Free, no signup

Test an MCP server

Paste a remote MCP endpoint. MCP Canary connects (Streamable HTTP, then legacy SSE), lists the tools with their safety hints, and shows what an agent will run into. It never calls a tool.

Public endpoints only. Endpoints that need a token answer "auth required"; test them with the CLI and --bearer-env.

This page needs JavaScript. Without it, run canary inspect URL or curl -X POST https://api.mcpcanary.com/v1/inspect -H 'content-type: application/json' -d '{"url":"URL"}'.

A passing test is not a working server

This test checks the handshake and tools/list. Many servers answer both from code, so they pass while the database or upstream API behind every tool is down.

To catch that, a monitor calls one read-only tool on a schedule and checks the answer with assertions, for example $.items[0].id exists.

In our scan of 30,516 registry endpoints, about half passed this test. One tool in three had no safety hint at all.