io.sentinelsignal/verify

Name: io.sentinelsignal/verify
Author: io.sentinelsignal

MCPcommunitylive

v1.0.269io.sentinelsignalUnknownUpdated 4mo ago

Trust, freshness, policy, and discovery layer for public MCP servers.

Endpoint healthlive

checked 5 days ago · 143ms

100% of the last 6 checks reached this endpoint

Works in

ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

4mo agoLast update

Package

Authorio.sentinelsignal

LicenseUnknown

Version1.0.269

Sourcemcp-registry

SBOMCycloneDX 1.6 ↓

Trust Status

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/30

→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.

—Domain verification+0/10

→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.

✓Prompt-injection scan · clean+30/30

✓Obfuscation / exfil scan · clean+20/20

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

DependenciesNot audited

Tool surface22 tools · none privileged

Security scan✓ Cleanvlive · 1mo agoHow well does this scan work?

EvalsNone

IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

22 tools · none privileged

Observed live from the vendor's endpoint1mo ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

https://verify.sentinelsignal.io/mcp22 tools · 201ms

Filter toolsPrivileged only

searchChatGPT-compatible read-only search alias. Returns MCP server results with id, title, and url.

ChatGPT-compatible read-only search alias. Returns MCP server results with id, title, and url.

Parameter	Type	Description
query*	string	Search query such as healthcare MCP, web search MCP, ChatGPT-compatible MCPs, or OAuth MCP servers.
limit	integer	Maximum number of search results to return.

fetchChatGPT-compatible read-only fetch alias. Returns a full MCP server item with id, title, text, url, and metadata.

ChatGPT-compatible read-only fetch alias. Returns a full MCP server item with id, title, text, url, and metadata.

Parameter	Type	Description
id*	string	Canonical MCP server identifier in namespace/name format.

search_serversSearch and rank MCP servers by capability, auth preference, client target, and risk tolerance.

Search and rank MCP servers by capability, auth preference, client target, and risk tolerance.

Parameter	Type	Description
capabilities	array	Normalized capability taxonomy terms such as healthcare, search, read, exec, files, oauth, or prompts.
auth_preference	string	Preferred auth mode. Use unauthenticated when the agent must avoid login flows.
client_target	string	Optional target client or integration surface.
risk_tolerance	string	How much tool-surface risk is acceptable.
query	string	Optional free-text query to bias ranking toward a specific use case or domain.
limit	integer	Maximum number of ranked candidates to return.

recommend_serversRecommend MCP servers for a plain-language task and return ranked matches with install config.

Recommend MCP servers for a plain-language task and return ranked matches with install config.

Parameter	Type	Description
task*	string	Plain-language task description such as 'I need an MCP for healthcare denial scoring in OpenAI connectors'.
capabilities	array	Optional explicit capability constraints that override or extend the inferred task capabilities.
auth_preference	string	Preferred auth mode.
client_target	string	Optional target client or integration surface.
risk_tolerance	string	How much tool-surface risk is acceptable.
limit	integer	Maximum number of recommendations to return.

get_server_reportReturn the full machine-readable verify report for a specific MCP server identifier.

Return the full machine-readable verify report for a specific MCP server identifier.

Parameter	Type	Description
identifier*	string	Canonical server identifier in namespace/name format.

compare_serversCompare up to four MCP servers side by side across score, verdict, auth, tool count, prompts/resources, and freshness.

Compare up to four MCP servers side by side across score, verdict, auth, tool count, prompts/resources, and freshness.

Parameter	Type	Description
identifiers*	array	Canonical server identifiers in namespace/name format.

route_taskChoose the best MCP server/tools for a task. Use decide_agent_call when evaluating one specific attempted tool call.

Choose the best MCP server/tools for a task. Use decide_agent_call when evaluating one specific attempted tool call.

Parameter	Type	Description
task*	string	Task the agent wants to perform.
candidate	string	Optional namespace/name server identifier to evaluate directly.
capabilities	array	Optional capability constraints such as healthcare, search, database, read, or write.
client_target	string	—
max_risk	string	Maximum allowed tool risk.
requires_oauth	boolean	—
no_write_without_approval	boolean	—
max_freshness_hours	number	—

decide_agent_callVerify Gateway decision point. Decide whether this agent may call this tool, with this payload, for this user, right now. Writes an audit-ledger decision event.

Verify Gateway decision point. Decide whether this agent may call this tool, with this payload, for this user, right now. Writes an audit-ledger decision event.

Parameter	Type	Description
agent_id*	string	—
user_id*	string	—
server_id*	string	Server identifier in namespace/name format.
tool*	string	—
action	string	—
mandate_id	string	Optional Verify Mandate key or id.
payload_classification	array	—
requested_cost	number	—
max_cost	number	—
approval_token_present	boolean	—
client	string	—
max_risk	string	—
requires_oauth	boolean	—
no_write_without_approval	boolean	—
max_freshness_hours	number	—
max_runtime_seconds	integer	—
audit_context	object	—

create_mandateCreate a Verify Mandate: signed delegated authority for an agent/user/server scope, budget, validity window, and tool constraints.

Create a Verify Mandate: signed delegated authority for an agent/user/server scope, budget, validity window, and tool constraints.

Parameter	Type	Description
user_id*	string	—
agent_id*	string	—
server_id	string	—
scope*	string	—
budget_limit	number	—
valid_until	string	—
requires_human_approval	boolean	—
signature	string	—
constraints	object	—
metadata	object	—

get_evidence_packReturn Verify Ledger evidence packs with invocations, hash-chained audit events, decisions, outcomes, mandates, and cost summaries.

Return Verify Ledger evidence packs with invocations, hash-chained audit events, decisions, outcomes, mandates, and cost summaries.

Parameter	Type	Description
server_id	string	—
agent_id	string	—
user_id	string	—
limit	integer	—

compile_docsGenerate agent-readable MCP artifacts from product docs: server card, llms.txt, tool schemas, examples, policy metadata, score preview, and hosted docs page.

Generate agent-readable MCP artifacts from product docs: server card, llms.txt, tool schemas, examples, policy metadata, score preview, and hosted docs page.

Parameter	Type	Description
title*	string	—
source_type	string	—
source_url	string	—
openapi_spec	object	—
markdown_docs	string	—
postman_collection	object	—
website_docs	string	—
server_identifier	string	—
policy_metadata	object	—
metadata	object	—

export_policyExport a JSON TrustOps policy for one MCP server with allow, blocked tools, required scopes, freshness, and approval gates.

Export a JSON TrustOps policy for one MCP server with allow, blocked tools, required scopes, freshness, and approval gates.

Parameter	Type	Description
identifier*	string	Canonical server identifier in namespace/name format.
client	string	—
max_risk	string	—
requires_oauth	boolean	—
no_write_without_approval	boolean	—
max_freshness_hours	number	—

get_subscription_optionsReturn alert types, subscription channels, watch scopes, and existing subscription endpoints.

Return alert types, subscription channels, watch scopes, and existing subscription endpoints.

No input schema was published for this tool.

get_gateway_optionsReturn Verify Gateway semantics, /v1/route versus /v1/decide guidance, mandate inputs, ledger evidence hooks, and decision fields.

Return Verify Gateway semantics, /v1/route versus /v1/decide guidance, mandate inputs, ledger evidence hooks, and decision fields.

No input schema was published for this tool.

get_hosting_optionsReturn Verify Hosted MCP runtime/sandbox hosting capabilities, controls, and endpoints.

Return Verify Hosted MCP runtime/sandbox hosting capabilities, controls, and endpoints.

No input schema was published for this tool.

list_agentsAgent Sprawl Radar: list discovered AI agents, MCP servers, bots, workflows, risk levels, and owners.

Agent Sprawl Radar: list discovered AI agents, MCP servers, bots, workflows, risk levels, and owners.

Parameter	Type	Description
risk_level	string	—
limit	integer	—

get_agentAgent Sprawl Radar: return one agent with tools, data access, findings, drift, and recommended action.

Agent Sprawl Radar: return one agent with tools, data access, findings, drift, and recommended action.

Parameter	Type	Description
agent_id*	string	—

score_agentAgent Sprawl Radar: score a normalized agent payload or an existing registry agent.

Agent Sprawl Radar: score a normalized agent payload or an existing registry agent.

Parameter	Type	Description
agent_id	string	—
agent	object	—

explain_agent_riskAgent Sprawl Radar: explain risk findings and the recommended action for one registry agent.

Agent Sprawl Radar: explain risk findings and the recommended action for one registry agent.

Parameter	Type	Description
agent_id*	string	—

list_high_risk_agentsAgent Sprawl Radar: list high and critical risk agents for review.

Agent Sprawl Radar: list high and critical risk agents for review.

Parameter	Type	Description
limit	integer	—

get_drift_reportAgent Sprawl Radar: return agent drift events across latest snapshots.

Agent Sprawl Radar: return agent drift events across latest snapshots.

Parameter	Type	Description
agent_id	string	—
limit	integer	—

generate_remediation_planAgent Sprawl Radar: generate deterministic remediation steps for risky or drifting agents.

Agent Sprawl Radar: generate deterministic remediation steps for risky or drifting agents.

Parameter	Type	Description
agent_id*	string	—

22 of 22 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Trust, freshness, policy, and discovery layer for public MCP servers.

Keywords

mcp

Alternatives

Comparing tool surfaces…

io.sentinelsignal/verify

Tools

Tools exposed

No dependency coverage