{
  "$schema": "https://modelcontextprotocol.io/schemas/discovery.json",
  "name": "forter-demo",
  "title": "Forter - Identity Intelligence for Digital Commerce (demo MCP)",
  "description": "Forter helps brands grow their businesses with fraud and payments decisions, built on the world's most intelligent identity network. This DEMO MCP server hosted at https://www.forter.com/mcp mirrors Forter's REST operationIds and returns demo data - this public sandbox server does not call into real Forter risk decisioning, take real payment, or vault real cardholder data. It is free and requires no provisioning, so MCP clients and agents can complete the JSON-RPC handshake and exercise every tool against forter.com without an account. The PRODUCTION Forter MCP server lives at https://mcp.forter.com/mcp and is gated behind a signed Forter MSA - provisioning is handled by your Forter account manager / Customer Success (CSM). Start at https://www.forter.com/contact-us/.",
  "vendor": "Forter",
  "vendor_url": "https://www.forter.com",
  "version": "1.0",
  "serverInfo": {
    "name": "forter-demo",
    "title": "Forter Trust Platform - demo MCP",
    "version": "1.0"
  },
  "availability": {
    "status": "demo-only",
    "purpose": "Demonstration of Forter's MCP surface and a fallback discovery target while the production MCP server is being updated. NOT production decisioning. Do NOT use to drive real merchant approve / decline actions.",
    "officialAccountRequired": "Real Forter integration requires a Forter account and signed MSA. Provisioning is handled by your Forter account manager (CSM). The tools and scopes here are demo placeholders.",
    "responsesAreDemo": "Tool responses are demo objects. They do not reflect real Forter risk decisions and carry no SLA.",
    "productionMcpUrl": "https://mcp.forter.com/mcp",
    "productionAccessGatedBy": "Forter Account Management / Customer Success (CSM); signed MSA required",
    "productionContact": "https://www.forter.com/contact-us/"
  },
  "protocolVersion": "2025-03-26",
  "transport": "streamable-http",
  "url": "https://www.forter.com/mcp",
  "endpoint": "https://www.forter.com/mcp",
  "handshakeUrl": "https://www.forter.com/.well-known/mcp",
  "serverCard": "https://www.forter.com/.well-known/mcp/server-card.json",
  "urls": [
    "https://www.forter.com/mcp",
    "https://mcp.forter.com/mcp"
  ],
  "mcpServers": [
    {
      "name": "forter-demo",
      "url": "https://www.forter.com/mcp",
      "transport": "streamable-http",
      "primary": true,
      "demo": true,
      "note": "Primary MCP server. Anonymous initialize / tools/list / tools/call permitted; bearer tokens issued at https://www.forter.com/oauth/token are also accepted."
    },
    {
      "name": "forter-production",
      "url": "https://mcp.forter.com/mcp",
      "transport": "streamable-http",
      "primary": false,
      "production": true,
      "gated_by": "Forter Account Management / Customer Success (CSM); signed MSA required",
      "contact": "https://www.forter.com/contact-us/",
      "fallback_redirect": "https://www.forter.com/mcp/upstream",
      "note": "Production MCP - CSM-provisioned OAuth 2.0 + PKCE. Anonymous initialize is 401; clients with production credentials should target this endpoint. Use the fallback_redirect URL to be 307'd here with method+body preserved."
    }
  ],
  "servers": [
    {
      "url": "https://www.forter.com/mcp",
      "transport": "streamable-http",
      "primary": true,
      "demo": true
    },
    {
      "url": "https://mcp.forter.com/mcp",
      "transport": "streamable-http",
      "primary": false,
      "production": true,
      "gated_by": "Forter Account Management / CSM; signed MSA required"
    }
  ],
  "transports": [
    {
      "url": "https://www.forter.com/mcp",
      "protocol": "streamable-http",
      "primary": true,
      "auth": "OAuth 2.1 (anonymous public client; bearer optional). Demo endpoints at /oauth/{authorize,token,register,jwks.json,revoke,userinfo}."
    },
    {
      "url": "https://mcp.forter.com/mcp",
      "protocol": "streamable-http",
      "primary": false,
      "auth": "OAuth 2.0 + PKCE against a CSM-provisioned authorization server. Anonymous handshake returns 401.",
      "contact": "https://www.forter.com/contact-us/"
    }
  ],
  "methods": ["initialize", "ping", "tools/list", "tools/call", "resources/list", "resources/read"],
  "documentation": "https://docs.forter.com",
  "icon": "https://upload.wikimedia.org/wikipedia/commons/5/51/Forter_Logo_Blue_Web-3.png",
  "icons": [
    {
      "src": "https://upload.wikimedia.org/wikipedia/commons/5/51/Forter_Logo_Blue_Web-3.png",
      "sizes": "1050x300",
      "type": "image/png"
    },
    {
      "src": "https://www.forter.com/apple-touch-icon.png",
      "sizes": "any",
      "type": "image/png"
    }
  ],
  "category": "fraud-prevention",
  "auth": {
    "_note": "Demo OAuth 2.1 on www.forter.com. Anonymous public client; tokens issued in one round-trip without SSO. Production MCP at mcp.forter.com uses a separate, CSM-gated authorization server - this demo surface does NOT issue production credentials.",
    "type": "oauth2",
    "required": false,
    "anonymous": true,
    "publicClientId": "public",
    "flows": ["authorization_code", "client_credentials", "refresh_token"],
    "pkce": "S256",
    "code_challenge_methods_supported": ["S256"],
    "grant_types_supported": ["authorization_code", "refresh_token", "client_credentials", "urn:ietf:params:oauth:grant-type:jwt-bearer"],
    "response_types_supported": ["code"],
    "token_endpoint_auth_methods_supported": ["none"],
    "scopes_supported": ["fraud-decision:read", "agent-trust:read", "mcp:tools"],
    "issuer": "https://www.forter.com",
    "authorization_endpoint": "https://www.forter.com/oauth/authorize",
    "token_endpoint": "https://www.forter.com/oauth/token",
    "registration_endpoint": "https://www.forter.com/oauth/register",
    "authorization_server": "https://www.forter.com/.well-known/oauth-authorization-server",
    "protected_resource": "https://www.forter.com/.well-known/oauth-protected-resource",
    "jwks_uri": "https://www.forter.com/oauth/jwks.json",
    "default_client_id": "public"
  },
  "production": {
    "mcp_url": "https://mcp.forter.com/mcp",
    "fallback_redirect": "https://www.forter.com/mcp/upstream",
    "gated_by": "Forter Account Management / Customer Success (CSM)",
    "msa_required": true,
    "contact": "https://www.forter.com/contact-us/",
    "note": "Production MCP credentials are provisioned by your Forter account manager under a signed MSA - they are NOT issued by this demo surface. POST a JSON-RPC `initialize` to https://www.forter.com/mcp/upstream to be 307-redirected to the production server (method and body preserved); you'll be challenged for a production OAuth bearer there."
  }
}