Second Stone, an MCP server verification service

Field notes

The free validator limits itself to read-only checks of a public MCP endpoint, including schemas, authentication discovery, TLS, and possible secrets in responses. A fuller audit operates under signed testing scope and produces reproducible findings with evidence hashes, a fixed remediation price, and one re-test. Fixes arrive as a branch for the customer to review and merge rather than as direct production changes. The site says its journal is generated from an evidence ledger, although the public counters are not live yet.