{"name":"io.github.Correctover/ccs","slug":"correctover-ccs","title":null,"description":"Runtime verification MCP server: fail-closed checks for agent tool calls, signed evidence receipts.","url":"https://mcp.market/server/correctover-ccs","rating":null,"grade":"C","score":65,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":10,"stars":null,"forks":null,"downloads_week":87,"last_push_at":null,"license":"Elastic-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Correctover/ccs-mcp-server","website":null,"version":"1.2.7","remotes":[],"packages":[{"registryType":"npm","identifier":"ccs-mcp-server","version":"1.2.7","transport":{"type":"stdio"}}],"tools":[{"name":"audit_mcp_config","description":"Audit an MCP client/server configuration JSON for security risks: plain HTTP, weak secrets, disabled TLS, missing commands. Returns structured issues with severity.","write_action":false,"price_micros":0,"input_schema":null},{"name":"issue_evidence","description":"Issue a CCS evidence record for a tool call. Evidence is cryptographically bound (content_hash + evidence_hash), tamper-evident, independently verifiable. Issued for allowed AND denied calls.","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_intent_binding","description":"Verify that actual tool call arguments match a declared intent with zero tolerance. Catches cross-model parameter drift (planner says amount=100, executor writes amount=10000). No LLM needed — pure deterministic comparison. Supports exact match, numeric tolerance, and regex pattern binding modes.","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_receipt","description":"Offline-verify a CCS Ed25519-signed receipt. Auditors call this with a receipt JSON produced by issue_evidence or verify_intent_binding; it checks the signature against the embedded signer_public_key and reports whether the body was tampered with. Optionally pin an expected signer public key (PEM string or sha256: fingerprint) to reject receipts from untrusted signers.","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_tool_call","description":"Verify an AI agent tool call against CCS 7 dimensions (Structure, Schema, Security, Identity, Integrity, Latency, Cost) plus semantic attack-chain analysis and math overflow detection. Returns verdict (allowed/denied) with detailed findings. DEFAULT MODE BLOCKS UNSAFE CALLS.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":65,"grade":"C","scanned_at":"2026-10-29T06:01:27.426Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-29T06:01:27.397Z","components":{"code":{"score":25,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":3,"max":15,"notes":["repository not readable: repo not found"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"ccs-mcp-server","version":"1.2.7","found":true,"license":"Elastic-2.0","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-09-02T02:44:24.986Z","repositoryUrl":"git+https://github.com/DSHCorrectover/ccs-mcp-server.git","weeklyDownloads":87}],"repo":{"found":false,"owner":"Correctover","repo":"ccs-mcp-server","error":"repo not found"},"icon":{"url":null,"source":"none"},"presence":{"stars":null,"forks":null,"downloadsWeek":87,"license":"Elastic-2.0","lastPushAt":null,"score":10}}}},"grade_history":[],"reviews":[]}