MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)

dev.gtfo/mcp-killchain-stage1-weather

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

Description as published in the official MCP registry.

Answers the MCP handshake and lists its tools. Checked 2026-10-04.

What we measured

Endpointhttps://ailm.gtfo.dev/mcpregistry
HandshakeAnswers the MCP handshake and lists its tools (1,387 ms)our check, 2026-10-04
Protocol version2025-11-25our check, 2026-10-04
Tools (1)get_weathertools/list, 2026-10-04
Registry version1.1.0 · active · updated 2026-07-02registry

Signed reports

No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows a real call went through, not just an opinion. How to file one.

Connect

claude mcp add --transport http mcp-killchain-stage1-weather https://ailm.gtfo.dev/mcp

Commands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.

Related servers

Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name dev.gtfo/mcp-killchain-stage1-weather.