MCP servers › io.github.stand-out-of-my-sun › diogenes-gateway

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

io.github.stand-out-of-my-sun/diogenes-gateway

Autonomous AI microservices: 55 dynamic guardrails, contract audits & oracles via L402/x402/MPP. — the publisher's description

5 of 5 record checks metRead-only · tools listed 2026-10-23Topic: security · AI-classifiedversion 1.2.0TypeScriptstreamable HTTP71 tools

Summary

io.github.stand-out-of-my-sun/diogenes-gateway is a remote MCP server listed in the official MCP registry at version 1.2.0. On 2026-10-23 ProtocolProbe connected to it in read-only mode and read its inventory: 71 tools, 0 resources and 0 prompts.

Record checks

5 of 5 record checks met · 4 do not apply

met: Registry entry is active and says how to run it
met: Source repository link opens
met: Repository is not archived
met: Code pushed to the repository in the 90 days before our check
met: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: 1 star (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Sign-in: none needed to open a session
Repository: public
Tools: 71
Described as changing data: 5 of 71 toolsAI-classified
Topic: securityAI-classified
Last tested: 2026-10-23

Add to your client

Worth knowing before you connect it

5 tools are described as changing something (execute_python_sandbox, execute_antigravity_agent, operate_computer_use_agent, …): our AI model's reading of the descriptions, not something we tested, and the server opened a session without any credential. We did not call them.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested

yes, a real session (not a text-only review)

Last tested

2026-10-23

Mode

read-only (no tool calls)

Latest version

1.2.0, published 2026-10-19 (registry, as of the 2026-10-23 snapshot)

First listed version

2026-10-18 (earliest version still in the registry; older removed versions would be earlier)

Version history

3 versions listed, 2026-10-18 to 2026-10-19; 3 in the 90 days before the 2026-10-23 snapshot.

Most recent 3 versions

1.2.0 · 2026-10-19
1.1.0 · 2026-10-18
1.0.0 · 2026-10-18

(versions still listed in the registry only)

Registry data

snapshot 2026-10-23

Package and repository

checked 2026-10-23

Engine

mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 1.2.0 (published 2026-10-19).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory

71tools

0resources

0prompts

5 of 71 tools are described as changing something (creating, editing, deleting, sending or running). For 1 the reading was uncertain, so no mark is shown.

verify_agent_command_safetyon 1 other serverreads or searches
“Evaluates untrusted agent prompts, bash commands, and tool arguments to block prompt injection, destructive shell commands, and private-key exfiltration.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- payloadstringrequired“Raw command string, script snippet, or untrusted prompt to inspect for safety violations.”
- action_typestring“Execution context of the payload; defaults to 'bash_command' when omitted.”
validate_sql_query_aston 1 other serverreads or searches
“Performs static AST syntax tree parsing on SQL statements to verify strictly read-only SELECT clauses and reject mutations, stacked queries, or comment bypasses.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- sql_statementstringrequired“SQL statement string to statically parse and audit for read-only SELECT compliance (e.g.”
- dialectstring“SQL dialect ruleset used for AST token inspection; defaults to 'postgres' when omitted.”
execute_python_sandboxon 1 other serverruns code or commandsdescribed as changing data
“Audits Python source code for forbidden syscalls (os, subprocess, socket, open, eval) inside an AST-governed WebAssembly sandbox with no host filesystem access.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- python_scriptstringrequired“Python 3 source script to audit and execute strictly inside an isolated AST-governed, non-privileged WebAssembly sandbox with no host filesystem access.”
- timeout_profilestring“Execution resource ceiling; defaults to 'standard_5s' when omitted.”
audit_mcp_server_manifeston 1 other serverreads or searches
“Scans an external MCP server's initial tools/list manifest to detect tool-name shadowing (read_file, bash) and hidden prompt-injection directives in descriptions.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- manifest_jsonstringrequired“JSON string or object containing the external MCP server's tools array to audit.”
- audit_profilestring“Sensitivity level for flagging system-tool name shadowing; defaults to 'strict' when omitted.”
detect_mcp_schema_rugpullon 1 other serverreads or searches
“Computes structural diffs between a pinned baseline MCP tools/list snapshot and a live server response to catch mid-session description or schema tampering.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- baseline_tools_jsonstringrequired“JSON-serialized baseline tools/list array captured when the MCP server was first trusted.”
- current_tools_jsonstring“JSON-serialized live tools/list array to compare against the baseline; defaults to '[]' when omitted.”
- diff_modestring“Comparison strictness across descriptions and inputSchema; defaults to 'full_structural' when omitted.”
validate_mcp_sampling_requeston 1 other serverreads or searches
“Audits inbound MCP sampling/createMessage callbacks from connected servers to block cross-server context snooping (includeContext='allServers') and token quota hijacking.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- sampling_request_jsonstringrequired“JSON string or object representing the inbound MCP sampling/createMessage payload.”
- max_tokens_ceilingstring“Maximum completion token quota allowed for server callbacks; defaults to '2048' when omitted.”
sanitize_tool_output_streamon 1 other servercalculates or converts
“Sanitizes untrusted external tool or web-scrape outputs by stripping invisible Unicode Tag characters (U+E0000), neutralizing Markdown tracking image beacons, and defusing indirect prompt overrides.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- raw_tool_outputstringrequired“Untrusted text returned by an external tool, webhook, or web scraper.”
- wrap_tagstring“XML isolation wrapper applied around the sanitized text; defaults to 'tool_data' when omitted.”
redact_sensitive_piion 1 other servercalculates or converts
“Redacts emails, phone numbers, SSNs, credit cards, API keys, and crypto private keys from text before logging or external transmission.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- textstringrequired“Input text containing potential PII or secret keys to redact.”
- redaction_stylestring“Placeholder format used for redacted spans; defaults to 'typed_token' when omitted.”
detect_agent_action_loopon 1 other serverreads or searches
“Analyzes an agent's recent tool-call trace to detect identical retry spins, A/B state oscillation, and runaway token burn.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- action_trace_jsonstringrequired“JSON-serialized array of recent agent actions (e.g.”
- sensitivitystring“Cycle detection threshold; defaults to 'standard_3_repeats' when omitted.”
verify_a2a_agent_cardon 2 other serversreads or searches
“Verifies a remote agent's A2A /.well-known/agent.json discovery card, checking JWS/DID signature binding, endpoint HTTPS enforcement, and capability spoofing.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- agent_card_jsonstringrequired“JSON string or object of the peer agent's /.well-known/agent.json descriptor.”
- trust_policystring“Verification policy for DID/DNS binding; defaults to 'require_https_and_did' when omitted.”
audit_outbound_egress_urlon 1 other serverreads or searches
“Static validation firewall for outbound network destination URIs against cloud metadata IP addresses (169.254.169.254), RFC 1918 private IP blocks, and query-string secret exfiltration before agent d…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- destination_uristringrequired“Outbound HTTP/HTTPS destination URI to inspect before fetching (e.g.”
- egress_policystring“Network egress policy; defaults to 'block_private_and_metadata' when omitted.”
audit_response_factualityon 1 other serverreads or searches
“Cross-references factual claims, numbers, and citations in a draft agent response against retrieved source passages to flag unsupported hallucinations before delivery.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- claimstringrequired“Draft agent response or factual statement to verify for hallucinations.”
- contextstringrequired“Authoritative source text or retrieved RAG passages that the claim must be grounded in.”
- strictnessstring“Entailment threshold required for numbers and dates; defaults to 'exact_entailment' when omitted.”

Show 59 more tools

audit_smart_contract_codeon 1 other serverreads or searches
“Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- code_or_addressstringrequired“Smart contract source code snippet, ABI, or contract address to audit.”
- chainstring“Target blockchain VM architecture; defaults to 'evm_solidity' when omitted.”
scan_solana_cpi_reentrancyon 1 other serverreads or searches
“Scans Solana Anchor and native Rust program instructions for unverified Cross-Program Invocation (CPI) program IDs, missing signer checks, and PDA bump seed canonicalization bugs.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- rust_source_or_idlstringrequired“Solana Rust/Anchor source code or IDL JSON string to scan for CPI vulnerabilities.”
- frameworkstring“Solana program framework used; defaults to 'anchor' when omitted.”
evaluate_solana_token_riskon 1 other serverreads or searches
“Evaluates a Solana SPL token's rug-pull probability by checking active mint authority, freeze authority, mutable metadata, and top-holder concentration.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- token_addressstringrequired“Base58-encoded Solana SPL token mint address (32–44 characters).”
- risk_profilestring“Tolerance policy for centralized freeze authorities; defaults to 'strict_decentralized' when omitted.”
inspect_solana_token_liquidityon 1 other serverreads or searches
“Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and current mint/freeze authority addresses.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- mintstringrequired“Base58-encoded Solana SPL token mint address (e.g.”
- networkstring“Solana cluster to query; defaults to 'mainnet-beta' when omitted.”
track_solana_whale_flowson 1 other serverreads or searches
“Tracks 24-hour net accumulation or distribution flows across top Solana whale wallets and flags coordinated insider wallet clusters for a given SPL token.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- tokenstringrequired“Base58 Solana SPL token mint address or ticker symbol to track whale flows for.”
- windowstring“Aggregation lookback window for net whale flow; defaults to '24h' when omitted.”
estimate_solana_priority_feeson 1 other serverreads or searches
“Calculates optimal Solana compute-unit (CU) microlamport priority fees and Jito bundle tip lamports to achieve target block-inclusion probability.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- priority_levelstringrequired“Target inclusion urgency tier on Solana mainnet-beta.”
- tx_typestring“Transaction category used to estimate compute unit limit; defaults to 'dex_swap' when omitted.”
decode_eip712_permit_signatureon 1 other serverreads or searches
“Decodes EIP-712 and Uniswap Permit2 off-chain typed-data payloads to verify spender identity, detect unlimited (uint256.max) token approvals, and flag expired deadlines.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- typed_data_jsonstringrequired“JSON string or object containing the EIP-712 / Permit2 message (spender, amount, deadline).”
- chain_idstring“EVM chain ID used to verify canonical router spender addresses; defaults to '8453' (Base) when omitted.”
simulate_evm_transaction_calldataon 1 other serverreads or searches
“Decodes raw EVM hexadecimal transaction calldata (0x...) by 4-byte function selector to expose hidden ERC-20 approve/transferFrom calls, setApprovalForAll drains, and multicall bundles.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- calldata_hexstringrequired“Hexadecimal EVM transaction data string starting with '0x' (e.g.”
- networkstring“Target EVM network for simulation context; defaults to 'base_mainnet' when omitted.”
evaluate_dex_mev_riskon 1 other serverreads or searches
“Evaluates decentralized exchange (DEX) swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance in basis points.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- pairstringrequired“Trading pair symbol or pool identifier (e.g.”
- execution_venuestring“Target DEX protocol or RPC relay; defaults to 'uniswap_v3_public' when omitted.”
detect_address_poisoning_scamon 1 other serverreads or searches
“Compares a target recipient wallet address against recent transaction history to detect vanity prefix/suffix lookalike spoofing and zero-value dusting attacks.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- target_addressstringrequired“Candidate recipient EVM (0x...) or Solana Base58 wallet address to verify.”
- address_standardstring“Address encoding format; defaults to 'auto_detect' when omitted.”
verify_http402_payment_challengeon 1 other serverreads or searches
“Decodes inbound HTTP 402 Payment Required challenges (L402 BOLT11 + Macaroon, x402 Solana USDC, MPP Base intents) to verify cryptographic payment-hash binding and block overcharge fraud.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- www_authenticatestringrequired“Raw WWW-Authenticate or Payment-Required HTTP header string from a 402 response.”
- protocol_hintstring“Expected HTTP 402 payment protocol; defaults to 'L402' when omitted.”
estimate_bitcoin_mempool_feeson 1 other serverreads or searches
“Fetches real-time Bitcoin mainnet mempool feerate recommendations in satoshis per virtual byte (sat/vB) across fastest, half-hour, hour, and economy confirmation tiers.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- confirmation_targetstring“Target confirmation speed tier; defaults to 'half_hour' when omitted.”
plan_bitcoin_utxo_consolidationon 1 other servercalculates or converts
“Analyzes a set of Bitcoin UTXO balances in satoshis to compute exact vByte transaction weight, identify uneconomical dust inputs, and recommend whether to consolidate now or hold.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- utxos_sats_jsonstringrequired“JSON array or comma-separated list of UTXO values in satoshis (e.g.”
- script_typestring“Bitcoin input script type determining vByte weight per input; defaults to 'p2wpkh_segwit' when omitted.”
calculate_spot_swap_rateon 1 other servercalculates or converts
“Calculates instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values across BTC, ETH, SOL, SUI, and USDC.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- currencystringrequired“Source asset ticker symbol to convert from.”
- amountnumber“Quantity of the source asset to convert; defaults to 100 when omitted.”
compare_crosschain_bridge_routeson 1 other serverreads or searches
“Compares non-custodial, non-KYC cross-chain swap routes (THORChain native L1 swaps, Maya Protocol, Blockstream Liquid) by basis-point fee, net output sats, and settlement time.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- from_assetstringrequired“Origin chain asset identifier to bridge from.”
- to_assetstring“Destination chain asset identifier; defaults to 'BTC_NATIVE' when omitted.”
- amountnumber“Input asset amount to quote; defaults to 100.0 when omitted.”
generate_gemini_completionon 1 other servergenerates content
“Generates text completions and structured reasoning across all 45 Google Gemini foundation models (Gemini 4 Argon, 3.1 Pro, 3.8 Flash) with zero Google account or API key required.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- promptstringrequired“Primary user instruction or reasoning prompt to send to the selected Gemini model.”
- modelstring“Target Gemini foundation model identifier; defaults to 'gemini-4-argon' when omitted.”
execute_antigravity_agenton 1 other serverruns code or commandsdescribed as changing data
“Dispatches a complex engineering or operational task to Google's Antigravity autonomous agent for multi-step planning, tool orchestration, and verified execution.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- inputstringrequired“High-level task objective and constraints for the Antigravity autonomous agent.”
- execution_modestring“Autonomy policy for subtask execution; defaults to 'autonomous_verified' when omitted.”
conduct_deep_research_investigationon 1 other serverreads or searches
“Runs an iterative, multi-hop investigative research session via Gemini Deep Research Pro, cross-examining primary sources to produce a cited technical report.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- inputstringrequired“Investigative research question, scope, and specific aspects to analyze.”
- depth_tierstring“Research breadth and citation density; defaults to 'exhaustive_report' when omitted.”
operate_computer_use_agenton 1 other servercontrols a browser or desktopdescribed as changing data
“Plans and executes OS-level desktop, browser DOM, and GUI coordinate actions (click, type, scroll, wait) using the Gemini Computer Use agent.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- inputstringrequired“UI automation goal and target webpage or application context.”
- viewport_presetstring“Target screen resolution for coordinate grounding; defaults to 'desktop_1080p' when omitted.”
search_gemini_grounded_webon 1 other serverreads or searches
“Answers factual queries with live Google Search grounding, returning verified up-to-date answers accompanied by source URLs and grounding metadata.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- promptstringrequired“Factual question or search query to ground against live Google Search results.”
- recency_biasstring“Temporal preference for search snippets; defaults to 'any_time' when omitted.”
search_gemini_grounded_mapson 1 other serverreads or searches
“Executes geospatial and point-of-interest queries grounded in live Google Maps data, returning verified addresses, coordinates, operating hours, and spatial context.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- promptstringrequired“Geospatial query, place name, or regional routing question.”
- distance_unitsstring“Preferred unit system for distances; defaults to 'metric_km' when omitted.”
compile_mpp_research_dossieron 1 other server
“Compiles a structured JSON research dossier ('key_findings', 'synthesis_quality_score', 'sources_cited') settled via Base EVM Machine Payments Protocol (MPP).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- querystring“Research topic or technical question to investigate and structure into JSON.”
- output_densitystring“Granularity of the key_findings array; defaults to 'executive_10_points' when omitted.”
generate_gemini_embeddingson 1 other servercalculates or converts
“Generates normalized 3,072-dimensional or 768-dimensional semantic vector embeddings via Google Gemini Embedding 2 for RAG indexing and cosine-similarity search.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- textstringrequired“Input text passage, code snippet, or search query to embed into a float vector.”
- modelstring“Gemini embedding model version; defaults to 'gemini-embedding-2' when omitted.”
analyze_omni_multimodal_inputon 1 other server
“Analyzes combined multimodal prompts spanning text, image descriptors, audio transcripts, and video temporal events using Gemini Omni Flash.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- inputstringrequired“Multimodal prompt or media scene description to analyze.”
- modality_focusstring“Primary analytical lens applied to the multimodal input; defaults to 'cross_modal_synthesis' when omitted.”
plan_robotics_spatial_trajectoryon 1 other servercalculates or converts
“Computes 3D spatial affordances, obstacle-avoidance waypoints, and manipulator grasp sequences using Gemini Robotics ER 2 embodied reasoning.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- promptstringrequired“Spatial environment description, obstacle coordinates, and physical manipulation goal.”
- coordinate_framestring“Reference coordinate convention; defaults to 'cartesian_xyz_meters' when omitted.”
generate_nano_banana_imageon 1 other servergenerates content
“Generates photorealistic illustrations, UI mockups, and technical diagrams from text prompts using the Nano Banana Pro (Gemini 2.5 Flash Image) model family.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- promptstringrequired“Detailed visual scene, composition, lighting, and typography description to render.”
- aspect_ratiostring“Output image aspect ratio; defaults to '16:9' when omitted.”
generate_veo_cinematic_videoon 1 other servergenerates content
“Synthesizes high-definition cinematic video sequences with temporally coherent camera motion and physics using Google Veo 3.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- promptstringrequired“Cinematic scene description including subject motion, camera trajectory, and lighting.”
- motion_stylestring“Camera movement preset; defaults to 'smooth_tracking_shot' when omitted.”
compose_lyria_music_trackon 1 other servergenerates content
“Composes studio-grade instrumental music tracks, ambient loops, and multi-instrument arrangements from genre, tempo, and mood prompts using Google Lyria 3.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- promptstringrequired“Musical style, instrumentation, BPM tempo, and harmonic mood description.”
- genre_presetstring“Primary acoustic or electronic genre; defaults to 'cinematic_synth' when omitted.”
synthesize_gemini_speech_audioon 1 other servergenerates content
“Converts written text into natural, prosody-controlled spoken voice audio using Gemini 3.8 Flash Neural Text-to-Speech.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- textstringrequired“Exact written script or paragraph to synthesize into spoken voice audio.”
- voice_personastring“Expressive vocal timbre preset; defaults to 'neutral_broadcast' when omitted.”
process_live_audio_dialogueon 1 other server
“Processes real-time conversational dialog turns with native acoustic emotion, interruption handling, and paralinguistic cue comprehension via Gemini 3.8 Live.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- inputstringrequired“Conversational audio transcript or dialog turn payload to process.”
- response_tonestring“Target paralinguistic delivery style; defaults to 'direct_peer' when omitted.”
prune_context_skeletoncalculates or converts
“Compresses large source files, logs, or transcripts by 50–80% to fit an LLM context budget while preserving 100% of function/class/type signatures, imports, error frames, and query-matched lines.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs, 1 required
- contentstringrequired“Raw source code, document, or multi-turn transcript to compress.”
- target_rationumber“Target token retention ratio between 0.15 and 0.85; defaults to 0.45 when omitted.”
- focus_querystring“Optional symbol or keyword query whose matching lines receive maximum retention priority.”
- pruning_modestring“Salience weighting preset; defaults to 'ast_signatures_first' when omitted.”
plan_context_token_budgetcalculates or converts
“Counts subword BPE tokens across prompt segments, detects high-priority instructions trapped in the 35%–72% Lost-in-the-Middle attention trough, and calculates USD/satoshi costs across frontier LLMs.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- segments_jsonstringrequired“JSON string or array of prompt segments '[{"name":"sys","text":"...","priority":10}]' to analyze.”
- max_context_tokensnumber“Target model context window limit in tokens; defaults to 128000 when omitted.”
- target_model_familystring“Primary model family for token-Window calibration; defaults to 'gemini_3_1' when omitted.”
rerank_hybrid_rag_chunks
“Reranks and deduplicates candidate RAG or retrieval passages against a search prompt using Okapi BM25 (k1=1.5, b=0.75), Reciprocal Rank Fusion (RRF), and Maximal Marginal Relevance (MMR) Jaccard dive…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs, 2 required
- search_promptstringrequired“Technical search prompt or question used to score candidate chunks.”
- documents_jsonstringrequired“JSON string or array of candidate chunks '[{"id":"c1","text":"..."}]' to rerank.”
- top_knumber“Maximum number of deduplicated chunks to return; defaults to 5 when omitted.”
- ranking_modestring“Fusion weighting between lexical BM25 and diversity penalty; defaults to 'bm25_rrf_mmr' when omitted.”
apply_fuzzy_code_patchcreates or changes datadescribed as changing data
“Applies unified diffs (@@ ...”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- original_codestringrequired“Complete original source file content before patching.”
- patchstringrequired“Unified diff hunk or <<<<<<< SEARCH ...”
- fuzz_strategystring“Line-matching tolerance and indentation behavior; defaults to 'whitespace_normalized_auto_indent' when omitted.”
analyze_ast_symbol_graphreads or searches
“Static lexer and AST parser only (zero execution or evaluation): extracts imports, exports, classes, interfaces, and functions with line numbers, intra-file call edges, McCabe cyclomatic complexity, …”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs
- codestring“Source code file content to parse for symbols and complexity metrics.”
- languagestring“Programming language grammar used for symbol extraction; defaults to 'typescript' when omitted.”
audit_module_dependency_cyclesreads or searches
“Runs Tarjan's Strongly Connected Components (SCC) algorithm on a module import map to detect circular dependencies, compute parallel topological build waves, and trace downstream change blast radius.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- modules_jsonstringrequired“JSON string or object mapping each module name to its array of imported module names (e.g.”
- analysis_scopestring“Graph analysis output mode; defaults to 'cycles_waves_and_blast_radius' when omitted.”
isolate_stacktrace_root_cause
“Parses noisy CI/terminal logs and multi-language stack traces (Node/TS, Python, Rust, Go), strips node_modules/stdlib frames to isolate the innermost failing user-code frame, and clusters repetitive …”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- raw_logstringrequired“Raw terminal output, CI failure log, or exception traceback to analyze.”
- runtime_hintstring“Runtime stack format hint; defaults to 'auto_detect' when omitted.”
compile_polyglot_type_schemasgenerates content
“Inspects a sample JSON payload (inferring UUID, ISO-8601 datetime, email, integer vs float, and array item types) and compiles strict TypeScript interfaces, Zod schemas, Python Pydantic v2 models, an…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- sample_jsonstringrequired“JSON string or object representing the sample payload to infer types from.”
- root_namestring“Identifier used for the generated root interface/class; defaults to 'GeneratedPayload' when omitted.”
- strictnessstring“Schema additionalProperties and format constraint mode; defaults to 'strict_formats' when omitted.”
evaluate_deterministic_mathcalculates or converts
“Strict Shunting-Yard AST arithmetic parser with zero eval() or dynamic code execution: evaluates algebraic formulas and computes exact financial NPV, Newton-Raphson IRR, Kelly criterion, and dataset …”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs
- expressionstring“Algebraic or scientific formula to evaluate (e.g.”
- precision_digitsstring“Decimal rounding precision for returned numbers; defaults to '8_decimals' when omitted.”
schedule_critical_path_taskscalculates or converts
“Solves a task dependency DAG via the Critical Path Method (CPM) to compute ES/EF/LS/LF, Total Float/Slack, optimal makespan, and the Critical Path.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- tasks_jsonstringrequired“JSON string or array of tasks '[{"id":"t1","duration":3,"dependencies":[]}]' to schedule.”
- time_unitstring“Duration unit label attached to the schedule; defaults to 'hours' when omitted.”
evaluate_ab_statistical_significancecalculates or converts
“Computes Welch's two-sample t-test or two-proportion z-test, returning two-tailed p-values, Cohen's d effect size, relative lift %, and Bayesian P(Treatment > Control).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- control_jsonstringrequired“JSON string or object for the baseline control arm (e.g.”
- treatment_jsonstringrequired“JSON string or object for the candidate treatment arm (e.g.”
- significance_levelstring“Type-I error alpha threshold for statistical significance; defaults to 'alpha_0_05' when omitted.”
detect_openapi_breaking_changesreads or searches
“Compares baseline and candidate OpenAPI 3.1 specs, JSON Schemas, or MCP tool manifests to detect breaking changes (removed fields, new required inputs, narrowed enums, type mutations).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- baseline_schema_jsonstringrequired“JSON string of the baseline OpenAPI 3.1 spec, JSON Schema, or MCP tools array.”
- candidate_schema_jsonstringrequired“JSON string of the proposed candidate schema or contract revision to compare.”
- contract_formatstring“Contract specification format; defaults to 'auto_detect' when omitted.”
generate_boundary_test_vectorsgenerates content
“Synthesizes deterministic unit-test vectors from a JSON Schema or function signature covering valid equivalence partitions, numeric/length boundaries, and adversarial Unicode/null inputs.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- schema_or_signature_jsonstringrequired“JSON Schema object or function parameter specification to generate test vectors for.”
- vector_suite_profilestring“Test generation coverage profile; defaults to 'equivalence_boundary_and_fuzz' when omitted.”
simulate_monte_carlo_riskcalculates or converts
“Runs a reproducible seeded Mulberry32 Monte Carlo simulation over uncertain cost, latency, or duration variables to compute P10/P50/P90/P95 percentiles, Value-at-Risk (VaR), and CVaR.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- variables_jsonstringrequired“JSON array of stochastic variables (e.g.”
- distribution_modelstring“Probability distribution family applied to each variable; defaults to 'triangular_pert' when omitted.”
diff_agent_memory_checkpointcalculates or convertsdescribed as changing data
“Computes structural diffs between two agent state snapshots ('added_keys', 'mutated_keys', 'removed_keys'), flags boolean belief contradictions, generates an RFC 7396 JSON Merge Patch delta, and comp…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- previous_state_jsonstringrequired“JSON string or object representing the prior agent state snapshot.”
- current_state_jsonstringrequired“JSON string or object representing the updated agent state snapshot.”
- conflict_strategystring“Resolution policy when keys conflict; defaults to 'prefer_current' when omitted.”
heal_malformed_jsonon 1 other servercalculates or converts
“Deterministic JSON syntax repair: normalizes quotes, unclosed brackets, and boolean literals into compliant RFC 8259 JSON structure without data deletion.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- malformed_jsonstringrequired“Raw broken, truncated, or markdown-wrapped JSON string to repair.”
- repair_modestring“Bracket-closing and literal-normalization strategy; defaults to 'heuristic_fast' when omitted.”
enforce_json_schema_typeson 1 other servercalculates or converts
“Validates a raw LLM output object against a target JSON Schema, automatically coercing mismatched scalar types (e.g.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- raw_outputstringrequired“JSON string or object produced by an LLM to validate and coerce.”
- coercion_policystring“Policy for handling extra undeclared properties; defaults to 'prune_undeclared_and_coerce' when omitted.”
extract_structured_json_entitieson 1 other server
“Extracts structured JSON records, named entities, dates, and financial figures from unstructured prose, emails, or HTML/Markdown dumps.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- textstringrequired“Unstructured document, email body, or webpage text to extract structured entities from.”
- extraction_targetstring“Primary entity domain to extract; defaults to 'general_entities_and_metrics' when omitted.”
clean_tabular_dataseton 1 other servercalculates or converts
“Deduplicates repetitive lines or records, normalizes Unicode whitespace, strips HTML/control noise, and canonicalizes tabular text or JSON arrays.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- datastringrequired“Raw newline-delimited text, CSV rows, or JSON array string to deduplicate and normalize.”
- normalization_modestring“Deduplication key sensitivity; defaults to 'case_insensitive_trim' when omitted.”
synthesize_safe_regexon 1 other servergenerates content
“Synthesizes linear-time O(n) regular expressions free of catastrophic backtracking (ReDoS) and validates them against positive and negative test strings.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- descriptionstringrequired“Natural-language specification of the text pattern to match (e.g.”
- flavorstring“Target regular expression engine syntax; defaults to 'ecmascript_js' when omitted.”
compile_xml_agent_prompton 1 other servergenerates content
“Compiles a raw task description into a structured XML system prompt (<role>, <context>, <objective>, <constraints>, <workflow>, <output_format>) engineered to prevent instruction drift.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- taskstringrequired“Raw task instructions, persona goal, and operational constraints to compile.”
- prompt_stylestring“Structural formatting template; defaults to 'anthropic_xml_tags' when omitted.”
synthesize_python_automation_codeon 1 other servergenerates content
“Synthesizes PEP 8 compliant, self-contained Python 3 scripts, data parsers, and CLI utilities complete with type hints, docstrings, and inline assertion tests.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- promptstringrequired“Functional specification, input/output formats, and edge cases for the Python script.”
- dependency_policystring“Allowed library dependencies in generated code; defaults to 'stdlib_only' when omitted.”
summarize_technical_documenton 1 other servergenerates content
“Condenses long technical specifications, RFCs, research papers, or meeting transcripts into high-density executive bullet points preserving exact figures and decisions.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- textstringrequired“Full document text, RFC, or transcript to summarize.”
- summary_formatstring“Output presentation structure; defaults to 'executive_bullets' when omitted.”
synthesize_web_intelligence_briefon 1 other server
“Synthesizes a real-time market or technical intelligence brief grounded in live Google Search, returning strict JSON ('executive_summary', 'key_developments', 'sentiment', 'sources').”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- topicstringrequired“Company, protocol, market sector, or technical topic to brief.”
- focusstring“Analytical angle applied to the brief; defaults to 'technical_and_market_catalysts' when omitted.”
verify_context_compaction_fidelityon 1 other serverreads or searches
“Audits a compacted conversation summary against the original full context to detect dropped user constraints, lost file paths, altered numbers, or missing pending tasks.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 2 required
- original_contextstringrequired“Full pre-compaction conversation history or task log.”
- compacted_summarystringrequired“Candidate compacted summary to audit for dropped constraints or entities.”
- audit_focusstring“Entity class prioritized during retention scoring; defaults to 'constraints_paths_and_numbers' when omitted.”
route_mcp_workflow_planon 1 other server
“Maps a natural-language agent goal to an ordered sequence of Diogenes MCP tool calls with exact endpoint paths, JSON-RPC 2.0 payloads, and cumulative satoshi cost estimates.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- objectivestringrequired“Natural-language description of the workflow goal to route across MCP tools.”
- budget_preferencestring“Cost vs depth routing trade-off; defaults to 'lowest_sats_deterministic' when omitted.”
arbitrate_agent_deliverable_escrowon 1 other server
“Evaluates a worker agent's submitted task deliverable against agreed contract acceptance criteria to issue a deterministic escrow settlement verdict ('RELEASE_FUNDS_TO_WORKER_AGENT', 'REQUEST_REVISIO…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- deliverablestringrequired“JSON string or text deliverable submitted by the worker agent.”
- termsstring“Contract acceptance criteria that the deliverable must satisfy; defaults to 'Complete verified JSON deliverable' when omitted.”
- arbitration_standardstring“Strictness of contract verification; defaults to 'strict_all_criteria' when omitted.”
infer_mpp_streaming_sessionon 1 other server
“Initializes a Base USDC Machine Payments Protocol (MPP) metered inference session, allocating a streaming token quota and returning a step-by-step execution plan.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- taskstringrequired“Agent workflow task to execute within the metered MPP session.”
- token_quota_tierstring“Allocated streaming token ceiling for the session; defaults to 'standard_4096' when omitted.”
generate_x402_vector_embeddingson 1 other servergenerates content
“Generates normalized high-dimensional semantic vector embeddings settled via Solana SPL USDC ('x402' protocol headers) for decentralized RAG pipelines.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- textstringrequired“Input text string or document chunk to convert into a normalized embedding vector.”
- encoding_formatstring“Vector serialization format; defaults to 'float_array' when omitted.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does: 100% of 71 tools
Says what it returns: 100% of 31 tools
States limits, defaults or errors: 100% of 71 tools
Says when to use it: 100% of 71 tools
Items covered per tool: 4.0 of 4 on average

Counted from the listing

Parameters with a description: 100% of 156
Tools with a description: 100% of 71
Typical description length: 567 characters

The tool set

Counted from the listing

Tools: 71
Size of the list: about 34,764 tokens for an agent to load (characters ÷ 4)
Naming: 71 of 71 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 71 of 71 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-23 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://diogenes-micro-gateway.corinth.workers.dev/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "diogenes-gateway": {
      "url": "https://diogenes-micro-gateway.corinth.workers.dev/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "diogenes-gateway": {
      "type": "http",
      "url": "https://diogenes-micro-gateway.corinth.workers.dev/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"diogenes-gateway","type":"http","url":"https://diogenes-micro-gateway.corinth.workers.dev/mcp"}'

Claude Code

claude mcp add --transport http diogenes-gateway https://diogenes-micro-gateway.corinth.workers.dev/mcp

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://diogenes-micro-gateway.corinth.workers.dev/mcp --transport http

The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint diogenes-micro-gateway.corinth.workers.dev/mcp	Session opened	matches	our test · 2026-10-23
No credential declared as required	Opened a session without any credential	matches	our test · 2026-10-23
Repository github.com/stand-out-of-my-sun/diogenes-micro-gateway	Opens publicly	matches	api.github.com · 2026-10-23

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace: io.github.stand-out-of-my-sun · 6 servers
GitHub owner: a personal account (stand-out-of-my-sun)

Repository: github.com/stand-out-of-my-sun/diogenes-micro-gateway
Stars: 1
Repository age: 0–30 days
Last push: 0–30 days ago
Archived: no
Security policy: SECURITY.md

Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

5 of 5 record checks met · 4 do not apply

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: 1 star (ranked from 10)

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
MetSource repository link opensThe linked GitHub repository is public.
MetRepository is not archivedNot archived.
MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
MetRepository publishes a security policy (SECURITY.md)SECURITY.md found.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.stand-out-of-my-sun/diogenes-gateway

Answered from the data above

Is io.github.stand-out-of-my-sun/diogenes-gateway safe to install?

We do not rate servers as safe or unsafe. 5 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. 5 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Does io.github.stand-out-of-my-sun/diogenes-gateway need an API key or sign-in?

It opened a session without any credential on 2026-10-23. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.stand-out-of-my-sun/diogenes-gateway been security tested?

Partly. 2 of the 14 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.

What can io.github.stand-out-of-my-sun/diogenes-gateway do?

It lists 71 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data, run code or commands, control a browser or desktop, generate content and calculate or convert. We did not call any tool, so this describes the text, not the behaviour.

Can io.github.stand-out-of-my-sun/diogenes-gateway change or delete data?

5 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Does io.github.stand-out-of-my-sun/diogenes-gateway publish a security policy?

Yes: its repository has a public security policy (github.com/stand-out-of-my-sun/diogenes-micro-gateway/blob/HEAD/SECURITY.md). That is the publisher's statement, not permission for us to test the server, and we call none of its tools.

Where is the source code of io.github.stand-out-of-my-sun/diogenes-gateway?

In github.com/stand-out-of-my-sun/diogenes-micro-gateway, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

io.github.OrygnsCode/opa-mcpOPA MCPalso has tools that calculates or converts, creates or changes data, runs code or commands, generates content, reads or searchescompare with this one
io.github.agent-passport-system/agent-passport-mcpAgent Passport System — Cryptographic Identity for AI Agentsalso has tools that calculates or converts, creates or changes data, runs code or commands, generates content, reads or searchescompare with this one
io.github.sparkvibe-io/GuardianShieldalso has tools that calculates or converts, creates or changes data, runs code or commands, generates content, reads or searchescompare with this one
io.github.moxno/privacyscrubber-mcpalso has tools that calculates or converts, creates or changes data, runs code or commands, generates content, reads or searchescompare with this one
io.github.aristiun/aribotalso has tools that calculates or converts, creates or changes data, runs code or commands, generates content, reads or searchescompare with this one
io.github.daedalus/mcp-pwntoolsalso has tools that calculates or converts, creates or changes data, runs code or commands, generates content, reads or searchescompare with this one

Active servers whose topic is also “security” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: not applicable

2 exercised12 not run (reason given)4 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised

Not run, with the reason · 12

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 4

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.No sign-in (OAuth) metadata is published, so there are no sign-in addresses to check.not applicable

Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
25 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 71 tools, 0 resources, 0 prompts.
755 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

security

AI-classified · 2026-10-23

Pricing modelAI-classified

no value

No value: the AI answer was held back because the quoted text did not clearly support it.

Programming language

TypeScript

api.github.com · 2026-10-23

Hosting type

remote (hosted by the publisher)

registry · 2026-10-23

MCP capability

tools

our test · 2026-10-23

Transport

streamable HTTP

registry · 2026-10-23

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-10-23

Lifecycle status

active

registry · 2026-10-23

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

owner: a personal account · repository age: 0–30 days · stars: 0–9

api.github.com · 2026-10-23

Maintenance

active

api.github.com · 2026-10-23

Environment

the publisher's infrastructure

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.stand-out-of-my-sun/diogenes-gateway: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.stand-out-of-my-sun/diogenes-gateway

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.stand-out-of-my-sun/diogenes-gateway)](https://protocolprobe.com/mcp/servers/io.github.stand-out-of-my-sun/diogenes-gateway)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology