MCP.Market

Yotta Verify MCP server

by YottaMeta·io.github.YottaMeta/yotta-verify-mcp·v0.4.3
No reviews yet

Pre-install security scanner for AI agent skills (local stdio MCP). Offline static scan; no upload.

A91/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
Growing

0 stars389 downloads/wk

Reviews

Write one

Nobody has reviewed Yotta Verify yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Yotta Verify tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Yotta Verify compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 88% of 4,460 AI and agents servers
Downloads a week
389
more than 83% of 1,538 AI and agents servers with a package

Release history: 2 versions in the registry since 2026-09-15, latest 2026-09-23, typically one every 8 days.

Install Yotta Verify in Claude Code, Cursor or VS Code

Runs npx -y @yottameta/yotta-verify-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add yotta-verify-mcp -- npx -y @yottameta/yotta-verify-mcp
Add to Cursor

What the publisher says

From the Yotta Verify repository's README, as published. We do not edit it. Read it on GitHub

Language: English · 中文

yotta-verify-mcp · 元信MCP (YuanXin MCP)

YottaMeta's pre-install security scanner for Agent skills, exposed as a stdio MCP server. Before you install any skill, plugin or MCP server, it runs a deterministic static scan — prompt injection, malicious patterns, SKILL.md integrity and permissions — and returns a verdict, an audited badge, a CI gate and a report as MCP tools. Activates when configuring the 元信 MCP server in an MCP client, wiring a trust-scan into an agent / workflow, or calling the MCP tools. Zero dependencies (Python 3.8+ standard library); Windows + Linux + macOS; fully local and offline — no network calls, no execution of the scanned code.

What it is

The skill / plugin market has a trust problem: a 2025 survey of 22,511 skills found 140,963 issues, and 36% contain prompt injection. 元信 MCP gives you a deterministic answer before you install — the same scan as the yotta-verify CLI, exposed as four MCP tools so any MCP client (Claude, VS Code, Codex, Cursor, …) can call it.

It is a pre-install verifier, not a sandbox and not a runtime monitor: it only reads files and prints a report. It never executes the scanned code, never connects to the network for the scan, and never fixes anything.

Why use it

MCP tools

MCP client configuration

MCP configuration is optional. An AI agent may show you the target config file, the exact mcpServers JSON, and the effect, then wait for your explicit consent before writing anything. If you decline, use the bundled CLI scanner directly; the scan result is unchanged.

Tool reference

scan_skill

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Yotta Verify: common questions

Is Yotta Verify MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the Yotta Verify safety report
How do I install Yotta Verify?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Yotta Verify need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Yotta Verify maintained?
The last commit was 34 days ago (2026-10-01). The latest release is v0.4.3.
What can I use instead of Yotta Verify?
Servers from other publishers that do the same job: Agent Security Scanner MCP server, HOL Guard MCP server and Watch Skill MCP server. Compare all Yotta Verify alternatives.
How does Yotta Verify compare with other AI and agents MCP servers?
safety score 91/100 (higher than 88% of 4,460 AI and agents servers); downloads a week 389 (more than 83% of 1,538 AI and agents servers with a package). Full comparison.

Alternatives to Yotta Verify

Same job from other publishers: the closest match first, then the best rated.

All Yotta Verify alternatives →
  • Agent Security Scanner
    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
    C
  • HOL Guard
    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B
  • Skillsmith
    Share agent skills across your team, scan them for risk, and track what's actually used.
    B
  • Pm Claude Skills
    1310 professional Agent Skills + workflow recipes — searchable & fetchable over MCP.
    A