Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "varexis-index": {
      "type": "http",
      "url": "https://varexis.tech/mcp"
    }
  }
}

claude mcp add --transport http varexis-index https://varexis.tech/mcp

[mcp_servers.varexis-index]
url = "https://varexis.tech/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "varexis-index": {
      "type": "remote",
      "url": "https://varexis.tech/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "varexis-index": {
      "type": "http",
      "url": "https://varexis.tech/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=varexis-index&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdmFyZXhpcy50ZWNoL21jcCJ9"
}

{
  "servers": {
    "varexis-index": {
      "type": "http",
      "url": "https://varexis.tech/mcp"
    }
  }
}

{
  "mcpServers": {
    "varexis-index": {
      "httpUrl": "https://varexis.tech/mcp"
    }
  }
}

extensions:
  "varexis-index":
    enabled: true
    name: "varexis-index"
    type: streamable_http
    uri: "https://varexis.tech/mcp"
    timeout: 300

Quality 79 / 100good

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,048 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes9 tool changes in 30 days
fail
stability.rug_pull4 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

4 tools, about 1,048 tokens to load them all · tool set d804f7cbd0c4 · tools last changed 2026-10-19 · checked 2026-10-20 22:23 UTC

Tool changes

2026-10-19get_index_access_optionschangeddescription
before
Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude these two licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
after · 95% of words in common
Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude all four standalone licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
2026-10-17get_index_access_optionschangeddescriptionmeaning changed
before
With no input, return current hosted-checkout and agent-payment availability, four prices excluding applicable VAT, key requirements and both contracts. Free preview suffices for reading or local saving. Payment adds saved retrieval or an unsigned receipt; active subscribers use their existing entitlement. Compatible authorised agents follow agent_payments_contract for exact quote acceptance and original-key/credential recovery. This tool never purchases, charges or grants spending authority.
after · 37% of words in common
Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude these two licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
2026-10-17preview_evidence_answerchangeddescriptionmeaning changed
before
Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. Seven public evidence packs return complete comparisons and bindings free. The integration-kit route returns free evidence, scope, schema and worked-example links; its executable is privately delivered using an existing paid offer or one eligible subscription query. snapshot_sha256 binds the full delivery; preview_payload_sha256 separately binds the kit preview. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
after · 31% of words in common
Preview a published answer or pack using route_id from find_evidence_questions or find_package_advisories. Free; returns cited evidence, review dates, limitations and snapshot_sha256. Public packs include complete comparisons. Executable-product previews show scope, schemas and examples, not the licensed ZIP; the original integration kit also has a distinct preview_payload_sha256. Optional version checks exact advisory-listed versions only, not ranges or safety. For prices and licences, call get_index_access_options. No paid saving or live testing.
2026-10-17find_evidence_questionschangeddescription, input schemameaning changed
before
Find up to 20 evidence routes using keywords in reviewed question variants and worked-example titles, such as exact output speedup, Notion Slack permissions, audit export coverage or signing certificate. Returns the matched wording and original scoped question for preview_evidence_answer. Case, punctuation and common question words are ignored; no semantic inference is performed. A match suggests evidence to inspect, not proof that it applies to a new claim. Free and read-only.
after · 31% of words in common
Search existing reviewed evidence questions and fixed-pack topics when you do not know a route ID. Use this for governance, tool permissions, audit/export and evidence-boundary questions. For a known software advisory ID or an exact ecosystem/package lookup, use find_package_advisories instead. Supply query as keywords (maximum 160 characters), or leave it blank to browse. offset is the zero-based pagination offset (default 0, maximum 10000; increase by 20). Returns up to 20 matches with route_id, matched wording and the scoped question; pass a route_id to preview_evidence_answer for the complete free answer and sources. Matching ignores case, punctuation and common question words; it does not validate arbitrary new claims. No match is not a negative verdict. Free and read-only.
2026-10-16preview_evidence_answerchangeddescription
before
Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. A fixed evidence-pack route returns the complete pack, comparison and member bindings free; it is one saved result or subscription query. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
after · 70% of words in common
Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. Seven public evidence packs return complete comparisons and bindings free. The integration-kit route returns free evidence, scope, schema and worked-example links; its executable is privately delivered using an existing paid offer or one eligible subscription query. snapshot_sha256 binds the full delivery; preview_payload_sha256 separately binds the kit preview. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
2026-10-15preview_evidence_answerchangeddescription
before
Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
after · 83% of words in common
Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. A fixed evidence-pack route returns the complete pack, comparison and member bindings free; it is one saved result or subscription query. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
2026-10-15find_evidence_questionschangeddescription
before
Find up to 20 evidence routes using keywords in reviewed question variants and worked-example titles, such as exact output speedup, agent identity permission or signing certificate. Returns the matched wording and original scoped question for preview_evidence_answer. Case, punctuation and common question words are ignored; no semantic inference is performed. A match suggests evidence to inspect, not proof that it applies to a new claim. Free and read-only.
after · 87% of words in common
Find up to 20 evidence routes using keywords in reviewed question variants and worked-example titles, such as exact output speedup, Notion Slack permissions, audit export coverage or signing certificate. Returns the matched wording and original scoped question for preview_evidence_answer. Case, punctuation and common question words are ignored; no semantic inference is performed. A match suggests evidence to inspect, not proof that it applies to a new claim. Free and read-only.
2026-10-14get_index_access_optionschangeddescriptionmeaning changed
before
Get current checkout availability, free preview scope, paid prices excluding applicable VAT, key-retention requirements and the REST purchase contract. This tool never starts checkout, charges money or grants spending authority.
after · 30% of words in common
With no input, return current hosted-checkout and agent-payment availability, four prices excluding applicable VAT, key requirements and both contracts. Free preview suffices for reading or local saving. Payment adds saved retrieval or an unsigned receipt; active subscribers use their existing entitlement. Compatible authorised agents follow agent_payments_contract for exact quote acceptance and original-key/credential recovery. This tool never purchases, charges or grants spending authority.
2026-10-11find_package_advisorieschangeddescription
before
Look up a known advisory ID or alias, or an exact ecosystem and package name in the frozen OSV collection. Supply advisory_id OR both ecosystem and package; cursor continues the same lookup. Returns at most 20 concise source matches and route IDs for preview_evidence_answer. Source capture dates and withdrawals are explicit. No results never mean safe. No range solving, current scanning, independent verification or payment. Free and read-only.
after · 81% of words in common
Look up a known advisory ID or alias, or an exact ecosystem and package name in the frozen OSV collection. Supply advisory_id OR both ecosystem and package; cursor continues the same lookup. Returns at most 20 concise source matches and route IDs for preview_evidence_answer. Source capture dates and withdrawals are explicit. Full previews include separately dated EPSS/KEV matches and explicit fix boundaries; scores are not asset-risk assessments. No results never mean safe. No range solving, current scanning, independent verification or payment. Free and read-only.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository

provenance55

liveness100

freshness100

hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-4d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://varexis.tech/mcp` streamable-http	none	yes	100%	556 ms	2026-07-28	2026-10-20

Tools (4)

`find_evidence_questions`read-only	Search existing reviewed evidence questions and fixed-pack topics when you do not know a route ID. Use this for governance, tool permissions, audit/export and evidence-boundary questions. For a known software advisory ID or an exact ecosystem/package lookup, use find_package_advisories instead. Supply query as keywords (maximum 160 characters), or leave it blank to browse. offset is the zero-based pagination offset (default 0, maximum 10000; increase by 20). Returns up to 20 matches with route_id, matched wording and the scoped question; pass a route_id to preview_evidence_answer for the complete free answer and sources. Matching ignores case, punctuation and common question words; it does not validate arbitrary new claims. No match is not a negative verdict. Free and read-only.
`find_package_advisories`read-only	Look up a known advisory ID or alias, or an exact ecosystem and package name in the frozen OSV collection. Supply advisory_id OR both ecosystem and package; cursor continues the same lookup. Returns at most 20 concise source matches and route IDs for preview_evidence_answer. Source capture dates and withdrawals are explicit. Full previews include separately dated EPSS/KEV matches and explicit fix boundaries; scores are not asset-risk assessments. No results never mean safe. No range solving, current scanning, independent verification or payment. Free and read-only.
`get_index_access_options`read-only	Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude all four standalone licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
`preview_evidence_answer`read-only	Preview a published answer or pack using route_id from find_evidence_questions or find_package_advisories. Free; returns cited evidence, review dates, limitations and snapshot_sha256. Public packs include complete comparisons. Executable-product previews show scope, schemas and examples, not the licensed ZIP; the original integration kit also has a distinct preview_payload_sha256. Optional version checks exact advisory-listed versions only, not ranges or safety. For prices and licences, call get_index_access_options. No paid saving or live testing.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "tech.varexis/varexis-index",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "evidencePacks": {
        "packs": [
          {
            "id": "repository-browser-trust",
            "url": "https://varexis.tech/index-packs#repository-browser-trust",
            "title": "Repository and browser Tool-Trust Evidence Pack",
            "benefit": "Compare repository and browser permissions before connecting an agent to authenticated tools."
          },
          {
            "id": "agent-permissions-data",
            "url": "https://varexis.tech/index-packs#agent-permissions-data",
            "title": "Agent Tool Permissions & Data Handling — Notion + Slack",
            "benefit": "Review workspace access and where content can go before connecting Notion or Slack."
          },
          {
            "id": "evidence-boundary-audit",
            "url": "https://varexis.tech/index-packs#evidence-boundary-audit",
            "title": "Evidence Boundary Pack — Audit & Export Coverage",
            "benefit": "Check what a supplier's audit or export claim actually covers before using it in procurement."
          },
          {
            "id": "nextjs-advisory-snapshot",
            "url": "https://varexis.tech/index-packs#nextjs-advisory-snapshot",
            "title": "Next.js: three dated advisory source assertions",
            "benefit": "Keep three selected Next.js affected/fixed source assertions and their separately dated enrichment together."
          },
          {
            "id": "code-scanner-trust",
            "url": "https://varexis.tech/index-packs#code-scanner-trust",
            "title": "Code-Scanner Trust — SonarQube, Snyk & Semgrep",
            "benefit": "Check scanner permissions and the evidence needed before accepting a clean report or claimed fix."
          },
          {
            "id": "telemetry-redaction",
            "url": "https://varexis.tech/index-packs#telemetry-redaction",
            "title": "Telemetry Redaction — Coverage, Exceptions & Data Flow",
            "benefit": "Review where sensitive data can remain or leave a pipeline despite a redaction claim."
          },
          {
            "id": "github-release-acceptance",
            "url": "https://varexis.tech/index-packs#github-release-acceptance",
            "title": "GitHub Release Acceptance — Approval, Execution & Artifact Identity",
            "benefit": "Check whether approval and execution evidence is bound to the exact artifact being accepted."
          }
        ],
        "jsonUrl": "https://varexis.tech/varexis-index/evidence-packs.json",
        "packCount": 7,
        "paidValue": "Pay for server-saved retrieval of the selected version. Single Request saves the whole pack; Evidence Receipt adds an unsigned delivery receipt. Payment adds no evidence or independent assurance.",
        "catalogUrl": "https://varexis.tech/index-packs",
        "freePreview": "The complete published pack, sources, comparison and limitations are free to read and save locally.",
        "limitations": "Documentation reviews or selected dated advisory source assertions, not independent tool tests, fresh investigation, current safety verdicts, certification or deployment approval."
      }
    }
  },
  "title": "VAREXIS-INDEX - Source-linked evidence",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://varexis.tech/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.2",
  "websiteUrl": "https://varexis.tech/index-packs",
  "description": "7 packs: free read-only previews; paid snapshots/unsigned receipts. No advice or authority."
}