Evaluate one exact MCP server under one built-in policy

Returns PASS, REVIEW, or BLOCK with ordered reasons, source facts and times, validity, reproducibility digests, and limitations. Anonymous calls must use refresh=never. Authenticated completed calls receive an account-scoped audit ID. A PASS does not authorize install or execution.

post/v1/preflight

Request

  • Base URL: https://api.mcpcensus.com
  • URL: https://api.mcpcensus.com/v1/preflight
  • Auth: one of:
    • none
    • API key in header x-api-key

Request body

server_namestring required

Exact canonical Census server name

policy_id'builtin:baseline' | 'builtin:first-party' | 'builtin:strict'
refresh'never' | 'if_stale'

Response

Completed policy decision

okunknown required
decision'PASS' | 'REVIEW' | 'BLOCK' required
decision_scope'public_evidence_policy' required
meaningstring required
server_namestring required
factsobject required
facts_digeststring required
decision_input_digeststring required
engine_versionstring required
evaluated_atstring date-time required
valid_untilstring date-time required
audit_idstring uuid nullable required
audit_signedunknown required
limitationsstring[] required

Changes

No recorded changes to this operation across all 1 revision of this API.