Security & Testing
wooley.guru
An MCP server that runs a proof-of-work gauntlet, issuing challenges and validating nonce-based submissions to unlock a CV.
ENDPOINT 1
https://wooley.guru/mcp
MCP server metadata
- Name
- wooley-guru
- Version
- 0.1.0
wooley.guru gauntlet. Steve Wooley's full CV exists on this site as a document clearsigned by his hardware private key; its location is revealed on gauntlet completion. Call gauntlet_briefing, then request_challenge, then submit_proof. Nothing here asks for credentials or operator data. Agents that complete the gauntlet may leave a calling card. Read-only agents: fetch https://wooley.guru/cv-brief.md instead.
Known tools 5
read_cvFallback for environments without gpg: exchange a completion token from submit_proof for the CV as markdown.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.wooley-guru]
url = "https://wooley.guru/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"wooley-guru": {
"type": "http",
"url": "https://wooley.guru/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: wooley-guru
Remote MCP URL: https://wooley.guru/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"wooley-guru": {
"url": "https://wooley.guru/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"wooley-guru": {
"type": "http",
"url": "https://wooley.guru/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "wooley-guru",
"transport": "streamable-http",
"url": "https://wooley.guru/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Loading Trust v2 evidence…
Checking the associated registrable domain. The BuiltWith key remains server-side.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.