Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "keryx": {
      "type": "http",
      "url": "https://keryx.cc/mcp"
    }
  }
}

claude mcp add --transport http keryx https://keryx.cc/mcp

[mcp_servers.keryx]
url = "https://keryx.cc/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "keryx": {
      "type": "remote",
      "url": "https://keryx.cc/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "keryx": {
      "type": "http",
      "url": "https://keryx.cc/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=keryx&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8va2VyeXguY2MvbWNwIn0%3D"
}

{
  "servers": {
    "keryx": {
      "type": "http",
      "url": "https://keryx.cc/mcp"
    }
  }
}

{
  "mcpServers": {
    "keryx": {
      "httpUrl": "https://keryx.cc/mcp"
    }
  }
}

extensions:
  "keryx":
    enabled: true
    name: "keryx"
    type: streamable_http
    uri: "https://keryx.cc/mcp"
    timeout: 300

Quality 75 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations25 of 25 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 5,383 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes37 tool changes in 30 days
fail
stability.rug_pull2 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know [email protected]

25 tools, about 5,383 tokens to load them all · tool set 2c63441a02bd · tools last changed 2026-10-15 · checked 2026-10-20 10:03 UTC

Tool changes

2026-10-15history_private_jobs_exportadded
Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority. Manual finite JSON metadata export only; complete/truncated and continuation are returned. Result bodies are excluded.
2026-10-15history_private_jobs_detailadded
Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.
2026-10-15history_private_jobs_listadded
Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.
2026-10-15history_exportadded
Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.
2026-10-15history_owned_readadded
Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.
2026-10-15researchchangedinput schema
2026-10-15draft_checkchangedinput schema
2026-10-15evidence_draftchangedinput schema
2026-10-13evidence_procurementadded
Assess missing evidence requirements, supplied provider offers, selections, deliveries and caller reviews with the shared private evidence procurement contract. Amounts are exact integer micro-USDC. Signature and content-binding checks do not establish delivery quality, buyer authority, payment or settlement. No fetching, model, provider, database, history, purchase, escrow or reward I/O. Caller selections and reviews are assertions, not financial authorization. Inputs and results may be retained by your MCP client; choose its privacy settings before sharing private material.
2026-10-12run_owner_exportadded
Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 95 / 100

provenance90

liveness94

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-86% +updated-2d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npmthis version is not known to the dependency resolver

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://keryx.cc/mcp` streamable-http	none	yes	86%	946 ms	2025-11-25	2026-10-20

package	registry	version	runtime	secrets
`keryx-mcp`	npm	0.4.34	–

Tools (25)

`deliverable_acceptance_read`read-only	Owner-only ordinary prepaid A2A deliverable state. Requires explicit deliverable:read. Historical remedy:none and missing response window remain visible. Native/enrolled, Monthly, private v2 and browser-only originals are unavailable. Not source-decision agreement or semantic verification.
`deliverable_acceptance_submit`	Record Accept, Request revision or Reject for the original customer's exact retained delivery. Requires explicit deliverable:write, expected current revision/digests and an idempotency key. Reason is private; publishState explicitly shares state/timestamp only. Request storage does not execute a revision/refund, recharge, change reservations or claw back rewards. Your MCP client may retain private messages.
`draft_check`read-only	Split a private passage into sentences, bind citation markers ([3], cite{key}, [@key], Author (Year)) to a BibTeX, RIS or DOI/link reference list, and compare each cited sentence with source text you supply. Each verdict (supported, partly-supported, not-found, source-unavailable) carries a verbatim excerpt of that text or states that no supporting passage was found; a source without supplied text is always source-unavailable. Deterministic wording comparison, not semantic review. No fetching, model, database, history, payment or reward I/O. Inputs and results can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.
`evidence_draft`read-only	Assemble user-selected claim spans and related-work quote themes from saved Include paper records and caller-supplied retained Keryx report rows. A theme may carry author-written statements (contribution, agreement, disagreement, gap); a statement naming a paper is exported only with a citation and a selected retained excerpt from each named paper, otherwise it is withheld. Exported citations and BibTeX/RIS entries are checked to correspond one to one. Exact version/excerpt matching does not authenticate imported reports or verify semantic support. No fetching, model, database, history, payment or reward I/O. Inputs and returned draft can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.
`evidence_procurement`read-only	Assess missing evidence requirements, supplied provider offers, selections, deliveries and caller reviews with the shared private evidence procurement contract. Amounts are exact integer micro-USDC. Signature and content-binding checks do not establish delivery quality, buyer authority, payment or settlement. No fetching, model, provider, database, history, purchase, escrow or reward I/O. Caller selections and reviews are assertions, not financial authorization. Inputs and results may be retained by your MCP client; choose its privacy settings before sharing private material.
`history_export`read-only	Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.
`history_owned_read`read-only	Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.
`history_private_jobs_detail`read-only	Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.
`history_private_jobs_export`read-only	Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority. Manual finite JSON metadata export only; complete/truncated and continuation are returned. Result bodies are excluded.
`history_private_jobs_list`read-only	Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.
`history_read`read-only	Read bounded pages of the verified API-key wallet's ordinary current-store runs. Requires explicit history:read. Literal case-sensitive question search; storeNetwork describes the deployment, not per-run settlement. Recorded spend/allocation is not a payment receipt. No wallet selector, linked accounts, archive, private jobs, research or payment.
`keryx_operator_status`read-only	Observe public prepaid research operations, queue, recorded ordinary/recovered/unknown completion latency cohorts and hold/review rationale. Timing is order createdAt to updatedAt (acceptance to recorded completion/update); later reconciliation can extend it. It is not first-answer or settlement time. Missing capability stays null. No spending or execution authority; exact books and customer jobs stay private.
`keryx_public_job_ledger`read-only	Inspect a partial selected-network public web-dispatch transfer ledger and balanced exact micro-USDC vouchers. Browser funding and Keryx sponsorship are separate. Pending/ambiguous/batched-attribution legs do not enter settled totals. No customer questions/identities, private invoices, complete business books, margin, cash balance, signing or execution authority. days1–31, default7. Export via /api/operator/ledger; a checksum is not authenticity or independent settlement proof.
`keryx_purchase_outcomes`read-only	Read a public dispatch's retained exact-version BUY/citation/payment observations. Returns bounded sample counts, citation hit rate, calibration bands and integer micro-USDC uncited access cost. Recorded settlement is not revalidated on chain. Historical participant cohort is unknown; causal regret, missed value and cost per supported claim are unmeasured. No research, paid read, current-source backfill, private reviews, signing or learning. Use an existing dispatch ID, never a URL.
`keryx_source_learning`read-only	Read the same bounded observational source/topic record as the public creator page and API. Only write-time independently classified/funded outside observations qualify; owners, unknown and private history are excluded. Source-declared public topics, counts, recorded citation contribution, exact rational average access price, descriptive uncertainty and abrupt-shift flag. No questions, wallets or receipt identifiers. Recorded settlement is not independently revalidated. Live learned selection and exploration are withheld, with zero live exploration allowance. No research, source read, payment, private inspection or policy activation.
`keryx_status`read-only	Describe this MCP surface, its payment behavior, and the active caller tier.
`operator_obligations_read`read-only	Read a private conservative obligation projection for the exact server-delegated reader with explicit operator:read API-key scope. Disabled without protected reader/role configuration. Partial native history remains unknown with zero safe/advisory surplus. No cash probe, signer, custody, spending, release, refund or scheduler authority. No caller owner/role selectors.
`paper_lookup`read-only	Find paper titles, recorded contributors, DOI and exact repository versions without research or payment. Default: retained catalog metadata with observation times. Set searchRepositories=true only to explicitly send the query to arXiv/Crossref (at most two requests, no paper-body reading). Missing DOI, peer review and withdrawal/replacement status remain unknown. Returns a field-scoped bibliography card with provenance, a short reference and reusable BibTeX/RIS text. Use this for exact title/ordered author/year/journal/DOI/version questions before requesting paid research; original paper text is not required for recorded metadata.
`profile_identities_read`read-only	Read only the verified key owner's saved ORCID/GitHub identities. Requires explicit profile:read scope. No wallet selector, provider OAuth, linking, unlinking, research or payment. Link identities interactively in your private profile browser page.
`profile_read`read-only	Read the verified key owner's private profile and attributed activity. Requires explicit profile:read scope. No public identity, research or payment.
`profile_update`	Replace the verified key owner's private display name, handle, one-line bio/purpose and links. Requires explicit profile:write scope. No wallet selector or identity verification; no payment/history changes.
`research`	Research a question under a USDC creator-payment budget. Keryx selects sources, pays access tolls and weighted citation rewards on the configured Arc network, then returns qualified source excerpts and a receipt. Complete synthesis and per-assertion entailment remain unverified. This remote surface uses Keryx's treasury; anonymous research is sponsored, not caller-funded usage. Public research may send your question to our search provider. The source USDC budget is separate from model and search operating costs. For retained or repository bibliography use free paper_lookup with an exact identifier. An ordinary explicit exact-original bibliography request can also return a separate metadata-only record and references without a model call or creator payment; page status and full-paper evidence remain separate. New runs record remote MCP ingress. A verified ask-scoped API key attributes the run to its wallet; anonymous runs have no wallet owner. Editable client names establish no identity or spending authority.
`research_monthly`read-only	Read the four-request, 30-day Research Monthly quote and handoff. The current quote identifies its payment network. Never buys or redeems a plan.
`run_owner_export`read-only	Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.
`run_privacy_read`read-only	Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.tang-vu/keryx",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://keryx.cc/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.4.34",
  "packages": [
    {
      "version": "0.4.34",
      "transport": {
        "type": "stdio"
      },
      "identifier": "keryx-mcp",
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org"
    }
  ],
  "repository": {
    "url": "https://github.com/tang-vu/keryx",
    "source": "github",
    "subfolder": "mcp"
  },
  "websiteUrl": "https://keryx.cc",
  "description": "Budgeted research with cited evidence and visible payment state on the selected Arc network."
}