Check MCP server
dev.getstub/check·v0.1.0Verify what an AI agent did for someone, and what commercial influence the operator disclosed.
0 stars45 downloads/wk
Reviews
Write oneNobody has reviewed Check yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Check tools (2)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_stubVerify what an AI agent did on someone's behalf, and whose side it was on.
get_witness_keyReturn the registry's public witness key, so countersignatures on checks
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 13 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How Check compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 88% of 4,460 AI and agents servers
- Tools
- 2
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 45
- more than 37% of 1,538 AI and agents servers with a package
What its tools let an agent do: 2 read
Install Check in Claude Code, Cursor or VS Code
Runs npx -y @getstub/mcp-check on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add check -- npx -y @getstub/mcp-check
What the publisher says
From the Check repository's README, as published. We do not edit it. Read it on GitHub
Stub recipes
Working reference integrations for Stub, the allegiance receipt registry for AI agents.
Each recipe is a runnable agent with Stub wired in at the line where the ranking picks a winner. Clone one, run it, read the receipt it produces.
Every recipe here is a reference and a simulation. No real merchants, no real money, no real users. Nobody is running these in production, and each README says so. The point is to show exactly where a receipt belongs in code you recognise.
The recipes
Every recipe runs against the live registry and issues real receipts, under an operator id you choose. The free tier is 1,000 stubs a month, so trying all six costs nothing. There is no offline mode and no mock registry: the only way to issue a stub is to issue one.
The badge above
These recipes are exercised against the live registry every day, and the badge is drawn from the receipts that run produces. It is not a build status: it says the reference agents ranked their catalogues, disclosed what influenced the result, and issued signed records anyone can open. Click it to read them.
If it ever goes quiet, the recipes stopped working and this repo is telling you so before you clone it.
Start here
If you are new to this, read tool-loop first. It is the smallest one and it carries the lesson the others repeat: the model does nothing wrong, the ranking decided.
cd tool-loop
npm install
export STUB_OPERATOR_ID=op_yourname_toolloop
npm run demoPick an operator id that is yours. The first run registers it and saves your keypair to .stub-keys.json, which is gitignored. Every run after that uses the same identity.
The demo prints the ranking your code produced, with the reason beside each item, and then a receipt link anyone can open.
When you are ready to deploy
The recipes generate a fresh keypair each run, which is right for reading and wrong for production. PRODUCTION.md covers what changes: persisting your identity, where the receipt belongs, what never goes in the free text, and the mistakes we made taking our own agent live.
What a stub is
When your agent acts for someone, it issues a small signed record: who asked, what was done, what money moved, and what commercial influence applied. The person served checks it at a neutral registry, not on your servers and not on ours.
Here is a live one before you install anything:
https://api.getstub.dev/check/72b4baee1719ec34acc5df5c514a12fd2e19b9a6776de4b45706988f765c77d8
The integration, in full
import { Stub, influenced } from '@getstub/agent';
const stub = new Stub({
operator: 'Your Agent',
declared: {
paid_by: 'the user, subscription',
conflicts: ['commission'],
},
});
// at the line where your ranker picks a winner:
const inf = [];
if (pick.paid_placement) inf.push(influenced.placement(pick.seller));
if (pick.commission_pct) inf.push(influenced.commission(pick.commission_pct + '%'));Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Check: common questions
- Is Check MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Check safety report
- How do I install Check?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Check need an API key?
- No secret keys are declared. It reads 1 setting from the environment.
- Is Check maintained?
- The last commit was 45 days ago (2026-09-20). The latest release is v0.1.0.
- What can I use instead of Check?
- Servers from other publishers that do the same job: Watch Skill MCP server, Emilia Protocol MCP server and Mockserver MCP server.
- How does Check compare with other AI and agents MCP servers?
- safety score 91/100 (higher than 88% of 4,460 AI and agents servers); tools 2 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Check
Same job from other publishers: the closest match first, then the best rated.
- Watch SkillWatch video and live sessions, keep timestamped evidence, and verify an agent's own work.not reviewedEstablishedB
- Emilia ProtocolExact-action approval for consequential agent actions: request, track, and verify signed receipts.not reviewedEstablishedB
- MockserverMock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.not reviewedEstablishedA
- KilnSpawn an object into existence: describe it, and your agent designs it, checks it, and 3D prints it.not reviewedEstablishedB
- three.ws ProvenanceAppend-only, signed, on-chain-verifiable agent action log — record and audit what agents did.not reviewedEstablishedB