One field instrument for MCP server reviews: token tax, behavioral noise, capability reduction -> one graded report.
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"mcp-xray-audit","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
<h1 align="center">mcp-xray</h1> <p align="center"> <a href="https://github.com/ralforion/mcp-xray/actions/workflows/ci.yml"><img src="https://github.com/ralforion/mcp-xray/actions/workflows/ci.yml/badge.svg" alt="CI"></a> <a href="https://github.com/ralforion/mcp-xray/releases/tag/v1.6.0"><img src="https://img.shields.io/badge/version-1.6.0-blue" alt="version"></a> <a href="https://github.com/ralforion/mcp-xray/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-BUSL--1.1-orange.svg" alt="License: BUSL-1.1"></a> <a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.11+-blue.svg" alt="Python 3.11+"></a> </p> **One field instrument for MCP server reviews.** Point it at a client's MCP server (or an offline `tools/list` dump) and walk away with **one graded report** that answers three questions: 1. **What does this surface cost?** Per-turn context tax, per tool, before any work. 2. **Does the surface confuse the model?** Wrong-tool selection, spurious firing on off-domain tasks. 3. **Can the surface be smaller?** Which tools merge, which should be MCP _resources_, and whether the real fix is consolidation or just-in-time loading. Many sensors, **one voice**: wrapped tools contribute _measurements only_; the grading engine owns all interpretation. **See real output:** [example reports](examples/reports/) - full `mcp-xray` audits of two production MCP servers (OrionBelt Semantic Layer & Analytics), rendered exactly as the tool emits them. > Built by [RALFORION d.o.o.](https://ralforion.com) - the team behind the > [OrionBelt Semantic Layer](https://github.com/ralfbecher/orionbelt-semantic-layer). > See [Professional review & commercial use](#professional-review--commercial-use). ## Install ```bash pip install -e . # core (offline static + consolidation half) pip install -e ".[api]" # + authoritative token counting & LLM behavioral probes pip install -e ".[live]" # + stdio / http / sse …
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.