CheckMCP
‹ directory
80MCP SCORE
B

HotRepo

https://hotrepo.ai/mcp
7 tools~1.7k tok/req100% annot.proto 2024-11-05
View public page ›
Xin
Raw JSON ›

Score by pillar

Security ·20100
Tool design ·18100
Schemas / desc ·1678
Reliability ·1450
Context-cost ·1271
Compliance ·1246
Coverage ·850

reliability: LOW (T1 single-shot, not credited - requires T3 >=24h)

Context-cost

1.7ktokens for tools/list

Paid on every request. Lean footprint for 7 tools.

this server1.7k
median≈ 3k

MCP primitive coverage

the quality score covers tools
7
Tools
0
Resources · none
0
Prompts · none

Why this score — causal attribution

Each penalty: measure → mechanism → effect → Δscore.

Schemas / desc · HIGH−3.5

67% typed+described params → schema = the contract the agent fills in → more malformed calls

Compliance · MEDIUM−3.4

JSON-RPC-compliant errors 0/2 → errors not compliant with the JSON-RPC spec → clients break unpredictably

Compliance · MEDIUM−1.6

proto 2024-11-05 (4 rev. behind 2025-11-25) → outdated protocol version → recent features unavailable, recent clients weakened

Compliance · MEDIUM−1.2

capability 'resources' declared but resources/list empty → capabilities inconsistent with real behavior → clients misled

Compliance · MEDIUM−1.2

capability 'prompts' declared but prompts/list empty → inconsistent capabilities → clients misled

Compliance · LOW−0.6

no OAuth discovery (.well-known missing) → RFC 9728/8414 not exposed → auth not auto-discoverable by clients

Badge — paste it in your README

MCP Score badge — HotRepo[![MCP Score](https://checkmcp.dev/badge/hotrepo-ai.svg?url=https%3A%2F%2Fhotrepo.ai%2Fmcp)](https://checkmcp.dev/report?url=https%3A%2F%2Fhotrepo.ai%2Fmcp)
Own this server?Get verified — fresh re-audit, badge if you pass ›

About HotRepo — FAQ

Is the HotRepo MCP server safe to use?+
CheckMCP audited HotRepo and gave it an MCP Score of 80/100 (grade B) — good — only minor issues. The audit runs an OWASP MCP Top 10 security pass (tool poisoning, hardcoded secrets, command injection, the lethal trifecta) against the live endpoint; see the per-pillar breakdown and the "why this score" attribution on this page, and re-audit anytime at checkmcp.dev.
What is the MCP Score of HotRepo?+
HotRepo scores 80/100 (grade B) on CheckMCP's vendor-neutral audit across six weighted pillars — security, tool design, schemas, context-cost, compliance and coverage — with reliability measured and shown but not yet credited.
How many tools does HotRepo expose, and what is its context cost?+
HotRepo exposes 7 tools, and its tools/list response costs roughly 1.7k tokens — paid on every request your agent makes to it. Lower is better for your context budget.
How was HotRepo scored?+
By probing the live MCP endpoint (https://hotrepo.ai/mcp), inspecting its tools, schemas and protocol compliance, running an OWASP MCP Top 10 security pass, and measuring the token cost of tools/list — then attributing every penalty as measure → mechanism → effect. The methodology is open: checkmcp.dev/#methodology.