{
  "name": "Stripe MCP Readiness Benchmark",
  "subject": "Indie Metrics MCP",
  "verifiedAt": "2026-07-27",
  "score": {
    "passed": 6,
    "total": 8
  },
  "license": "CC0-1.0",
  "checks": [
    {
      "id": "public-source",
      "status": "pass",
      "claim": "Public source is reachable",
      "evidence": "https://github.com/MARCCHERGGI/indie-metrics-mcp"
    },
    {
      "id": "open-license",
      "status": "pass",
      "claim": "MIT license is present",
      "evidence": "https://github.com/MARCCHERGGI/indie-metrics-mcp/blob/main/LICENSE"
    },
    {
      "id": "documented-tools",
      "status": "pass",
      "claim": "Seven named tools are documented",
      "evidence": "https://github.com/MARCCHERGGI/indie-metrics-mcp"
    },
    {
      "id": "independent-discovery",
      "status": "pass",
      "claim": "Independent listing or analysis exists",
      "evidence": "https://www.pulsemcp.com/servers/gh-marccherggi-indie-metrics"
    },
    {
      "id": "npm-availability",
      "status": "fail",
      "claim": "npm package is available",
      "evidence": "https://registry.npmjs.org/indie-metrics-mcp",
      "observation": "Registry HTTP 404 on 2026-07-27"
    },
    {
      "id": "least-privilege-guidance",
      "status": "fail",
      "claim": "Documentation leads with a restricted Stripe key and exact permissions",
      "evidence": "https://docs.stripe.com/keys-best-practices"
    },
    {
      "id": "reproducible-fixture",
      "status": "pass",
      "claim": "Calculations have a public synthetic reproduction fixture",
      "evidence": "https://marco-is-my-friend.marcohergee813.chatgpt.site/founder-revenue-fixture.json"
    },
    {
      "id": "public-remote-endpoint",
      "status": "pass",
      "claim": "A production remote MCP endpoint is documented",
      "evidence": "https://marco-is-my-friend.marcohergee813.chatgpt.site/api/mcp",
      "observation": "Public synthetic Streamable HTTP endpoint deployed on 2026-07-27"
    }
  ],
  "remediation": [
    {
      "checkId": "npm-availability",
      "requiredWork": "Verify package ownership, publish a provenance-backed version, and validate installation in a clean environment.",
      "passEvidence": "Public registry metadata, a successful clean install, and the documented server entry point."
    },
    {
      "checkId": "least-privilege-guidance",
      "requiredWork": "Lead with a restricted Stripe key, list exact required read permissions, and document rotation and revocation.",
      "passEvidence": "A new user can configure only the permissions required by all seven read-only tools without guessing."
    }
  ],
  "boundary": "A pass is evidence for one stated check on the verification date. It is not a security certification, endorsement, or guarantee of production readiness."
}