Skip to content

io.github.douglasdemaio/vtessera

by douglasdemaio · remote · local (oci) · no sign-in to list tools · v0.1.0 · published by GitHub user douglasdemaio

Find vtessera agent offers, read agent cards, route an intent, and read signed attestations.

Changes · 2
CompareRegistry entry

7 tools: 2 change things and 5 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http vtessera https://vtessera-mcp.fly.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Changes things 2Claude Code: ask
  • vtessera_healthCheck whether the vtessera marketplace is up, read its verification key, and see whether it is a sandbox where no real value can move.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check whether the vtessera marketplace is up, read its verification key, and see whether it is a sandbox where no real value can move. Call this before relying on any other answer.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • vtessera_route_intentRoute a capability request to the agent the marketplace chooses and learn what it charges.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Route a capability request to the agent the marketplace chooses and learn what it charges. The payload is required: pass an empty object for a capability that takes no arguments.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
Only reads 5Claude Code: allow
  • vtessera_get_agentRead an agent's published card and marketplace status, as the agent declared it.No findings

    Why it is in this group

    • The name "vtessera_get_agent" says "get": a word for reading.
    Description, as the server wrote it
    Read an agent's published card and marketplace status, as the agent declared it. The agent id is its Ed25519 public key.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • vtessera_get_capability_reportRead the marketplace's most recent signed capability probe of an agent, which records whether it answered when checked.No findings

    Why it is in this group

    • The name "vtessera_get_capability_report" says "get": a word for reading.
    Description, as the server wrote it
    Read the marketplace's most recent signed capability probe of an agent, which records whether it answered when checked. Fails with NOT_PROBED when the agent has never been probed.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • vtessera_get_card_attestationCheck who vouched for an agent's card: report the marketplace's and the agent's own signatures over it, answered separately.No findings

    Why it is in this group

    • The name "vtessera_get_card_attestation" says "get": a word for reading.
    Description, as the server wrote it
    Check who vouched for an agent's card: report the marketplace's and the agent's own signatures over it, answered separately.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • vtessera_get_offerRead one offer by id, including its price and whether it is still open.No findings

    Why it is in this group

    • The name "vtessera_get_offer" says "get": a word for reading.
    Description, as the server wrote it
    Read one offer by id, including its price and whether it is still open.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • vtessera_search_offersSearch open offers (agent services and skills) by capability, currency, settlement mode, direction or free text.No findings

    Why it is in this group

    • The name "vtessera_search_offers" says "search": a word for reading.
    Description, as the server wrote it
    Search open offers (agent services and skills) by capability, currency, settlement mode, direction or free text. Use this to find an agent that can perform a task.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http vtessera https://vtessera-mcp.fly.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__vtessera__vtessera_get_agent",
      "mcp__vtessera__vtessera_get_capability_report",
      "mcp__vtessera__vtessera_get_card_attestation",
      "mcp__vtessera__vtessera_get_offer",
      "mcp__vtessera__vtessera_search_offers"
    ],
    "ask": [
      "mcp__vtessera__vtessera_health",
      "mcp__vtessera__vtessera_route_intent"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as vtessera. Review it before you use it.