registry — Claude Code MCP server: what it does, how to install
Vets third-party MCP servers before installation. Returns letter grades, author verification, and destructive tool warnings.
claude mcp add --transport http registry https://api.policylayer.com/mcpWhat registry does
This integration links your agent directly to the PolicyLayer directory covering over 32,500 servers and 515,000 indexed tools. It checks publisher identity and safety scores from A to F. If an agent looks up a server missing from the catalog, the query automatically queues that package for background inspection.
Read-only inspections run over streamable HTTP without an account. Free tools like check_mcp_server, search_registry, and check_tool highlight destructive calls before anything enters your project configuration. The engine pinpoints actions that delete data or execute arbitrary SQL.
Accessing the audit feed via get_change_events requires a paid plr_... license key passed in HTTP headers. Clients that cannot supply custom headers are limited to standalone server checks.
What it helps with
- audit unknown MCP servers before installing them locally
- spot destructive actions like file deletion or SQL execution
- confirm publisher identity against verified registry records
- retrieve recommended block policies for sensitive agent operations
Example prompts for the agent
- Check the github MCP server on PolicyLayer before we install it.
- Look up a verified Slack server and show me its security grade.
- Inspect the execute_sql tool on postgres to see recommended policy actions.
How to install registry
Platform CLI: remote server
claude mcp add --transport http registry https://api.policylayer.com/mcpPlatform CLI: remote server
codex mcp add registry --url https://api.policylayer.com/mcpConfig file
{
"mcpServers": {
"registry": {
"url": "https://api.policylayer.com/mcp"
}
}
}Config file
{
"servers": {
"registry": {
"type": "http",
"url": "https://api.policylayer.com/mcp"
}
}
}Platform CLI: remote server
gemini mcp add -t http registry https://api.policylayer.com/mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about registry
How to install registry in Claude Code?
Run claude mcp add --transport http registry https://api.policylayer.com/mcp in your terminal. This registers the HTTP endpoint with your agent immediately.
What does the registry MCP server do?
It audits third-party MCP servers against the PolicyLayer security database. Agents receive risk grades from A to F, identity proofs, and per-tool safety ratings.
Is a license key required to use registry?
Single-server lookups and registry searches are free and require no token. A plr_... key is only needed for the get_change_events feed to monitor posture changes.
