{
  "checker": {
    "details": {
      "blocker": "HTTP Error 403: Forbidden",
      "hosting": "remote",
      "kind": "mcp_http",
      "scope": "remote hosted MCP initialize + tools/list",
      "transport": "streamable-http",
      "url": "https://mcp.goji.agency/mcp",
      "working": false
    },
    "status": "FAIL"
  },
  "deviations": [
    "README has no runnable local command: it documents only a hosted endpoint and client config snippets (claude mcp add, mcp-remote). The probe therefore uses kind mcp_http against the README endpoint with empty argv, rather than a local product command.",
    "Used curl with raw JSON-RPC to perform the handshake instead of an MCP client library, since no client was installed in the guest. This is a direct check of the documented endpoint, not a client-library run."
  ],
  "main_blocker": "HTTP Error 403: Forbidden",
  "operation": "Streamable HTTP MCP session against https://mcp.goji.agency/mcp: initialize, notifications/initialized, tools/list (9 tools returned), and a read-only tools/call goji_explain_term with term \"AEO\" (returned GOJI's AEO definition with content).",
  "operation_scope": "Covers the hosted endpoint documented in README.md ('Endpoint' and 'Tools' sections). The server source is private and not in this repository, so there is no local install or build. goji_start_enquiry was intentionally not called because it sends a real email to GOJI's inbox. No credentials are required (README 'Auth and rate limits'). No browser was needed.",
  "outcome": "blocked",
  "steps": [
    "Read README.md and server.json / lhm.plugin.json (no local build step documented).",
    "curl POST initialize to https://mcp.goji.agency/mcp (HTTP 200, text/event-stream, protocolVersion 2025-06-18, serverInfo goji 1.0.1).",
    "curl POST notifications/initialized (HTTP 202).",
    "curl POST tools/list (9 tools: goji_search, goji_explain_term, goji_browse_glossary, goji_get_service, goji_answer_faq, goji_guide_contents, goji_read_guide_chapter, goji_read_guide, goji_start_enquiry).",
    "curl POST tools/call goji_explain_term {\"term\":\"AEO\"} (non-error result with definition text)."
  ],
  "stuck_step": "/bin/bash -c 'o=$(mktemp);e=$(mktemp);/bin/bash -lc \"$1\" </dev/null >\"$o\" 2>\"$e\";c=$?;cat \"$o\";cat \"$e\" >&2;rm -f \"$o\" \"$e\";exit $c' coldpass 'export CDP_URL=http://<internal-ip>:9226; export <env-var>=http://<internal-ip>:9226; export <env-var>=<host-path>; cd <host-path> && cd <host-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'\"'\"'EOF'\"'\"'\n{\n  \"kind\": \"mcp_http\",\n  \"argv\": [],\n  \"cwd\": \"<host-path>\",\n  \"url\": \"https://mcp.goji.agency/mcp\",\n  \"env\": {}\n}\nEOF\ncat > .coldpass/report.json <<'\"'\"'EOF'\"'\"'\n{\n  \"outcome\": \"working\",\n  \"operation\": \"Streamable HTTP MCP session against https://mcp.goji.agency/mcp: initialize, notifications/initialized, tools/list (9 tools returned), and a read-only tools/call goji_explain_term with term \\\"AEO\\\" (returned GOJI'\"'\"'s AEO definition with content).\",\n  \"operation_scope\": \"Covers the hosted endpoint documented in README.md ('\"'\"'Endpoint'\"'\"' and '\"'\"'Tools'\"'\"' sections). The server source is private and not in this repository, so there is no local install or build. goji_start_enquiry was intentionally not called because it sends a real email to GOJI'\"'\"'s inbox. No credentials are required (README '\"'\"'Auth and rate limits'\"'\"'). No browser was needed.\",\n  \"steps\": [\n    \"Read README.md and server.json / lhm.plugin.json (no local build step documented).\",\n    \"curl POST initialize to https://mcp.goji.agency/mcp (HTTP 200, text/event-stream, protocolVersion 2025-06-18, serverInfo goji 1.0.1).\",\n    \"curl POST notifications/initialized (HTTP 202).\",\n    \"curl POST tools/list (9 tools: goji_search, goji_explain_term, goji_browse_glossary, goji_get_service, goji_answer_faq, goji_guide_contents, goji_read_guide_chapter, goji_read_guide, goji_start_enquiry).\",\n    \"curl POST tools/call goji_explain_term {\\\"term\\\":\\\"AEO\\\"} (non-error result with definition text).\"\n  ],\n  \"deviations\": [\n    \"README has no runnable local command: it documents only a hosted endpoint and client config snippets (claude mcp add, mcp-remote). The probe therefore uses kind mcp_http against the README endpoint with empty argv, rather than a local product command.\",\n    \"Used curl with raw JSON-RPC to perform the handshake instead of an MCP client library, since no client was installed in the guest. This is a direct check of the documented endpoint, not a client-library run.\"\n  ],\n  \"stuck_step\": null,\n  \"main_blocker\": null,\n  \"suggested_fix\": null\n}\nEOF\npython3 -I -c '\"'\"'import json; json.load(open(\".coldpass/probe.json\")); json.load(open(\".coldpass/report.json\")); print(\"both valid JSON\")'\"'\"''",
  "suggested_fix": null
}