MCP.Market

Magist MCP server

online · 100% uptime
by magist-io·io.github.magist-io/magist·v0.1.1
No reviews yet

Deterministic, cited regulatory research for product launches; legal information, not legal advice.

A85/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
Growing

0 stars6 downloads/wk

Reviews

Write one

Nobody has reviewed Magist yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Magist tools (9, 1 write)

write = sends, deletes, buys or posts
  • compute_requirementswrite actionFree

    Run Magist’s deterministic compliance engine over a product description (features, target markets, audience age bands, optional business model) and return the regulations and Controls that may be triggered, a complexity tier with a numeric score, a blocker count, and a per-audience cohort breakdown. The call also creates or refreshes an idempotent public report URL for the receipt, retained for up to 90 days. Deterministic and reproducible: the same inputs always produce the same output, with no LLM in the path. Returns which obligations may apply for research purposes; it is not a determination that they do apply, and does not replace counsel. Consult a licensed attorney before relying on the result.

  • find_controlsFree

    Given a regulation id, return the compliance Controls that may satisfy it, each with a priority signal (blocker / required / evaluate / best-practice) and a short summary of the work involved. Returns research information about typical control mappings, not a determination that a given product needs them. Consult counsel for scoping.

  • find_counselFree

    Search Magist’s open counsel directory for law firms by jurisdiction and practice area. Returns an editorial / firm-claimed directory to help a user identify licensed attorneys to consult. Inclusion is not endorsement; verify bar status and conflicts independently before engaging.

  • find_vendorsFree

    Given a Control id, list third-party vendors and in-house approaches that may implement it, with effort/cost signals and a source-disclosure (editorial research vs vendor submission). Magist does not accept payment from vendors and does not rank or endorse them. Returns a neutral catalog for research; evaluate fit independently.

  • get_enforcementFree

    Return recent regulatory enforcement actions from Magist’s catalog, optionally filtered by regulation id and a since-date. Each action includes the penalty, authority, a primary-source link, and (where authored) a practitionerAnalysis: a hedged, third-person editorial note on what the action illustrates, informational context that never addresses a specific product. penaltyAmount is null when no monetary amount is recorded (pending, confidential, annulled, or non-monetary outcomes; the amount string carries the honest description). Returns historical facts about what regulators have done: informational context, not a prediction about a specific product.

  • list_feature_catalogFree

    Return Magist’s closed catalogs of valid product feature ids and target market ids, each with a short human-readable label -- the exact identifiers compute_requirements accepts as "features" and "markets". Use this to validate ids before calling compute_requirements; ids outside these catalogs are rejected with an actionable error. Deterministic and reproducible; this is reference data, not itself a regulatory determination.

  • lookup_regulationFree

    Look up one regulation by its Magist id and return structured research information: title, citation, jurisdiction, status, review dates, a plain-language summary, and the Controls that may satisfy it. Returns facts about what a regulation says, not a determination of how it applies to a specific product. Consult counsel for situation-specific questions.

  • search_regulationsFree

    Search Magist’s regulation corpus by keyword with optional filters (jurisdiction, domain, status, content-review status, coverage depth). Returns a paginated list of matching regulations with permanent citation URLs. Deterministic: the same query and filters return the same results every time. Returns research information for discovery, not a determination of which regulations apply to a specific product.

  • verify_ai_answerFree

    Verify a Magist grounding-proof token: the "groundingProof" field on a regulation or control record from the REST API (GET /api/v1/regulations/{id} or /api/v1/controls/{id}) when the server has signing enabled. MCP tool responses do not carry these tokens. Proves the citation was genuinely served by Magist's server for that exact atom at that exact corpus version; it does NOT verify legal correctness or that any obligation applies to a product. Returns valid:false with a reason when the token is missing, malformed, unsigned, or fails signature verification; this is expected when the record never carried a token (signing is an opt-in server setting).

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

1 high
  • Code scan2 source files scanned25/25
  • Live reliabilityremote reachable in 1296ms20/20
  • Tool poisoning9 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Magist compares

Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 80% of 2,174 E-commerce servers
Tools
9
the typical E-commerce server has 6
Tools that change things
11%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote E-commerce server answers 100%
Response time
240 ms
faster than 61% of 1,527 E-commerce servers
Downloads a week
6
more than 0% of 411 E-commerce servers with a package

What its tools let an agent do: 8 read · 1 change

Install Magist in Claude Code, Cursor or VS Code

claude mcp add --transport http magist https://magist.io/api/mcp
Add to Cursor

What the publisher says

From the Magist repository's README, as published. We do not edit it. Read it on GitHub

@magist/mcp-server

Connect Magist to your AI host over the Model Context Protocol. Magist is an open, deterministic, cited reference for product regulation: which laws apply to a product, the obligations and Controls they imply, and the primary sources behind each. Open data (CC BY-SA 4.0), a deterministic engine (same inputs produce the same outputs, no LLM in the path), permanent citation URLs, and a named-practitioner attribution on every response.

This package is a thin stdio bridge to the hosted server at https://magist.io/api/mcp. Remote-capable hosts can skip it and point straight at that URL.

Portable research plugin (proposed)

This repository also contains the separate magist-research 0.1.0 portable plugin: root plugin.json, the remote connection in mcp.json, and a newly authored workflow in skills/magist-research/. It connects directly to the public HTTPS service and does not run the npm stdio bridge.

The portable connection uses only type and url, as allowed by the Agent Plugins 1.0.0 MCP schema. The endpoint requires no authentication. The schema does not admit the server-level authentication extensions shown in some host-specific examples; those extensions are omitted here. Schema validation alone does not establish that a host can install and run the complete plugin.

Create its bounded source package with Python 3.9 or newer:

python3 scripts/package-plugin.py --output /absolute/new/path/magist-research-0.1.0.zip

The ZIP includes only the two portable manifests, the skill and its MCP dependency declaration, and this repository's existing MIT license. It excludes the bridge executable, dependencies, private platform source and assets. The plugin version is independent of @magist/mcp-server@0.1.1.

This is a proposed integration package, not an accepted directory listing or a host validation certificate. Public submission uses OpenAI's With MCP route; publisher verification, actual host/reviewer cases, media, any required visual assets, connection checks and submission review remain separate requirements. See the portable package format.

Beta: content under attorney review. The server is live and the engine is

stable; substantive attorney review of the regulation corpus is in progress.

Entries carry a contentReviewStatus field (reviewed is human-verified,

draft is AI-prepared and pending review). Magist returns legal information

for research and attorney handoff, not legal advice. Consult a licensed

attorney before relying on any output for a launch decision.

One-line install

Claude Code (CLI) uses the remote transport directly (no npm install):

claude mcp add --transport http magist https://magist.io/api/mcp

Claude Desktop / Cursor / Windsurf (npx): add the bridge to the host's mcpServers config:

{
  "mcpServers": {
    "magist": {
      "command": "npx",
      "args": ["-y", "@magist/mcp-server"]
    }
  }
}
  • Claude Desktop: Settings -> Developer -> Edit Config (claudedesktopconfig.json). Restart Claude after saving.
  • Cursor: Settings -> MCP -> Add new server, or edit ~/.cursor/mcp.json.
  • Windsurf: edit ~/.codeium/windsurf/mcp_config.json, then reload.
  • Codex: add to ~/.codex/config.toml:
[mcp_servers.magist]
  command = "npx"
  args = ["-y", "@magist/mcp-server"]

ChatGPT (Developer Mode / Connectors), Manus, and other remote-capable hosts: add a custom connector pointing at the Streamable-HTTP endpoint https://magist.io/api/mcp (no npm package needed).

Verify it works

A 200 with name: "magist" means the endpoint is live:

curl -s https://magist.io/api/mcp

List the tools (you should see nine):

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Magist: common questions

Is Magist MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the Magist safety report
How do I install Magist?
It runs remotely at magist.io. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Magist need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Magist maintained?
The last commit was 18 days ago (2026-10-16). The latest release is v0.1.1.
Is Magist up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Magist?
Servers from other publishers that do the same job: PostHog MCP Server, Loki Mode MCP server and New-Term Radar MCP server.
How does Magist compare with other E-commerce MCP servers?
safety score 85/100 (higher than 80% of 2,174 E-commerce servers); tools 9 (the typical E-commerce server has 6); tools that change things 11% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Magist

Same job from other publishers: the closest match first, then the best rated.

  • PostHog MCP Server
    Official PostHog MCP Server for product analytics, feature flags, experiments, and more.
    A
  • Loki Mode
    Autonomous spec-to-product coding-agent CLI with an MCP server exposing 39 tools over stdio.
    B
  • New-Term Radar
    New AI model, product and repo names as they surface, and the search terms behind them, sized.
    B
  • Idea Reality
    Pre-build reality check. Scans GitHub, HN, npm, PyPI, Product Hunt — returns 0-100 signal.
    B
  • Stripe
    MCP server integrating with Stripe - tools for customers, products, payments, and more.
    A