# registry MCP server

The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.

## Links
- Registry page: https://www.getdrio.com/mcp/com-policylayer-registry
- Repository: https://github.com/PolicyLayer/mcp
- Website: https://policylayer.com/registry/mcp

## Install
- Endpoint: https://api.policylayer.com/mcp
- Auth: Not captured

## Setup notes
- Remote endpoint: https://api.policylayer.com/mcp

## Tools
- check_mcp_server - Check an MCP server against the PolicyLayer registry BEFORE installing or allowing it. Accepts a registry slug, an npm package name (scoped or not), a remote server URL (https://…), or a server name. Returns the full published record: identity verification with its evidence, risk grade, auth posture, freshness, and the tool surface listed riskiest-first. A server the registry does not know is queued for scanning by this very call — check back shortly. Endpoint: https://api.policylayer.com/mcp
- check_mcp_stack - Check a whole MCP stack against the PolicyLayer registry in one call — up to 25 servers, each given as candidate identifiers (npm package name, registry slug, or remote URL) tried in order until one resolves. Returns the published record for every hit — plus a deterministic verdict (attention signals and a suggested action) — and the lookup status for every miss; counts, grades and flagged tools come from the published records only. Costs one rate-limit unit per server. Endpoint: https://api.policylayer.com/mcp
- search_registry - Search the PolicyLayer registry of published MCP servers by name, slug or package substring. Returns candidate matches with risk grade, identity confidence (verified / unverified / mismatch — mismatch means it claims to be an official server with no verifiable link to the brand) and tool count — follow up with check_mcp_server on the match you meant. Endpoint: https://api.policylayer.com/mcp
- check_tool - One tool's full risk classification on a published MCP server: category, severity, risk analysis and evidence, OWASP classes, parameter schema and the recommended policy default. Use when deciding whether to allow a specific tool call, e.g. "should execute_sql on this server be permitted?" Endpoint: https://api.policylayer.com/mcp
- get_change_events - The registry change feed: tool-surface drift, auth-posture flips, impostor flags, version bumps — every event the freshness watchers emit, id-cursored so a consumer resumes exactly where it stopped. Requires a Registry Licence key (Authorization: Bearer plr_...); self-serve at https://policylayer.com/registry/pricing. Endpoint: https://api.policylayer.com/mcp

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: com.policylayer
- Version: 1.0.1
- Runtime: Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Jul 8, 2026
- Source: https://registry.modelcontextprotocol.io