← methodology

MCP handshake & tools list

usability.mcp-handshake · Usability · 4 pts · required

Goal

Can a user act through an agent?

Whether an end user's agent can operate on their behalf: working MCP tools, published skills, agent configs.

How we test

Performed a streamable-HTTP initialize + tools/list against the MCP endpoint.

How to pass

Support streamable HTTP with protocol version negotiation; if auth-gated, return RFC 9728 metadata in WWW-Authenticate.

Spec

https://modelcontextprotocol.io/specification ↗

Verify a fix

curl -X POST /api/scan/checks \
  -H 'content-type: application/json' \
  -d '{"url": "yourdomain.com", "checkIds": ["usability.mcp-handshake"]}'