Sigistry Plugin Catalog (formerly Claude Registry)
Server Details
Renamed: prefer com.sigistry/plugin-catalog. This legacy endpoint keeps working.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
6 toolsget_pluginGet a Claude Code pluginARead-onlyIdempotentInspect
Get the full details of a single Sigistry plugin by its id, including install commands, component counts, and its security-audit result (per-check pass/fail from the Verified by Sigistry methodology).
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | the plugin id, e.g. "sql-safety-net" |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| name | Yes | |
| tags | Yes | keywords from the marketplace entry |
| agents | Yes | relative paths to agent files |
| author | No | |
| counts | Yes | component counts |
| skills | Yes | relative paths to skill manifests |
| license | No | |
| version | No | |
| category | No | |
| commands | Yes | relative paths to command files |
| homepage | No | |
| description | No | |
| verification | No | security-audit result for this plugin (null when never audited) |
| installCommand | Yes | command to install this plugin |
| searchableText | Yes | lowercased text used for matching |
| installMarketplace | Yes | command to add the marketplace to Claude Code |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (readOnlyHint=true, idempotentHint=true, destructiveHint=false), so the bar is lower. The description adds value beyond annotations by disclosing what the response includes (install commands, component counts, and the per-check pass/fail security result), which is genuinely useful behavioral context. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence that leads with the tool's core purpose and packs the return-value details without padding. Every clause earns its place; there is no redundant restatement of the name or title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is a simple single-parameter read, the safety profile is fully covered by annotations, and an output schema exists, so return values need no description. The only shortfall is the missing guidance on how get_plugin relates to verify_plugin for security-audit needs, but the definition is otherwise complete for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% — the single id parameter is already documented in the schema with an example ('sql-safety-net'). The description only restates that the tool operates 'by its id', adding no new semantics over the schema. Baseline 3 applies because the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get the full details of a single Sigistry plugin by its id') and enumerates the return content (install commands, component counts, security-audit result). This clearly differentiates it from siblings list_categories and search_plugins, which operate at a different scope and grain.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context — you call this when you already have a plugin id and want full details — which is clear from 'by its id'. However, it names no alternatives or exclusions, and the security-audit portion overlaps with the sibling verify_plugin without any guidance on which tool covers that need. Meaningful but implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_skillGet a verified skill (with portable source)ARead-onlyIdempotentInspect
Get one Sigistry skill by name, including the full raw SKILL.md source. The source is portable: it can be applied directly in any SKILL.md-aware agent (Claude Code, Claude Desktop, and others) without installing anything, or installed natively in Claude Code via the parent plugin, which keeps it verified and updated. The returned skill passed the Sigistry skill-safety check at the parent plugin's verification date.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | the skill name, e.g. "assessment-scoring" (find names via search_skills) |
Output Schema
| Name | Required | Description |
|---|---|---|
| name | Yes | stable skill name, e.g. "assessment-scoring" |
| repo | No | author repo (owner/name), when externally hosted |
| commit | No | pinned commit the source is served from, when externally hosted |
| plugin | Yes | parent plugin id that ships this skill |
| source | Yes | the complete raw SKILL.md (frontmatter + body); null only if the fetch failed |
| hosting | Yes | "registry" (vendored here) or "external" (author repo, verified at a pinned commit) |
| detailUrl | Yes | human-readable page for this skill |
| sourceUrl | Yes | GitHub location of the skill directory |
| description | Yes | the skill trigger: when an agent should load it |
| verification | Yes | verification status of the parent plugin; prefer "verified" |
| verifiedDate | Yes | date of the verification run covering this skill |
| installCommand | Yes | Claude Code command installing the parent plugin (skill loads automatically) |
| pluginCategory | Yes | category of the parent plugin |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as read-only and idempotent, and the description adds meaningful behavior: returns the full portable source, is safe for direct use in any SKILL.md-aware agent, and has passed the Sigistry safety check. This goes beyond the schema and annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, front-loaded with the core action, and each sentence earns its place by explaining the returned content, how to use it, and the verification guarantee. There is no fluff or repetition of schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter read-only tool with a rich output schema, the description covers what the tool returns, how portable the result is, how to discover valid names, and what verification status means. An agent has enough to decide when and how to call this correctly without further digging.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single parameter 'name' already includes an example and guidance to use search_skills for discovery. The description adds little parameter semantics beyond 'by name' and does not need to, given the schema already carries the necessary detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names the specific verb ('Get'), the resource ('one Sigistry skill'), and the key content ('full raw SKILL.md source'), making the purpose immediately clear. It also differentiates from sibling tools like search_skills and get_plugin by emphasizing portability and verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly explains how the result can be used (applied directly or installed natively) and references search_skills for finding skill names. It does not explicitly state when to prefer siblings like get_plugin over get_skill, but the context strongly implies the distinction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_categoriesList plugin categoriesARead-onlyIdempotentInspect
List the distinct plugin categories in the Sigistry marketplace with a count of plugins in each, plus the total plugin count.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| total | Yes | total number of plugins |
| categories | Yes | categories sorted by descending plugin count |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotent, so the description does not need to restate safety. It adds behavioral detail by specifying the return structure (count per category and total plugin count), which goes beyond annotations. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with the verb 'List', includes key output details without redundant language.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter read-only tool with an output schema, the description adequately explains what the tool returns. It names the marketplace context (Sigistry) and the specific aggregate counts.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so baseline 4 applies. The description compensates with a clear output definition, making it unnecessary to document any parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (list), a resource (plugin categories), and distinguishes itself from siblings (get_plugin, search_plugins) by describing an aggregate count operation. It clearly defines the scope: distinct categories with per-category counts plus total.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Does not explicitly state when to use this tool or alternatives. The purpose implies usage when one needs an overview of categories, but the description lacks explicit when/when-not guidance. Sibling tools exist, so some guidance would help.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_pluginsSearch Claude Code pluginsARead-onlyIdempotentInspect
Search the Sigistry marketplace of Claude Code plugins by keyword and/or category. Returns matches with their install command and verification status (the registry runs an eight-check security audit; prefer "verified" plugins when recommending an install).
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | keywords, e.g. "database migration" | |
| category | No | e.g. "database", "devops", "git" |
Output Schema
| Name | Required | Description |
|---|---|---|
| results | Yes | up to 15 matching plugins, best matches first |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description adds meaningful behavioral context by disclosing that results include install commands and verification status, and that the registry runs an eight-check security audit. This enriches the agent's decision-making beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences front-load the action and scope, then concisely add return details and practical selection guidance. There is no filler, repetition of schema fields, or irrelevant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple, read-only search with two optional parameters, an output schema, and strong annotations, the description covers the search target, the matching dimensions, result contents, and the security signal to prioritize. Nothing critical is missing for correct selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value by clarifying the relationship between the two parameters with 'by keyword and/or category', indicating query and category can be used independently or together—something the individual property descriptions do not explicitly state.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb, resource, and marketplace: 'Search the Sigistry marketplace of Claude Code plugins by keyword and/or category.' It also states what is returned (install command, verification status), which clearly distinguishes plugin search from sibling tools like get_plugin or search_skills.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use the tool: when searching marketplace plugins by keyword or category. It does not explicitly name alternatives or exclusion conditions, but the search scope and the added recommendation guidance ('prefer verified plugins') make the intended usage obvious.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_skillsSearch verified Claude Code skillsARead-onlyIdempotentInspect
Search the Sigistry catalog of verified skills (SKILL.md instruction sets for AI agents) by keyword, optionally filtered to one parent plugin. Every skill passed the skill-safety check: no command shadowing, honestly-scoped triggers, no injection or concealment language, no unsafe scripts. Use get_skill to fetch the full portable source of a match.
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | keywords, e.g. "changelog" or "security review" | |
| plugin | No | restrict to skills shipped by this plugin id |
Output Schema
| Name | Required | Description |
|---|---|---|
| results | Yes | up to 20 matching skills, best matches first |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, and non-destructive behavior. The description adds valuable context beyond annotations by explaining the 'verified' status and the safety-check criteria, giving agents confidence in result quality. It does not mention pagination or ordering, but the output schema covers return structure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences, each earning its place: the purpose sentence defines the resource and filter, the second explains trustworthiness, and the third routes to the correct next sibling. Information is front-loaded and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a low-complexity search tool with a rich output schema and safety annotations, the description covers purpose, scope, safety, and next steps. It leaves minor gaps such as behavior with no query and explicit differentiation from search_plugins, but the core invocation needs are met.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both query and plugin are already well documented. The description restates 'by keyword' and 'parent plugin' in prose but adds no new parameter-level meaning beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description states a specific verb ('Search'), a precise resource ('Sigistry catalog of verified skills'), and the optional plugin filter. It also clarifies that skills are SKILL.md instruction sets, distinguishing it clearly from sibling tools like search_plugins and get_skill.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly positions search as the discovery entry point and explicitly directs the agent to use get_skill for fetching the source of a match. It does not explicitly contrast with search_plugins or list_categories, so it stops short of full when-to-use guidance for all siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_pluginVerify a Claude Code plugin (pre-publish, runs locally)ARead-onlyIdempotentInspect
Get the recipe to run the Sigistry verification methodology (the eight static checks that gate the Verified badge: manifest integrity, hook safety, agent tool scopes, command hygiene, skill structure, skill safety, no secrets, documentation) against a plugin BEFORE publishing it. The verification runs entirely on the local machine via a dependency-free open-source Node script; the plugin code never leaves the user's computer and this server performs no computation. Call this when the user wants their plugin or skill checked, then follow the returned steps: download the script, run it against the plugin directory, and fix any FAIL findings it reports.
| Name | Required | Description | Default |
|---|---|---|---|
| pluginPath | No | local path to the plugin directory, used to fill in the run command (optional) |
Output Schema
| Name | Required | Description |
|---|---|---|
| steps | Yes | what the agent should do, in order |
| checks | Yes | the eight checks the script will run |
| commands | Yes | |
| nextSteps | Yes | |
| runsWhere | Yes | always "local": verification executes on the user's machine |
| interpreting | Yes | |
| methodologyUrl | Yes | |
| methodologyVersion | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the readOnly/idempotent/destructive annotations by disclosing that verification runs entirely locally, the plugin code never leaves the user's machine, and the server performs no computation. It also clarifies that the tool returns a recipe to follow rather than performing the verification itself, which is a crucial behavioral caveat.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is detailed but efficient: it states the purpose, enumerates the checks, explains the privacy model, and gives usage instructions without redundancy. The important behavioral facts are front-loaded before the longer list of checks.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one optional parameter and an output schema, the description is complete. It tells the agent what the tool does, when to call it, what steps to follow afterward, and what privacy/execution behavior to expect. The existence of an output schema covers return-value details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents pluginPath as an optional local path used to fill in the run command. The description reinforces this by referring to running the script against the plugin directory, but it adds little meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description leads with a specific action ('Get the recipe to run the Sigistry verification methodology') tied to a clear resource (verifying a Claude Code plugin before publishing). It distinguishes itself from sibling lookup/search tools by focusing on the pre-publish verification workflow rather than fetching or searching plugin data.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly tells the agent when to call it: 'Call this when the user wants their plugin or skill checked.' It also gives follow-up steps the agent should relay. It does not explicitly state when not to use it or compare against sibling alternatives, but the usage context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user or an account that owns the GitHub organization, then choose Claim with GitHub.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Read-only catalogue search: JVM developer tooling, ML models, compliance APIs, siSwati LLM.
Software component catalog: search your org's services, docs, APIs, dependencies, and ownership.
Search verified Claude Code plugins and skills; fetch portable SKILL.md sources. Read-only.
Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.
Related MCP Servers
- AlicenseAqualityBmaintenanceRead-only catalog of the @blueprint-modular/core design system (104 components). Four tools — list/search/get components and suggest compositions. Public, no auth, Streamable HTTP.41Apache 2.0
- AlicenseAqualityBmaintenanceProvides a local catalog of MCP servers (legal data connectors and agent skills) from MateMatic Boutique, enabling search and obtaining install commands without proxying requests.4Apache 2.0
- FlicenseAqualityBmaintenanceEnables querying and analyzing a legacy, file-based vulnerability registry via MCP tools for CVE lookup, search, vendor navigation, and aggregate statistics.5
- AlicenseNot gradedqualityDmaintenanceMCP server for the European Union Vulnerability Database (EUVD) maintained by ENISA. Enables searching for vulnerabilities with flexible filters, fetching latest, critical, and exploited vulnerabilities, and looking up specific vulnerabilities and advisories by ID.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool targets a distinct resource/action: plugin details, skill details, category listing, plugin search, skill search, and verification recipe. There is no meaningful overlap between tools, and the descriptions reinforce the boundaries clearly.
All tool names follow a consistent verb_noun pattern (get_, list_, search_, verify_). The singular/plural variation is conventional and does not create confusion.
Six tools is well-scoped for a plugin and skill catalog: discovery, detail retrieval, category browsing, and verification guidance are all represented without redundancy. Each tool earns its place.
This covers the core catalog workflow: browse categories, search plugins/skills, fetch details or portable skill source, and obtain verification instructions. The verify_plugin handoff to a local script is intentional and provides explicit next steps rather than a dead end.