OpenChainGraph Suite · CONTRACT A3 · arch #5

MCP Publish-Readiness Chain

Validates an MCP server manifest → lints tool definitions → audits OAuth 2.1 implementation → scans for tool-poisoning injection risks → scores overall developer readiness. Full 5-stage compliance journey before shipping a production MCP server.

OpenChainGraph · 5 Steps compliance mandate Hash-Anchored §4 chain_depth:5 Client-Side · Zero PII
Chain Topology — MCP Server JSON Validator → MCP Tool Definition Linter → MCP OAuth Authorization Auditor → MCP Tool Poisoning Scanner → MCP Developer Readiness Scorecard
§4 Execution Hash · Chain Definition Anchor
execution_hash:computing…
Chain Stages · 5 Steps
1 ROOT · D0 node
MCP Server JSON Validator 275-mcp-server-json-validator
schema_errors, version_compliance, missing_fields feed Stage 2 tool linting
MCP Call · validate_mcp_server_json
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "validate_mcp_server_json",
    "arguments": {}
  },
  "id": 1
}
2 D2 node
MCP Tool Definition Linter 274-mcp-tool-definition-linter
lint_errors, naming_violations, schema_gaps feed Stage 3 OAuth audit
MCP Call · lint_mcp_tool_definition
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "lint_mcp_tool_definition",
    "arguments": {}
  },
  "id": 1
}
3 D3 node
MCP OAuth Authorization Auditor 278-mcp-oauth-authorization-auditor
auth_scheme, token_scope_gaps, pkce_compliance feed Stage 4 poisoning scan
MCP Call · audit_mcp_oauth
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "audit_mcp_oauth",
    "arguments": {}
  },
  "id": 1
}
4 D4 node
MCP Tool Poisoning Scanner 282-mcp-tool-poisoning-scanner
poisoning_risk_score, suspicious_instructions, injection_patterns feed Stage 5 readiness score
MCP Call · scan_tool_poisoning
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "scan_tool_poisoning",
    "arguments": {}
  },
  "id": 1
}
5 TERMINAL node
MCP Developer Readiness Scorecard 288-mcp-developer-readiness-scorecard
readiness_score, deployment_verdict — Exports MCP compliance mandate — final stage
MCP Call · score_mcp_readiness
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "score_mcp_readiness",
    "arguments": {}
  },
  "id": 1
}
▶ Run this chain (live) browser · real execution · composite §4 hash
Export Artifacts
Download the §4 chain definition artifact (hash-anchored composite JSON) or the §13.11 W3C Verifiable Credentials view. Both derive from the chain definition — no new hash is minted. Available after hash computation.