Privacy / 29 July 2026
What the scanner receives.
toolsurface is a static review of public MCP tool manifests. It does not require an account, set analytics cookies, or execute the tools exposed by a server.
We receive the public URL you submit. The scanner sends the standard MCP initialization sequence and reads the tool list, following pagination when the server advertises it. It does not call a listed tool.
Private, loopback, link-local, and reserved network destinations are blocked. The free scanner is for public endpoints only.
The result is returned to your browser. There is no user account or public scan history. Unexpected scan failures can place the submitted URL and error details in restricted service logs so the service can be repaired.
The site does not load third-party analytics, advertising scripts, remote fonts, or tracking pixels. Ordinary infrastructure may process request metadata such as IP address, time, path, and user agent for delivery and abuse prevention.
If you contact us, your message and address are used to answer you and, where requested, scope review or repair work. They are not sold.
For access, correction, deletion, or a privacy question, email kurt@toolsurface.dev.