Official MCP RegistryListed
UND Assay
Evidence on MCP servers before you install: publisher, source, provenance, advisories, changes.
First seen 31 Oct 2026. Evidence as of 2 Nov 2026.
8
Tools
From an anonymous probe
1
Source listings
Each with its own history
3
Recorded changes
Since first seen
Tools
| Tool | Description | Behaviour |
|---|---|---|
| check_before_install | Evidence summary for an MCP server before you install or connect it: publisher identity level, provenance, known vulnerabilities, install scripts, maintenance, open warnings, checks that could not run, and recent changes. Pass installed (the servers already in use) to also get tool names this server shares with them, which an AI could call by mistake. No warnings is NOT a safety guarantee. | Read-only |
| get_changes | Metadata changes between consecutive published versions: new network hosts, replaced or added artifact sources, newly requested credentials. | Read-only |
| get_evidence | A single assertion of a tool (by field name) with the evidence records behind it: URL, fetch time, SHA-256. | Read-only |
| get_publisher | How a publisher is identified across ecosystems (MCP namespace, domain, GitHub, packages) and the state of each link. | Read-only |
| get_setup | One stable answer (schema_version 1) for connecting an MCP server: its validated remote URL and transport, packages, copy-paste setup for Claude Code and JSON configs, warnings by severity, checks that could not run, and contradicted claims. auth is null until Assay has checked the sign-in metadata of the server. Never a safety rating. | Read-only |
| get_tool | Every assertion for a tool with its state (VERIFIED, CLAIMED, CONTRADICTED, STALE, UNKNOWN), reason, check and evidence records. | Read-only |
| resolve_identifier | Resolve an MCP server name, catalog id or GitHub repository URL to the real registry entry. If there is no exact match, returns the closest real names so look-alikes and invented names can be caught. No account needed. | Read-only |
| search_tools | Search cataloged MCP servers by keywords. Returns classification (verified_publisher = the publisher proved control of a domain or verified GitHub org, NOT that a company named in the tool made it / community / not_analyzed), identity level and warning counts. | Read-only |
Change history
- check_before_install: input schema changed (+installed)
- check_before_install: description changed (+"Pass installed (the servers already in use) to also get tool names this server shares with them, which an AI could call by mistake.")
- Listed (registry)
| Source | Listing | First seen | Last seen | Versions |
|---|---|---|---|---|
| Official MCP Registry | com.undassay/und-assay | 31 Oct 2026 | 2 Nov 2026 | 1 |