MCP SERVER MEASUREMENT

Measure how your MCP server behaves.

Invokely measures security, protocol conformance, error handling, client compatibility, and agent behaviour. Each result links to evidence.

Public and production scans do not execute tools. Dynamic tests require a staging endpoint or an approved disposable tenant.

Use a public HTTPS Streamable HTTP endpoint.

The public scan sends read-only protocol requests. It does not call tools.

A report should state what was measured.

Evidence with every result

Checks link to request records, response records, timestamps, and content hashes.

Depth is stated

Surface checks report surface facts. Letter grades require Layer A depth, which may run anonymously when the server permits it.

Changes are measured over time

Monitoring compares like with like under the same rubric version.

Two measurement layers

LAYER A

Deterministic checks

Invokely checks transport, authorization discovery, protocol conformance, schemas, error handling, and drift.

LAYER B

Dynamic tests

Dynamic runs test tool behaviour and task completion across named clients and models. They require staging or an approved disposable tenant.