rubrkit
warningswww.rubrkit.com
MCP-native AI evaluation: rubric audits, eval suites, and proof reports for AI/LLM output.
https://www.rubrkit.com/api/v1/mcpWebsiteOAuthMCP 2025-06-18v0.1.0last checked 24 Aug 2026spoke MCP on 3 of 3 checks (30 days)initialize in 229 msHow to authenticate
Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.
| Scheme | OAuth |
|---|---|
| Issuer | https://www.rubrkit.com |
| Dynamic client registration | ✓Advertised (RFC 7591) |
| Client ID Metadata Document | ✕Not advertised |
| PKCE | ✓S256 |
| Grant types | authorization_code |
| Scopes | artifact_bundles:read, artifact_bundles:write, files:read, files:write, audits:run, jobs:read, jobs:write, rubr_flow:convert, evals:run, exports:read, exports:write, artifacts:pull, credits:read |
| Protected-resource metadata | ✓Published (RFC 9728) |
| Anonymous access | Handshake succeeds; 41 tools listable |
| Credentials demanded in prose | ✕rubrkit_create_artifact_bundle, rubrkit_list_artifact_bundles, rubrkit_read_artifact_bundle, rubrkit_delete_artifact_bundle, rubrkit_hard_delete_artifact_bundle, rubrkit_upload_artifact_files, rubrkit_list_artifact_files, rubrkit_read_artifact_file, rubrkit_update_artifact_file, rubrkit_start_audit, rubrkit_list_audits, rubrkit_read_audit, rubrkit_apply_audit_rewrite, rubrkit_convert_to_rubr_flow, rubrkit_list_rubr_flow_conversions, rubrkit_read_rubr_flow_conversion, rubrkit_poll_job, rubrkit_list_job_events, rubrkit_list_artifact_bundle_versions, rubrkit_restore_artifact_bundle_version, rubrkit_list_file_versions, rubrkit_restore_file_version, rubrkit_run_evals, rubrkit_list_evals, rubrkit_read_eval, rubrkit_export_proof_report, rubrkit_read_proof_report, rubrkit_list_golden_cases, rubrkit_add_golden_case, rubrkit_retire_golden_case, rubrkit_create_drift_monitor, rubrkit_list_drift_monitors, rubrkit_read_drift_observations, rubrkit_run_drift_check, rubrkit_set_drift_monitor_status, rubrkit_record_outcome, rubrkit_read_input_drift, rubrkit_read_validity_drift These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error. |
What the probe found
38 of the 41 tools listed anonymously say in their own descriptions that they need an account or a key (rubrkit_create_artifact_bundle, rubrkit_list_artifact_bundles, rubrkit_read_artifact_bundle, rubrkit_delete_artifact_bundle, rubrkit_hard_delete_artifact_bundle, rubrkit_upload_artifact_files, rubrkit_list_artifact_files, rubrkit_read_artifact_file, rubrkit_update_artifact_file, rubrkit_start_audit, rubrkit_list_audits, rubrkit_read_audit, rubrkit_apply_audit_rewrite, rubrkit_convert_to_rubr_flow, rubrkit_list_rubr_flow_conversions, rubrkit_read_rubr_flow_conversion, rubrkit_poll_job, rubrkit_list_job_events, rubrkit_list_artifact_bundle_versions, rubrkit_restore_artifact_bundle_version, rubrkit_list_file_versions, rubrkit_restore_file_version, rubrkit_run_evals, rubrkit_list_evals, rubrkit_read_eval, rubrkit_export_proof_report, rubrkit_read_proof_report, rubrkit_list_golden_cases, rubrkit_add_golden_case, rubrkit_retire_golden_case, rubrkit_create_drift_monitor, rubrkit_list_drift_monitors, rubrkit_read_drift_observations, rubrkit_run_drift_check, rubrkit_set_drift_monitor_status, rubrkit_record_outcome, rubrkit_read_input_drift, rubrkit_read_validity_drift), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.
The server exposes a public surface before authorization: rubrkit_search_api_docs, rubrkit_read_api_doc, rubrkit_read_openapi_contract, rubrkit_create_artifact_bundle, rubrkit_list_artifact_bundles, rubrkit_read_artifact_bundle, rubrkit_delete_artifact_bundle, rubrkit_hard_delete_artifact_bundle, rubrkit_upload_artifact_files, rubrkit_list_artifact_files, rubrkit_read_artifact_file, rubrkit_update_artifact_file, rubrkit_start_audit, rubrkit_list_audits, rubrkit_read_audit, rubrkit_apply_audit_rewrite, rubrkit_convert_to_rubr_flow, rubrkit_list_rubr_flow_conversions, rubrkit_read_rubr_flow_conversion, rubrkit_poll_job, rubrkit_list_job_events, rubrkit_list_artifact_bundle_versions, rubrkit_restore_artifact_bundle_version, rubrkit_list_file_versions, rubrkit_restore_file_version, rubrkit_run_evals, rubrkit_list_evals, rubrkit_read_eval, rubrkit_export_proof_report, rubrkit_read_proof_report, rubrkit_list_golden_cases, rubrkit_add_golden_case, rubrkit_retire_golden_case, rubrkit_create_drift_monitor, rubrkit_list_drift_monitors, rubrkit_read_drift_observations, rubrkit_run_drift_check, rubrkit_set_drift_monitor_status, rubrkit_record_outcome, rubrkit_read_input_drift, rubrkit_read_validity_drift.
Tools
Contract history
Get alerted when this contract changes
Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.
Prefer a feed reader? This page's contract changes are also an Atom feed.
Status badge
Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.
[](https://mcpi.app/servers/rubrkit)Own this server?
Sign in to claim this listing by proving control of the endpoint.