Keystone MCP server
online · 100% uptimeio.github.Srikarmk/keystone·v0.1.0What an arXiv paper builds on, disputes and assumes, read verbatim from its LaTeX. No LLM.
0 stars
Reviews
Write oneNobody has reviewed Keystone yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Keystone tools (3)
write = sends, deletes, buys or postslist_disagreementsFreeEvery sentence in the library where a paper says prior work is wrong, or puts itself beside it to win. Small on purpose — disagreement is rare and concentrated, and the whole set is readable.
read_paperFreeEverything Keystone reads out of one arXiv paper: what it adopts, extends, disputes and measures against, and the assumptions it states with a citation, its own evidence, or nothing at all. Works for any paper on arXiv that ships LaTeX source — one outside the library is parsed on demand, which takes a few seconds. Nothing is summarised or inferred; every line is the paper's own.
search_libraryFreeSearch 2497 readings taken from 234 arXiv papers' LaTeX source: citation stances (adopts, extends, disputes, measures against) and stated assumptions. Matches on the quoted sentence, the cue phrase that decided it, and the work cited. Returns the sentence verbatim with a link to the exact line.
Public scan report
scanner v0.1.10 · 2026-10-26 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 823ms20/20
- Tool poisoning3 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 4 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Keystone compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 88% of 4,460 AI and agents servers
- Tools
- 3
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote AI and agents server answers 100%
- Response time
- 331 ms
- faster than 42% of 2,331 AI and agents servers
What its tools let an agent do: 3 read
Install Keystone in Claude Code, Cursor or VS Code
claude mcp add --transport http keystone https://keystone-research.vercel.app/api/mcp
What the publisher says
From the Keystone repository's README, as published. We do not edit it. Read it on GitHub
Keystone
What is this paper standing on?
Live: https://keystone-research.vercel.app
No paper stands by itself. Each one adopts a method from somebody, argues with somebody else, and takes a handful of things on faith without flagging them. Keystone reads all three out of the paper's own LaTeX — not a summary, not a retrieval index, no model in the loop — and pins each one to the pixels on the page where the paper says it.
The name is the thesis, and it took a pivot to earn it. A keystone is the one stone an arch collapses without, and for almost every paper that stone belongs to somebody else.
Three things, all quoted rather than inferred:
\cite{ba2016layer} we normalise each layer" and "Unlike \cite{ba2016layer}, we normalise across the batch" are opposite statements about the same paper, and the difference is written down. Every citation site is classified from its cue phrase, and the cue is shown, so the reading is something you can disagree with.
- What it stands on. A citation is not a neutral pointer. "Following
requires it — "we hypothesize", "for simplicity", "it is well known that". Each is quoted next to what the paper offers in the same sentence: a citation, a pointer to its own evidence, or nothing at all.
- What it takes on faith. Authors announce their assumptions because the genre
both directions, so a paper shows both what it stands on and who stands on it. Across 234 papers that is 548 links, each carrying the sentence that placed it, and the chain is the real one: VGG → ResNet → Transformer → BERT / ViT / LLaMA, with batch and layer normalisation feeding in.
- The graph. Where a cited paper is also in the library the edge is walkable in
The library grows along its own citations. keystone expand reads every reference the library already resolves to arXiv, ranks them by how many papers take a stance on each, and fetches the top of that list — so each new paper arrives with at least one edge already attached rather than as an isolated node.
ResNet's central hypothesis — that residual mappings are easier to optimise than
unreferenced ones — is stated once, in the introduction, with nothing offered for it.
Page 2.
And it is often silent, and sometimes wrong. A cue read out of position produces a confident opposite rather than a vague answer, so the error rate is published rather than implied — and measured on somebody else's labels, because a rate measured on the same papers the rules were written against is not a rate, it is a restatement.
Scored against SciCite (11,014 citation contexts, Cohan et al. 2019) and ACL-ARC (1,941, Jurgens et al. 2018), neither of which contributed a single cue phrase:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Keystone: common questions
- Is Keystone MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Keystone safety report
- How do I install Keystone?
- It runs remotely at keystone-research.vercel.app. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Keystone need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Keystone maintained?
- The last commit was 13 days ago (2026-10-22). The latest release is v0.1.0.
- Is Keystone up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Keystone?
- Servers from other publishers that do the same job: paper-preflight MCP server.
- How does Keystone compare with other AI and agents MCP servers?
- safety score 91/100 (higher than 88% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Keystone
Same job from other publishers: the closest match first, then the best rated.
- paper-preflightChecks every LaTeX reference against Crossref, dblp, arXiv, DataCite, PubMed and OpenAlex. No LLM.not reviewedEstablishedA