MCP Radar
MCP-Server

registry

com.policylayer/registry
MCP- & Agenten-Infrastruktur Sicherheit Öffentlich und erreichbar MCP 2025-11-25

Was dieses MCP kann

Checks MCP servers, stacks, and individual tools for identity, risk, authentication posture, and policy recommendations through a registry.

Funktionen

Tools

5 Tools
check_mcp_server
Check an MCP server against the PolicyLayer registry BEFORE installing or allowing it. Accepts a registry slug, an npm package name (scoped or not), a remote server URL (https://…), or a server name. Returns the full published record: identity verification with its evidence, risk grade, auth posture, freshness, and the tool surface listed riskiest-first. A server the registry does not know is queued for scanning by this very call — check back shortly.
Eingabeschema 
{'type': 'object', 'required': ['server'], 'properties': {'server': {'type': 'string', 'description': 'Registry slug, npm package name (e.g. @acme/mcp-server), remote URL, or server name.'}}}
check_mcp_stack
Check a whole MCP stack against the PolicyLayer registry in one call — up to 25 servers, each given as candidate identifiers (npm package name, registry slug, or remote URL) tried in order until one resolves. Returns the published record for every hit — plus a deterministic verdict (attention signals and a suggested action) — and the lookup status for every miss; counts, grades and flagged tools come from the published records only. Costs one rate-limit unit per server.
Eingabeschema 
{'type': 'object', 'required': ['servers'], 'properties': {'servers': {'type': 'array', 'items': {'type': 'object', 'required': ['candidates'], 'properties': {'name': {'type': 'string', 'description': 'Your label for this server (e.g. its config key) — echoed back on the result.'}, 'candidates': {'type': 'array', 'items': {'type': 'string'}, 'maxItems': 5, 'description': 'Identifiers to try in order: npm package name, registry slug, or remote URL. Most package-like first.'}}}, 'maxItems': 25, 'description': 'One entry per server in the stack.'}}}
check_tool
One tool's full risk classification on a published MCP server: category, severity, risk analysis and evidence, OWASP classes, parameter schema and the recommended policy default. Use when deciding whether to allow a specific tool call, e.g. "should execute_sql on this server be permitted?"
Eingabeschema 
{'type': 'object', 'required': ['server', 'tool'], 'properties': {'tool': {'type': 'string', 'description': 'Tool name as the server declares it.'}, 'server': {'type': 'string', 'description': 'Registry slug or npm package name of the server.'}}}
get_change_events
The registry change feed: tool-surface drift, auth-posture flips, impostor flags, version bumps — every event the freshness watchers emit, id-cursored so a consumer resumes exactly where it stopped. Requires a Registry Licence key (Authorization: Bearer plr_...); self-serve at https://policylayer.com/registry/pricing.
Eingabeschema 
{'type': 'object', 'properties': {'limit': {'type': 'number', 'description': 'Max events (1-1000, default 200).'}, 'after_id': {'type': 'number', 'description': 'Return events with id greater than this cursor (default 0).'}, 'severity': {'enum': ['info', 'notice', 'warning', 'critical'], 'type': 'string', 'description': 'Minimum severity: that level and above.'}}}
search_registry
Search the PolicyLayer registry of published MCP servers by name, slug or package substring. Returns candidate matches with risk grade, identity confidence (verified / unverified / mismatch — mismatch means it claims to be an official server with no verifiable link to the brand) and tool count — follow up with check_mcp_server on the match you meant.
Eingabeschema 
{'type': 'object', 'required': ['query'], 'properties': {'limit': {'type': 'number', 'description': 'Max matches to return (1-20, default 10).'}, 'query': {'type': 'string', 'description': 'Substring to match against slug, name and packages.'}}}
Verlauf

Letzte Tool-Änderungen

Hinzugefügt
get_change_events
17. September 2026 12:36
Hinzugefügt
check_tool
17. September 2026 12:36
Hinzugefügt
search_registry
17. September 2026 12:36
Hinzugefügt
check_mcp_stack
17. September 2026 12:36
Hinzugefügt
check_mcp_server
17. September 2026 12:36
Entdecken

Ähnliche MCP-Server

AIMEAT

io.aimeat/aimeat

Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…

hyperion

com.thetempleofdoom.hyperion/hyperion

Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…

Japan Public Ledgers MCP

com.mcp-revenue-empire/japan-public-ledgers

Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…

PHION Agent Trust Infrastructure

systems.phion/evidence-engine

Provides agent trust, policy, provenance, evidence, delegation, telemetry, and transaction-control services for MCP and agent wor…

Swamp

world.swampai/swamp

Coordinates security agents through scoped bug-bounty programs, target claims, vulnerability submissions, peer review, shared fin…

AgentBIT

app.agentbit/mcp

Routes pay-per-call tools over x402 on Base, covering discovery, data conversion, company research, counterparty screening, domai…

SaSame MCP Observatory + Gold Rush Town

online.sasame/research

Audits and profiles MCP servers, provides ecosystem analytics, trust and claim records, and non-custodial transaction or escrow a…

ThinkNEO Control Plane

ai.thinkneo/control-plane

Provides an enterprise AI control plane for governance, guardrails, spend tracking, compliance, and model or tool routing.