Ccs MCP server

Read from the package source without running it. The installed server may list more.

• audit_mcp_config

  Audit an MCP client/server configuration JSON for security risks: plain HTTP, weak secrets, disabled TLS, missing commands. Returns structured issues with severity.

• issue_evidence

  Issue a CCS evidence record for a tool call. Evidence is cryptographically bound (content_hash + evidence_hash), tamper-evident, independently verifiable. Issued for allowed AND denied calls.

• verify_intent_binding

  Verify that actual tool call arguments match a declared intent with zero tolerance. Catches cross-model parameter drift (planner says amount=100, executor writes amount=10000). No LLM needed — pure deterministic comparison. Supports exact match, numeric tolerance, and regex pattern binding modes.

• verify_receipt

  Offline-verify a CCS Ed25519-signed receipt. Auditors call this with a receipt JSON produced by issue_evidence or verify_intent_binding; it checks the signature against the embedded signer_public_key and reports whether the body was tampered with. Optionally pin an expected signer public key (PEM string or sha256: fingerprint) to reject receipts from untrusted signers.

• verify_tool_call

  Verify an AI agent tool call against CCS 7 dimensions (Structure, Schema, Security, Identity, Integrity, Latency, Cost) plus semantic attack-chain analysis and math overflow detection. Returns verdict (allowed/denied) with detailed findings. DEFAULT MODE BLOCKS UNSAFE CALLS.

• Code scan3 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityno repository or website to verify2/10

Safety score

65/100

higher than 25% of 4,460 AI and agents servers

Tools

5

the typical AI and agents server has 6

Tools that change things

0%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

87

more than 61% of 1,538 AI and agents servers with a package

Ccs: common questions

Is Ccs MCP server safe?

With care: it is graded C, so read the findings first (65/100). Read the Ccs safety report

How do I install Ccs?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Ccs need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Ccs maintained?

The latest release is v1.2.7.

What can I use instead of Ccs?

Servers from other publishers that do the same job: Emilia Protocol MCP server, Attestix MCP server and Ausca MCP server.

How does Ccs compare with other AI and agents MCP servers?

safety score 65/100 (higher than 25% of 4,460 AI and agents servers); tools 5 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.