Ccs MCP server

Read from the package source without running it. The installed server may list more.

• audit_mcp_config

  Audit an MCP client/server configuration JSON for security risks: plain HTTP, weak secrets, disabled TLS, missing commands. Returns structured issues with severity.

• issue_evidence

  Issue a CCS evidence record for a tool call. Evidence is cryptographically bound (content_hash + evidence_hash), tamper-evident, independently verifiable. Issued for allowed AND denied calls.

• verify_intent_binding

  Verify that actual tool call arguments match a declared intent with zero tolerance. Catches cross-model parameter drift (planner says amount=100, executor writes amount=10000). No LLM needed — pure deterministic comparison. Supports exact match, numeric tolerance, and regex pattern binding modes.

• verify_receipt

  Offline-verify a CCS Ed25519-signed receipt. Auditors call this with a receipt JSON produced by issue_evidence or verify_intent_binding; it checks the signature against the embedded signer_public_key and reports whether the body was tampered with. Optionally pin an expected signer public key (PEM string or sha256: fingerprint) to reject receipts from untrusted signers.

• verify_tool_call

  Verify an AI agent tool call against CCS 7 dimensions (Structure, Schema, Security, Identity, Integrity, Latency, Cost) plus semantic attack-chain analysis and math overflow detection. Returns verdict (allowed/denied) with detailed findings. DEFAULT MODE BLOCKS UNSAFE CALLS.

• Code scan3 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 9 days ago15/15
• Maintainer identityregistry namespace matches repository owner6/10

Ccs: common questions

Is Ccs MCP server safe?

Yes, by our scan: it is graded A (89/100). Read the Ccs safety report

How do I install Ccs?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Ccs need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Ccs maintained?

The last commit was 10 days ago (2026-09-11). The latest release is v1.2.14.

What can I use instead of Ccs?

Servers from other publishers that do the same job: Protect MCP server, Ausca MCP server and adrkit decision memory MCP server. Compare all Ccs alternatives.