What are the risks of connecting to api.readgzh.site?

No blocking issues were found in the static + spec checks. Overall trust grade B+ (89/100).

When was api.readgzh.site last audited?

Last checked 2026-10-28; wmcp.sh re-checks it on a schedule for tool drift and rug-pulls.

B+

api.readgzh.site

Item: api.readgzh.site
Rating: 89
Author: wmcp.sh

https://api.readgzh.site/mcp-server

89/100 · MCP Trust Grade · checked 1d ago · MCP 2025-06-18

Is the api.readgzh.site MCP server safe to use?

Independent trust grade B+ (89/100). No blocking issues found in the static + spec checks. wmcp.sh continuously watches api.readgzh.site for tool drift and rug-pulls. The grade is free and identical whether or not the operator pays.

✓ Watched since 2026-10-24 — behavioral baseline locked, no drift for 4 days. We re-check this server's tool surface on a schedule; if it adds, removes, or silently rewrites a tool (rug-pull), we record it.

What it offers — 5 tools · Search

readgzh.read

Read and extract the full text content of a WeChat Official Account (微信公众号) article via ReadGZH (readgzh.site). Provide a WeChat article URL and get b

readgzh.list

List recently cached WeChat articles via ReadGZH. Returns titles, authors, and links. Useful for browsing what articles have been previously read and

readgzh.search

Search cached WeChat articles by keyword via ReadGZH. Searches in article titles and content. Returns matching articles with snippets.

readgzh.list_by_account

List cached WeChat articles published by one Official Account (公众号) via ReadGZH. IMPORTANT: this only covers articles already cached by ReadGZH — WeCh

readgzh.get

Get a cached WeChat article by its short slug/URL path via ReadGZH. Use when you have a slug like 'minicpm-o-4-5' from a previous read.

Spec conformance20%100

✓ initialize → protocolVersion 2025-06-18
✓ initialize HTTP 200
✓ unknown method → -32601
✓ tools/list → 5 tools
✓ every tool has name + inputSchema

Security (OWASP MCP)30%100

5 tools scanned
no injection markup
no secret-path refs

Reliability / performance20%84

single-probe latency 1142ms (PRELIMINARY — continuous uptime/p95 from proxy telemetry lands in v2)

Tool hygiene15%80

100% of tools have typed inputSchema
0/5 declare outputSchema
no unannotated destructive tools

Transparency / provenance15%70

HTTPS ✓
advertises protocol 2025-06-18

Observed behavior

No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.

Findings

No blocking issues found in the static + spec checks.

Grade another server

We re-grade api.readgzh.site on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Run api.readgzh.site? Claim it (free) to get drift alerts and show an independently-verified trust badge. The grade stays free — claiming just ties it to you.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — api.readgzh.site grade B+

Share on X Open card image

https://wmcp.sh/mcp/grade/api.readgzh.site

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

Markdown (for your README)

[![MCP Trust Grade B+](https://wmcp.sh/mcp/grade/api.readgzh.site/badge.svg)](https://wmcp.sh/mcp/grade/api.readgzh.site)

HTML

<a href="https://wmcp.sh/mcp/grade/api.readgzh.site"><img src="https://wmcp.sh/mcp/grade/api.readgzh.site/badge.svg" alt="MCP Trust Grade B+ · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust

How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.