Verificate MCP
Server Details
Agentic code review, no signup to try: reality gates + frontier-model review, with veto.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- VerificateAI/verificate-mcp-quickstart
- GitHub Stars
- 1
- Server Listing
- Verificate MCP
TDQS
Scored across 5 tools
Each tool targets a distinct lifecycle stage: analyze_code gives advisory feedback, validate_plan gates designs, validate_ai_output gates deliverables, validate_artifact checks deployable readiness, and generate_code combines generation with gating. Descriptions explicitly cross-reference when to use each, eliminating ambiguity.
All tool names follow a consistent verb_noun pattern using lowercase with underscores: analyze_code, generate_code, validate_ai_output, validate_artifact, validate_plan. The verb clearly indicates the action and the object clarifies the target, making the naming predictable and readable.
Five tools is well-scoped for a verification/gating server, covering analysis, generation, output validation, plan validation, and artifact validation without redundancy. Each tool earns its place and the count is appropriate for the clearly defined domain.
The tool surface covers the full lifecycle of AI-generated work: plan before coding, generate code, validate any AI output, analyze existing code, and check production readiness. There are no obvious gaps—every critical gate from plan to deployment is represented.
Available Tools
5 toolsanalyze_codeAdvisory code deep-diveARead-onlyIdempotentInspect
Advisory deep-dive on existing code — scores and findings, deliberately NO pass/fail verdict, so it never blocks an agent. Surfaces performance hot paths, scalability cliffs, reliability gaps and tech debt with concrete latency/throughput arithmetic (e.g. 'O(n²) dedup: ~4s at 10k items'). Read-only: the code is analyzed, never executed. Use it to understand a validate_ai_output rejection or review inherited code; use validate_ai_output when you need an accept/reject decision.
| Name | Required | Description | Default |
|---|---|---|---|
| code | Yes | The source code to analyze — a function, file or pasted excerpt. | |
| language | No | Source language, e.g. 'python', 'typescript', 'cpp', 'sql', 'swift'. Inferred if omitted; stating it sharpens findings. | |
| analysis_type | No | Lens for the review: 'quality' (default, broad ISO/IEC 25010 pass) or a focused pass on one dimension. | quality |
Output Schema
| Name | Required | Description |
|---|---|---|
| issues | Yes | Findings as 'severity|category|detail' with supporting arithmetic |
| provider | No | |
| complexity | No | low | medium | high |
| suggestions | No | |
| quality_score | Yes | 0-100 advisory score for the chosen lens |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only and idempotent, but the description reinforces and expands on them by stating the code is 'never executed' and that the tool intentionally avoids blocking verdicts. It also discloses the nature of output (scores, findings, latency arithmetic), adding meaningful behavioral context beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three dense sentences with no filler. The core purpose and key constraint (no pass/fail) are front-loaded, followed by concrete examples of output value and explicit alternative routing. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for an analysis tool: it explains the advisory nature, read-only behavior, typical use cases, and the alternative decision tool. The output schema covers return details, and annotations cover safety. No critical missing guidance for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all three parameters. The description adds context about analysis quality (e.g., 'performance hot paths, scalability cliffs') but does not materially clarify parameter syntax or formats beyond what the schema already provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description specifies a clear verb-resource pair ('Advisory deep-dive on existing code') and immediately differentiates itself from validate_ai_output by stating it deliberately offers no pass/fail verdict. This uniquely positions it against the sibling tools without requiring the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use scenarios ('understand a validate_ai_output rejection or review inherited code') and an explicit alternative ('use validate_ai_output when you need an accept/reject decision'). This removes any ambiguity about routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_codeGenerate gated codeARead-onlyInspect
Generate code and gate it in one step: an LLM writes the implementation, then the same protection engine as validate_ai_output vets it — retrying generation when the gate rejects. If every attempt is vetoed you still receive the last attempt, clearly marked validated:false with the gate findings — rejected code is never presented as clean. Generation runs on our infrastructure; nothing executes in your environment.
| Name | Required | Description | Default |
|---|---|---|---|
| prompt | Yes | What to build, with any constraints worth enforcing — e.g. 'a rate-limited retry decorator with exponential backoff, stdlib only'. | |
| language | No | Target language for the generated code, e.g. 'python' (default), 'typescript', 'go', 'sql'. | python |
| max_tokens | No | Generation budget. The default 4000 fits most functions/classes; raise it for multi-file scaffolds. |
Output Schema
| Name | Required | Description |
|---|---|---|
| code | No | The generated implementation |
| attempts | No | Generation attempts before approval or give-up |
| provider | No | |
| generated | Yes | False only when no provider returned code |
| validated | No | True if the protection gates approved the final attempt; false means the gate findings in 'protection' explain the veto |
| protection | No | Deterministic gate result. A veto here is final — the model review cannot override it. |
| validation_score | No | Deterministic gate score, 0-100 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description richly discloses behavior beyond the annotations: retries generation when the gate rejects, returns the last attempt with validated:false if all attempts fail, and explicitly states 'rejected code is never presented as clean.' It also clarifies that generation runs on infrastructure and 'nothing executes in your environment,' aligning with readOnlyHint and providing safety context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, each earning its place: the core action is front-loaded, the failure behavior is explained, and the security/safety boundary is stated. There is no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema exists and annotations are rich, the description covers what an agent needs: the generation-vetting workflow, failure fallback, and execution boundary. Nothing critical is missing for invoking the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema coverage is 100%, so every parameter is already documented. The description adds context about generation and gating behavior but does not add meaning to specific parameters like prompt, language, or max_tokens. A baseline 3 is appropriate since schema already carries the parameter documentation burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Generate code and gate it in one step.' It clearly distinguishes the tool from siblings by noting it uses 'the same protection engine as validate_ai_output' while adding the generation step. This immediately differentiates it from the validation-only sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for generating code that is then automatically vetted, but it does not explicitly say when to choose this over validate_ai_output or other siblings. Referencing validate_ai_output as the engine source hints at the relationship but does not provide explicit when-to-use/when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_ai_outputGate AI-written output (code or documents)ARead-onlyIdempotentInspect
The merge gate for ANY AI-written output — code, documentation, reports, emails, configs: returns a binary approve/reject verdict with veto power — e.g. it rejects code calling the nonexistent stripe.Inventory API, an N+1 loop with the latency arithmetic to prove it, or a doc claiming success with no evidence. Deterministic reality gates (mock/placeholder veto, gaming and bypass detection, invented-API checks) run first and cannot be overridden; a frontier-model review (ISO/IEC 25010) then scores quality, accuracy, reliability and tech debt. In a benchmark, a frontier model reviewing alone caught reward-gaming and hallucinated APIs 0/6 times in a natural review workflow; these gates catch them deterministically on every call. Read-only: nothing is executed. Call it on every AI-generated deliverable before accepting it; use validate_plan for plans, analyze_code for an advisory report without a verdict.
| Name | Required | Description | Default |
|---|---|---|---|
| context | No | Optional review context — an object like {"language": "cpp", "scale": "10k req/s"} ('language' sharpens SDK-reality checks) or a free-text sentence describing intent. | |
| ai_output | Yes | The AI-generated output to gate — source code (a diff, function or whole file, any mainstream language) or prose (documentation, a report, an email, release notes). For reliable latency keep one submission under ~15,000 characters; split larger artifacts at natural boundaries (functions, SQL statements, sections) and validate the units separately. Reviews are wall-clock bounded: an over-budget model review returns an explicit timed-out result (deterministic gates still run) rather than hanging. | |
| validation_type | No | What the output is: 'code_generation' (default) for source code; 'documentation', 'report', 'email', 'text', ... for prose (code-marker gates are skipped, integrity gates and the frontier review still run); 'plan' for designs/specs. | code_generation |
Output Schema
| Name | Required | Description |
|---|---|---|
| score | Yes | Combined score 0-100 (gates fused with the model review) |
| valid | Yes | The binary verdict: true = approved, false = rejected |
| issues | Yes | Severity-ranked findings, each 'severity|category|detail' with the reasoning |
| provider | No | Model that ran the deep review, or 'protection-gates-only' |
| confidence | No | score / 100 |
| protection | No | Deterministic gate result. A veto here is final — the model review cannot override it. |
| suggestions | No | Concrete fixes to reach approval |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark readOnlyHint/idempotentHint, and the description adds substantial behavior: 'veto power,' deterministic gates that 'cannot be overridden,' the frontier-model review step, the timeout behavior, and a benchmark demonstrating why the gates exist. It explicitly confirms 'Read-only: nothing is executed,' matching the annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than a typical tool definition, but every sentence earns its place: purpose, examples, deterministic-gate mechanics, benchmark evidence, read-only confirmation, and sibling routing. It front-loads the core function before diving into details. The benchmark sentence is slightly tangential but supports the tool's value proposition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is remarkably complete: it explains the returned binary verdict, the two-stage review process, timeout behavior, read-only safety, when to use it, and which sibling to choose for alternatives. The output schema presumably covers the return shape; nothing critical for an agent to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% with detailed parameter explanations (including the 15,000-character guidance and validation_type meanings). The tool description itself adds little parameter-specific semantics; it focuses on tool-level purpose and sibling routing. Baseline 3 is appropriate because the schema already carries the parameter burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb ('gate'), a resource ('ANY AI-written output'), and the binary verdict behavior. It distinguishes the tool from siblings by naming validate_plan and analyze_code as alternatives, so an agent can immediately tell this is the merge-gate tool and not an advisory analyzer.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly instructs 'Call it on every AI-generated deliverable before accepting it' and gives when-not conditions by pointing to siblings: 'use validate_plan for plans, analyze_code for an advisory report without a verdict.' This is direct, unambiguous usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_artifactGate a deployable artifact against the Verificate production doctrineAInspect
Deterministic production-readiness gate for AI-built systems. Verifies the invariants that stop a system silently shipping broken: every critical component is PRESENT and LOADS, the import closure resolves (nothing assumed 'already on the box'), all runtime dependencies are declared, and health is a REAL fail-closed check. Returns approve/reject with a fix plan and ISO 27001 / ISO 5055 control evidence. Facts are gathered by the Verificate collector in your CI; the gate is the authority. Non-bypassable, fails closed. This is the control-plane sibling of validate_ai_output — code quality is one invariant; this gates the whole deployable.
| Name | Required | Description | Default |
|---|---|---|---|
| artifact | Yes | Collected artifact facts: {critical_components:[{name,loads:bool}], import_closure_ok:bool, undeclared_deps:[str], health_truthful:bool}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does so thoroughly. It discloses that the tool is 'deterministic,' 'non-bypassable,' 'fails closed,' and that it 'Returns approve/reject with a fix plan and ISO 27001 / ISO 5055 control evidence.'
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the purpose and enumerates invariants efficiently. It is slightly repetitive, with 'fails closed' appearing twice ('fail-closed check' and 'Non-bypassable, fails closed'), but every sentence otherwise contributes distinct value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description explains the return value ('approve/reject with a fix plan and ISO 27001 / ISO 5055 control evidence'), the input provenance, the behavioral guarantees, and the relationship to siblings. For a single-parameter tool, this is complete enough for an agent to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3; the schema already documents the artifact object's structure. The description adds meaningful provenance context beyond the schema: facts come from 'the Verificate collector in your CI' and the gate itself is the authority, which helps an agent know what to pass.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Deterministic production-readiness gate for AI-built systems,' and enumerates the exact invariants verified. It also distinguishes itself from a sibling: 'This is the control-plane sibling of validate_ai_output — code quality is one invariant; this gates the whole deployable.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly contrasts this tool with validate_ai_output and clarifies which concern each gates, saying code quality is 'one invariant' while this tool gates the whole deployable. It also states the prerequisite context: 'Facts are gathered by the Verificate collector in your CI; the gate is the authority.' This gives an agent clear routing between alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_planGate an implementation planARead-onlyIdempotentInspect
The gate for PLANS, designs and specs — run BEFORE any code is written, the cheapest place to catch a bad design. Returns the same binary verdict shape as validate_ai_output, with findings on completeness, feasibility, performance and scalability implications, security risks and missing considerations (e.g. it rejects a plan that polls an API every 100ms per client, with the request-volume math). Read-only: nothing is executed or stored beyond the verdict. Use validate_ai_output for the code that follows.
| Name | Required | Description | Default |
|---|---|---|---|
| plan | Yes | The implementation plan, design or spec to validate, as plain text or markdown — e.g. a numbered migration plan or an architecture sketch. | |
| context | No | Optional constraints the review should weigh, e.g. {"system": "payments API", "scale": "1M users", "constraints": "PostgreSQL only"}. |
Output Schema
| Name | Required | Description |
|---|---|---|
| score | Yes | Combined score 0-100 (gates fused with the model review) |
| valid | Yes | The binary verdict: true = approved, false = rejected |
| issues | Yes | Severity-ranked findings, each 'severity|category|detail' with the reasoning |
| provider | No | Model that ran the deep review, or 'protection-gates-only' |
| confidence | No | score / 100 |
| protection | No | Deterministic gate result. A veto here is final — the model review cannot override it. |
| suggestions | No | Concrete fixes to reach approval |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description states 'Read-only: nothing is executed or stored beyond the verdict,' which adds concrete side-effect context beyond the annotations. It also describes the verdict shape and the categories of findings, such as security risks and request-volume feasibility checks. No contradiction with annotations; the description enriches them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: gate/timing, verdict shape and findings, read-only guarantee, and routing to the sibling tool. It is front-loaded with the most important decision guidance and contains no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity, the description covers what it does, when to use it, what it returns, safety guarantees, and the key alternative. The output schema covers return-value structure, so nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the schema already explains the plan and context parameters with examples. The tool description does not substantially add parameter-level meaning beyond what the schema provides, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb and resource: validate PLANS, designs and specs. It positions itself as 'the gate' before code is written and distinguishes itself from validate_ai_output for the code that follows. An agent can select this tool confidently without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit timing guidance: run BEFORE any code is written. It also names the relevant alternative, 'Use validate_ai_output for the code that follows,' making the when-to-use and when-not-to-use boundary explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
2 tool updates
- Changed
validate_ai_output1 field changed- changed
Input schema / properties / ai_output / descriptionPrevious value: -"The AI-generated output to gate — source code (a diff, function or whole file, any mainstream language) or prose (documentation, a report, an email, release notes)."New value: +"The AI-generated output to gate — source code (a diff, function or whole file, any mainstream language) or prose (documentation, a report, an email, release notes). For reliable latency keep one submission under ~15,000 characters; split larger artifacts at natural boundaries (functions, SQL statements, sections) and validate the units separately. Reviews are wall-clock bounded: an over-budget model review returns an explicit timed-out result (deterministic gates still run) rather than hanging."
- Added
validate_artifact
1 tool update
- Changed
validate_ai_output5 fields changed- changed
Input schema / properties / ai_output / descriptionPrevious value: -"The AI-generated code to gate — a diff, function or whole file. Plain source text, any mainstream language."New value: +"The AI-generated output to gate — source code (a diff, function or whole file, any mainstream language) or prose (documentation, a report, an email, release notes)." - changed
Input schema / properties / context / descriptionPrevious value: -"Optional review context, e.g. {\"language\": \"cpp\", \"scale\": \"10k req/s\"}. 'language' sharpens SDK-reality checks."New value: +"Optional review context — an object like {\"language\": \"cpp\", \"scale\": \"10k req/s\"} ('language' sharpens SDK-reality checks) or a free-text sentence describing intent." - changed
Input schema / properties / context / typePrevious value: -"object"New value: +[ + "object", + "string" +] - changed
Input schema / properties / validation_type / descriptionPrevious value: -"'code_generation' (default) for source code; 'text' for prose output such as documentation or commit messages."New value: +"What the output is: 'code_generation' (default) for source code; 'documentation', 'report', 'email', 'text', ... for prose (code-marker gates are skipped, integrity gates and the frontier review still run); 'plan' for designs/specs." - removed
Input schema / properties / validation_type / enumRemoved value: -[ - "code_generation", - "text" -]
4 tool updates
- Changed
analyze_code5 fields changed- changed
Input schema / properties / analysis_type / descriptionPrevious value: -"quality | performance | scalability | security | tech_debt"New value: +"Lens for the review: 'quality' (default, broad ISO/IEC 25010 pass) or a focused pass on one dimension." - added
Input schema / properties / analysis_type / enumAdded value: +[ + "quality", + "performance", + "scalability", + "security", + "tech_debt" +] - changed
Input schema / properties / code / descriptionPrevious value: -"Code to analyze"New value: +"The source code to analyze — a function, file or pasted excerpt." - changed
Input schema / properties / language / descriptionPrevious value: -"Source language (python, cpp, sql, swift, ...)"New value: +"Source language, e.g. 'python', 'typescript', 'cpp', 'sql', 'swift'. Inferred if omitted; stating it sharpens findings." - changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "properties": { + "complexity": { + "description": "low | medium | high", + "type": "string" + }, + "issues": { + "description": "Findings as 'severity|category|detail' with supporting arithmetic", + "items": { + "type": "string" + }, + "type": "array" + }, + "provider": { + "type": "string" + }, + "quality_score": { + "description": "0-100 advisory score for the chosen lens", + "type": "number" + }, + "suggestions": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "quality_score", + "issues" + ], + "type": "object" +}
- Changed
generate_code6 fields changed- added
Input schema / properties / language / descriptionAdded value: +"Target language for the generated code, e.g. 'python' (default), 'typescript', 'go', 'sql'." - added
Input schema / properties / max_tokens / descriptionAdded value: +"Generation budget. The default 4000 fits most functions/classes; raise it for multi-file scaffolds." - added
Input schema / properties / max_tokens / maximumAdded value: +32768 - added
Input schema / properties / max_tokens / minimumAdded value: +256 - changed
Input schema / properties / prompt / descriptionPrevious value: -"Code generation prompt"New value: +"What to build, with any constraints worth enforcing — e.g. 'a rate-limited retry decorator with exponential backoff, stdlib only'." - changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "properties": { + "attempts": { + "description": "Generation attempts before approval or give-up", + "type": "integer" + }, + "code": { + "description": "The generated implementation", + "type": "string" + }, + "generated": { + "description": "False only when no provider returned code", + "type": "boolean" + }, + "protection": { + "additionalProperties": true, + "description": "Deterministic gate result. A veto here is final — the model review cannot override it.", + "properties": { + "protection_score": { + "description": "Deterministic gate score, 0-100", + "type": "number" + }, + "verdict": { + "description": "'approved' or 'rejected' from the gate layer", + "type": "string" + }, + "vetoed": { + "description": "True if any veto gate failed the submission", + "type": "boolean" + }, + "vetoed_by": { + "description": "Names of the gates that vetoed, e.g. ['code_reality_gate']", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "provider": { + "type": "string" + }, + "validated": { + "description": "True if the protection gates approved the final attempt; false means the gate findings in 'protection' explain the veto", + "type": "boolean" + }, + "validation_score": { + "description": "Deterministic gate score, 0-100", + "type": "number" + } + }, + "required": [ + "generated" + ], + "type": "object" +}
- Changed
validate_ai_output5 fields changed- changed
Input schema / properties / ai_output / descriptionPrevious value: -"The AI-generated code to gate"New value: +"The AI-generated code to gate — a diff, function or whole file. Plain source text, any mainstream language." - changed
Input schema / properties / context / descriptionPrevious value: -"Context, e.g. {\"language\": \"cpp\"}"New value: +"Optional review context, e.g. {\"language\": \"cpp\", \"scale\": \"10k req/s\"}. 'language' sharpens SDK-reality checks." - changed
Input schema / properties / validation_type / descriptionPrevious value: -"code_generation (default) | text"New value: +"'code_generation' (default) for source code; 'text' for prose output such as documentation or commit messages." - added
Input schema / properties / validation_type / enumAdded value: +[ + "code_generation", + "text" +] - changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "properties": { + "confidence": { + "description": "score / 100", + "type": "number" + }, + "issues": { + "description": "Severity-ranked findings, each 'severity|category|detail' with the reasoning", + "items": { + "type": "string" + }, + "type": "array" + }, + "protection": { + "additionalProperties": true, + "description": "Deterministic gate result. A veto here is final — the model review cannot override it.", + "properties": { + "protection_score": { + "description": "Deterministic gate score, 0-100", + "type": "number" + }, + "verdict": { + "description": "'approved' or 'rejected' from the gate layer", + "type": "string" + }, + "vetoed": { + "description": "True if any veto gate failed the submission", + "type": "boolean" + }, + "vetoed_by": { + "description": "Names of the gates that vetoed, e.g. ['code_reality_gate']", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "provider": { + "description": "Model that ran the deep review, or 'protection-gates-only'", + "type": "string" + }, + "score": { + "description": "Combined score 0-100 (gates fused with the model review)", + "type": "number" + }, + "suggestions": { + "description": "Concrete fixes to reach approval", + "items": { + "type": "string" + }, + "type": "array" + }, + "valid": { + "description": "The binary verdict: true = approved, false = rejected", + "type": "boolean" + } + }, + "required": [ + "valid", + "score", + "issues" + ], + "type": "object" +}
- Changed
validate_plan3 fields changed- changed
Input schema / properties / context / descriptionPrevious value: -"Optional context (system, constraints, scale targets)"New value: +"Optional constraints the review should weigh, e.g. {\"system\": \"payments API\", \"scale\": \"1M users\", \"constraints\": \"PostgreSQL only\"}." - changed
Input schema / properties / plan / descriptionPrevious value: -"The plan/design/spec to validate"New value: +"The implementation plan, design or spec to validate, as plain text or markdown — e.g. a numbered migration plan or an architecture sketch." - changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "properties": { + "confidence": { + "description": "score / 100", + "type": "number" + }, + "issues": { + "description": "Severity-ranked findings, each 'severity|category|detail' with the reasoning", + "items": { + "type": "string" + }, + "type": "array" + }, + "protection": { + "additionalProperties": true, + "description": "Deterministic gate result. A veto here is final — the model review cannot override it.", + "properties": { + "protection_score": { + "description": "Deterministic gate score, 0-100", + "type": "number" + }, + "verdict": { + "description": "'approved' or 'rejected' from the gate layer", + "type": "string" + }, + "vetoed": { + "description": "True if any veto gate failed the submission", + "type": "boolean" + }, + "vetoed_by": { + "description": "Names of the gates that vetoed, e.g. ['code_reality_gate']", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "provider": { + "description": "Model that ran the deep review, or 'protection-gates-only'", + "type": "string" + }, + "score": { + "description": "Combined score 0-100 (gates fused with the model review)", + "type": "number" + }, + "suggestions": { + "description": "Concrete fixes to reach approval", + "items": { + "type": "string" + }, + "type": "array" + }, + "valid": { + "description": "The binary verdict: true = approved, false = rejected", + "type": "boolean" + } + }, + "required": [ + "valid", + "score", + "issues" + ], + "type": "object" +}
1 tool update
- Changed
validate_ai_output2 fields changed- changed
Input schema / properties / ai_output / descriptionPrevious value: -"Code, plan, or output to validate"New value: +"The AI-generated code to gate" - changed
Input schema / properties / validation_type / descriptionPrevious value: -"code_generation | plan | design | architecture | text"New value: +"code_generation (default) | text"
4 tool updates
- First observed
analyze_code - First observed
generate_code - First observed
validate_ai_output - First observed
validate_plan
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity – fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge – works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge – works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Multi-LLM council: 25+ frontier models in parallel, consensus scoring, verdict-first code review.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Deterministic AI code review, with an audit record. Governance inside the agent loop.
Pre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceDeterministic AI code review with audit records, providing stack-specific rulesets and governance for coding agents.1MIT
- AlicenseAqualityAmaintenanceThe open-source review layer for AI agents. Work done for humans is decided by humans.18361AGPL 3.0
- AlicenseNot gradedqualityFmaintenanceAn autonomous software-engineering pipeline for Claude Code that runs on real evidence: codebase intelligence tools, git analytics, deterministic verification rules, and zero LLM-judges-LLM. Every claim traces to a paper and every PR passes its own gates.1MIT

gossipcatofficial
AlicenseNot gradedqualityAmaintenanceEnables multi-agent code review with cross-verification of findings against source code, catching hallucinations and improving agent accuracy over time.11041MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.