// LICENSING
License the MCP server registry.
The record set behind the lookup: identity, posture, risk grade, policy and change history for every server, delivered by API, change feed or nightly snapshot. Built for gateways, security platforms and AI clients.
Servers tracked44,603
Tools classified362,000
Risk categories6
Watched serversRe-checked hourly
Change eventsPushed within the hour
Full snapshotExported nightly
// WHAT A LICENCE COVERS
Query, feed or file.
QUERY API
Ask about any server, get its full record back
Your product asks about a server the moment a user connects it. One call
returns the whole record: identity confidence, posture, grade, every tool with its
capabilities and recommended policy.
CHANGE FEED + WEBHOOKS
Hear about changes within the hour
A watched server grows a destructive tool, flips its auth posture or changes
its grade: the event reaches you signed and in order, within the hour.
BULK SNAPSHOTS
The whole catalogue as one nightly file
Every record exported nightly, fetched over a signed link. Build your own
index or join it to your own data. Dated snapshots give point-in-time audit.
// THE RECORD
What's in a record.
IdentityName, packages, repository and endpoints, with a confidence tier and the evidence behind it. Servers that claim an identity they can't prove are flagged, with the working shown.
PostureWhether the hosted endpoint answers without credentials, its CORS policy and rate limiting, and when we last checked.
GradeA capability-exposure grade, A to F: the worst tool sets the floor, breadth moves it, a locked-down endpoint relieves it. Never a quality score.
ToolsEvery tool with its parameters, risk classification and consensus-verified analysis, down to the individual capability.
CapabilitiesTen flags per tool: files, network, secrets, money, code execution, destructive actions, permission changes, external comms, persistence, untrusted input.
PolicyA recommended deterministic rule set per server, ready for a gateway to enforce as written.
HistoryAn ordered event log: tools added and removed, reclassifications, grade moves, posture flips. Records version only when content changes.
FreshnessWhen the server was last scanned, which version we observed, and what triggered the last re-check.
// HOW IT STAYS TRUE
- Judged twice: two independent judges classify every tool; disagreements are re-examined before anything publishes.
- Gold gate: records are checked against hand-verified expectations. A violating record is held; the last good one stays published.
- Drift alarms: hourly monitors alarm on coverage drops, reclassification spikes and grade churn across the whole catalogue.
- Open disputes: anyone can dispute a server's identity. The record carries the flag until a human resolves it.
// PLANS
One plan for the data. Enterprise for redistribution.
REGISTRY LICENCE
API, feed and snapshots
$499 $199 /month
LIMITED-TIME OFFER
Billed monthly. Cancel any time.
- Full records over the /v1 API
- Ordered change feed with severity filters
- Signed webhooks, delivered within the hour
- Nightly full-catalogue snapshot, signed download
- Dated snapshots for point-in-time audit
- Key issued to your inbox at purchase
ENTERPRISE
Redistribution and custom terms
- Embed records in your UI, docs or approvals
- Contractual freshness and coverage terms
- Co-ordinated disclosure on identity findings
- Custom volume, rate limits and support
The /v0 registry-standard endpoint is free for any MCP client.