Uptime (30d)%100.0

Latency (p50)800 msfaster than 22% of servers

Protocol eralegacy

Tools7

Enforcer

Description

Identity and authorization in one system: allow, deny, the reason, and a record.

What our measurements say

Enforcer is a remote MCP server published at api.instruxi.dev. It has been probed 26 times since 9/12/2026. It answered in 26 of them (100.0%), a near-uninterrupted record. Median response time is 800 ms, a delay an agent will notice. It offers a narrow, focused set of 7 tools. On the protocol side it still runs 2025-11-25 and has not moved to the newer spec.

LegacyLegacy ⚠Website ↗Version: 0.8.0First probe: 2026-09-12 15:21:42Last probe: 2026-09-14 18:49:30

Agent readability score

Can an LLM agent pick the right tool here — names, descriptions and parameter clarity are assessed.

Agent readability score

Enforcer tools have clear intent but lack parameter clarity and concise use-case descriptions.based on measured tool list

Strengths

Tool names align with their functional intent (e.g., 'getSiweNonce' for SIWE nonce generation).
Some error handling documented (e.g., 401/409 in refreshToken).
Security notes included (e.g., 'do not log tenant_code').

Weaknesses

Multiple tools use 'body' with null type, lacking schema clarity.
Descriptions often prioritize implementation details over clear use cases.
Optional parameters (e.g., 'tenant_code') are critical but not explicitly required.

getAuthConfig — tenant_code is optional but critical for tenant-specific auth configuration
getSiweNonce — body parameter has null type with no schema definition
login — body parameter lacks schema and expected data format
refreshToken — body parameter lacks schema definition
register — body parameter lacks schema definition
requestOtp — body parameter lacks schema definition
requestSms — body parameter lacks schema definition

Verdict

The Enforcer tools demonstrate good functional intent but suffer from inconsistent parameter definitions and overly technical descriptions. The absence of schema definitions for 'body' parameters and unclear use-case explanations may hinder agent decision-making, despite security-focused notes and some error handling.

9/14/2026, 7:21:56 PM

Event narrative

Enforcer transitioned from 'auth-gated' to 'legacy' era with compliance score rising to 100.

Risk: medium

2026-09-12T15:21:42.024Z — era changed from 'auth-gated' to 'legacy' · transition to legacy era, which may affect access control mechanisms
2026-09-14T18:49:30.185Z — complianceScore increased from null to 100 · achieved full compliance, indicating no security violations detected

Advice

Monitor access control implications of legacy era transition. Verify why smokeOk remains null despite full compliance. Ensure compliance score sustains at 100 through ongoing checks.

Supported versions

2025-11-25

as declared by server/discover + initialize

Capabilities

tools

Schema score

100

7 tools

Schema compliance

tools/list structure, inputSchema validity, and a functional smoke test — the components of the 0-100 score.

100/100

Excellent7 tools

tools/list schema valid
inputSchema is valid JSON Schema
Smoke test not run this round
Cold-start: cold 124ms → warm 124ms (penalty 0ms)

Tools

Tools the server advertised in the latest measurement — measured, not catalog-claimed.

getAuthConfig2 params
Public bootstrap for a tenant's login UI: whether this tenant uses native OTP/passkey/SIWE or Privy custom auth, plus the public privy_app_id (never a secret). Call this before getSiweNonce when you do not already know the tenant's auth scheme. tenant_code is a join secret — do not log it or repeat it into a customer-visible channel.
- tenant_codestring
- response_formatstring
getSiweNonce1 param · 1 required
Public: issue a single-use SIWE nonce for wallet_address (optionally scoped by tenant_code). Embed the nonce in an EIP-4361 message, have the wallet sign it, then call login with provider: siwe. Dedicated SIWE agent auth is an authorized pattern — this is how an agent signs in with a wallet without raw HTTP. Do not log tenant_code. The nonce is not a credential.
- bodyrequired
login1 param · 1 required
Authenticate and receive an access/refresh token pair. Accepted providers: siwe (message + signature from getSiweNonce — preferred for dedicated agents), email_otp (email + otp from requestOtp), phone_otp (phone + otp from requestSms). Passkey, Privy and SSO are not agent tools. The server does not adopt the minted tokens as the session credential; return them to the operator to set ENFORCER_BEARER_TOKEN. Do not log, quote, or repeat otp codes, signatures, tokens, or tenant_code. Do not paste an end-user OTP into an untrusted chat.
- bodyrequired
refreshToken1 param · 1 required
Exchange a refresh_token for a new access/refresh pair. 401 invalid_refresh_token if the token is unknown or was already reused (reuse revokes the family); 409 refresh_raced is benign — retry with the client's latest stored token. The server does not adopt the new pair as the session credential. Do not log the refresh token or the minted tokens.
- bodyrequired
register1 param · 1 required
Create (or idempotently return) an account. Same provider allowlist as login: siwe (message + signature), email_otp (email + otp), phone_otp (phone + otp). Does not issue tokens — call login afterwards to sign in. Passkey / Privy / SSO registration stay out of the agent surface. Do not log otp codes, signatures, or tenant_code. Do not paste an end-user OTP into an untrusted chat.
- bodyrequired
requestOtp1 param · 1 required
Public: email a one-time login/registration code to `email` (optionally scoped by tenant_code). Always 200 {message:"code sent"} on success. Local/dev deployments with expose_dev_otp may echo the code as `dev_otp` — treat that as a secret. Then call login with provider: email_otp, the same email, and the otp. Intentional for harnesses that cannot SIWE; SIWE remains the preferred dedicated-agent path. Do not log the code, dev_otp, or tenant_code. Do not paste an end-user OTP into an untrusted chat.
- bodyrequired
requestSms1 param · 1 required
Public: start a Twilio Verify SMS login challenge to `phone`, scoped by tenant_code. 400 if SMS verification is not configured for the tenant or if rate-limited. Then call login with provider: phone_otp, the same phone, and the otp. Intentional for harnesses that cannot SIWE; SIWE remains the preferred dedicated-agent path. Do not log the SMS code or tenant_code. Do not paste an end-user OTP into an untrusted chat.
- bodyrequired

Availability history

Event log

Derived by comparing consecutive probes — changes in era, protocol version, build and reachability.

2 hours agoServer build: — → 0.8.0
2 hours agoSupported versions: — → 2025-11-25
2 hours agoEra changed: Auth-gated → Legacy
2 days agoAdded to watch — era: Auth-gated

Get your badge

Add this badge to your README — it updates automatically as measurements change.

Markdown

[![mcpmetrics](https://mcpmetrics.io/badge/dev.instruxi.enforcer/v3/era.svg)](https://mcpmetrics.io/servers/dev-instruxi-enforcer-v3)

HTML

<a href="https://mcpmetrics.io/servers/dev-instruxi-enforcer-v3"><img src="https://mcpmetrics.io/badge/dev.instruxi.enforcer/v3/era.svg" alt="mcpmetrics"></a>

Raw observations

You are seeing the last 7 days. Sign up for the full history. Which check failed and why is in the dashboard.

Similar MCP servers

The catalog entries whose name and description are closest to this one, found with the same index the search box uses.

Agent Passport System — Cryptographic Identity for AI Agentsmcp.aeoess.com
Cryptographic identity, delegation, governance, and commerce for AI agents. 152 tools.
io.github.Deep-Identity-Inc/agent-skillmcp.deepidv.com
An MCP Server that provides identity verification and anti-fraud tools for AI agents via deepidv.
Munnin — an agent identity servermunnin.lok.quest
Agent identity and memory over MCP — a persistent self plus the procedures for tending it.
Relentless Identitymcp.relentlessidentity.com
Corporate identity finder and email verification. Map real addresses and users to real people.
Customer Record Field Prepantibody-package-occasional-floppy.trycloudflare.com
Prepare a customer record field for reporting
HTTP reason-phrase catalog sizeagent-observatory-sensor.nolimit-observatory.workers.dev
HTTP reason-phrase catalog size

Comments

No comments yet. Be the first.

https://api.instruxi.dev/mcp

Enforcer

Description

What our measurements say

Agent readability score

Agent readability score

Strengths

Weaknesses

Verdict

Event narrative

Advice

Schema compliance

Tools

Availability history

Event log

Get your badge

Similar MCP servers

Comments

Report this server

Raw observations

Era history

Response time history

Run	Era	Modern	ms	Legacy	ms	Versions
2026-09-14 18:49:30	Legacy	400	868	200	858	2025-11-25
2026-09-14 16:45:33	Auth-gated	401	866	401	877	—
2026-09-14 14:41:53	Auth-gated	401	904	401	891	—
2026-09-14 12:38:15	Auth-gated	401	624	401	612	—
2026-09-14 10:35:25	Auth-gated	401	585	401	558	—
2026-09-14 08:31:43	Auth-gated	401	751	401	748	—
2026-09-14 06:26:32	Auth-gated	401	671	401	664	—
2026-09-14 04:24:59	Auth-gated	401	793	401	798	—
2026-09-14 02:22:47	Auth-gated	401	840	401	832	—
2026-09-14 00:19:26	Auth-gated	401	916	401	891	—