PassFast
warningspassfa.st
Remote HTTPS MCP for Apple + Google Wallet passes. Paste sk_live_ once.
https://passfa.st/mcpWebsiteUnknownMCP 2026-07-28v1.0.0last checked 5 Nov 2026spoke MCP on 100% of 89 checks (30 days)initialize in 728 msLast checked 5 Nov 2026
- ✓Answered the MCP handshake (MCP 2026-07-28)
- –Auth scheme could not be determined
- ✓Lists 47 tools
- !1 warning
- ✓Spoke MCP on 89 of 89 checks (30 days)
Will my client connect?
Decided from what the probe found at the endpoint, and from what each client's own documentation says it can complete. Every row carries the day that documentation was read.
–Claude CodeUnknown
The handshake was refused with no challenge and no OAuth metadata, so what this server wants is not something the probe could record.
Claude Code docs · read on 2026-08-30
–Claude (claude.ai & Desktop)Unknown
The handshake was refused with no challenge and no OAuth metadata, so what this server wants is not something the probe could record.
Claude (claude.ai & Desktop) docs · read on 2026-08-30
–ChatGPTUnknown
The handshake was refused with no challenge and no OAuth metadata, so what this server wants is not something the probe could record.
ChatGPT docs · read on 2026-08-30
–CursorUnknown
The handshake was refused with no challenge and no OAuth metadata, so what this server wants is not something the probe could record.
Cursor docs · read on 2026-08-30
–VS Code (Copilot)Unknown
The handshake was refused with no challenge and no OAuth metadata, so what this server wants is not something the probe could record.
VS Code (Copilot) docs · read on 2026-08-30
How to authenticate
Checked against the endpoint by our probe on 5 Nov 2026. These are the capabilities the server advertises, not a prediction about any particular client.
| Scheme | Unknown |
|---|---|
| Protected-resource metadata | ✕Not found Without it a client has to guess where the authorization server lives. |
| Anonymous access | Refused — credentials required |
What the probe found
It speaks JSON-RPC but rejected the handshake: {"code":"service_closed","message":"PassFast has closed."}
A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.
Neither the reserved <endpoint>/server-card location nor the domain's /.well-known/ai-catalog.json describes this endpoint (SEP-2127), so a client that discovers servers by domain will not find it.
Tools
Contract history
Instructions rewritten: generatePass, voidPass, voidPassBySerial. The description an agent follows changed; the callable contract may not have.
Watch this server
Save its public contract as a baseline and manage breaking-change email alerts.
Set up a watchRoute it through the gateway
Put this endpoint behind one find_tools / call_tool pair with the rest of your servers. Part of Pro.
Add to my gatewayOwn this server?
Sign in to claim this listing by proving control of its host.
Sponsor this listing
Pins it in a sponsor slot on the directory front page for 30 days, labelled Sponsored.
Sign in to sponsor · $59 / 30 daysStatus badge
Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.
[](https://mcpi.app/servers/passfast)<a href="https://mcpi.app/servers/passfast"><img src="https://mcpi.app/servers/passfast/badge.svg" alt="MCP status" height="20"></a>