{"name":"ai.verificate/mcp","slug":"verificate-mcp","title":"Verificate MCP","description":"Agentic code review, no signup to try: reality gates + frontier-model review, with veto.","url":"https://mcp.market/server/verificate-mcp","rating":null,"grade":"B","score":84,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":26,"stars":1,"forks":0,"downloads_week":null,"last_push_at":"2026-09-21T07:07:34.000Z","license":"MIT"},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-11-04T11:55:40.053Z","last_ok_at":"2026-11-04T11:55:40.053Z","latency_ms":672},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/Verificate-Dev/verificate-mcp-quickstart","website":"https://verificate.ai/mcp","version":"1.8.7","remotes":[{"type":"streamable-http","url":"https://mcp.verificate.ai/mcp","headers":[{"description":"Bearer <token> — from your Verificate dashboard (30-day free trial, no card: https://verificate.ai/auth/signup)","isRequired":true,"isSecret":true,"name":"Authorization"}]}],"packages":[],"tools":[{"name":"analyze_code","description":"Advisory deep-dive on existing code — scores and findings, deliberately NO pass/fail verdict, so it never blocks an agent. Surfaces performance hot paths, scalability cliffs, reliability gaps and tech debt with concrete latency/throughput arithmetic (e.g. 'O(n²) dedup: ~4s at 10k items'). Read-only: the code is analyzed, never executed. Use it to understand a validate_ai_output rejection or review inherited code; use validate_ai_output when you need an accept/reject decision.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"code":{"type":"string","description":"The source code to analyze — a function, file or pasted excerpt."},"analysis_type":{"type":"string","default":"quality","enum":["quality","performance","scalability","security","tech_debt"],"description":"Lens for the review: 'quality' (default, broad ISO/IEC 25010 pass) or a focused pass on one dimension."},"language":{"type":"string","description":"Source language, e.g. 'python', 'typescript', 'cpp', 'sql', 'swift'. Inferred if omitted; stating it sharpens findings."}},"required":["code"]}},{"name":"generate_code","description":"Generate code and gate it in one step: an LLM writes the implementation, then the same protection engine as validate_ai_output vets it — retrying generation when the gate rejects. If every attempt is vetoed you still receive the last attempt, clearly marked validated:false with the gate findings — rejected code is never presented as clean. Generation runs on our infrastructure; nothing executes in your environment.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"prompt":{"type":"string","description":"What to build, with any constraints worth enforcing — e.g. 'a rate-limited retry decorator with exponential backoff, stdlib only'."},"language":{"type":"string","default":"python","description":"Target language for the generated code, e.g. 'python' (default), 'typescript', 'go', 'sql'."},"max_tokens":{"type":"integer","default":4000,"minimum":256,"maximum":32768,"description":"Generation budget. The default 4000 fits most functions/classes; raise it for multi-file scaffolds."}},"required":["prompt"]}},{"name":"validate_ai_output","description":"The merge gate for ANY AI-written output — code, documentation, reports, emails, configs: returns a binary approve/reject verdict with veto power — e.g. it rejects code calling the nonexistent stripe.Inventory API, an N+1 loop with the latency arithmetic to prove it, or a doc claiming success with no evidence. Deterministic reality gates (mock/placeholder veto, gaming and bypass detection, invented-API checks) run first and cannot be overridden; a frontier-model review (ISO/IEC 25010) then scores quality, accuracy, reliability and tech debt. In a benchmark, a frontier model reviewing alone caught reward-gaming and hallucinated APIs 0/6 times in a natural review workflow; these gates catch them deterministically on every call. Read-only: nothing is executed. Call it on every AI-generated deliverable before accepting it; use validate_plan for plans, analyze_code for an advisory report without a verdict.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"ai_output":{"type":"string","description":"The AI-generated output to gate — source code (a diff, function or whole file, any mainstream language) or prose (documentation, a report, an email, release notes). For reliable latency keep one submission under ~15,000 characters; split larger artifacts at natural boundaries (functions, SQL statements, sections) and validate the units separately. Reviews are wall-clock bounded: an over-budget model review returns an explicit timed-out result (deterministic gates still run) rather than hanging."},"validation_type":{"type":"string","default":"code_generation","description":"What the output is: 'code_generation' (default) for source code; 'documentation', 'report', 'email', 'text', ... for prose (code-marker gates are skipped, integrity gates and the frontier review still run). Use 'report' (or 'status_report' / 'handover') for anything that CLAIMS work is done or passing: there, a completion claim with no evidence in the text is a veto. 'plan' for designs/specs."},"context":{"type":["object","string"],"description":"Optional review context — an object like {\"language\": \"cpp\", \"scale\": \"10k req/s\"} ('language' sharpens SDK-reality checks) or a free-text sentence describing intent."}},"required":["ai_output"]}},{"name":"validate_artifact","description":"Deterministic production-readiness gate for AI-built systems. Verifies the invariants that stop a system silently shipping broken: every critical component is PRESENT and LOADS, the import closure resolves (nothing assumed 'already on the box'), all runtime dependencies are declared, and health is a REAL fail-closed check. Returns approve/reject with a fix plan and ISO 27001 / ISO 5055 control evidence. Facts are gathered by the Verificate collector in your CI; the gate is the authority. Non-bypassable, fails closed. This is the control-plane sibling of validate_ai_output — code quality is one invariant; this gates the whole deployable.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"artifact":{"type":"object","description":"Collected artifact facts: {critical_components:[{name,loads:bool}], import_closure_ok:bool, undeclared_deps:[str], health_truthful:bool}."}},"required":["artifact"]}},{"name":"validate_plan","description":"The gate for PLANS, designs and specs — run BEFORE any code is written, the cheapest place to catch a bad design. Returns the same binary verdict shape as validate_ai_output, with findings on completeness, feasibility, performance and scalability implications, security risks and missing considerations (e.g. it rejects a plan that polls an API every 100ms per client, with the request-volume math). Read-only: nothing is executed or stored beyond the verdict. Use validate_ai_output for the code that follows.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"plan":{"type":"string","description":"The implementation plan, design or spec to validate, as plain text or markdown — e.g. a numbered migration plan or an architecture sketch."},"context":{"type":"object","description":"Optional constraints the review should weigh, e.g. {\"system\": \"payments API\", \"scale\": \"1M users\", \"constraints\": \"PostgreSQL only\"}."}},"required":["plan"]}}],"scan":{"score":84,"grade":"B","scanned_at":"2026-09-24T12:02:29.745Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-24T12:02:29.613Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":17,"max":20,"notes":["remote reachable in 2017ms"]},"poisoning":{"score":15,"max":15,"notes":["5 tool descriptions checked"]},"auth":{"score":8,"max":15,"notes":["API key sent as a header"]},"maintenance":{"score":15,"max":15,"notes":["last push 3 days ago"]},"identity":{"score":8,"max":10,"notes":["namespace and repository owner differ","GitHub account older than a year","website matches verified namespace"]}},"findings":[],"inputs":{"probes":[{"url":"https://mcp.verificate.ai/mcp","reachable":true,"authRequired":false,"latencyMs":2017,"serverInfo":{"name":"verificate-mcp-http","version":"1.2.0"}}],"packages":[],"repo":{"found":true,"owner":"Verificate-Dev","repo":"verificate-mcp-quickstart","archived":false,"pushedAt":"2026-09-21T07:07:34Z","stars":1,"forks":0,"openIssues":1,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/318829913?v=4","ownerCreatedAt":"2025-03-26T03:14:25Z","license":"MIT"},"icon":{"url":"https://verificate.ai/icon-512.png","source":"registry","width":512,"height":512},"presence":{"stars":1,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-09-21T07:07:34.000Z","score":26}}}},"grade_history":[],"reviews":[]}