Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "verifymcp": {
      "type": "http",
      "url": "https://mcp.verifymcp.io"
    }
  }
}

claude mcp add --transport http verifymcp https://mcp.verifymcp.io

[mcp_servers.verifymcp]
url = "https://mcp.verifymcp.io"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "verifymcp": {
      "type": "remote",
      "url": "https://mcp.verifymcp.io",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "verifymcp": {
      "type": "http",
      "url": "https://mcp.verifymcp.io"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=verifymcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnZlcmlmeW1jcC5pbyJ9"
}

{
  "servers": {
    "verifymcp": {
      "type": "http",
      "url": "https://mcp.verifymcp.io"
    }
  }
}

{
  "mcpServers": {
    "verifymcp": {
      "httpUrl": "https://mcp.verifymcp.io"
    }
  }
}

extensions:
  "verifymcp":
    enabled: true
    name: "verifymcp"
    type: streamable_http
    uri: "https://mcp.verifymcp.io"
    timeout: 300

Quality 100 / 100strong

protocol100 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
pass
protocol.list_ttltool list is cacheable (ttlMs 3600000)

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,805 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changes3 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

9 tools, about 1,805 tokens to load them all · tool set fff41be21f68 · tools last changed 2026-10-16 · checked 2026-10-20 12:13 UTC

Tool changes

2026-10-16get_server_alternativeschangeddescription, output schema
before
Other MCP servers doing a similar job to a given one, with their trust scores. Neighbours share a product or publisher namespace; this is not a semantic search.
after · 96% of words in common
Other MCP servers doing a similar job to a given one, with their trust scores. Neighbours share a product, publisher namespace or category; this is not a semantic search.
2026-09-27get_server_install_configchangeddescription, output schema
before
Ready-to-paste install snippets for one MCP server, for every client we support. Read get_server first: this returns configuration, not a safety judgement.
after · 52% of words in common
Ready-to-paste install snippets for one MCP server, for every client we support. An MCPB bundle has no launch command, so it returns the download URL, the registry's SHA-256 and commands to verify the file instead. Read get_server first: this returns configuration, not a safety judgement.
2026-09-24list_serverschangedinput schema

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 92 / 100

provenance85

liveness99

freshness85

hygiene100

+repository +dns-namespace +website +reachable +uptime-97% ~updated-46d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.verifymcp.io` streamable-http	none	yes	97%	549 ms	2026-07-28	2026-10-20

Tools (9)

`get_server`read-only	Get the full VerifyMCP trust report for one MCP server: score with per-category verdicts and reasons, the tools it exposes with their context-token cost, and its recent change history. Use before installing or trusting a server. Accepts a package name, endpoint URL, registry name or verifymcp slug.
`get_server_alternatives`read-only	Other MCP servers doing a similar job to a given one, with their trust scores. Neighbours share a product, publisher namespace or category; this is not a semantic search.
`get_server_comparison`read-only	Compare up to 5 MCP servers side by side: trust scores, per-category breakdown, tool counts and context-token cost. Use when choosing between candidates that do the same job. Accepts package names, endpoint URLs, registry names or verifymcp slugs.
`get_server_diagnostics`read-only	The evidence behind one server's score: TLS, DNSSEC, authorization, redirects, transports, provenance, install scripts, known CVEs and dependency health. Use to explain a low score.
`get_server_install_config`read-only	Ready-to-paste install snippets for one MCP server, for every client we support. An MCPB bundle has no launch command, so it returns the download URL, the registry's SHA-256 and commands to verify the file instead. Read get_server first: this returns configuration, not a safety judgement.
`get_server_tools`read-only	Every tool one MCP server exposes, with its parameters, output schema and context-token cost. Use when get_server reported the tool list was truncated.
`list_known_malware`read-only	List MCP server components carrying a supply-chain malware finding. Use to check whether anything in the register is flagged before installing.
`list_products`read-only	List the products MCP servers integrate with, such as github or notion, and how many servers cover each. Use to find the product slug that list_servers accepts.
`list_servers`read-only	Filter the VerifyMCP directory of scored MCP servers. Use to discover servers by name fragment, ecosystem, product or trust score. Name matching only: descriptions and capabilities are not searched, so a plain-English question matches nothing. Returns the first 100.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.verifymcp/mcp",
  "icons": [
    {
      "src": "https://verifymcp.io/icon-192.png",
      "sizes": [
        "192x192"
      ],
      "mimeType": "image/png"
    },
    {
      "src": "https://verifymcp.io/logo-512.png",
      "sizes": [
        "512x512"
      ],
      "mimeType": "image/png"
    },
    {
      "src": "https://verifymcp.io/favicon.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    }
  ],
  "title": "VerifyMCP",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.verifymcp.io",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "repository": {
    "id": "1281383123",
    "url": "https://github.com/Im5tu/verifymcp",
    "source": "github",
    "subfolder": "mcp"
  },
  "websiteUrl": "https://verifymcp.io",
  "description": "Independent trust scores, tool surfaces and change history for MCP servers."
}