MCP

Contents

Recorded evidence

Resource and access

Anonymous · read-only · recorded public evidencehttps://interfacedelta.com/mcp

This resource reads evidence InterfaceDelta has already recorded. Anonymous use remains supported. A separately managed WorkOS authorization may identify a connected-agent relationship, but it does not expand this resource beyond its four read tools.

Tools

get_passportRead one exact recorded observation.
get_latest_passportRead the latest Passport for a target you monitor.
list_target_historyRead history of a target from your current subscription date.
list_target_changesRead bounded change records of a target you monitor.

Read boundary

The public MCP resource does not initiate a scan, create or alter a monitor, expose account-private state, or accept a REST API token. A presented invalid bearer fails closed rather than silently falling back to anonymous access.

Connect

Choose your client. Every recipe connects the same anonymous, read-only recorded-evidence resource.

Codex · codex-cli 0.152.1

Add the anonymous recorded-evidence server, then start a new Codex session.

Official setup source ↗

codex mcp add interfacedelta --url https://interfacedelta.com/mcp

Authentication: None
Local browser: Not required
Headless VPS: Supported
Verified: 3 Sep 2026

No authorization is required for recorded evidence.

Fresh inspection

Connect

Add this as a separate server. Headless status is shown per client without changing the exact Inspector resource.

Codex · codex-cli 0.152.1

Add the Inspector as a separate server, then authorize its exact resource.

Official setup source ↗

codex mcp add interfacedelta_inspector \
  --url https://interfacedelta.com/mcp/inspect \
  --oauth-client-registration cimd \
  --oauth-resource https://interfacedelta.com/mcp/inspect
codex mcp login interfacedelta_inspector --oauth-client-registration cimd

Authentication: WorkOS OAuth
Local browser: Supported
Headless VPS: Client limitation
Verified: 3 Sep 2026

The tested CLI documents loopback or configured remote callback ingress, not a generic callback paste-back flow.

Authorization

WorkOS is the sole MCP OAuth provider. The website's magic-link/database session is separate and is not an MCP client credential. A valid Inspector token must also resolve to a live local InterfaceDelta account before target input or network work is accepted.

Resource indicator

Separate exact OAuth resource and JWT audiencehttps://interfacedelta.com/mcp/inspect

The Inspector audience is isolated from the public/read resource. A token for https://interfacedelta.com/mcp cannot authorize https://interfacedelta.com/mcp/inspect, or vice versa. No default WorkOS Resource Indicator is configured; the MCP client authorizes the exact resource announced by protected-resource metadata.

Tool

Tool: inspect_public_service
Input: Public HTTPS url and optional public mcpEndpoint
Tools on this resource: Exactly one

Inspection behavior

Each successful invocation performs one bounded passive inspection of a public service. It never calls a target's tools or other capabilities, mutates the inspected service, creates a monitor, or accepts credentials for the target.

Persistence and retries

A successful invocation records one durable public Passport observation and its normal deterministic comparison. The operation is intentionally not idempotent: after a lost response, an explicit retry can consume another quota reservation and create another observation.

Security boundary

Authorization proves only that an InterfaceDelta account requested the observation. It does not prove ownership of the inspected target.

The caller's WorkOS bearer ends at InterfaceDelta's inbound authorization adapter and is never forwarded to the target. Public-HTTPS, DNS-pinning, redirect, time, size, and passive-scan restrictions remain in force.

Example

Tool request · synthetic target

The successful result would be a durable public InterfaceDelta observation.

{
  "url": "https://example.org"
}

Public and account-authorized MCP

InterfaceDelta serves /mcp using MCP2026-07-28. The public read-only connection remains usable without signing in and is limited to already-recorded public state. The same read endpoint can also accept a WorkOS authorization issued for that exact resource. The canonical endpoint is https://interfacedelta.com/mcp; the connection command is under Connect.

Two separate authorization resources

WorkOS Connect does not currently represent InterfaceDelta custom scopes. InterfaceDelta uses separate exact OAuth Resource Indicators and JWT audiences so fresh inspection authority cannot ride on the public/read authorization.

https://interfacedelta.com/mcp
  anonymous-compatible → four recorded-data read tools

https://interfacedelta.com/mcp/inspect
  WorkOS authorization required → inspect_public_service only

The read tools remain get_passport, get_latest_passport, list_target_history, and list_target_changes. The latest, history and changes tools answer only accounts that monitor the target, from their current ownership period plus one baseline without a comparison. Ended subscriptions, anonymous readers and other callers get NOT_FOUND. Observations fetched by their own IDs outside the window receive the public share view with no comparison (comparisonWithheld: true), including for the owner. Owner observation detail includes optional comparison.recovery: the replay version, shared observation window, immediate predecessor ID and fingerprint, source base IDs (or null), and each replayed surface with its actual base ID. The inspection resource accepts the same url, optional type, and optional mcpEndpoint inputs as the Web Inspector. A successful call records exactly one durable public-target Passport observation and its normal comparison; it does not create, remove, or alter a monitor. The result shows that comparison only to an account that monitors the target. For any other account it is null with comparisonWithheld: true, even for a first observation, so a result never reveals whether anyone inspected the service before.

Input
{ "url": "https://service.example/mcp", "type": "auto" }

Compact durable result
{
  "observationId": "…",
  "targetKey": "sha256:…",
  "passportUrl": "https://interfacedelta.com/passport/…/observations/…",
  "observedAt": "…",
  "fingerprint": "sha256:…",
  "comparisonWithheld": false,
  "comparison": { "state": "baseline|unchanged|changed|incompatible_version", "highestClassification": "…", "counts": { "breaking": 0, "nonBreaking": 0, "indeterminate": 0, "informational": 0 } } | null,
  "summary": { "surfacesObserved": 0, "capabilitiesObserved": 0 }
}

The inspection resource is live and WorkOS-authorized. Keep the public/read MCP resource separate from the Inspector resource and its audience. InterfaceDelta Developer API tokens are not MCP OAuth tokens, and the caller's WorkOS credential is never passed to the inspected service.

Requesting an inspection proves only that an InterfaceDelta account requested the observation, not that it owns the target. The resulting observation may be available through existing public Passport and share surfaces. Connected-agent entries show read and inspection resource authorizations separately so either can be disconnected without presenting the other as revoked. The beta implementation permits 10 accepted fresh-inspection attempts per rolling hour per account on the Free plan; an explicit retry may record another observation.

OAuth and protocol details →

Discovery publication

InterfaceDelta publishes ARD v0.91 at /.well-known/ard.json, advertises it from the root page with rel="ard", retains /.well-known/ai-catalog.json only for predecessor compatibility, and publishes experimental Server Card metadata at /mcp/server-card. The chain is ARD entry → experimental MCP Server Card → live MCP endpoint. Runtime server/discover and tools/list remain authoritative. These routes are live in the public beta.

Back to contents

Next: How it works