Mnemom — Trust Ratings for AI Agents

by mnemom · remote · no sign-in to list tools · v1.0.2 · published by GitHub user mnemom

Trust infrastructure for AI agents: read a verifiable Trust Rating, claim an identity, earn a badge.

Deletes · 3Changes · 4

Compare Registry entry

15 tools: 3 can delete or cancel things, 4 change things and 8 only read.

Scanned Oct 21, 2026

Deletes or cancels3Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things4Claude Code: ask: see these tools
Only reads8Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http mnemom https://api.mnemom.ai/mcp?profile=directory

Findings

Matches of fixed checks, with the text they matched.

2 info

Infopreview_compose_protection_by_agent
The input schema at properties.protected_surface.properties.assets.items.properties.selector.description mentions "credentials".
Matched text
inputSchema.properties.protected_surface.properties.assets.items.properties.selector.description: "...om-api". A resource identifier only: no credentials, no connection strings, no personal dat..."
What this check looks for
Infoput_protection_by_agent
The input schema at properties.protected_surface.properties.assets.items.properties.selector.description mentions "credentials".
Matched text
inputSchema.properties.protected_surface.properties.assets.items.properties.selector.description: "...om-api". A resource identifier only: no credentials, no connection strings, no personal dat..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

15 tools

Deletes or cancels 3Removes, cancels or revokes something.Claude Code: deny

claim_agentClaim a verifiable identity — bind an agent to your organization so its trust and accountability record is provably yours.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Claim a verifiable identity — bind an agent to your organization so its trust and accountability record is provably yours. Requires the agent's possession proof (`hash_proof`). Re-claiming an agent you already own keeps its original claim date but files it under the organization you pass (`org_id`; if omitted, your personal organization), which can change the organization that owns and bills it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
- title: Claim an Agent Identity
put_alignment_by_agentPublish or replace an agent's alignment card: its governance modes, the principal it acts for, its declared values, the actions it may take on its own, and its audit policy.No findings
Why it is in this group
- The name "put_alignment_by_agent" says "put": a word for a change.
- The description's first verb is "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Publish or replace an agent's alignment card: its governance modes, the principal it acts for, its declared values, the actions it may take on its own, and its audit policy. The server merges the card with the platform, organization and team policies above it and stores the result. Use preview_compose_alignment_by_agent to dry-run first.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
- title: Publish an Alignment Card
put_protection_by_agentPublish or replace an agent's protection card (screening mode, thresholds, trusted sources, protected assets).1 finding
Why it is in this group
- The name "put_protection_by_agent" says "put": a word for a change.
- The description's first verb is "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
Findings
- Info
  The input schema at properties.protected_surface.properties.assets.items.properties.selector.description mentions "credentials".
  Matched text
  inputSchema.properties.protected_surface.properties.assets.items.properties.selector.description: "...om-api". A resource identifier only: no credentials, no connection strings, no personal dat..."
  What this check looks for
Description, as the server wrote it
Publish or replace an agent's protection card (screening mode, thresholds, trusted sources, protected assets). When connected by OAuth sign-in (e.g. ChatGPT), each publish first needs a one-time grant from the same signed-in account: open https://www.mnemom.ai/authorize-protection?agent_id=<agent_id>, approve, then publish within 15 minutes (each grant covers one publish). Required: agent_id, card_version, mode, thresholds, screen_surfaces and trusted_sources (protected_surface is optional); mode `enforce` also needs Safe House on the organization. Use preview_compose_protection_by_agent to dry-run without a grant.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
- title: Publish a Protection Card

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

report_recipe_fn_fpSubmit a false-positive / false-negative correction for one of Mnemom's automated detection rules (a 'recipe') — technical feedback that improves detection accuracy, like filing a …No findings
Why it is in this group
- The description's first verb is "submit": a word for a change.
Description, as the server wrote it
Submit a false-positive / false-negative correction for one of Mnemom's automated detection rules (a 'recipe') — technical feedback that improves detection accuracy, like filing a bug report against a spam filter.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- title: Submit a Detection-Rule Correction
scan_trustScan a website's agent-trust-readiness and return a signed scorecard (Trust, plus an Access axis on newer rubrics).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Scan a website's agent-trust-readiness and return a signed scorecard (Trust, plus an Access axis on newer rubrics). Zero-auth. Results are CACHED for up to 24h — check `cached` and `scannedAt` on the result; pass `fresh: true` to force a re-scan (rate-limited). Proxies to the SSRF-locked isittrustready scanner; the Ed25519 signature + permalink are preserved verbatim. Rubric + docs: https://www.isittrustready.ai/rubric and https://docs.mnemom.ai/.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- title: Scan a Website's Trust-Readiness
verify_reputationAttest an agent's Trust Rating — returns a Merkle-root + hash-chain attestation (hash_chain_valid) proving the rating derives from an unbroken, append-only checkpoint chain, plus a…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Attest an agent's Trust Rating — returns a Merkle-root + hash-chain attestation (hash_chain_valid) proving the rating derives from an unbroken, append-only checkpoint chain, plus a pointer to the signed integrity certificate. This is a chain-integrity attestation, NOT an in-band Ed25519 signature check (that parity is verify_scan, for website scorecards).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Verify a Trust Rating (Attestation)
verify_scanVerify a website scan scorecard's Ed25519 signature IN-BAND (verify, don't trust).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Verify a website scan scorecard's Ed25519 signature IN-BAND (verify, don't trust). Pass a `scan` (a scorecard from scan_trust) or a `url` to re-scan; returns {verified, key_id, canonicalization} checked against the public key at mnemom://iitr/jwks. Zero-auth. Spec + rubric: https://www.isittrustready.ai/rubric and https://docs.mnemom.ai/.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- title: Verify a Scan Scorecard

Only reads 8Looks things up and changes nothing.Claude Code: allow

get_agentLook up an agent's public identity and trust state by ID — the accountable record other agents and humans can rely on.No findings
Why it is in this group
- The name "get_agent" says "get": a word for reading.
Description, as the server wrote it
Look up an agent's public identity and trust state by ID — the accountable record other agents and humans can rely on.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Look Up an Agent
get_reputationLook up an AI agent's published Trust Rating — Mnemom's portable reliability signal for autonomous software, computed from the agent's own verified activity record.No findings
Why it is in this group
- The name "get_reputation" says "get": a word for reading.
Description, as the server wrote it
Look up an AI agent's published Trust Rating — Mnemom's portable reliability signal for autonomous software, computed from the agent's own verified activity record. Returns the rating plus the technical factors behind it. Free, public, read-only: ratings are public by default, unless the agent's owner has opted out.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Get an Agent's Trust Rating
get_reputation_badgeGet an embeddable Trust Rating badge for an agent — returns the badge image URL plus ready-to-paste Markdown and HTML snippets for a README or agent card.No findings
Why it is in this group
- The name "get_reputation_badge" says "get": a word for reading.
Description, as the server wrote it
Get an embeddable Trust Rating badge for an agent — returns the badge image URL plus ready-to-paste Markdown and HTML snippets for a README or agent card.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Get an Embeddable Trust Badge
get_startedZero-auth, no-args orientation: who Mnemom is, the surface map, how to authenticate and what it unlocks, and the tools to try right now (scan_trust and the reputation lookups).No findings
Why it is in this group
- The name "get_started" says "get": a word for reading.
Description, as the server wrote it
Zero-auth, no-args orientation: who Mnemom is, the surface map, how to authenticate and what it unlocks, and the tools to try right now (scan_trust and the reputation lookups).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Get Started (Orientation)
list_agentsList the agents your account owns, with pagination (`limit`, `offset`).No findings
Why it is in this group
- The name "list_agents" says "list": a word for reading.
Description, as the server wrote it
List the agents your account owns, with pagination (`limit`, `offset`). Read-only.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: List Your Agents
preview_compose_alignment_by_agentDry-run an alignment card: shows the card that would result after merging with the platform, organization and team policies above it, plus any conflicts.No findings
Why it is in this group
- The name "preview_compose_alignment_by_agent" says "preview": a word for reading.
Description, as the server wrote it
Dry-run an alignment card: shows the card that would result after merging with the platform, organization and team policies above it, plus any conflicts. Nothing is saved.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Preview Composed Alignment (Dry Run)
preview_compose_protection_by_agentDry-run a protection card: shows the card that would result after merging with the platform, organization and team policies above it, plus any conflicts.1 finding
Why it is in this group
- The name "preview_compose_protection_by_agent" says "preview": a word for reading.
Findings
- Info
  The input schema at properties.protected_surface.properties.assets.items.properties.selector.description mentions "credentials".
  Matched text
  inputSchema.properties.protected_surface.properties.assets.items.properties.selector.description: "...om-api". A resource identifier only: no credentials, no connection strings, no personal dat..."
  What this check looks for
Description, as the server wrote it
Dry-run a protection card: shows the card that would result after merging with the platform, organization and team policies above it, plus any conflicts. Nothing is saved, and no publish grant is needed.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Preview Composed Protection (Dry Run)
search_reputation_directoryResolve an agent name or id-prefix to a real agent_id over the PUBLIC reputation directory (only agents whose reputation visibility is public).No findings
Why it is in this group
- The name "search_reputation_directory" says "search": a word for reading.
Description, as the server wrote it
Resolve an agent name or id-prefix to a real agent_id over the PUBLIC reputation directory (only agents whose reputation visibility is public). Zero-auth. The arriving-agent entry point: discover a concrete agent_id, then call get_reputation / verify_reputation on it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Search the Reputation Directory

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http mnemom https://api.mnemom.ai/mcp?profile=directory

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__mnemom__get_agent",
      "mcp__mnemom__get_reputation",
      "mcp__mnemom__get_reputation_badge",
      "mcp__mnemom__get_started",
      "mcp__mnemom__list_agents",
      "mcp__mnemom__preview_compose_alignment_by_agent",
      "mcp__mnemom__preview_compose_protection_by_agent",
      "mcp__mnemom__search_reputation_directory"
    ],
    "ask": [
      "mcp__mnemom__report_recipe_fn_fp",
      "mcp__mnemom__scan_trust",
      "mcp__mnemom__verify_reputation",
      "mcp__mnemom__verify_scan"
    ],
    "deny": [
      "mcp__mnemom__claim_agent",
      "mcp__mnemom__put_alignment_by_agent",
      "mcp__mnemom__put_protection_by_agent"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as mnemom. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.mnemom/mnemom/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:41 UTC.

For agents: Markdown · JSON · report this listing