VerifyMCP

Connect it to your AI

Claude Code

claude mcp add --transport http verifymcp https://mcp.verifymcp.io/

Claude, ChatGPT, Cursor and other apps

Add it as a custom connector with this URL (Streamable HTTP):

https://mcp.verifymcp.io/

Cursor, VS Code and other apps (mcp.json)

{
  "mcpServers": {
    "verifymcp": {
      "url": "https://mcp.verifymcp.io/"
    }
  }
}

Tools it offers

9 tools, as the server itself reported during our check on Oct 31, 2026.

• list_serversFilter the VerifyMCP directory of scored MCP servers. Use to discover servers by name fragment, ecosystem, product or trust score. Name matching only: descriptions and capabilities are not searched, so a plain-English qu
• get_serverGet the full VerifyMCP trust report for one MCP server: score with per-category verdicts and reasons, the tools it exposes with their context-token cost, and its recent change history. Use before installing or trusting a
• get_server_comparisonCompare up to 5 MCP servers side by side: trust scores, per-category breakdown, tool counts and context-token cost. Use when choosing between candidates that do the same job. Accepts package names, endpoint URLs, registr
• list_productsList the products MCP servers integrate with, such as github or notion, and how many servers cover each. Use to find the product slug that list_servers accepts.
• list_known_malwareList MCP server components carrying a supply-chain malware finding. Use to check whether anything in the register is flagged before installing.
• get_server_alternativesOther MCP servers doing a similar job to a given one, with their trust scores. Neighbours share a product, publisher namespace or category; this is not a semantic search.
• get_server_diagnosticsThe evidence behind one server's score: TLS, DNSSEC, authorization, redirects, transports, provenance, install scripts, known CVEs and dependency health. Use to explain a low score.
• get_server_install_configReady-to-paste install snippets for one MCP server, for every client we support. An MCPB bundle has no launch command, so it returns the download URL, the registry's SHA-256 and commands to verify the file instead. Read
• get_server_toolsEvery tool one MCP server exposes, with its parameters, output schema and context-token cost. Use when get_server reported the tool list was truncated.

Questions