# mcpflux check

> Checks whether a remote MCP server is ready to be added as a connector in Claude and ChatGPT.

Run a hosted scan with the prompt below, or install the standalone skill to probe directly from your agent's environment. Both produce a Markdown report. Basic hosted scans require no account; advanced diagnostics require a signed-in session and available quota.

## Docs

- [API reference](https://lipton.mcpflux.com/api/docs): Scalar explorer for developers (same generated spec)
- [OpenAPI JSON](https://lipton.mcpflux.com/api/openapi.json): generated machine spec for the check API
- [OpenAPI for LLMs](https://lipton.mcpflux.com/api/openapi.md): the same spec as compact Markdown
- [Auth API reference](https://lipton.mcpflux.com/api/docs): Scalar explorer for magic-link auth
- [Prompt for Claude Code](https://lipton.mcpflux.com/prompt.md): copy-paste this to call the API and write a Markdown report
- [Cursor / Claude skill](https://lipton.mcpflux.com/skills/mcp-connector-check/SKILL.md): probe a server yourself without the hosted product
- [Skill checklist](https://lipton.mcpflux.com/skills/mcp-connector-check/checklist.md): required companion to SKILL.md
- [Skill installation](https://lipton.mcpflux.com/skills/README.md): install both files in Cursor or Claude Code
- [Live ruleset](https://lipton.mcpflux.com/rules)

## Using the API

Prefer the generated OpenAPI documents for routes and schemas. Short version:

- POST https://lipton.mcpflux.com/api/scans  body { "url": "https://example.com/mcp" }  → 201 { "scan": Scan }
- GET  https://lipton.mcpflux.com/api/scans/{id}  → { "scan": Scan }
- Errors: { "error": { "code": string, "message": string } }

Read scan.status inside the response envelope. Poll queued/running every 2 seconds for up to 3 minutes. completed and failed are terminal; awaiting_auth needs user credentials. Save partial findings on auth, timeout, or failure; a missing summary is not a ready verdict. See prompt.md for reporting and error handling.

Credentials for the MCP server belong in the JSON body's bearer_token or headers, never in the URL. Authorization on the API request is reserved for a mcpflux session JWT. Do not enable diagnostics unless explicitly requested with that session; diagnostics can invoke tools and consume quota. Reports have shareable scan links: redact secrets from all output.