{
  "markdown": "# PolicyLayer Registry MCP Server\n\n**The MCP server that vets MCP servers.**\n\nConnect your agent to the PolicyLayer registry and it can ask one question before installing or allowing any MCP server: *is this safe?* The answer is the published registry record: verified identity with the evidence, an A to F risk grade, probed auth posture and every tool's risk classification.\n\n- **Endpoint:** `https://api.policylayer.com/mcp` (Streamable HTTP)\n- **Free single-server lookups**, no key needed\n- 32,500+ published servers and 515,000+ classified tools, kept current by continuous scanning\n- **Docs:** [policylayer.com/registry/mcp](https://policylayer.com/registry/mcp)\n\n## Connect\n\n**Claude Code**\n\n```sh\nclaude mcp add --transport http policylayer https://api.policylayer.com/mcp\n```\n\n**Claude (desktop / web)**\n\nSettings → Connectors → Add custom connector → URL `https://api.policylayer.com/mcp`\n\n**Cursor / Windsurf / VS Code**\n\n```json\n{ \"mcpServers\": {\n  \"policylayer\": {\n    \"url\": \"https://api.policylayer.com/mcp\"\n} } }\n```\n\nThen tell your agent: *\"check any MCP server against PolicyLayer before installing it.\"* Add it to your team's agent instructions and every install gets vetted.\n\n## Tools\n\n| Tool | What it returns | Tier |\n|------|-----------------|------|\n| `check_mcp_server` | Full record for one server: identity + evidence, risk grade, posture, tools riskiest-first. Unknown servers are queued for scanning by the lookup itself. | Free |\n| `search_registry` | Published servers matching a name, slug or package substring, with grade and verification on every match. | Free |\n| `check_tool` | One tool's full classification: risk analysis and evidence, OWASP classes, parameters, recommended policy default. | Free |\n| `get_change_events` | The ordered change feed: drift, posture flips, impostor flags. Cursor-based, with severity filters. | Licence |\n\n## Example\n\nAsk your agent *\"is the github MCP server safe to install?\"* and it calls:\n\n```json\n{ \"name\": \"check_mcp_server\", \"arguments\": { \"server\": \"github\" } }\n```\n\nand gets back the published record (trimmed):\n\n```json\n{\n  \"slug\": \"github\",\n  \"riskGrade\": \"D\",\n  \"identity\": { \"verification\": \"official\", \"confidence\": \"verified\" },\n  \"posture\": { \"auth\": \"gated\", \"rateLimited\": false },\n  \"toolCount\": 86,\n  \"tools\": [\n    { \"name\": \"delete_file\", \"category\": \"Destructive\", \"severity\": \"High\", \"recommendedPolicy\": { \"action\": \"deny\" } }\n  ]\n}\n```\n\n## Things to ask your agent\n\n- *\"Is the github MCP server safe to install?\"*\n- *\"We're adding the notion and linear MCP servers this week. Vet both and summarise the risks.\"*\n- *\"Which of the MCP servers in this project can delete data or move money?\"*\n- *\"Should I allow the execute_sql tool on the postgres server? What policy does PolicyLayer recommend?\"*\n- *\"Find a verified MCP server for Slack and show me its risk grade.\"*\n- *\"Check every server in my mcpServers config against PolicyLayer and flag anything below grade C.\"*\n- With a licence key: *\"What changed in the servers we depend on since yesterday? Any posture flips or impostor flags?\"*\n\n## Adding a licence key\n\n`get_change_events` needs a Registry Licence key (`plr_...`), self-serve at [policylayer.com/registry/pricing](https://policylayer.com/registry/pricing).\n\n- **Claude Code:** append `--header \"Authorization: Bearer plr_...\"` to the command above\n- **Cursor / Windsurf / VS Code:** add `\"headers\": { \"Authorization\": \"Bearer plr_...\" }` inside the server entry\n- Claude desktop/web connectors can't send headers; free lookups only\n\n## Free and licensed\n\nEverything about a single server is free and complete: the full record, every tool, the whole classification. A Registry Licence adds breadth across the catalogue: the change feed above, plus bulk snapshots, keyset paging and webhooks on the [/v1 API](https://policylayer.com/registry/api).\n\n## What this repository is\n\nThe connect kit for a hosted service. The server runs at `api.policylayer.com`; there is no code to run from here. `server.json` is the listing published to the official MCP Registry as `com.policylayer/registry`. The MIT licence covers the contents of this repository only; the hosted service and the registry data are licensed separately.\n\n---\n\n[PolicyLayer](https://policylayer.com) · [Registry lookup](https://policylayer.com/registry) · [API reference](https://policylayer.com/registry/api) · [Licensing](https://policylayer.com/registry/pricing)\n",
  "bytes": 4436,
  "sha": "64be6103a0948f4fc87159b8b148995b19ef719c68925d05ff9ec01c8b3a3147",
  "repo_slug": "policylayer/mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_com_policylayer_registry_fba21811/readme"
}