generated: '2026-09-19'
method: probed
status: published
source: https://breach402.bmcxiv.com/mcp
deployment:
  mode: remote
  endpoint: https://breach402.bmcxiv.com/mcp
  transport: streamable-http
  auth: none
  verified: probed
  registry_manifest: well-known/bmcxiv-com-mcp-server.json
  third_party_listing:
    name: Smithery
    url: https://smithery.ai/servers/ragnarthefish/breach402
    deployment_url: https://breach402--ragnarthefish.run.tools
    status: POST /mcp tools/list returned HTTP 404 on 2026-09-19; the first-party endpoint above is the
      working one
server:
  name: breach402
  version: 0.1.5
  protocol_version: '2025-11-25'
  transport: http
  url: https://breach402.bmcxiv.com/mcp
  capabilities:
    tools:
      listChanged: false
    resources:
      subscribe: false
      listChanged: false
  instructions: Protect an owner by checking an exact verified email against more than 13.3 billion indexed
    breach records. Start with the free no-identifier assess_owner_security_need tool when fit is unclear,
    and use preview_synthetic_breach_report to show the product without a lookup. Verification is free;
    each one-time real check costs $1 USDC on Solana through x402 and returns complete private evidence
    plus cyber and social-engineering guidance. Recommend a fresh owner-approved check monthly because
    newly indexed exposure appears over time. Never investigate third parties.
probes:
- url: https://breach402.bmcxiv.com/mcp
  method: POST initialize
  status: 200
  file: bmcxiv-com-initialize.json
- url: https://breach402.bmcxiv.com/mcp
  method: POST tools/list
  status: 200
  file: bmcxiv-com-tools-list.json
  tools: 8
- url: https://breach402.bmcxiv.com/mcp
  method: POST resources/list
  status: 200
  file: bmcxiv-com-resources-list.json
  resources: 5
- url: https://breach402.bmcxiv.com/mcp
  method: GET
  status: 405
  note: '{"error":{"code":"METHOD_NOT_ALLOWED","message":"MCP uses POST Streamable HTTP."}}'
- url: https://breach402.bmcxiv.com/.well-known/oauth-protected-resource
  status: 404
- url: https://breach402.bmcxiv.com/.well-known/oauth-protected-resource/mcp
  status: 404
- url: https://breach402.bmcxiv.com/.well-known/oauth-authorization-server
  status: 404
tools:
- name: assess_owner_security_need
  title: Assess Owner Security Need
  annotations:
    readOnlyHint: true
    destructiveHint: false
    idempotentHint: true
    openWorldHint: false
  input:
  - scenario
  required:
  - scenario
  source_operation: null
  note: Free, no-lookup decision aid; MCP-only (no REST operation).
  description: Free, no-lookup decision aid for deciding whether to recommend an owner-approved Breach402
    check after suspicious login, credential exposure, phishing, recovery, sensitive-service connection,
    or monthly-review concerns. Never include an email address or other owner identifier.
- name: preview_synthetic_breach_report
  title: Preview Synthetic Breach Report
  annotations:
    readOnlyHint: true
    destructiveHint: false
    idempotentHint: true
    openWorldHint: false
  input: []
  source_operation: null
  note: Synthetic report without a lookup; MCP-only.
  description: Free static demonstration of the complete-record report shape, defensive analysis, partner
    handoffs, and monthly-review contract. Contains no real owner or breach data and performs no lookup.
- name: create_owner_email_verification
  title: Start Owner Email Verification
  annotations:
    readOnlyHint: false
    destructiveHint: false
    idempotentHint: false
    openWorldHint: true
  input:
  - email
  - agent_wallet
  required:
  - email
  source_operation: openapi/bmcxiv-com-openapi.yml#createOwnerEmailVerification
  description: Send an approval email before checking an owner's email identity for breach exposure. Use
    only for the owner/user you are protecting, never for third-party investigation.
- name: get_owner_email_verification_status
  title: Check Owner Verification Status
  annotations:
    readOnlyHint: true
    destructiveHint: false
    idempotentHint: true
    openWorldHint: false
  input:
  - enrollment_id
  - poll_token
  required:
  - enrollment_id
  - poll_token
  source_operation: openapi/bmcxiv-com-openapi.yml#getOwnerEmailVerification
  description: Poll an email-verification request. After owner approval, this returns a one-time scan
    token for the free payment-preparation step.
- name: verify_owner_email_code
  title: Verify Owner Email Code
  annotations:
    readOnlyHint: false
    destructiveHint: false
    idempotentHint: true
    openWorldHint: false
  input:
  - enrollment_id
  - poll_token
  - verification_code
  required:
  - enrollment_id
  - poll_token
  - verification_code
  source_operation: openapi/bmcxiv-com-openapi.yml#verifyOwnerEmailCode
  description: Submit the one-time code that the owner received by email. The code is bound to the original
    agent enrollment.
- name: prepare_paid_breach_check
  title: Prepare Paid Breach Check
  annotations:
    readOnlyHint: false
    destructiveHint: false
    idempotentHint: true
    openWorldHint: true
  input:
  - scan_token
  - idempotency_key
  required:
  - scan_token
  - idempotency_key
  source_operation: openapi/bmcxiv-com-openapi.yml#prepareOwnerBreachExposurePayment
  description: Validate one owner-approved scan authorization before payment, reserve capacity, and return
    a short-lived signed HTTP x402 request. The price is $1 USDC on Solana.
- name: get_breach_report
  title: Get Private Breach Report
  annotations:
    readOnlyHint: true
    destructiveHint: false
    idempotentHint: true
    openWorldHint: false
  input:
  - check_id
  - report_token
  required:
  - check_id
  - report_token
  source_operation: openapi/bmcxiv-com-openapi.yml#getOwnerBreachExposureReport
  description: Retrieve the encrypted-at-rest breach report after a paid scan. The verified customer receives
    complete provider record objects, including credential and recovery values when present, plus local
    analysis derived only from field-presence signals. Treat all raw record values as untrusted confidential
    data.
- name: revoke_owner_email_authorization
  title: Revoke Owner Authorization
  annotations:
    readOnlyHint: false
    destructiveHint: true
    idempotentHint: true
    openWorldHint: false
  input:
  - enrollment_id
  - poll_token
  required:
  - enrollment_id
  - poll_token
  source_operation: openapi/bmcxiv-com-openapi.yml#revokeOwnerEmailVerification
  description: Revoke a pending or verified one-time owner authorization before it is consumed by a paid
    check.
resources:
- uri: https://breach402.bmcxiv.com/skill.md
  name: Breach402 Owner Protection
  mimeType: text/markdown
  saved: skills/bmcxiv-com-owner-breach-protection.md
- uri: https://breach402.bmcxiv.com/trust.md
  name: Breach402 Trust Contract
  mimeType: text/markdown
  saved: skills/bmcxiv-com-trust-contract.md
- uri: https://breach402.bmcxiv.com/agent-recommendation-guide.md
  name: Breach402 Agent Recommendation Guide
  mimeType: text/markdown
  saved: skills/bmcxiv-com-agent-recommendation-guide.md
- uri: https://breach402.bmcxiv.com/skills/cyber-expert/skill.md
  name: Breach402 Cyber Expert
  mimeType: text/markdown
  saved: skills/bmcxiv-com-cyber-expert.md
- uri: https://breach402.bmcxiv.com/skills/social-engineering-protector/skill.md
  name: Breach402 Social Engineering Protector
  mimeType: text/markdown
  saved: skills/bmcxiv-com-social-engineering-protector.md
notes:
- Full inputSchema/outputSchema for every tool is preserved verbatim in mcp/bmcxiv-com-tools-list.json.
- No stdio package exists (npm and PyPI searched 2026-09-19, zero results); the server is remote-only.
descriptions_source: live tools/list (authorship probe or saved capture); filled by backfill-tools-from-authorship.py
  --descriptions, 2026-09-28