Trust Directory / report

MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) UNKNOWN

No anonymous handshake observed — endpoints behind authentication are expected to show this result; it does not mean the server is broken.

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

Registry name	`dev.gtfo/mcp-killchain-stage1-weather` (v1.1.0)
Endpoint	`https://ailm.gtfo.dev/mcp`
Reported server	—
Protocol version	not negotiated
Tools exposed	unknown
Checked at	2026-10-12T09:32:08.495Z

Findings

UNKNOWN NO_RESPONSE — Endpoint did not complete MCP initialize + tools/list within timeout

Reproduce this report

npx @eidonze/mcpreflight schema https://ailm.gtfo.dev/mcp

Embed status: <img src="https://xka0085-byte.github.io/mcpreflight/trust/badge/dev.gtfo-mcp-killchain-stage1-weather.svg"> · Machine-readable: /api/dev.gtfo-mcp-killchain-stage1-weather.json

Generated by mcpreflight — read-only MCP initialize + tools/list. No tools were called, no payments attempted. Static schema checks do not predict model tool selection or prove behavior across all clients. Scanned: 2026-10-12.