# VAREXIS-INDEX - Source-linked evidence

> 7 packs: free read-only previews; paid snapshots/unsigned receipts. No advice or authority.

- name: tech.varexis/varexis-index
- version: 1.0.2
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 79/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/tech.varexis%2Fvarexis-index
- tools: https://api.protogrid.dev/v1/servers/tech.varexis%2Fvarexis-index/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "varexis-index": {
      "type": "http",
      "url": "https://varexis.tech/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-4d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 79/100 (good)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 4 of 4 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 1,048 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 25 (weight 15)

- warn `stability.changes`: 9 tool changes in 30 days
- fail `stability.rug_pull`: 4 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 4, about 1,048 tokens to load them all
- tool set hash: d804f7cbd0c4520967c837a9095001fd
- tools last changed: 2026-10-19T03:08:55.432Z
- badge: [![protogrid quality](https://protogrid.dev/badge/tech.varexis/varexis-index.svg)](https://protogrid.dev/servers/tech.varexis/varexis-index)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-19 `get_index_access_options` changed (description)
  - before: Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude these two licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
  - after: Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude all four standalone licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
- 2026-10-17 `get_index_access_options` changed (description) **meaning changed**
  - before: With no input, return current hosted-checkout and agent-payment availability, four prices excluding applicable VAT, key requirements and both contracts. Free preview suffices for reading or local saving. Payment adds saved retrieval or an unsigned receipt; active subscribers use their existing entitlement. Compatible authorised agents follow agent_payments_contract for exact quote acceptance and original-key/credential recovery. This tool never purchases, charges or grants spending authority.
  - after: Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude these two licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
- 2026-10-17 `preview_evidence_answer` changed (description) **meaning changed**
  - before: Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. Seven public evidence packs return complete comparisons and bindings free. The integration-kit route returns free evidence, scope, schema and worked-example links; its executable is privately delivered using an existing paid offer or one eligible subscription query. snapshot_sha256 binds the full delivery; preview_payload_sha256 separately binds the kit preview. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
  - after: Preview a published answer or pack using route_id from find_evidence_questions or find_package_advisories. Free; returns cited evidence, review dates, limitations and snapshot_sha256. Public packs include complete comparisons. Executable-product previews show scope, schemas and examples, not the licensed ZIP; the original integration kit also has a distinct preview_payload_sha256. Optional version checks exact advisory-listed versions only, not ranges or safety. For prices and licences, call get_index_access_options. No paid saving or live testing.
- 2026-10-17 `find_evidence_questions` changed (description, inputSchema) **meaning changed**
  - before: Find up to 20 evidence routes using keywords in reviewed question variants and worked-example titles, such as exact output speedup, Notion Slack permissions, audit export coverage or signing certificate. Returns the matched wording and original scoped question for preview_evidence_answer. Case, punctuation and common question words are ignored; no semantic inference is performed. A match suggests evidence to inspect, not proof that it applies to a new claim. Free and read-only.
  - after: Search existing reviewed evidence questions and fixed-pack topics when you do not know a route ID. Use this for governance, tool permissions, audit/export and evidence-boundary questions. For a known software advisory ID or an exact ecosystem/package lookup, use find_package_advisories instead. Supply query as keywords (maximum 160 characters), or leave it blank to browse. offset is the zero-based pagination offset (default 0, maximum 10000; increase by 20). Returns up to 20 matches with route_id, matched wording and the scoped question; pass a route_id to preview_evidence_answer for the complete free answer and sources. Matching ignores case, punctuation and common question words; it does not validate arbitrary new claims. No match is not a negative verdict. Free and read-only.
- 2026-10-16 `preview_evidence_answer` changed (description)
  - before: Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. A fixed evidence-pack route returns the complete pack, comparison and member bindings free; it is one saved result or subscription query. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
  - after: Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. Seven public evidence packs return complete comparisons and bindings free. The integration-kit route returns free evidence, scope, schema and worked-example links; its executable is privately delivered using an existing paid offer or one eligible subscription query. snapshot_sha256 binds the full delivery; preview_payload_sha256 separately binds the kit preview. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
- 2026-10-15 `preview_evidence_answer` changed (description)
  - before: Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
  - after: Read the full free answer for a route ID returned by find_evidence_questions or find_package_advisories. Optional version is an exact explicit-list check for advisory records only; ranges are unresolved and a missing version never means safe. Includes public evidence, review dates, source URLs, exclusions and snapshot hash. A fixed evidence-pack route returns the complete pack, comparison and member bindings free; it is one saved result or subscription query. Unknown routes are refused. This does not save a paid delivery, run a new test or verify current deployment applicability. No key or payment is needed.
- 2026-10-15 `find_evidence_questions` changed (description)
  - before: Find up to 20 evidence routes using keywords in reviewed question variants and worked-example titles, such as exact output speedup, agent identity permission or signing certificate. Returns the matched wording and original scoped question for preview_evidence_answer. Case, punctuation and common question words are ignored; no semantic inference is performed. A match suggests evidence to inspect, not proof that it applies to a new claim. Free and read-only.
  - after: Find up to 20 evidence routes using keywords in reviewed question variants and worked-example titles, such as exact output speedup, Notion Slack permissions, audit export coverage or signing certificate. Returns the matched wording and original scoped question for preview_evidence_answer. Case, punctuation and common question words are ignored; no semantic inference is performed. A match suggests evidence to inspect, not proof that it applies to a new claim. Free and read-only.
- 2026-10-14 `get_index_access_options` changed (description) **meaning changed**
  - before: Get current checkout availability, free preview scope, paid prices excluding applicable VAT, key-retention requirements and the REST purchase contract. This tool never starts checkout, charges money or grants spending authority.
  - after: With no input, return current hosted-checkout and agent-payment availability, four prices excluding applicable VAT, key requirements and both contracts. Free preview suffices for reading or local saving. Payment adds saved retrieval or an unsigned receipt; active subscribers use their existing entitlement. Compatible authorised agents follow agent_payments_contract for exact quote acceptance and original-key/credential recovery. This tool never purchases, charges or grants spending authority.
- 2026-10-11 `find_package_advisories` changed (description)
  - before: Look up a known advisory ID or alias, or an exact ecosystem and package name in the frozen OSV collection. Supply advisory_id OR both ecosystem and package; cursor continues the same lookup. Returns at most 20 concise source matches and route IDs for preview_evidence_answer. Source capture dates and withdrawals are explicit. No results never mean safe. No range solving, current scanning, independent verification or payment. Free and read-only.
  - after: Look up a known advisory ID or alias, or an exact ecosystem and package name in the frozen OSV collection. Supply advisory_id OR both ecosystem and package; cursor continues the same lookup. Returns at most 20 concise source matches and route IDs for preview_evidence_answer. Source capture dates and withdrawals are explicit. Full previews include separately dated EPSS/KEV matches and explicit fix boundaries; scores are not asset-risk assessments. No results never mean safe. No range solving, current scanning, independent verification or payment. Free and read-only.

Full history: https://api.protogrid.dev/v1/servers/tech.varexis%2Fvarexis-index/changes

## Remotes

- https://varexis.tech/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (4)

- `find_evidence_questions`: Search existing reviewed evidence questions and fixed-pack topics when you do not know a route ID. Use this for governance, tool permissions, audit/export and evidence-boundary questions. For a known software advisory ID or an exact ecosystem/package lookup, use find_package_advisories instead. Supply query as keywords (maximum 160 characters), or leave it blank to browse. offset is the zero-based pagination offset (default 0, maximum 10000; increase by 20). Returns up to 20 matches with route_id, matched wording and the scoped question; pass a route_id to preview_evidence_answer for the complete free answer and sources. Matching ignores case, punctuation and common question words; it does not validate arbitrary new claims. No match is not a negative verdict. Free and read-only.
- `find_package_advisories`: Look up a known advisory ID or alias, or an exact ecosystem and package name in the frozen OSV collection. Supply advisory_id OR both ecosystem and package; cursor continues the same lookup. Returns at most 20 concise source matches and route IDs for preview_evidence_answer. Source capture dates and withdrawals are explicit. Full previews include separately dated EPSS/KEV matches and explicit fix boundaries; scores are not asset-risk assessments. No results never mean safe. No range solving, current scanning, independent verification or payment. Free and read-only.
- `get_index_access_options`: Call with {} after a free preview to compare paid saved retrieval, unsigned receipts and executable licences. Returns live availability, GBP prices excluding VAT, product requirements and hosted/agent payment contracts, including standalone Tool Admission (GBP49) and Audit Coverage (GBP79). Existing subscriptions exclude all four standalone licences. Use purchase_url for hosted checkout; compatible agents need owner spending authority for the exact quote and must follow agent_payments_contract for payment and recovery. Free evidence needs no payment. Never send keys here; this tool cannot charge or retrieve purchases.
- `preview_evidence_answer`: Preview a published answer or pack using route_id from find_evidence_questions or find_package_advisories. Free; returns cited evidence, review dates, limitations and snapshot_sha256. Public packs include complete comparisons. Executable-product previews show scope, schemas and examples, not the licensed ZIP; the original integration kit also has a distinct preview_payload_sha256. Optional version checks exact advisory-listed versions only, not ranges or safety. For prices and licences, call get_index_access_options. No paid saving or live testing.