Search / com.mcplookup/mcp
protogridR0· no sign-inLook up independent trust ratings and security, maintenance, and adoption evidence for MCP servers.
v0.1.6 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"mcplookup": {
"type": "http",
"url": "https://mcplookup.com/mcp"
}
}
}claude mcp add --transport http mcplookup https://mcplookup.com/mcp[mcp_servers.mcplookup]
url = "https://mcplookup.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"mcplookup": {
"type": "remote",
"url": "https://mcplookup.com/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"mcplookup": {
"type": "http",
"url": "https://mcplookup.com/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=mcplookup&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwbG9va3VwLmNvbS9tY3AifQ%3D%3D"
}{
"servers": {
"mcplookup": {
"type": "http",
"url": "https://mcplookup.com/mcp"
}
}
}{
"mcpServers": {
"mcplookup": {
"httpUrl": "https://mcplookup.com/mcp"
}
}
}extensions:
"mcplookup":
enabled: true
name: "mcplookup"
type: streamable_http
uri: "https://mcplookup.com/mcp"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every useauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations3 of 3 tools declare readOnlyHint or destructiveHinttools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: resolve_server (idempotentHint); find_servers (idempotentHint); trust_lookup (idempotentHint)tools.token_costabout 939 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulnsno known advisory in 1 resolved packagesdeps.mcp_sdk_versionthe official MCP SDK is not in the dependency graphdeps.resolvable@mcplookup/[email protected] resolved: 1 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +dns-namespace +website +reachable +uptime-100% ~updated-64d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
@mcplookup/[email protected] npm0 dependencies, resolved · advisories checked 2026-10-19
No known advisory affects this dependency graph.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://mcplookup.com/mcp streamable-http | none | yes | 100% | 384 ms | 2026-07-28 | 2026-10-19 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
@mcplookup/mcp | npm | 0.1.6 | – |
find_serversread-only | Find a compact, trust-aware shortlist for a task or capability when no particular MCP server or product is known. Search by free text or MCPLookup's normalized capability taxonomy, with optional filters. Free text returns a reviewed identity-only slate when available; otherwise results are explicitly labelled catalog matches, and the two evidence lanes are never mixed. Returns at most five results with no pagination. A selected exact server name can be passed to resolve_server for reviewed identity context and connection options; named artifacts fit resolve_server directly. |
resolve_serverread-only | Resolve a named MCP server, vendor, product, package, repository, Registry identifier, or endpoint to a canonical MCPLookup identity. Returns at most five reviewed candidates with query-relative identity and publisher explanations, a compact trust assessment, and current connection options. This is the best fit when a particular artifact or product is known; find_servers covers open-ended capability discovery, while trust_lookup returns the full current evidence record for an exact canonical name. |
trust_lookupread-only | Return MCPLookup's complete current trust record for one exact canonical MCP server name. Includes the verdict, Trust Index band and 0–100 score with confidence, coarse safety, maintenance, adoption, and provenance bands, coverage, freshness, public evidence, and citation. This fits trust questions and evidence review after identity is known; resolve_server handles ambiguous names or coordinates. Current state only—no history or safety certification. |
Schemas: list_tools.
{
"name": "com.mcplookup/mcp",
"title": "MCPLookup",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://mcplookup.com/mcp",
"type": "streamable-http"
}
],
"version": "0.1.6",
"packages": [
{
"version": "0.1.6",
"transport": {
"type": "stdio"
},
"identifier": "@mcplookup/mcp",
"registryType": "npm"
}
],
"repository": {
"url": "https://github.com/mcplookupdev/mcplookup-mcp",
"source": "github"
},
"websiteUrl": "https://mcplookup.com",
"description": "Look up independent trust ratings and security, maintenance, and adoption evidence for MCP servers."
}