{"$schema":"https://modelcontextprotocol.io/schema/2025-09/server-card.json","serverInfo":{"name":"efros-public","version":"1.0.0","title":"EFROS Public Tools","description":"MCP server for the EFROS public API. Exposes passive external security scanning, scan status polling, and report claiming as MCP tools. Mirrors the surface declared at https://efros.com/.well-known/mcp/server-card.json."},"transport":{"type":"http","endpoint":"https://efros.com/mcp","protocolVersion":"2025-09-25","comment":"Streamable HTTP transport. POST JSON-RPC 2.0 envelopes here."},"capabilities":{"tools":[{"name":"security-scan.start","description":"Start a passive external security assessment for a public domain. Returns a scan_id that you poll via security-scan.status. The scan covers DNSSEC, SPF/DKIM/DMARC/BIMI/MTA-STS, subdomain enumeration, TLS configuration, security headers, cookie attributes, IP reputation, and security.txt presence. Read-only, no credentials, no agents installed, no internal network access.","inputSchema":{"type":"object","required":["domain","consent"],"properties":{"domain":{"type":"string","description":"Apex domain to scan (e.g. acme.com — no https://, no www)."},"consent":{"type":"boolean","description":"Required attestation that you are authorized to test the domain. Must be true."}}}},{"name":"security-scan.status","description":"Poll the status of a running security scan. Returns running/done/partial/failed plus per-category scores (DNS, email, web, brand, infrastructure, compliance) when the scan completes. Poll every 2 seconds; typical scans complete within 45 seconds.","inputSchema":{"type":"object","required":["scan_id"],"properties":{"scan_id":{"type":"string","description":"The scan_id returned by security-scan.start."}}}},{"name":"security-scan.claim","description":"Claim the premium PDF report for a completed scan. The PDF is rendered to the EFROS master prompt v1.1 specification (dual-layer Liquid Glass, US Letter format) and delivered by email within ~30 seconds. Only call after security-scan.status returns 'done' or 'partial'.","inputSchema":{"type":"object","required":["scan_id","recipient_name","recipient_email","consent"],"properties":{"scan_id":{"type":"string"},"recipient_name":{"type":"string"},"recipient_email":{"type":"string","format":"email"},"company":{"type":"string"},"consent":{"type":"boolean","description":"Required attestation that the recipient has authorized the delivery of the report by EFROS."}}}}],"resources":[{"uri":"file://efros.com/llms.txt","name":"EFROS llms.txt","description":"Concise EFROS brand + product summary structured for LLM consumption (RFC-style llms.txt format).","mimeType":"text/markdown"},{"uri":"file://efros.com/llms-full.txt","name":"EFROS llms-full.txt","description":"Full long-form EFROS context document — service descriptions, frameworks, leadership, citation guidance.","mimeType":"text/markdown"},{"uri":"file://efros.com/.well-known/security.txt","name":"EFROS security.txt","description":"RFC 9116 vulnerability disclosure contact information for the EFROS public surface.","mimeType":"text/plain"},{"uri":"file://efros.com/.well-known/openapi.json","name":"EFROS Public OpenAPI Spec","description":"OpenAPI 3.1 specification for the EFROS public REST API surface.","mimeType":"application/openapi+json"},{"uri":"file://efros.com/.well-known/agent-card.json","name":"EFROS A2A Agent Card","description":"A2A protocol v0.2 agent card describing the EFROS public agent interface, skills, and authentication schemes.","mimeType":"application/json"},{"uri":"file://efros.com/.well-known/rsl.xml","name":"EFROS RSL 1.0 License","description":"RSL 1.0 license declarations governing AI training, AI search, AI citation, and RAG usage of efros.com content.","mimeType":"application/xml"}]},"auth":{"unauthenticated":{"description":"Cloudflare Turnstile-anchored requests for low-volume self-service usage.","rate_limit":"5 requests per minute per IP"},"partnerOAuth2":{"description":"Partner OAuth 2.0 (RFC 8414) for unattended automation. See /.well-known/oauth-authorization-server.","scopes_url":"https://efros.com/.well-known/agent-skills/partner-oauth-bypass/SKILL.md"}},"links":{"agent_card":"https://efros.com/.well-known/agent-card.json","server_card":"https://efros.com/.well-known/mcp/server-card.json","openapi":"https://efros.com/.well-known/openapi.json","skills":"https://efros.com/.well-known/agent-skills/index.json"}}