Live check

Probes a real, public MCP server you name: server/discover and tools/list only. It never calls tools/call, never accepts a bearer token, and never stores the result or the URL you enter — see SECURITY.md for the full threat model. This audits framing conformance to the 2026-07-28 revision and x-mcp-header validity — not tool behavior or degradation, which need declared tool calls this hosted demo will not make on your behalf.

Rate-limited and capped (≤40 requests, ≤20s, ≤1 MB per check). If a check is refused or the service is paused, /demo always works — it runs the same engine offline, with zero caps.