Skip to content

VerifyMCP

by verifymcp.io · remote · no sign-in to list tools · v1.0.0 · published by io.verifymcp

Independent trust scores, tool surfaces and change history for MCP servers.

Read only
CompareRegistry entry

9 tools: 9 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http verifymcp https://mcp.verifymcp.io

Findings

Matches of fixed checks, with the text they matched.

1 warn

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Only reads 9Claude Code: allow
  • get_serverGet the full VerifyMCP trust report for one MCP server: score with per-category verdicts and reasons, the tools it exposes with their context-token cost, and its recent change hist…No findings

    Why it is in this group

    • The name "get_server" says "get": a word for reading.
    Description, as the server wrote it
    Get the full VerifyMCP trust report for one MCP server: score with per-category verdicts and reasons, the tools it exposes with their context-token cost, and its recent change history. Use before installing or trusting a server. Accepts a package name, endpoint URL, registry name or verifymcp slug.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_server_alternativesOther MCP servers doing a similar job to a given one, with their trust scores.1 finding

    Why it is in this group

    • The name "get_server_alternatives" says "get": a word for reading.

    Findings

    • Warn

      The description contains "Other MCP servers", wording about other tools or servers.

      Matched text

      description: "Other MCP servers doing a similar job to a given one, wit..."

      What this check looks for
    Description, as the server wrote it
    Other MCP servers doing a similar job to a given one, with their trust scores. Neighbours share a product, publisher namespace or category; this is not a semantic search.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_server_comparisonCompare up to 5 MCP servers side by side: trust scores, per-category breakdown, tool counts and context-token cost.No findings

    Why it is in this group

    • The name "get_server_comparison" says "get": a word for reading.
    Description, as the server wrote it
    Compare up to 5 MCP servers side by side: trust scores, per-category breakdown, tool counts and context-token cost. Use when choosing between candidates that do the same job. Accepts package names, endpoint URLs, registry names or verifymcp slugs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_server_diagnosticsThe evidence behind one server's score: TLS, DNSSEC, authorization, redirects, transports, provenance, install scripts, known CVEs and dependency health.No findings

    Why it is in this group

    • The name "get_server_diagnostics" says "get": a word for reading.
    Description, as the server wrote it
    The evidence behind one server's score: TLS, DNSSEC, authorization, redirects, transports, provenance, install scripts, known CVEs and dependency health. Use to explain a low score.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_server_install_configReady-to-paste install snippets for one MCP server, for every client we support.No findings

    Why it is in this group

    • The name "get_server_install_config" says "get": a word for reading.
    Description, as the server wrote it
    Ready-to-paste install snippets for one MCP server, for every client we support. An MCPB bundle has no launch command, so it returns the download URL, the registry's SHA-256 and commands to verify the file instead. Read get_server first: this returns configuration, not a safety judgement.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_server_toolsEvery tool one MCP server exposes, with its parameters, output schema and context-token cost.No findings

    Why it is in this group

    • The name "get_server_tools" says "get": a word for reading.
    Description, as the server wrote it
    Every tool one MCP server exposes, with its parameters, output schema and context-token cost. Use when get_server reported the tool list was truncated.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_known_malwareList MCP server components carrying a supply-chain malware finding.No findings

    Why it is in this group

    • The name "list_known_malware" says "list": a word for reading.
    Description, as the server wrote it
    List MCP server components carrying a supply-chain malware finding. Use to check whether anything in the register is flagged before installing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_productsList the products MCP servers integrate with, such as github or notion, and how many servers cover each.No findings

    Why it is in this group

    • The name "list_products" says "list": a word for reading.
    Description, as the server wrote it
    List the products MCP servers integrate with, such as github or notion, and how many servers cover each. Use to find the product slug that list_servers accepts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_serversFilter the VerifyMCP directory of scored MCP servers.No findings

    Why it is in this group

    • The name "list_servers" says "list": a word for reading.
    Description, as the server wrote it
    Filter the VerifyMCP directory of scored MCP servers. Use to discover servers by name fragment, ecosystem, product or trust score. Name matching only: descriptions and capabilities are not searched, so a plain-English question matches nothing. Returns the first 100.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http verifymcp https://mcp.verifymcp.io

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__verifymcp__list_servers",
      "mcp__verifymcp__get_server",
      "mcp__verifymcp__get_server_comparison",
      "mcp__verifymcp__list_products",
      "mcp__verifymcp__list_known_malware",
      "mcp__verifymcp__get_server_alternatives",
      "mcp__verifymcp__get_server_diagnostics",
      "mcp__verifymcp__get_server_install_config",
      "mcp__verifymcp__get_server_tools"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as verifymcp. Review it before you use it.