ndaa-ai MCP server

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

The AI items cover 0 of 8 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

{
  "mcpServers": {
    "ndaa-ai": {
      "command": "npx",
      "args": [
        "-y",
        "ndaa-mcp@0.1.0"
      ]
    }
  }
}

{
  "mcpServers": {
    "ndaa-ai": {
      "command": "npx",
      "args": [
        "-y",
        "ndaa-mcp@0.1.0"
      ]
    }
  }
}

{
  "servers": {
    "ndaa-ai": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "ndaa-mcp@0.1.0"
      ]
    }
  }
}

code --add-mcp '{"name":"ndaa-ai","type":"stdio","command":"npx","args":["-y","ndaa-mcp@0.1.0"]}'

claude mcp add --transport stdio ndaa-ai -- npx -y ndaa-mcp@0.1.0

{
  "mcpServers": {
    "ndaa-ai": {
      "command": "npx",
      "args": [
        "-y",
        "ndaa-mcp@0.1.0"
      ],
      "disabled": false,
      "autoApprove": []
    }
  }
}

{
  "mcpServers": {
    "ndaa-ai": {
      "command": "npx",
      "args": [
        "-y",
        "ndaa-mcp@0.1.0"
      ]
    }
  }
}

[mcp_servers.ndaa-ai]
command = "npx"
args = ["-y", "ndaa-mcp@0.1.0"]

{
  "context_servers": {
    "ndaa-ai": {
      "command": "npx",
      "args": [
        "-y",
        "ndaa-mcp@0.1.0"
      ]
    }
  }
}

npx @modelcontextprotocol/inspector@2.11.0 -- npx -y ndaa-mcp@0.1.0

Settings → Connectors → Add custom connector, then paste:
https://mcp.ndaa.ai/mcp

{
  "mcpServers": {
    "ndaa-ai": {
      "url": "https://mcp.ndaa.ai/mcp"
    }
  }
}

{
  "servers": {
    "ndaa-ai": {
      "type": "http",
      "url": "https://mcp.ndaa.ai/mcp"
    }
  }
}

code --add-mcp '{"name":"ndaa-ai","type":"http","url":"https://mcp.ndaa.ai/mcp"}'

claude mcp add --transport http ndaa-ai https://mcp.ndaa.ai/mcp

{
  "mcpServers": {
    "ndaa-ai": {
      "type": "streamableHttp",
      "url": "https://mcp.ndaa.ai/mcp",
      "disabled": false,
      "autoApprove": []
    }
  }
}

{
  "mcpServers": {
    "ndaa-ai": {
      "httpUrl": "https://mcp.ndaa.ai/mcp"
    }
  }
}

[mcp_servers.ndaa-ai]
url = "https://mcp.ndaa.ai/mcp"

{
  "context_servers": {
    "ndaa-ai": {
      "url": "https://mcp.ndaa.ai/mcp"
    }
  }
}

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://mcp.ndaa.ai/mcp --transport http

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21; Cline, Gemini CLI, OpenAI Codex and Zed 2026-10-26). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Facts about the publisher. We do not turn them into a trust score.

Source: the registry entry and api.github.com · 2026-11-04; security policy read from GitHub · 2026-11-04.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Open without sign-in

It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers. These 18 checks are separate from the record checks at the top of this page, which read public records only.

Source: our own test, 2026-11-04, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

The steps in order, as the test record holds them.

1. 0 msStarted a read-only session with the server's remote endpoint
2. 1,507 msConnected after 0 redirects. No credential was sent or needed.
3. Read the inventory: 8 tools, 0 resources, 0 prompts.
4. 4,752 msFinished: 2 checks exercised.

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.