generated: '2026-08-09'
method: probed
source: https://www.codebiotx.com/_api/mcp
scope: >-
  Cross-cutting standards conformance for the only machine-readable surface Code
  Biotherapeutics publishes. There is no REST/GraphQL contract, so spec-derived assertions
  are limited to what the MCP handshake and the site's published text files prove.
standards:
- id: mcp
  name: Model Context Protocol
  version: '2025-06-18'
  conforms: true
  evidence: >-
    POST initialize to https://www.codebiotx.com/_api/mcp returned HTTP 200 with
    protocolVersion "2025-06-18", serverInfo, and capabilities {tools:{listChanged:true},
    logging:{}}. POST tools/list returned nine tools, each with a draft-07 inputSchema.
- id: json-schema
  name: JSON Schema draft-07
  conforms: true
  evidence: >-
    Every tool inputSchema in the tools/list response declares
    "$schema": "http://json-schema.org/draft-07/schema#".
- id: json-rpc-2.0
  name: JSON-RPC 2.0
  conforms: true
  evidence: All MCP responses carry "jsonrpc":"2.0" and echo the request id.
- id: llms-txt
  name: llms.txt
  conforms: true
  evidence: >-
    https://www.codebiotx.com/llms.txt returns HTTP 200 text/plain with an H1 title,
    blockquote summary, and H2 link sections per the llms.txt convention.
- id: rfc9116
  name: security.txt
  conforms: false
  evidence: 'https://www.codebiotx.com/.well-known/security.txt returned HTTP 400.'
- id: oauth2
  name: OAuth 2.0
  conforms: false
  evidence: >-
    No authorization-server or protected-resource metadata published; the MCP surface is
    anonymous with an anonymously-minted visitor token.
- id: rfc9457
  name: Problem Details for HTTP APIs
  conforms: false
  evidence: No HTTP API is published, so no problem+json envelope exists to assess.
- id: openapi
  name: OpenAPI
  conforms: false
  evidence: >-
    /openapi.json, /openapi.yaml, /swagger.json, /api-docs and /docs all miss on
    www.codebiotx.com; api., docs. and developer. subdomains do not resolve.
compliance_programs:
  published: false
  note: >-
    No trust center, SOC 2 / ISO 27001 / HIPAA attestation page, or certification listing
    was found on codebiotx.com. As a preclinical research company it publishes a privacy
    policy and terms of use only.
x-evidence:
  fetched: '2026-08-09'