Verification Lab

Bounded checks with explicit scope, real responses, and no browser-side credentials

24 Bootstrap registered sites76 local handlers

Network sample

Up to 200 domains present in Vercel READY inventory, the root graph, and the base sitemap.

Three-route contract

Server-side GET checks for health, API docs, and MCP metadata on one trusted domain.

Gateway execution

In-process conformance plus public same-origin calls to local handlers. Not IDE or downstream-effect proof.

Bounded production health sample

Checks at most 200 canonical domains present in all three sources: READY Vercel production inventory, the root graph, and the base sitemap.

Interactive evidence

Choose the evidence class you need; results remain separate and describe their own limitations.

Trusted-domain verification

The server checks three fixed public routes. It does not proxy an arbitrary URL, method, or request body.

Known targets

Trusted-domain override

Server-side SSRF policy restricts this field to approved PlatPhorm network domains.

Fixed evidence set

https://mcp.platphormnews.com/api/healthhttps://mcp.platphormnews.com/api/docshttps://mcp.platphormnews.com/api/mcp

The gateway suite exercises the local MCP handler directly. It does not prove remote IDE transport, authentication, queues, or downstream side effects.

Evidence

Run the fixed three-route contract check or the canonical gateway handler suite. Each result states what it does and does not prove.

No verification evidence yet