Check MCP servers and packages against an independent, anchored record before you trust them.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Check an MCP server, an npm or PyPI package (optionally with the hash you are about to install), an MCP endpoint URL or a TON address against the anchored record. Returns a signed check: status (witnessed, changed_recently, hash_mismatch, not_witnessed, sanctions_listed, not_listed), flags, facts, recent changes with diff links.
registry name (io.github.owner/server), npm:<name> or pypi:<name>, https URL, or TON address
RFC 3339 time: answer as the record stood at that moment
sha256 of the PyPI file you are about to install
npm dist.integrity of the tarball you are about to install
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
Run in a terminal
claude mcp add --transport http minimalcult https://ai.minimalcult.org/mcp
Check an MCP server, an npm or PyPI package (optionally with the hash you are about to install), an MCP endpoint URL or a TON address against the anchored record. Returns a signed check: status (witnessed, changed_recently, hash_mismatch, not_witnessed, sanctions_listed, not_listed), flags, facts, recent changes with diff links.
| Argument | Type | Description |
|---|---|---|
| type* | string | |
| as_of | string | RFC 3339 time: answer as the record stood at that moment |
| sha256 | string | sha256 of the PyPI file you are about to install |
| target* | string | registry name (io.github.owner/server), npm:<name> or pypi:<name>, https URL, or TON address |
| version | string | |
| integrity | string | npm dist.integrity of the tarball you are about to install |
{
"type": "object",
"required": [
"type",
"target"
],
"properties": {
"type": {
"enum": [
"mcp_server",
"package",
"url",
"ton_address"
],
"type": "string"
},
"as_of": {
"type": "string",
"description": "RFC 3339 time: answer as the record stood at that moment"
},
"sha256": {
"type": "string",
"description": "sha256 of the PyPI file you are about to install"
},
"target": {
"type": "string",
"description": "registry name (io.github.owner/server), npm:<name> or pypi:<name>, https URL, or TON address"
},
"version": {
"type": "string"
},
"integrity": {
"type": "string",
"description": "npm dist.integrity of the tarball you are about to install"
}
}
}One record by rec_ id or source id (mcp:<registry name>, npm:<name>, pypi:<name>) with its latest recorded fact.
| Argument | Type | Description |
|---|---|---|
| id* | string |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string"
}
}
}Find records of MCP servers and npm/PyPI packages by name or words; returns rec_ ids, on-record-since dates, latest versions.
| Argument | Type | Description |
|---|---|---|
| type | string | |
| limit | integer | |
| query* | string |
{
"type": "object",
"required": [
"query"
],
"properties": {
"type": {
"enum": [
"mcp_server",
"npm_package",
"pypi_package"
],
"type": "string"
},
"limit": {
"type": "integer",
"maximum": 50,
"minimum": 1
},
"query": {
"type": "string"
}
}
}The recorded facts (versions, registry entries, package artifacts, tool descriptions) of a record, newest first, with proof and diff links.
| Argument | Type | Description |
|---|---|---|
| id* | string | |
| limit | integer |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string"
},
"limit": {
"type": "integer",
"maximum": 100,
"minimum": 1
}
}
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 4, 2026.