Skip to content
MCPSTAMP
MCP server report

SCRIPTMASTERLABS MCP server

com.scriptmasterlabs/402proof

We checked this server on 2 November 2026 with McpStamp Check engine 1.2.0. It scored 66 of 100 (grade C), higher than 8.6% of the 33,003 registry servers that responded over HTTPS that day. Ready for MCP Registry. Not ready for Claude, ChatGPT and Gemini.

Measured facts

Score
66C
Sign-in
No sign-in
Tools listed
12
Protocol version
2024-11-05
Stores

Store readiness

StoreStatusReason
Claude Connectors Directory Not ready Blocked by readOnlyHint or destructiveHint on every tool and Human-readable title on every tool.
ChatGPT app directory Not ready Blocked by readOnlyHint or destructiveHint on every tool, Explicit readOnlyHint, destructiveHint and openWorldHint (ChatGPT) and Human-readable title on every tool.
Gemini Connected Apps Not ready Blocked by Supported protocol version negotiated.
Official MCP Registry Ready No blocking check failed.

MCP Registry ready means a valid public remote for the registry, not that the server is listed in a store.

Fixes

7 checks to fix

  1. Fails

    readOnlyHint or destructiveHint on every tool

    tool_annotations

    Blocks Claude and ChatGPT.

    Measured 12/12 tools set neither readOnlyHint nor destructiveHint: merchant_pricing, platform_stats, get_invoice, verify_payment, check_loyalty and 7 more

    Set annotations.readOnlyHint: true on read-only tools and destructiveHint: true on tools that modify or delete data (Claude needs one of them on every tool; ChatGPT needs all three hints, see tool_open_world).

  2. Fails

    Supported protocol version negotiated

    protocol_version

    Blocks Gemini.

    Measured Negotiated 2024-11-05

    Return protocolVersion "2025-11-25" (or "2025-06-18") in the initialize result. Gemini Connected Apps requires 2025-03-26 to 2025-11-25.

  3. Fails

    Explicit readOnlyHint, destructiveHint and openWorldHint (ChatGPT)

    tool_open_world

    Blocks ChatGPT.

    Measured 12/12 tools miss an explicit hint: merchant_pricing, platform_stats, get_invoice, verify_payment, check_loyalty and 7 more

    Set readOnlyHint, destructiveHint and openWorldHint to explicit true/false on every tool (OpenAI app review requires all three).

  4. Fails

    Human-readable title on every tool

    tool_titles

    Blocks Claude and ChatGPT.

    Measured 12/12 without title: merchant_pricing, platform_stats, get_invoice, verify_payment, check_loyalty and 7 more

    Add a short human-readable "title" to every tool (shown in store UIs and consent screens).

  5. Fails

    Server instructions

    instructions

    Measured No instructions in the initialize result

    Add an "instructions" string to the initialize result: what the server covers, for whom, and its limits.

  6. Fails

    GET answers SSE or 405

    get_stream

    Measured HTTP 200 application/json

    Return HTTP 405 Method Not Allowed on GET (or a text/event-stream), not a page or 404.

  7. Warning

    Tool descriptions

    tool_descriptions

    Measured 1 under 60 chars: bureau_verify_attestation

    Keep each tool description between 60 and 2000 characters: when to use it, what it returns, key limits.

10 checks passed, 10 did not run

Passed. Served over HTTPS, initialize over Streamable HTTP, JSON or SSE response Content-Type, JSON-RPC error for unknown method, initialize latency, serverInfo name and version, tools capability declared, tools/list returns tools, inputSchema is an object schema, Tool names are valid and portable.

Not run. Sign-in method the store supports (OAuth or none), 401 carries WWW-Authenticate resource_metadata, Protected resource metadata (RFC 9728), Resource metadata "resource" equals the server URL, Authorization server metadata (RFC 8414 / OIDC), First metadata URL Gemini tries answers 200 with the required fields, issuer equals the authorization_servers entry; token_endpoint_auth_methods_supported (ChatGPT), PKCE S256 advertised, Client registration (DCR or Client ID Metadata Documents), refresh_token grant advertised. The server asks for no sign-in, so the OAuth checks do not apply.

Run a fresh check

This page is the 2 November 2026 snapshot. If you maintain this server and have shipped fixes since then, re-check it. The live check and the badge show the current result, and the next snapshot will pick up the change.

Re-check now

Badge

README badge

The badge shows the latest score for this URL and links to this report.

McpStamp score for SCRIPTMASTERLABS

Markdown

[![McpStamp score](https://www.mcpstamp.com/badge?url=https%3A%2F%2Ffour02proof.onrender.com%2Fmcp%3Fregistry%3Dscriptmasterlabs)](https://www.mcpstamp.com/r/com-scriptmasterlabs-402proof/)

HTML

<a href="https://www.mcpstamp.com/r/com-scriptmasterlabs-402proof/"><img src="https://www.mcpstamp.com/badge?url=https%3A%2F%2Ffour02proof.onrender.com%2Fmcp%3Fregistry%3Dscriptmasterlabs" alt="McpStamp score" height="20"></a>
Registry entry

About this server

x402 payment firewall + Agent Credit Bureau. Invoice/verify/score via RLUSD on XRPL.
Registry name
com.scriptmasterlabs/402proof
Remote URL
https://four02proof.onrender.com/mcp?registry=scriptmasterlabs
Version
1.0.0
Website
scriptmasterlabs.com
Checked
2 November 2026, engine 1.2.0, no credentials

The description above is the server's own text from the official MCP Registry. If a result looks wrong, run a fresh check and email support@zovo.one with the report link.

More grade C servers

All grade C servers · All server reports · State of MCP readiness, November 2026