feat(observatory): MCP trust grade badge endpoint [RUN-035]#30
Draft
vdineshk wants to merge 2 commits into
Draft
feat(observatory): MCP trust grade badge endpoint [RUN-035]#30vdineshk wants to merge 2 commits into
vdineshk wants to merge 2 commits into
Conversation
…rce [RUN-035]
- Add /api/trust-badge/{server_id} — shields.io-style SVG badge returning
trust grade (A/B/C/D/F) + score for embedding in MCP server READMEs.
Viral propagation: each README render creates an Observatory HTTP call.
Supports .svg extension and clean path parameter URL pattern.
- Sync Observatory source from deployed branch (youthful-goodall-fxkOg)
to prevent cross-channel deploy drift. Includes all routes from RUN-033
(cursorrules, SKILL.md, agent-card, ctef-conformance) and RUN-034
(ctef/attest conformance document generator).
- Update llms.txt to document /api/trust-badge/{server_id}
- Update /.well-known/mcp-observatory to include trust_badge endpoint
- Update post-deploy-health.json with trust badge verification config
- Deploy: version 4ff74c78 | POST_DEPLOY_VERIFY_HEALTH 15/15 PASS
7 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
/api/trust-badge/{server_id}— shields.io-style SVG badge returning MCP trust grade (A/B/C/D/F) + score. Viral callability surface: any MCP server operator embedsin their README and every render creates an Observatory HTTP call.llms.txtto document/api/trust-badge/{server_id}/.well-known/mcp-observatorydiscovery metadata to includetrust_badgeendpointpost-deploy-health.jsonwith trust badge verification entryWhat /api/trust-badge does
Embed in README:
Color scheme: Green (A/B, ≥75), Orange (C, ≥60), Red (D/F, <60), Gray (unrated).
Supports
.svgextension for explicit content negotiation.Novelty claim (C4 prior art check)
Searched: shields.io (generic, no MCP-specific), existing Observatory
/badge?url=(query param only, no grade), CTEF badge standard (none defined), PulseMCP/mcp.so/smithery (no badge endpoints),/api/badgeroute in Observatory (query param?url=, shows only numeric score).New: path parameter badge URL (
/{server_id}) + trust grade (A-F) + score in single visual = no prior art in MCP ecosystem.Deploy
4ff74c78-6e60-41dc-af03-e425c194e594Test plan
curl https://dominion-observatory.sgdata.workers.dev/api/trust-badge/sg-cpf-calculator-mcp→ SVGimage/svg+xml,aria-label="MCP trust: A · 92.5".svgextension:curl .../api/trust-badge/sg-cpf-calculator-mcp.svg→ 200curl .../api/trust-badge/→ 400 JSON4ff74c78confirmed current viawrangler deployments listGenerated by Claude Code