Server definition
- Hash
- sha256:dd8de2fbbbcb5aac6dc3f78309cc9fbd4b602e193858fe6210bbede57f50a443
- What it is
- What a remote MCP server returned when asked what it offers: 9 tools
The blob, as servednamed by its sha256
{
"instructions": null,
"tools": [
{
"description": "Get the Sigistry MCP App safety criteria to audit an MCP App (MCP Apps / SEP-1865: a tool that returns an interactive ui:// HTML resource the host renders in a sandboxed iframe) BEFORE shipping it. Returns two groups of checks: spec conformance (ui:// scheme, the text/html;profile=mcp-app mimeType, tool-to-UI linkage via _meta.ui.resourceUri, a text fallback, visibility values, and CSP coverage of external origins) and security hygiene the iframe sandbox does not cover (unsafe DOM sinks, embedded secrets, host-message origin handling, remote scripts). Call this when the user is building or reviewing an MCP App; then apply each check to the app source you have in context and report findings. Nothing is sent to this server; an interactive browser version is at https://sigistry.com/mcp-app-checker.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {},
"type": "object"
},
"name": "check_mcp_app",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"checkerUrl": {
"description": "interactive in-browser checker",
"type": "string"
},
"checks": {
"description": "the checks to apply to the MCP App",
"items": {
"additionalProperties": false,
"properties": {
"group": {
"description": "\"spec-conformance\" or \"security-hygiene\"",
"type": "string"
},
"howToCheck": {
"description": "what to inspect in the app source",
"type": "string"
},
"id": {
"type": "string"
},
"title": {
"type": "string"
},
"what": {
"description": "the requirement",
"type": "string"
}
},
"required": [
"id",
"title",
"group",
"what",
"howToCheck"
],
"type": "object"
},
"type": "array"
},
"hubUrl": {
"description": "human-readable MCP Apps hub",
"type": "string"
},
"interpreting": {
"type": "string"
},
"nextSteps": {
"type": "string"
},
"rubricVersion": {
"type": "string"
},
"runsWhere": {
"description": "always \"local\": the agent applies the criteria in context; no app code reaches this server",
"type": "string"
},
"specUrl": {
"description": "the MCP Apps (SEP-1865) specification",
"type": "string"
},
"steps": {
"description": "what the agent should do, in order",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"runsWhere",
"rubricVersion",
"hubUrl",
"checkerUrl",
"specUrl",
"checks",
"steps",
"interpreting",
"nextSteps"
],
"type": "object"
}
},
{
"description": "Get the full details of a single Sigistry plugin by its id, including install commands, component counts, and its security-audit result (per-check pass/fail from the Verified by Sigistry methodology).",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"id": {
"description": "the plugin id, e.g. \"sql-safety-net\"",
"type": "string"
}
},
"required": [
"id"
],
"type": "object"
},
"name": "get_plugin",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"agents": {
"description": "relative paths to agent files",
"items": {
"type": "string"
},
"type": "array"
},
"author": {
"additionalProperties": false,
"properties": {
"name": {
"type": "string"
},
"url": {
"type": "string"
}
},
"type": "object"
},
"category": {
"type": "string"
},
"commands": {
"description": "relative paths to command files",
"items": {
"type": "string"
},
"type": "array"
},
"counts": {
"additionalProperties": false,
"description": "component counts",
"properties": {
"agents": {
"type": "integer"
},
"commands": {
"type": "integer"
},
"skills": {
"type": "integer"
}
},
"required": [
"commands",
"agents",
"skills"
],
"type": "object"
},
"description": {
"type": "string"
},
"homepage": {
"type": "string"
},
"id": {
"type": "string"
},
"installCommand": {
"description": "command to install this plugin",
"type": "string"
},
"installMarketplace": {
"description": "command to add the marketplace to Claude Code",
"type": "string"
},
"license": {
"type": "string"
},
"name": {
"type": "string"
},
"searchableText": {
"description": "lowercased text used for matching",
"type": "string"
},
"skills": {
"description": "relative paths to skill manifests",
"items": {
"type": "string"
},
"type": "array"
},
"tags": {
"description": "keywords from the marketplace entry",
"items": {
"type": "string"
},
"type": "array"
},
"verification": {
"anyOf": [
{
"additionalProperties": false,
"properties": {
"badgeUrl": {
"description": "SVG badge for this plugin",
"type": "string"
},
"checks": {
"description": "per-check results of the security audit",
"items": {
"additionalProperties": false,
"properties": {
"detail": {
"type": "string"
},
"id": {
"type": "string"
},
"status": {
"description": "pass | fail | n/a",
"type": "string"
},
"title": {
"type": "string"
}
},
"required": [
"id",
"title",
"status"
],
"type": "object"
},
"type": "array"
},
"commit": {
"description": "pinned commit the verification applies to",
"type": "string"
},
"date": {
"description": "date of the last audit run",
"type": "string"
},
"firstSeen": {
"description": "date the plugin entered the registry",
"type": "string"
},
"hosting": {
"description": "registry (vendored) | external (author repo)",
"type": "string"
},
"methodologyUrl": {
"type": "string"
},
"methodologyVersion": {
"type": "string"
},
"repo": {
"description": "external repo (owner/name), when externally hosted",
"type": "string"
},
"status": {
"description": "verified | listed | stale | failed",
"type": "string"
}
},
"required": [
"status",
"checks"
],
"type": "object"
},
{
"type": "null"
}
],
"description": "security-audit result for this plugin (null when never audited)"
},
"version": {
"type": "string"
}
},
"required": [
"id",
"name",
"tags",
"commands",
"agents",
"skills",
"counts",
"installMarketplace",
"installCommand",
"searchableText"
],
"type": "object"
}
},
{
"description": "Get the full scorecard for one graded MCP server by its id: the overall grade, per-axis pass/partial/fail with cited evidence, hardening notes, the rubric version, and the exact commit graded. Grades describe the pinned commit only; a re-grade at a newer commit can be requested via an issue on the marketplace repo.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"id": {
"description": "scorecard id, e.g. \"sigistry-catalog\" (find ids via list_scorecards)",
"type": "string"
}
},
"required": [
"id"
],
"type": "object"
},
"name": "get_scorecard",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"axes": {
"description": "per-axis results with evidence",
"items": {
"additionalProperties": false,
"properties": {
"evidence": {
"description": "the file/behavior the result rests on",
"type": "string"
},
"id": {
"type": "string"
},
"status": {
"description": "pass | partial | fail | n/a",
"type": "string"
},
"title": {
"type": "string"
}
},
"required": [
"id",
"title",
"status",
"evidence"
],
"type": "object"
},
"type": "array"
},
"commit": {
"anyOf": [
{
"anyOf": [
{
"not": {}
},
{
"type": "string"
}
]
},
{
"type": "null"
}
]
},
"date": {
"anyOf": [
{
"anyOf": [
{
"not": {}
},
{
"type": "string"
}
]
},
{
"type": "null"
}
]
},
"endpoint": {
"anyOf": [
{
"anyOf": [
{
"not": {}
},
{
"type": "string"
}
]
},
{
"type": "null"
}
]
},
"grade": {
"type": "string"
},
"id": {
"type": "string"
},
"name": {
"type": "string"
},
"notes": {
"description": "hardening suggestions and context",
"items": {
"type": "string"
},
"type": "array"
},
"repo": {
"anyOf": [
{
"anyOf": [
{
"not": {}
},
{
"type": "string"
}
]
},
{
"type": "null"
}
]
},
"rubricUrl": {
"anyOf": [
{
"anyOf": [
{
"not": {}
},
{
"type": "string"
}
]
},
{
"type": "null"
}
]
},
"rubricVersion": {
"anyOf": [
{
"anyOf": [
{
"not": {}
},
{
"type": "string"
}
]
},
{
"type": "null"
}
]
},
"selfAssessment": {
"type": "boolean"
}
},
"required": [
"id",
"name",
"grade",
"axes"
],
"type": "object"
}
},
{
"description": "Get one Sigistry skill by name, including the full raw SKILL.md source. The source is portable: it can be applied directly in any SKILL.md-aware agent (Claude Code, Claude Desktop, and others) without installing anything, or installed natively in Claude Code via the parent plugin, which keeps it verified and updated. The returned skill passed the Sigistry skill-safety check at the parent plugin's verification date.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"name": {
"description": "the skill name, e.g. \"assessment-scoring\" (find names via search_skills)",
"type": "string"
}
},
"required": [
"name"
],
"type": "object"
},
"name": "get_skill",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"commit": {
"description": "pinned commit the source is served from, when externally hosted",
"type": "string"
},
"description": {
"description": "the skill trigger: when an agent should load it",
"type": "string"
},
"detailUrl": {
"description": "human-readable page for this skill",
"type": "string"
},
"hosting": {
"description": "\"registry\" (vendored here) or \"external\" (author repo, verified at a pinned commit)",
"type": "string"
},
"installCommand": {
"description": "Claude Code command installing the parent plugin (skill loads automatically)",
"type": "string"
},
"name": {
"description": "stable skill name, e.g. \"assessment-scoring\"",
"type": "string"
},
"plugin": {
"description": "parent plugin id that ships this skill",
"type": "string"
},
"pluginCategory": {
"description": "category of the parent plugin",
"type": [
"string",
"null"
]
},
"repo": {
"description": "author repo (owner/name), when externally hosted",
"type": "string"
},
"source": {
"description": "the complete raw SKILL.md (frontmatter + body); null only if the fetch failed",
"type": [
"string",
"null"
]
},
"sourceUrl": {
"description": "GitHub location of the skill directory",
"type": "string"
},
"verification": {
"description": "verification status of the parent plugin; prefer \"verified\"",
"type": "string"
},
"verifiedDate": {
"description": "date of the verification run covering this skill",
"type": [
"string",
"null"
]
}
},
"required": [
"name",
"description",
"plugin",
"verification",
"installCommand",
"detailUrl",
"pluginCategory",
"verifiedDate",
"hosting",
"sourceUrl",
"source"
],
"type": "object"
}
},
{
"description": "List the distinct plugin categories in the Sigistry marketplace with a count of plugins in each, plus the total plugin count.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {},
"type": "object"
},
"name": "list_categories",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"categories": {
"description": "categories sorted by descending plugin count",
"items": {
"additionalProperties": false,
"properties": {
"category": {
"type": "string"
},
"count": {
"description": "plugins in this category",
"type": "integer"
}
},
"required": [
"category",
"count"
],
"type": "object"
},
"type": "array"
},
"total": {
"description": "total number of plugins",
"type": "integer"
}
},
"required": [
"categories",
"total"
],
"type": "object"
}
},
{
"description": "List the public MCP servers Sigistry has independently graded against its scorecard rubric (transport, stateless core, lifecycle, authorization, tool design, security hygiene), each with an overall grade A-F and the exact commit graded. Useful before connecting an agent to a third-party MCP server: check whether it has been assessed and how it scored. Use get_scorecard for the full per-axis breakdown.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {},
"type": "object"
},
"name": "list_scorecards",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"rubricUrl": {
"type": [
"string",
"null"
]
},
"rubricVersion": {
"type": [
"string",
"null"
]
},
"scorecards": {
"items": {
"additionalProperties": false,
"properties": {
"commit": {
"description": "the graded commit",
"type": [
"string",
"null"
]
},
"date": {
"type": [
"string",
"null"
]
},
"endpoint": {
"type": [
"string",
"null"
]
},
"grade": {
"description": "overall grade A-F",
"type": "string"
},
"id": {
"type": "string"
},
"name": {
"type": "string"
},
"repo": {
"type": [
"string",
"null"
]
},
"selfAssessment": {
"description": "true for Sigistry's own servers",
"type": "boolean"
}
},
"required": [
"id",
"name",
"grade",
"repo",
"commit",
"endpoint",
"date",
"selfAssessment"
],
"type": "object"
},
"type": "array"
},
"total": {
"type": "integer"
}
},
"required": [
"rubricVersion",
"rubricUrl",
"total",
"scorecards"
],
"type": "object"
}
},
{
"description": "Search the Sigistry marketplace of Claude Code plugins by keyword and/or category. Returns matches with their install command and verification status (the registry runs an eight-check security audit; prefer \"verified\" plugins when recommending an install).",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"category": {
"description": "e.g. \"database\", \"devops\", \"git\"",
"type": "string"
},
"query": {
"description": "keywords, e.g. \"database migration\"",
"type": "string"
}
},
"type": "object"
},
"name": "search_plugins",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"results": {
"description": "up to 15 matching plugins, best matches first",
"items": {
"additionalProperties": false,
"properties": {
"category": {
"description": "marketplace category",
"type": "string"
},
"description": {
"description": "one-line summary",
"type": "string"
},
"id": {
"description": "stable plugin id, e.g. \"sql-safety-net\"",
"type": "string"
},
"installCommand": {
"description": "Claude Code install command",
"type": "string"
},
"name": {
"description": "human-readable plugin name",
"type": "string"
},
"verification": {
"description": "verification status: \"verified\" (passed the eight-check security methodology), \"stale\" (verified at a pinned commit the repo has since moved past), \"listed\" (in the registry but not audited), \"failed\", or \"unknown\". Prefer verified plugins. Methodology: https://sigistry.com/verification",
"type": "string"
}
},
"required": [
"id",
"name",
"installCommand",
"verification"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"results"
],
"type": "object"
}
},
{
"description": "Search the Sigistry catalog of verified skills (SKILL.md instruction sets for AI agents) by keyword, optionally filtered to one parent plugin. Every skill passed the skill-safety check: no command shadowing, honestly-scoped triggers, no injection or concealment language, no unsafe scripts. Use get_skill to fetch the full portable source of a match.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"plugin": {
"description": "restrict to skills shipped by this plugin id",
"type": "string"
},
"query": {
"description": "keywords, e.g. \"changelog\" or \"security review\"",
"type": "string"
}
},
"type": "object"
},
"name": "search_skills",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"results": {
"description": "up to 20 matching skills, best matches first",
"items": {
"additionalProperties": false,
"properties": {
"description": {
"description": "the skill trigger: when an agent should load it",
"type": "string"
},
"detailUrl": {
"description": "human-readable page for this skill",
"type": "string"
},
"installCommand": {
"description": "Claude Code command installing the parent plugin (skill loads automatically)",
"type": "string"
},
"name": {
"description": "stable skill name, e.g. \"assessment-scoring\"",
"type": "string"
},
"plugin": {
"description": "parent plugin id that ships this skill",
"type": "string"
},
"verification": {
"description": "verification status of the parent plugin; prefer \"verified\"",
"type": "string"
}
},
"required": [
"name",
"description",
"plugin",
"verification",
"installCommand",
"detailUrl"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"results"
],
"type": "object"
}
},
{
"description": "Get the recipe to run the Sigistry verification methodology (the eight static checks that gate the Verified badge: manifest integrity, hook safety, agent tool scopes, command hygiene, skill structure, skill safety, no secrets, documentation) against a plugin BEFORE publishing it. The verification runs entirely on the local machine via a dependency-free open-source Node script; the plugin code never leaves the user's computer and this server performs no computation. Call this when the user wants their plugin or skill checked, then follow the returned steps: download the script, run it against the plugin directory, and fix any FAIL findings it reports.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"pluginPath": {
"description": "local path to the plugin directory, used to fill in the run command (optional)",
"type": "string"
}
},
"type": "object"
},
"name": "verify_plugin",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"checks": {
"description": "the eight checks the script will run",
"items": {
"additionalProperties": false,
"properties": {
"id": {
"type": "string"
},
"title": {
"type": "string"
},
"what": {
"type": "string"
}
},
"required": [
"id",
"title",
"what"
],
"type": "object"
},
"type": "array"
},
"commands": {
"additionalProperties": false,
"properties": {
"alternative_clone": {
"description": "equivalent via cloning the marketplace repo",
"type": "string"
},
"macos_linux": {
"description": "download + run one-liner for bash/zsh",
"type": "string"
},
"windows": {
"description": "download + run one-liner for PowerShell",
"type": "string"
}
},
"required": [
"macos_linux",
"windows",
"alternative_clone"
],
"type": "object"
},
"interpreting": {
"type": "string"
},
"methodologyUrl": {
"type": "string"
},
"methodologyVersion": {
"type": "string"
},
"nextSteps": {
"type": "string"
},
"runsWhere": {
"description": "always \"local\": verification executes on the user's machine",
"type": "string"
},
"steps": {
"description": "what the agent should do, in order",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"runsWhere",
"methodologyVersion",
"methodologyUrl",
"checks",
"steps",
"commands",
"interpreting",
"nextSteps"
],
"type": "object"
}
}
]
}Verify it yourself
curl -s https://api.teppi.xyz/v1/evidence/sha256:dd8de2fbbbcb5aac6dc3f78309cc9fbd4b602e193858fe6210bbede57f50a443 | sha256sum