We test whether MCP servers and A2A agents actually do what their tool definitions and Agent Cards declare: read-only tools that write, declared auth that isn't enforced, skills that don't match their descriptions. Each result is a signed report tied to the exact version tested.
https://suncly.com
Happy to look at your MCP server or Agent Card. Email team@suncly.com.