Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions
Directory / OpenFile
OpenFile
by joinopenfile.com · https://mcp.joinopenfile.com
Form U.S. companies and file U.S. trademarks. The agent prepares the filing and the owner signs it.
13 of 13 checks · 2 Nov 2026
Is OpenFile MCP server safe?
- None of the hidden-instruction wordings we know were found in its tool descriptions.
- Its error messages showed no secrets or internal details.
- 22 of its 27 tools are labeled read-only; the others may change or send things.
- Overall it scored 81/100 on 2 Nov 2026.
A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.
What it can do
27 tools, in the server's own words.
search_docsread-onlySearches OpenFile's docs and returns the best sections with a link to each.
read_docread-onlyOne docs page as Markdown, by its slug.
plan_taskread-onlyThe questions behind anything a person does here, with the options for each, the rules, and what only the person can do: form a company, check on an order, add…
get_pricingread-onlyFormation packages, the trademark package, and USPTO fees.
quote_applicationread-onlyEvery fee for a number of classes, with the government's marked.
list_classesread-onlyThe Nice classes small businesses file in most, with ID Manual style wording.
suggest_classesread-onlyClasses and goods and services wording from a plain description of the business.
screen_markread-onlyChecks a mark against common refusal grounds: descriptive, generic, surname, place name, famous brand.
search_marksread-onlySearches live USPTO records for marks with this name, or lists an owner's marks.
suggest_alternativesread-onlyNames that keep the idea of a risky mark.
check_siteread-onlyFrom a website or app store link: the brand, its legal owner, and which USPTO marks are theirs or someone else's.
read_siteread-onlyWhat a website says about its owner, address and what's sold, each with the quote it came from.
list_filing_typesread-onlyEverything that can be filed for a mark, with when it's due, what it costs for one class, and whether it can be started here.
get_filing_typeread-onlyOne filing with its explanation, the fields it needs and its fees for a number of classes.
create_applicationSaves a draft trademark application and returns review_url for the owner, who checks it and signs.
get_applicationread-onlyA draft, what's still missing, and the filing once the owner has signed.
update_applicationChanges the fields you send on a draft.
list_statesread-onlyEvery state with its LLC and corporation filing fees.
get_stateread-onlyOne state's filing fees, annual report, accepted company name endings and publication rules.
list_servicesread-onlyEvery add-on with its price, whether it can go on a formation, and whether the owner orders it from their dashboard.
quote_formationread-onlyEvery fee for a formation, with the state's marked.
create_formationSaves a draft company formation and returns review_url for the owner, who checks it and signs the authorization.
get_formationread-onlyA draft formation, what's still missing, and the order once the owner has signed.
update_formationChanges the fields you send on a draft formation.
and 3 more
Test results
Safe mode: only tools labeled read-only were run. How the test works
- !Ready for the newest MCP versionnote
1 warning
- !Uses an older MCP version (2025-03-26). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
- !Every tool is describednote
3 warnings
- !update_application and update_formation have nearly the same description (90% of their words are shared; the only difference: nothing vs "formation"), so an AI may not know which to pick
- !get_application and get_formation have nearly the same description (70% of their words are shared; the only difference: "filing" vs "formation", "order"), so an AI may not know which to pick
- !create_application and create_formation have nearly the same description (67% of their words are shared; the only difference: "application", "trademark", "goes" vs "formation", "company", "authorization"), so an AI may not know which to pic
- !Tools work with good inputsnote
1 warning
- !suggest_classes: Answered, but it gives the exact same answer to bad input as to good input, so it may be ignoring what it is sent
- –create_application: Not run: labeled dangerous
- –update_application: Not run: labeled dangerous
- –create_formation: Not run: labeled dangerous
- –update_formation: Not run: labeled dangerous
- –add_specimen: Not run: labeled dangerous
- and 21 more
- !Bad inputs give a clean errornote
4 warnings
- !search_docs: Accepted wrong type for "q" without complaining
- !suggest_classes: Accepted wrong type for "description" without complaining
- !screen_mark: Accepted wrong type for "mark" without complaining
- !search_marks: Accepted wrong type for "mark" without complaining
- and 26 more
- !Follows MCP best practices (not scored yet)note
1 tip (not scored)
- !11 tools answer with structured data but don't declare its shape (outputSchema): search_docs, read_doc, plan_task, get_pricing, quote_application, list_classes and 5 more. If those answers change shape, nothing can catch it; with a schema,
- ✓ConnectsConnected in 495 mspass
- ✓Lists its toolsFound 27 toolspass
- ✓Tools are labeled safe or dangerousEvery tool has a safety labelpass
- ✓No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.pass
- ✓Tools work togetherpass
1 chain working
- ✓search_docs → read_doc: read_doc found what search_docs returned (slug = "agents/replit")
- ✓Stopped looking for more chains after the limit on tool calls
- ✓Fast enoughpass
All good
- ✓Connecting took 495 ms
- ✓Listing tools took 90 ms
- ✓Average tool answer: 358 ms
- ✓suggest_alternatives: Slowest tool: suggest_alternatives (1.3 s)
- ✓No secrets leakedChecked 64 error messages: no secrets or internal detailspass
- ✓Resources and prompts workpass
All good (60 resources, 3 prompts)
- ✓Opened 10 of 10 resources (a sample of 10 of 60)
- ✓An address that does not exist gets a clean "not found" error
- ✓Opened 3 of 3 prompts
Test it yourself
Free and open source. Same checks, same score.
npx qamcp-cli https://mcp.joinopenfile.comShow this score on GitHub
Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.
[](https://qamcp.dev/s/com-joinopenfile-openfile.html)Score over time
- 2 Nov 202681
One test so far. New tests will show here.
Reviews
Coming soon: reviews from people who use OpenFile, signed in with GitHub, one per person. Reviews never change the score.
QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.
Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works