Forter: MCP server, CLI and agent surfaces

Yes: Forter runs a public MCP server at www.forter.com that listed 5 tools to a client with no credentials on 4 November 2026. Examples: get_fraud_decision, evaluate_login_risk, evaluate_signup_risk. It speaks streamable-http, protocol 2025-03-26. Ora's cached score for forter.com is 92, grade A, read on 5 November 2026.

Fact sheet

Company	Forter (registry title: forter.com)
Domain	forter.com
Category	Payments & Fintech (Ora leaderboard category)
MCP server	Verified (No authentication)
Tranco rank	203 on the list of 4 November 2026
Ora score	92, grade A; Ora scanned the domain on 5 November 2026 and the cached score was read on 5 November 2026 from its score API (Ora's score page for forter.com, a vendor-published score)
Company found through	the shared crawl, which found /.well-known/mcp.json on the domain
Last verified	4 November 2026

MCP server

Endpoint	`https://www.forter.com/mcp`
How it was found	listed in the shared crawl, which found /.well-known/mcp.json on the domain
Transport	streamable-http
HTTP status	200
Protocol version	2025-03-26
Server	forter-demo 1.0.0
Capabilities	tools, resources
Tools	5
Resources	1
Prompts	0
Connected	4 November 2026, 20:01 UTC
Handshake time	1,374 ms over 1 attempt

Tools listed

5 tools

get_fraud_decision
evaluate_login_risk
evaluate_signup_risk
lookup_dispute_evidence
check_agent_trust

Connector log

2 connections on 4 November 2026, read-only methods only

19:55:53Z https://www.forter.com/mcp sent initialize, notifications/initialized, tools/list, resources/list result verified (HTTP 200) 1508 ms
20:01:28Z https://www.forter.com/mcp sent initialize, notifications/initialized, tools/list, resources/list result verified (HTTP 200) 1374 ms

Authentication

Auth type	No authentication

The sign-in route, step by step

Send the handshake to https://www.forter.com/mcp over streamable-http. Servers on the 2026-07-28 revision answer server/discover; older servers answer initialize.
Send tools/list, then resources/list and prompts/list if the capabilities name them.
Send no token. The connector sent none and the server answered, so any MCP client can read this list.
Calling a tool is a separate step this directory never takes.

See OAuth for MCP: client ID metadata documents and dynamic registration for how each route works.

CLI

No CLI is on record for Forter. The directory checks a package only where a source names one, so this is a floor: a company can ship a command line that no source read for this edition mentions. See shipping a CLI agents can use.

Other agent surfaces

Agent surfaces other than MCP and CLI
Surface	Result
OpenAPI file	Found: www.forter.com (JSON, via the shared crawl).
WebMCP in the initial HTML	Not detected on the home page by the shared crawl.
MCP discovery file	Found: forter.com/.well-known/mcp.json answered with a valid document in the shared crawl.
A2A agent card	Found: forter.com/.well-known/agent-card.json answered with a valid document in the shared crawl.
A2A agent card (older path)	Found: forter.com/.well-known/agent.json answered with a valid document in the shared crawl.
agents.json	Not found (the crawl got a non-200 answer).
OAuth authorization server metadata	Found: forter.com/.well-known/oauth-authorization-server answered with a valid document in the shared crawl.
NLWeb endpoint	Not checked in this edition.

Registry listings

Registry listings
Registry	Listed
Official MCP Registry	No
GitHub MCP Registry	No
awesome-remote-mcp-servers	No
Smithery	Not checked: Smithery's listing pages and search API were unavailable on 4 November 2026.
Glama	Not checked: Glama's API needs a key and attribution terms.