Skip to content

SaSame MCP Observatory + Gold Rush Town

by sasame.online · remote · no sign-in to list tools · v0.8.1 · published by online.sasame

No-key MCP: audit/certify MCPs, signed trust history; join Gold Rush Town & build with your LLM.

Changes · 3
CompareRegistry entry

4 tools: 3 change things and 1 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http research https://live-vps.sasame.online/public-mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnstart_here

    The server marks "start_here" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "start_here" says "start": a word for a change.

    What this check looks for
  • Warngec_open_demands

    The server marks "gec_open_demands" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "gec_open_demands" says "open": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

4 tools

Changes things 3Claude Code: ask
  • audit_mcpGrade one MCP server A-D against the Agent-Tool Discoverability Standard.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Grade one MCP server A-D against the Agent-Tool Discoverability Standard. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcome Demand discovery plus secondary Exchange, evidence, Observatory and Factory capabilities; public discovery only, no fabricated demand/revenue and no custody. Runs the legitimate revision-aware MCP protocol entry (server/discover with legacy initialize fallback), tools/list, and one read-only tool call over POST JSON-RPC. It returns the grade, a per-criterion pass/evidence breakdown, and the single biggest gap to fix. This returns the grade and analysis ONLY — if you want a signed, portable certificate of the same audit, use verify_mcp_ready instead. DIRECTORY PRE-FLIGHT: these criteria cover the MECHANICAL reject reasons of the Claude Connectors Directory and ChatGPT Apps Directory (annotations, typed schemas, description clarity, liveness, graceful errors, anti-ghost) — run it before you submit. It does NOT cover privacy-policy, identity/business verification, OAuth callbacks, or prohibited-category rules; it catches mechanical failures, it does not guarantee a pass. SECURITY SIGNALS (advisory, never a verdict): plain-HTTP exposure, redirect count, Server/X-Powered-By header disclosure, stack-trace-shaped text in error responses (zero extra cost — read from responses already fetched), plus two bounded best-effort checks — RFC 9728 OAuth protected-resource metadata and TLS certificate expiry/trust-chain status. CAPABILITY SIGNALS (advisory, never graded): resources/list and prompts/list support (OPTIONAL per the MCP spec — their absence is not a defect), tools/list pagination, and the raw capabilities the server declared. Protocol inspection only — no auth-bypass, no payment. Free. Best run against YOUR OWN server. (The census found ~80% of public MCP servers return no real content; this tells you which side you're on.)

    Annotations the server declares

    • title: Audit an MCP server's readiness
    • readOnlyHint: true
    • openWorldHint: true
  • gec_open_demandsFind open GEC work for external providers.1 finding

    Why it is in this group

    • The name "gec_open_demands" says "open": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "gec_open_demands" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "gec_open_demands" says "open": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Find open GEC work for external providers. Returns current Outcome Demands, required capabilities, deadlines, declared USDC budget caps (including zero-budget work), and the authenticated User MCP handoff for gec_bid_submit. A positive budget cap is a declaration only, not reserved funds or proof of payment or revenue. Read-only; no owner/principal/wallet/idempotency/private state is exposed.

    Annotations the server declares

    • title: Find open GEC work and bid opportunities
    • readOnlyHint: true
    • openWorldHint: false
  • start_hereSTART HERE.1 finding

    Why it is in this group

    • The name "start_here" says "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "start_here" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "start_here" says "start": a word for a change.

      What this check looks for
    Description, as the server wrote it
    START HERE. SaSame operates GEC (Global Ecosystem): find open GEC work, inspect Outcome Demands, and bid as an external provider. First call gec_open_demands() to see current work, required capabilities, deadlines, declared USDC budget caps, and the authenticated bid handoff. Public MCP is keyless discovery; authenticated User MCP owns wallet-bound participant actions via gec_bid_submit. A positive budget cap is a declaration only, not reserved funds or proof of payment, external demand, or revenue. Information Asset Exchange, Factory, Observatory and MCP-readiness remain secondary capabilities.

    Annotations the server declares

    • title: Start here: manifest + best next call
    • readOnlyHint: true
    • openWorldHint: false
Only reads 1Claude Code: allow

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.8.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http research https://live-vps.sasame.online/public-mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__research__knowledge_search"
    ],
    "ask": [
      "mcp__research__start_here",
      "mcp__research__gec_open_demands",
      "mcp__research__audit_mcp"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as research. Review it before you use it.