October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

MCP Server Checks: Verify Discovery Without Running Tools

HTTP 200 confirms only an HTTP status. Learn what MCP discovery and tools/list reveal, how protocol versions affect checks, and when a safe tools/call is necessary.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

An HTTP 200 response shows that the HTTP exchange returned a successful status; it does not prove that an MCP method was recognized, tools are available, or a tool ran successfully. To check an MCP server without executing tools, inspect the response body and, when supported, request discovery information and enumerate tools. Those checks verify the advertised interface—not execution. Only a safe, understood tools/call can provide evidence that a particular tool invocation worked.

What an HTTP 200 response tells you

HTTP status belongs to the transport layer. A 200 response is one piece of evidence about the HTTP exchange, not a verdict on MCP behavior. The response body may contain an MCP result or a JSON-RPC error, so record and inspect both rather than treating the status code as the whole outcome. The MCP Tools specification distinguishes protocol errors from errors reported during tool execution: Tools — MCP Specification (2025-11-25).

As an Amazon Associate I earn from qualifying purchases.

There is no universal HTTP status mapping for every unsupported method or MCP implementation. Interpret transport behavior using the documentation for the specific transport and protocol version in use; do not infer MCP success or failure from a status code alone.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Discovery, tool listing and execution are separate checks

Check What it can establish What it does not establish
HTTP response inspection The transport status, headers, content type and returned body. That the MCP method succeeded or a tool is callable.
server/discover, when supported Discovery metadata such as supported versions and capabilities. That tools are available, executable or safe.
tools/list, when the server supports the tools capability The tools exposed to that request; account for pagination when relevant. That any listed tool will execute successfully.
tools/call The outcome of a particular invocation, including returned content and error indicators. Universal reliability, safety or success in other contexts.

How to check MCP without running a tool

  1. Record the transport response. Note the HTTP status, headers, content type and response body. Treat 200 as transport evidence only.
  2. Validate the protocol response. Check that the body is parseable and corresponds to the request ID and expected method semantics. Look for an MCP result or JSON-RPC error.
  3. Check the protocol version and discovery flow. The 2026-07-28 specification describes optional server/discover for supported versions, capabilities and identity. Use it only where the client and server support that version and method. The flow has changed across revisions, so do not mix newer and older examples without checking compatibility. See Discovery — MCP Specification (2026-07-28).
  4. Request tools/list if appropriate. A successful listing shows what the server exposes to that request, not whether invoking a listed tool works. Handle pagination if the response indicates more results.
  5. Report only what the checks show. Separate transport status, protocol response, discovery outcome and tool-list result. Include the protocol version and transport so another engineer can interpret the evidence.

Protocol-version differences matter

The 2026-07-28 specification introduces optional server/discover. Its release notes describe retiring the earlier initialize/initialized exchange and Mcp-Session-Id header, with protocol version and client metadata carried in per-request _meta. These are version-specific changes, not instructions to retrofit a newer flow onto a client or server using an older revision. Check the exact version and transport documentation for the deployment being tested: The 2026-07-28 MCP Specification.

#1 Best Overall
Tecmojo 12U Open Frame Network Rack for IT & AV Gear, AV Rack Floor Standing or Wall Mounted,with 2 PCS 1U Rack Shelves & Mounting Hardware,Network Rack for 19" Networking,Audio and Video Device
  • 【Powerful Load-bearing】12U Network Rack Open Frame is constructed from durable cold rolled steel; Rack shelf supports enhance stability, wall-mounted capacity of 130lbs, the ground-mounted up to 260lbs
  • 【Considerate Designs】Open-frame layout, including a top panel adding space, anti-slip shelf stops fixing devices and compatible racks for stack and expansion to meet requirements of home server rack
  • 【Complete Accessories】A 12U open frame server rack, two ventilated shelves, four shelf stops, four velcro straps and a set of equipment mounting screws
  • 【Versatile Application】Ideal for space-efficient multi-device setups in warehouses, retail, classrooms, offices and more; Excellent choices as AV Rack/IT Rack
  • 【Effortless Setup】 Network Rack includes hardware, a comprehensive manual, mounting hole drilling template and an online assembly video to simplify setup

The 2025-11-25 Tools specification documents tools/list, tools/call, capability declaration and error handling. It is useful context for those operations, but it should not be presented as the current normative version when a newer revision is deployed: Tools — MCP Specification (2025-11-25).

What discovery metadata can—and cannot—tell you

Discovery can describe a server, but its identity information is self-reported and is not verified by the protocol. The 2026-07-28 Discovery specification says clients should not rely on serverInfo for security decisions. Treat it as descriptive metadata, not authentication or proof of trust.

Rank #2
Tecmojo 6U Wall Mount Server Cabinet IT Network Rack Enclosure Lockable Door and Side Panels Black, Cooling Fan, Standard Glass Door, 450mm Depth, for 19” IT Equipment, A/V Devices
  • Save valuable floor space: 6U wall mount server cabinet Dimensions: 13.78" H x21.65" W x17.72" D.Maximum mounting depth is 14.2"
  • Keep critical network equipment secure: glass door and side panels are lockable to prevent unauthorized access. Front door can be installed on either side of the front of the cabinet to satisfy your door swing orientation preference
  • Easy equipment configuration: Fully adjustable mounting rails and numbered U positions, with square holes for easy equipment mounting with top and bottom punch-out panels for easy cable access
  • Durability: Made of high quality cold rolled steel holds up to 110lb (50kg) (Easy Assembly Required)
  • PCI & HIPPA and EIA/ECA-310-E compliant

When you need evidence that a tool runs

A listing cannot replace an execution test. To verify behavior, a client must send a valid tools/call for a tool it understands and is authorized to use, then inspect the returned content and error indicators. The result applies to that request and context; it does not establish that the tool is universally reliable or safe.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Distinguish the outcome types

  • Transport success: the HTTP layer returned a successful status. This alone is not MCP success.
  • Protocol error: the request could not be handled at the protocol level—for example, because a method or tool was unknown or the request was invalid. Inspect the JSON-RPC/MCP error structure.
  • Tool execution error: the server accepted the call but the tool reported failure; the tool result can indicate this with isError: true.
  • Successful tool result: the call returned usable content without an error indicator. This is evidence for that invocation, not a security assessment or a guarantee about future calls.

Choose a safe test

Before calling anything, understand the tool and its arguments. Prefer a read-only operation with low risk and avoid exposing sensitive data. For a test that could change data or disclose information, obtain specific authorization and user confirmation. The Tools specification states: “For trust & safety and security, there SHOULD always be a human in the loop with the ability to deny tool invocations.” It also recommends safeguards such as input validation, access controls, rate limiting, output sanitization, timeouts and logging. See the MCP Tools specification.

Rank #3
AxcessAbles 12U Network Rack with Wheels - 500lb Capacity, 18" Depth | 19-Inch Open Frame AV Rack Case with 3” Caster Wheels | Screws, Spacer, Tool Included
  • Universal 19” Rack Mount Compatibility – Perfect for pro audio, video, IT, and network gear. Compatible with mixers, routers, patch panels, servers, power amps, and more.
  • Heavy-Duty Load Capacity – Built to support up to 550 lbs. Ideal for studio gear, DJ setups, server equipment, and AV components that demand serious stability.
  • Robust Steel Frame & Design – Made with 1.5mm thick steel and weighs 36 lbs for maximum durability, reduced vibration, and long-term reliability in any setting.
  • Mobile & Secure – Preinstalled with 3” industrial-grade caster wheels (lockable), making it easy to move and position your rack exactly where you need it.
  • All-In-One Setup Kit Included – Comes with 34 rack screws (5mm & 6mm), a 1U blank spacer, and an assembly tool—ready for fast installation out of the box.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to report a verification result

Make the scope of the check explicit. A concise report can state the endpoint and transport, protocol version, HTTP status, whether the response parsed and matched the request, whether discovery was supported, and whether tools/list returned entries. If you performed a call, identify the tool and arguments at a non-sensitive level, state whether the operation was read-only, and report the returned content or error indicator. Keep transport, protocol and execution outcomes separate so a 200 response is never mistaken for a successful tool run.

Rank #4
Sale
AxcessAbles 30U Network Rack with Wheels-500lb Capacity,18" Depth |19-Inch Open Frame AV Rack Case with3 ”Caster Wheels|Screws, Spacer, ToolIncluded.
  • 30U Universal 19 inch equipment Rack Cabinet with Locking Wheels for AV, Networking, Computer Server, Home Theater Rack-mountable Gear.
  • Compatible with American 10-32 (5mm) and European (6mm) rack mount standards. Screw and washer packs for both sizes are include with purchase.
  • Open Front and Back, 30U Rack Spacing Design with Protective-Vented Side Panels. Front and Real Rail Rack. No Door. Textured-Matte Black Finish. Holds AV/Networking Equipment up to 18-inches Deep.
  • Front locking 3" Caster Wheels move easily on carpet. 1U Blank Panel is included. Dimensions Assembled: 20” x 18” x 59” with wheels. Weight Capacity is 440lbs with wheels and 550lbs without wheels.
  • This Standard 19" 30U Rack is Ideal for businesses, DJs, Sound Studios,home theaters with needs to organize Server/Network Equipment, Power Amplifiers, Microphones, DVD Players, Electronics etc. Compatible with all AxcessAbles rack drawers, shelves, rack accessories as well as all standard 19" rack accessories in the marketplace.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.