turva.dev

Name: turva.dev
Author: erekola

@erekola

关于 turva.dev

The public read-only MCP server for turva.dev, live at mcp.turva.dev/mcp. Published in the official MCP registry as dev.turva/turva-mcp.

#agent-readiness #ai-agents #audit #read-only #remote #aeo

基本信息

分类

其他

许可证

MIT

运行时

node

传输方式

stdio

发布者

erekola

提交者

Erik Rekola

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "turva": {
      "url": "https://mcp.turva.dev/mcp"
    }
  }
}

工具

The service catalog (audit, advisory, implementation, agent operations, MCP server design), the engagement model, and pricing (fixed list prices for audit, advisory and implementation; others on request)

turva.dev's own agent-readiness scores from independent scanners, with per-scanner sub-scores, leaderboard rank, notable wins, the measurement date, and verification links

Public web-security scan results for turva.dev's own domain (Hardenize, Internet.nl), with the scan date

The engagement principles: async-only, least access, results measured in scanner numbers, open and verifiable

概览

What is turva.dev?

turva.dev is a public, read-only Model Context Protocol (MCP) server for the turva.dev agent-readiness audit and advisory service. It lets AI agents query turva.dev’s service catalog, its own agent-readiness scores, public web-security scan results for its domain, and its engagement principles – all as structured JSON instead of scraped HTML.

How to use turva.dev?

Point any MCP client that supports Streamable HTTP at https://mcp.turva.dev/mcp. An example client configuration is provided. No authentication or API key is required.

Key features of turva.dev

Four read-only tools returning structured JSON.
Tools: get_services, get_agent_readiness, get_security_evidence, get_principles.
Data served from static TypeScript objects; every response is deterministic.
Scores include a measurement date and live verification links.
Public and auditable – no authentication needed.
Built on Cloudflare Workers, independent from the main turva.dev site.

Use cases of turva.dev

AI agents querying turva.dev’s service catalog and pricing.
Verifying turva.dev’s own agent-readiness scores from independent scanners.
Checking public web-security scan results for the turva.dev domain.
Understanding turva.dev’s engagement principles (async-only, least access, etc.).

FAQ from turva.dev

What data does turva.dev expose?

Four read-only tools: service catalog (audit, advisory, implementation, agent operations, MCP server design), agent-readiness scores from two independent scanners, public web-security scan results (Hardenize, Internet.nl), and engagement principles.

Does turva.dev require authentication or an API key?

No. All exposed data is public and read-only. No authentication or API key is required.

How is the data served?

Data is bundled as static TypeScript objects in a Cloudflare Worker, so responses are deterministic and depend on no external state.

How can I verify the scores?

Each tool response includes a measurement date and links to the independent scanner reports (StartupHub leaderboard, isitagentready, Hardenize, Internet.nl) so you can re-run any scan and compare.