{
  "name": "MCP Scanner Playground",
  "description": "Intentionally-vulnerable + hardened demo MCP servers for testing mcpscanner.",
  "endpoints": {
    "POST /error": "Deliberately insecure MCP server. Scan it → Grade F (varies each scan).",
    "POST /success": "Hardened MCP server. Requires a strong bearer token. Scan it anonymously → Grade A.",
    "POST /random": "Randomised profile (seeded per IP + 30s window). Re-rolls ~every 30s between a secure (A) and an insecure (D–F) server."
  },
  "note": "Nothing is actually executed — responses are canned fakes for scanner testing only.",
  "scan": "https://mcpscanner.dev"
}