mcp server
registry
The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.
Description as published by the maintainer. Source
- version 1.0.1
- active
active — Most recent push to the repository was 2026-07-14.
What this server can do
5 functions, named and described by the server itself. Parameter names are shown because they say more about what a function does than its name usually does.
check_mcp_server(server)- Check an MCP server against the PolicyLayer registry BEFORE installing or allowing it. Accepts a registry slug, an npm package name (scoped or not), a remote server URL (https://…), or a server name. Returns the full published record: identity verification with its evidence, risk grade, auth posture, freshness, and the tool surface listed riskiest-first. A server the registry does not know is queued for scanning by this very call — check back shortly. Required: server.
check_mcp_stack(servers)- Check a whole MCP stack against the PolicyLayer registry in one call — up to 25 servers, each given as candidate identifiers (npm package name, registry slug, or remote URL) tried in order until one resolves. Returns the published record for every hit — plus a deterministic verdict (attention signals and a suggested action) — and the lookup status for every miss; counts, grades and flagged tools come from the published records only. Costs one rate-limit unit per server. Required: servers.
check_tool(tool, server)- One tool's full risk classification on a published MCP server: category, severity, risk analysis and evidence, OWASP classes, parameter schema and the recommended policy default. Use when deciding whether to allow a specific tool call, e.g. "should execute_sql on this server be permitted?" Required: server, tool.
get_change_events(limit, after_id, severity)- The registry change feed: tool-surface drift, auth-posture flips, impostor flags, version bumps — every event the freshness watchers emit, id-cursored so a consumer resumes exactly where it stopped. Requires a Registry Licence key (Authorization: Bearer plr_...); self-serve at https://policylayer.com/registry/pricing.
search_registry(limit, query)- Search the PolicyLayer registry of published MCP servers by name, slug or package substring. Returns candidate matches with risk grade, identity confidence (verified / unverified / mismatch — mismatch means it claims to be an official server with no verifiable link to the brand) and tool count — follow up with check_mcp_server on the match you meant. Required: query.
Last successful function declaration observed on . Source: https://api.policylayer.com/mcp. We list what the server declared; we do not call any of these functions.
Endpoint status observed on . Source: https://api.policylayer.com/mcp.
Signals
These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.
| Signal | Value | What it measures | Window | Observed | Source |
|---|---|---|---|---|---|
| GitHub stars | 1 | Number of GitHub accounts that bookmarked this repository since it was created. It is a bookmark count, not installs, not active users and not quality. | cumulative, all time | GitHub | |
| Last commit | 2026-07-14 | Date of the most recent push to any branch. This is the strongest cheap indicator of whether the project is still maintained. | point in time | GitHub | |
| Open issues | 0 | Open issues plus open pull requests, as GitHub counts them together. A high number can mean an active project or an abandoned one. | as of fetch | GitHub | |
| Latest published version | 1.0.1 | Latest version string the maintainer published to the registry. | as of fetch | Model Context Protocol | |
| Registry record last updated | 2026-07-08 | When the registry record was last updated by its maintainer. | point in time | Model Context Protocol | |
| License | MIT | Licence GitHub detected in the repository. Detection can be wrong; the LICENSE file is authoritative. | as of fetch | GitHub | |
| First listed in the MCP Registry | 2026-07-08 | Date this server was first published to the official MCP Registry. Not a usage or quality measure. | point in time | Model Context Protocol | |
| repository status | active | The repository exists on GitHub and is not archived. This says nothing about how recently it was worked on. | as of fetch | GitHub | |
| mcp tools declared | 5 tools | Number of functions the server itself declared when asked to list them. This is what the server offers an agent, not a measure of how well any of them work. | as of probe | api.policylayer.com | |
| mcp endpoint status | ok | The server listed 5 functions when asked. | as of probe | api.policylayer.com |
Where to get it
Related, by what their authors tagged them
-
io.github.Aidress-ai/aidress
— last commit 2026-08-06, shares registry
Verify, discover, and rate AI agents before transacting.
-
io.github.CSOAI-ORG/mcp-spec-compliance-mcp
— last commit 2026-06-16, shares registry
MCP Spec Compliance MCP — audits any MCP server.json against the official Model Context Protocol
-
io.github.cyanheads/faa-aircraft-registry-mcp-server
— last commit 2026-07-17, shares registry
Offline, keyless lookup of the US civil aircraft registry — decode N-numbers, search records.
-
io.github.daedalus/mcp-server-find
— last commit 2026-04-26, shares registry
MCP server discovery - find and install MCP servers from Official Registry, Glama, and Smithery
-
AgentTrust — Identity & Trust for A2A Agents
— last commit 2026-04-09, shares security
Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
-
ai.kernora/agent-sec
— last commit 2026-07-31, shares security
Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
-
ai.radmail/radmail-mcp
— last commit 2026-07-04, shares security
Email OS for agents - real-inbox search, triage, commitments, and a verifiable BEC hard-stop.
-
Scry
— archived, last commit 2026-05-25, shares security
Free IPv4 lookups against a distributed attacker-observation corpus.
-
app.scfcontrolsplatform/mcp-server-scf
— last commit 2026-07-27, shares security
MCP server for the SCF Controls Platform — 83 tools for controls, evidence, risk, and TPRM.
-
Arcjet
— last commit 2026-04-09, shares security
An MCP server for Arcjet - the runtime security platform that ships with your AI code.
These share tags the maintainers applied themselves, such as registry, security. Common tags like "mcp" or "ai" are ignored for this: agreeing with six hundred other projects is not a similarity.
This is not a recommendation and not a test result. It is a map of what the authors said their work is about.
How the author describes it
Topics the maintainer set on GitHub: ai-agents, mcp, mcp-server, model-context-protocol, registry, security.
This record as data
Every field on this page, with its source and observation date, is in the catalog JSON. Fetch the whole kind at once instead of parsing this HTML.
GET /api/v1/entries/mcp_server.json