protogrid
Sign inAdd to your agent

Search / com.vericto/vericto-proxy

Vericto Proxy mode (local, PostgreSQL)

L0· runs locally

Read-only PostgreSQL for AI agents: every statement is checked before it runs. No account needed.

v5.0.0 · active · repository · website · descriptor JSON · versions

Runs on your machine: something must execute the package.Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.
Quality–new
Trust99of 100
Packages1
Tools seen0

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "vericto-proxy": {
      "command": "docker",
      "args": [
        "--user",
        "${uid_gid}",
        "-v",
        "${db_url_file}:/run/secrets/db.url:ro",
        "-e",
        "VERICTO_API_KEY",
        "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9",
        "/usr/local/bin/vericto-proxy",
        "mcp",
        "--database-url-file",
        "/run/secrets/db.url"
      ],
      "env": {
        "VERICTO_API_KEY": "${VERICTO_API_KEY}"
      }
    }
  }
}
claude mcp add vericto-proxy -e "VERICTO_API_KEY=${VERICTO_API_KEY}" -- docker --user "${uid_gid}" -v "${db_url_file}:/run/secrets/db.url:ro" -e VERICTO_API_KEY docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9 /usr/local/bin/vericto-proxy mcp --database-url-file /run/secrets/db.url
[mcp_servers.vericto-proxy]
command = "docker"
args = ["--user", "${uid_gid}", "-v", "${db_url_file}:/run/secrets/db.url:ro", "-e", "VERICTO_API_KEY", "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9", "/usr/local/bin/vericto-proxy", "mcp", "--database-url-file", "/run/secrets/db.url"]
env = { "VERICTO_API_KEY" = "${VERICTO_API_KEY}" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "vericto-proxy": {
      "type": "local",
      "command": [
        "docker",
        "--user",
        "{env:uid_gid}",
        "-v",
        "{env:db_url_file}:/run/secrets/db.url:ro",
        "-e",
        "VERICTO_API_KEY",
        "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9",
        "/usr/local/bin/vericto-proxy",
        "mcp",
        "--database-url-file",
        "/run/secrets/db.url"
      ],
      "enabled": true,
      "environment": {
        "VERICTO_API_KEY": "{env:VERICTO_API_KEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "vericto-proxy": {
      "command": "docker",
      "args": [
        "--user",
        "${uid_gid}",
        "-v",
        "${db_url_file}:/run/secrets/db.url:ro",
        "-e",
        "VERICTO_API_KEY",
        "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9",
        "/usr/local/bin/vericto-proxy",
        "mcp",
        "--database-url-file",
        "/run/secrets/db.url"
      ],
      "env": {
        "VERICTO_API_KEY": "${VERICTO_API_KEY}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=vericto-proxy&config=eyJjb21tYW5kIjoiZG9ja2VyIiwiYXJncyI6WyItLXVzZXIiLCIke3VpZF9naWR9IiwiLXYiLCIke2RiX3VybF9maWxlfTovcnVuL3NlY3JldHMvZGIudXJsOnJvIiwiLWUiLCJWRVJJQ1RPX0FQSV9LRVkiLCJkb2NrZXIuaW8vdmVyaWN0by92ZXJpY3RvLXByb3h5OjUuMC4wQHNoYTI1Njo0Y2VjOWM0MmY5NDk0NmE2ZTA1MDkxOTJiODliNjNiZDcxNDUwYTdmMjcwODg0OTZiMDM0YzlkZDc2NzkxZmE5IiwiL3Vzci9sb2NhbC9iaW4vdmVyaWN0by1wcm94eSIsIm1jcCIsIi0tZGF0YWJhc2UtdXJsLWZpbGUiLCIvcnVuL3NlY3JldHMvZGIudXJsIl0sImVudiI6eyJWRVJJQ1RPX0FQSV9LRVkiOiIke1ZFUklDVE9fQVBJX0tFWX0ifX0%3D"
}
{
  "servers": {
    "vericto-proxy": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "--user",
        "${uid_gid}",
        "-v",
        "${db_url_file}:/run/secrets/db.url:ro",
        "-e",
        "VERICTO_API_KEY",
        "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9",
        "/usr/local/bin/vericto-proxy",
        "mcp",
        "--database-url-file",
        "/run/secrets/db.url"
      ],
      "env": {
        "VERICTO_API_KEY": "${VERICTO_API_KEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "vericto-proxy": {
      "command": "docker",
      "args": [
        "--user",
        "${uid_gid}",
        "-v",
        "${db_url_file}:/run/secrets/db.url:ro",
        "-e",
        "VERICTO_API_KEY",
        "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9",
        "/usr/local/bin/vericto-proxy",
        "mcp",
        "--database-url-file",
        "/run/secrets/db.url"
      ],
      "env": {
        "VERICTO_API_KEY": "${VERICTO_API_KEY}"
      }
    }
  }
}
extensions:
  "vericto-proxy":
    enabled: true
    name: "vericto-proxy"
    type: stdio
    cmd: "docker"
    args:
      - "--user"
      - "${uid_gid}"
      - "-v"
      - "${db_url_file}:/run/secrets/db.url:ro"
      - "-e"
      - "VERICTO_API_KEY"
      - "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9"
      - "/usr/local/bin/vericto-proxy"
      - "mcp"
      - "--database-url-file"
      - "/run/secrets/db.url"
    envs:
      "VERICTO_API_KEY": "${VERICTO_API_KEY}"
    timeout: 300

Placeholders to fill from your own secret store: ${VERICTO_API_KEY}. The registry never accepts secret values.

This is a local package: the command runs on your machine.

Quality – / 100new

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
  • n/a
    tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

Tool list unknown · checked 2026-11-07 18:35 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 99 / 100

provenance100
livenessn/a
freshness100
hygiene95

+repository +namespace-matches-repo +dns-namespace +website ~liveness-unmeasured +updated-4d-ago -unpinned-packages(1)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

packageregistryversionruntimesecrets
docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9ociunpinneddockerVERICTO_API_KEY

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Similar MCP servers

  • AgentSQLunknown
    io.github.cuipengdba/agentsql

    Guard AI agents' PostgreSQL/MySQL access via MCP: SQL audit, auth, masking, write approval

  • pgportL0
    io.github.CloudCorpRecords/pgport

    Read-only SQL queries against a PostgreSQL database.

  • Agent Read ProxyR0quality 73
    dev.workers.agent-read-proxy.agent-read-proxy/agent-read-proxy

    Read any web page (even JS sites), PDFs, tables, RSS & screenshots for AI agents. Pay via x402.

  • Sezzlee PostgreSQLL0
    io.github.sezzlee/postgres

    Explore and query PostgreSQL read-only: catalogue search, schema introspection and bounded queries.

  • pgmoatL0
    io.github.Kitalon-Labs-LLC/pgmoat

    Governed, read-only Postgres access for AI agents: SQL safety, RLS, budgets, tamper-evident audit.

  • Universal DB (read-only)L0
    io.github.alghanim/universal-db-mcp

    Read-only, guarded SQL access for AI agents: PostgreSQL, MySQL, ClickHouse, Oracle, SQL Server, Db2

More from com.vericto

Official server.json
{
  "name": "com.vericto/vericto-proxy",
  "icons": [
    {
      "src": "https://vericto.com/favicon.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    },
    {
      "src": "https://vericto.com/apple-touch-icon.png",
      "sizes": [
        "180x180"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "Vericto Proxy mode (local, PostgreSQL)",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "5.0.0",
  "packages": [
    {
      "transport": {
        "type": "stdio"
      },
      "identifier": "docker.io/vericto/vericto-proxy:5.0.0@sha256:4cec9c42f94946a6e0509192b89b63bd71450a7f27088496b034c9dd76791fa9",
      "runtimeHint": "docker",
      "registryType": "oci",
      "packageArguments": [
        {
          "type": "positional",
          "value": "/usr/local/bin/vericto-proxy"
        },
        {
          "type": "positional",
          "value": "mcp"
        },
        {
          "type": "positional",
          "value": "--database-url-file"
        },
        {
          "type": "positional",
          "value": "/run/secrets/db.url"
        }
      ],
      "runtimeArguments": [
        {
          "name": "--user",
          "type": "named",
          "value": "{uid_gid}",
          "variables": {
            "uid_gid": {
              "isRequired": true,
              "description": "uid:gid, for example 1000:1000"
            }
          },
          "isRequired": true,
          "description": "Your uid:gid (the output of `id -u`:`id -g`), so the container can read your 0600 URL file"
        },
        {
          "name": "-v",
          "type": "named",
          "value": "{db_url_file}:/run/secrets/db.url:ro",
          "variables": {
            "db_url_file": {
              "format": "filepath",
              "isRequired": true,
              "description": "Absolute path of the URL file, for example /home/me/.config/vericto/shop.url (mode 0600)"
            }
          },
          "isRequired": true,
          "description": "Mount the file that holds the postgres:// URL of a read-only role, read-only"
        }
      ],
      "environmentVariables": [
        {
          "name": "VERICTO_API_KEY",
          "isSecret": true,
          "description": "Optional. A runtime key (rules:read, telemetry:write, sql:read) links the server to your workspace's rules. Leave unset for local mode on the built-in rules."
        },
        {
          "name": "VERICTO_DATABASE_ID",
          "description": "Optional, with VERICTO_API_KEY: the Vericto database ID"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/vericto/vericto-proxy",
    "source": "github"
  },
  "websiteUrl": "https://github.com/vericto/vericto-proxy/blob/main/docs/MCP.md",
  "description": "Read-only PostgreSQL for AI agents: every statement is checked before it runs. No account needed."
}