MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) PASS

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

Registry name	`dev.gtfo/mcp-killchain-stage1-weather` (v1.1.0)
Endpoint	`https://ailm.gtfo.dev/mcp`
Reported server	mcp-killchain-stage1-weather 1.1.0
Protocol version	2025-03-26
Tools exposed	1
Checked at	2026-10-11T03:35:37.740Z

Findings

INFO STATIC_SCHEMA_CHECKS_PASSED — 1 tools passed deterministic schema checks

Reproduce this report

npx @eidonze/mcpdoctor schema https://ailm.gtfo.dev/mcp

Embed status: <img src="https://xka0085-byte.github.io/mcp-doctor/trust/badge/dev.gtfo-mcp-killchain-stage1-weather.svg"> · Machine-readable: /api/dev.gtfo-mcp-killchain-stage1-weather.json

Generated by mcpdoctor — read-only MCP initialize + tools/list. No tools were called, no payments attempted. Static schema checks do not predict model tool selection or prove behavior across all clients. Scanned: 2026-10-11.