Independent trust grade B+ (89/100). No blocking issues found in the static + spec checks. wmcp.sh continuously watches app.tascan.io for tool drift and rug-pulls. The grade is free and identical whether or not the operator pays.
tascan_list_projectsList TaScan projects in the organization (each with its number, e.g. P-00001, external_refs, report_options and its calendar_url, webcal_url, map_url
tascan_create_projectCreate a new TaScan project (top-level container for events). number is optional (the next P-number is assigned when omitted; a number already used in
tascan_get_projectGet details of a specific project
tascan_update_projectUpdate a project (name, location, status, dates, number, external_refs, labor_rules, report_options). A number already used in the org is refused 409;
tascan_delete_projectDelete a project that has NO history, after typing its name. Refused 409 project_has_history (with the counts) when it has any task or subtask complet
tascan_create_eventCreate a new event (task list) within a project. Supports team_mode (shared completions) and multi_instance (each worker gets isolated copy — great fo
tascan_list_eventsList all events (task lists) within a project
tascan_get_eventGet details of a specific event (task list) including its tasks
tascan_update_eventUpdate an event / task list (name, description, team_mode, multi_instance, timer_mode). team_mode and multi_instance cannot both be true.
tascan_delete_eventDelete an event (task list) and all its tasks and completions. This action is irreversible.
tascan_add_tasksAdd one or more tasks to an event (task list). Supports bulk creation. IMPORTANT: Set response_type correctly — use "text" for info collection (names,
tascan_get_signature_bundleFetch the signature bundle for one signed document by signature assertion id (the signature_assertion_id inside the response value of a completed sign
tascan_dispatch_to_agentPREFERRED tool for sending work to an AI agent. Dispatches a task to the agent's inbox — picked up and executed automatically. No list ID needed. REQU
tascan_list_agentsList all registered AI agents with their capabilities, inbox IDs, and status. Like reading input labels on a video matrix — discover which agents are
tascan_register_agentRegister a new AI agent in the agent registry. The agent will appear in tascan_list_agents and can receive dispatched tasks. Self-registration for AI
tascan_list_tasksList the tasks in an event (task list). status "open" returns only tasks with no completion yet: use it when checking for work to do, so a long list i
tascan_get_taskGet details of a specific task including completions and subtasks. Each completion carries photo_url (raw storage path, stable) and photo_signed_url (
tascan_get_receiptFetch the signed Action Receipt (Ed25519 JWS) for one completed task by completion_id (tascan_get_task -> completions[].id). Returns a readable summar
+124 more tools
No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.
We re-grade app.tascan.io on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.
Run app.tascan.io? Claim it (free) to get drift alerts and show an independently-verified trust badge. The grade stays free — claiming just ties it to you.
Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:
https://wmcp.sh/mcp/trust
readOnly vs observed behavior) layer on via the wmcp.sh proxy.