https://dechonet.com`
- URL: `https://dechonet.com/api/util/mcp-check`
- Auth: one of:
  - none
  - HTTP bearer

Check a remote MCP server from outside before connecting it to an agent: whether it requires authentication (and publishes OAuth protected-resource metadata, RFC 9728), which of its tools act on the world (run commands, write or delete files, send messages, make payments, read secrets), whether its server instructions or tool and parameter descriptions contain text that steers an agent (tool poisoning), whether a web page on any site could call it (CORS and Origin), HTTPS, and tool annotations.

## Query parameters

- `url` string, required
- `lang` 'en' | 'ko'

## Response `200`

Result

- Envelope
  - `ok` boolean, required
  - `requestId` string, required
  - `cached` boolean, required: True when a recent stored result was returned.
  - `updatedAt` string, date-time, nullable: When the result was produced.
  - `data` unknown, required
  - `error` object, nullable, required
    - `code` 'INVALID_INPUT' | 'NOT_FOUND' | 'RATE_LIMITED' | 'UPSTREAM_ERROR' | 'UPSTREAM_TIMEOUT' | 'INVALID_API_KEY' | 'API_KEY_REQUIRED'
    - `message` string
    - `retryAfter` integer, nullable
    - `reason` string
  - `previousSnapshot` object: The previous stored result for the same target, when there is one.

## Other responses

- `400`: Invalid input
- `401`: Wrong or revoked API key, or a key is required
- `429`: Rate limited — see the Retry-After header
- `503`: An upstream source failed or timed out

---

[API](https://skmtc.dev/dechonet/apis/dechonet-api.md) · [All operations](https://skmtc.dev/dechonet/apis/dechonet-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dechonet/apis/dechonet-api/revisions/87d89f1c4d1b?raw)