[ChiragAgg5k]

What

Ora's agent-readiness scan flags registry-branding: it looks for a server card at <server URL>/server-card to read the title, icon and description, and mcp.appwrite.io serves none (/server-card and /.well-known/mcp/server-card.json both 404).

This serves a SEP-1649 server card at both paths, without auth and with CORS *:

• name: io.github.appwrite/mcp (the MCP Registry name, now SERVER_REGISTRY_NAME)
• title, version, websiteUrl, repository
• description: the 98-character registry summary (the card schema caps it at 100; serverInfo.description is 192)
• icons: the existing /favicon.svg, built from MCP_PUBLIC_URL
• remotes: the canonical Streamable-HTTP resource (<MCP_PUBLIC_URL>/)

Checks

• ruff, black --check, pyright: clean
• Unit: 301 pass
• E2E: new ToolsFlow.test_server_card_describes_the_server_without_auth hits both paths on the real app and asserts status, CORS, name, title, description length, icon and remote URL; test_tools.py passes (10 tests)

Not in this PR

Ora also reports mcp-oauth-metadata / mcp-pkce-s256 / mcp-auth-mechanism as missing. The metadata exists (S256 PKCE and CIMD are advertised), but the protected-resource metadata names the issuer https://fra.cloud.appwrite.io/v1/oauth2/console, and RFC 8414 §3.1 path insertion (https://fra.cloud.appwrite.io/.well-known/oauth-authorization-server/v1/oauth2/console) returns 404. That route belongs on the Appwrite server, not here.

Related: appwrite-labs/cloud#6667

[appwrite]

🟢 Tier S · Ready to merge

Adds public MCP server-card endpoints at /.well-known/mcp/server-card.json and /server-card, using shared registry branding metadata and CORS headers. The card advertises the Streamable HTTP remote and supported protocol versions, with end-to-end coverage for both routes.

Latest changes: The newest commits update the card to SEP-2127 and add the supported protocol versions advertised by the MCP types package, with an assertion for the 2025-11-25 version.

Verdict	New comments	Fixed	Still open
✅ Approved	0	0	0

📂 Walkthrough · 3

File	Change
src/mcp_server_appwrite/constants.py	Adds shared server-card schema, registry name, summary, and website metadata.
src/mcp_server_appwrite/http_app.py	Serves the public card on both routes and advertises supported protocol versions for its Streamable HTTP remote.
tests/e2e/test_tools.py	Checks both public routes and verifies the card includes the expected supported protocol version.

---

_{Reviewed the commits since cfba6ed · Details · Comment @appwrite review to re-run, or mention @appwrite with a question.}

[appwrite]

🟡 Tier B · 1 blocking finding to address. Summary

[appwrite]

🟢 Tier S · Looks good to merge. Summary

The findings that requested changes are resolved. See the summary comment for what is still open.