cn.com.xiaozhaobao/xiaozhaobao

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

The AI items cover 5 of 5 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

Settings → Connectors → Add custom connector, then paste:
https://xiaozhaobao.com.cn/mcp

{
  "mcpServers": {
    "xiaozhaobao": {
      "url": "https://xiaozhaobao.com.cn/mcp"
    }
  }
}

{
  "servers": {
    "xiaozhaobao": {
      "type": "http",
      "url": "https://xiaozhaobao.com.cn/mcp"
    }
  }
}

code --add-mcp '{"name":"xiaozhaobao","type":"http","url":"https://xiaozhaobao.com.cn/mcp"}'

claude mcp add --transport http xiaozhaobao https://xiaozhaobao.com.cn/mcp

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://xiaozhaobao.com.cn/mcp --transport http

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Facts about the publisher. We do not turn them into a trust score.

Source: the registry entry and api.github.com · 2026-10-22; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

• io.github.t8y2/dbxalso has tools that reads or searchescompare with this one
• agency.ottobot/contractor-license-changesContractor Licence Changesalso has tools that reads or searchescompare with this one
• agency.ottobot/licensed-house-paintersLicensed House Paintersalso has tools that reads or searchescompare with this one
• io.github.revolist/revogrid-mcpRevoGrid DataGrid MCPalso has tools that reads or searchescompare with this one
• io.github.timescale/pg-aiguidealso has tools that reads or searchescompare with this one
• co.firecms/mcpFireCMS Cloudalso has tools that reads or searchescompare with this one

Active servers whose topic is also “data-and-databases” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

The steps in order, as the test record holds them.

1. 0 msStarted a read-only session with the server's remote endpoint
2. 1,996 msConnected after 0 redirects. No credential was sent or needed.
3. Read the inventory: 5 tools, 0 resources, 0 prompts.
4. 9,412 msFinished: 2 checks exercised.

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.