Skip to content
MCPSTAMP
MCP server report

FrameAnyPhoto MCP server

com.frameanyphoto/prints

We checked this server on 2 November 2026 with McpStamp Check engine 1.2.0. It scored 77 of 100 (grade C), higher than 22.5% of the 33,003 registry servers that responded over HTTPS that day. Ready for MCP Registry. Not ready for Claude, ChatGPT and Gemini.

Measured facts

Score
77C
Sign-in
OAuth
Tools listed
8
Protocol version
2025-03-26
Stores

Store readiness

StoreStatusReason
Claude Connectors Directory Not ready Blocked by Authorization server metadata (RFC 8414 / OIDC) and PKCE S256 advertised.
ChatGPT app directory Not ready Blocked by Authorization server metadata (RFC 8414 / OIDC), PKCE S256 advertised and Explicit readOnlyHint, destructiveHint and openWorldHint (ChatGPT).
Gemini Connected Apps Not ready Blocked by Authorization server metadata (RFC 8414 / OIDC), First metadata URL Gemini tries answers 200 with the required fields and PKCE S256 advertised.
Official MCP Registry Ready No blocking check failed.

MCP Registry ready means a valid public remote for the registry, not that the server is listed in a store.

Fixes

9 checks to fix

  1. Fails

    Authorization server metadata (RFC 8414 / OIDC)

    auth_as_metadata

    Blocks Claude, ChatGPT and Gemini.

    Measured https://frameanyphoto.com/.well-known/oauth-authorization-server lacks response_types_supported:["code"]

    Add response_types_supported:["code"] to the authorization server metadata.

  2. Fails

    PKCE S256 advertised

    auth_pkce

    Blocks Claude, ChatGPT and Gemini.

    Measured code_challenge_methods_supported missing

    Support PKCE and advertise "code_challenge_methods_supported": ["S256"] (MCP clients refuse to proceed without it).

  3. Fails

    Explicit readOnlyHint, destructiveHint and openWorldHint (ChatGPT)

    tool_open_world

    Blocks ChatGPT.

    Measured 7/8 tools miss an explicit hint: search_works, get_work, list_series, get_policies, get_print_options and 2 more

    Set readOnlyHint, destructiveHint and openWorldHint to explicit true/false on every tool (OpenAI app review requires all three).

  4. Fails

    First metadata URL Gemini tries answers 200 with the required fields

    auth_gemini_discovery

    Blocks Gemini.

    Measured https://frameanyphoto.com/.well-known/oauth-authorization-server (first URL Gemini tries) lacks response_types_supported:["code"]

    Make https://frameanyphoto.com/.well-known/oauth-authorization-server answer HTTP 200 with the authorization server metadata (authorization_endpoint, token_endpoint, response_types_supported ["code"], registration_endpoint). Gemini tries ht

  5. Fails

    GET answers SSE or 405

    get_stream

    Measured HTTP 200 application/json

    Return HTTP 405 Method Not Allowed on GET (or a text/event-stream), not a page or 404.

  6. Warning

    Supported protocol version negotiated

    protocol_version

    Measured Negotiated 2025-03-26

    Support protocol version 2025-11-25 (or 2025-06-18) and echo it back in initialize.

  7. Warning

    Tool descriptions

    tool_descriptions

    Measured 2 under 60 chars: get_work, list_series

    Keep each tool description between 60 and 2000 characters: when to use it, what it returns, key limits.

  8. Warning

    initialize latency

    latency

    Measured 1557 ms

    Bring initialize under 1.5 s: avoid cold starts and upstream calls in the handshake.

  9. Warning

    refresh_token grant advertised

    auth_refresh

    Measured grant_types_supported: ["none"]

    Issue refresh tokens and list "refresh_token" in grant_types_supported so users are not logged out hourly.

17 checks passed, 1 did not run

Passed. Served over HTTPS, initialize over Streamable HTTP, JSON or SSE response Content-Type, JSON-RPC error for unknown method, serverInfo name and version, Server instructions, tools capability declared, Sign-in method the store supports (OAuth or none), Protected resource metadata (RFC 9728), Resource metadata "resource" equals the server URL, issuer equals the authorization_servers entry; token_endpoint_auth_methods_supported (ChatGPT), Client registration (DCR or Client ID Metadata Documents), tools/list returns tools, inputSchema is an object schema, Tool names are valid and portable, readOnlyHint or destructiveHint on every tool, Human-readable title on every tool.

Not run. 401 carries WWW-Authenticate resource_metadata. These need an OAuth sign-in flow the check could not reach.

Run a fresh check

This page is the 2 November 2026 snapshot. If you maintain this server and have shipped fixes since then, re-check it. The live check and the badge show the current result, and the next snapshot will pick up the change.

Re-check now

Badge

README badge

The badge shows the latest score for this URL and links to this report.

McpStamp score for FrameAnyPhoto

Markdown

[![McpStamp score](https://www.mcpstamp.com/badge?url=https%3A%2F%2Fframeanyphoto.com%2Fmcp)](https://www.mcpstamp.com/r/com-frameanyphoto-prints/)

HTML

<a href="https://www.mcpstamp.com/r/com-frameanyphoto-prints/"><img src="https://www.mcpstamp.com/badge?url=https%3A%2F%2Fframeanyphoto.com%2Fmcp" alt="McpStamp score" height="20"></a>
Registry entry

About this server

Shop for and buy framed museum-quality prints of public-domain art and photos, shipped US-wide.
Registry name
com.frameanyphoto/prints
Remote URL
https://frameanyphoto.com/mcp
Version
1.1.2
Source
github.com/morgangoins/frameanyphoto-mcp
Website
frameanyphoto.com
Checked
2 November 2026, engine 1.2.0, no credentials

The description above is the server's own text from the official MCP Registry. If a result looks wrong, run a fresh check and email support@zovo.one with the report link.

More grade C servers

All grade C servers · All server reports · State of MCP readiness, November 2026