Free tool
Paste the address. We send the same first requests any AI client sends and tell you, in plain words, what a stranger would get.
Read only. We send the same first requests any MCP client sends, then stop. Nothing is stored. Only check servers you own or are allowed to test.
Four things that decide whether strangers can use your server, and whether real users can sign in.
We start a session the way Claude or Cursor would, with no token. A safe server refuses. An open one hands back a session.
If the session opens, we ask for the tool list. Every tool a stranger can see is a tool a stranger can call.
Connectors look for a /.well-known/oauth-protected-resource document to find your login server. Without it, users hit a dead end.
https with a valid certificate, no redirects that confuse clients, and no software names leaking in headers.
It is read only. It never calls a tool, never sends data, never guesses passwords, and keeps nothing about your server. Eight checks per connection every ten minutes.
AriesView Security records every call to your MCP server with the user and client behind it, and flags the odd ones. Two lines of code for a Python server.
