# registry

Vets third-party MCP servers before installation. Returns letter grades, author verification, and destructive tool warnings.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 2
- Author: PolicyLayer
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/PolicyLayer/mcp
- Updated: 2026-07-14
- HTML: https://affpapa.org/en/nevibecode/mcp/registry

## What it does

This integration links your agent directly to the PolicyLayer directory covering over 32,500 servers and 515,000 indexed tools. It checks publisher identity and safety scores from A to F. If an agent looks up a server missing from the catalog, the query automatically queues that package for background inspection.

Read-only inspections run over streamable HTTP without an account. Free tools like `check_mcp_server`, `search_registry`, and `check_tool` highlight destructive calls before anything enters your project configuration. The engine pinpoints actions that delete data or execute arbitrary SQL.

Accessing the audit feed via `get_change_events` requires a paid `plr_...` license key passed in HTTP headers. Clients that cannot supply custom headers are limited to standalone server checks.

## Requirements
- Remote server: `https://api.policylayer.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http registry https://api.policylayer.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add registry --url https://api.policylayer.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "registry": {
            "url": "https://api.policylayer.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "registry": {
            "type": "http",
            "url": "https://api.policylayer.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http registry https://api.policylayer.com/mcp
```

## When to use it
- audit unknown MCP servers before installing them locally
- spot destructive actions like file deletion or SQL execution
- confirm publisher identity against verified registry records
- retrieve recommended block policies for sensitive agent operations

## Example prompts
- Check the github MCP server on PolicyLayer before we install it.
- Look up a verified Slack server and show me its security grade.
- Inspect the execute_sql tool on postgres to see recommended policy actions.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 392262
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89609
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12110
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7718
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2066
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1816

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md