MESS
MESS — the ledger your agents keep
mess.fyi · remote MCP server · https://mess.fyi/api/mcp
MESS is a searchable ledger of your service accounts — which Supabase, which Stripe, which email owns it, which project it belongs to, what it costs — kept current by your coding agents. You wire the server in once; from then on, agents log accounts as they create or find them, search the ledger before provisioning (so you don't end up with a fourth Supabase account for the same job), and flag any account that holds data or moves money with no recorded owner.
The map, not the vault: MESS stores metadata only. There is no field for a secret value, on purpose. Discovery reads env var names and CLI auth state — secret values never move.
Setup
Grab a free key at mess.fyi (Settings → Agent keys), then:
Claude Code
claude mcp add --transport http --scope user mess https://mess.fyi/api/mcp \
--header "Authorization: Bearer mess_sk_YOUR_KEY"Cursor — ~/.cursor/mcp.json:
{
"mcpServers": {
"mess": {
"url": "https://mess.fyi/api/mcp",
"headers": { "Authorization": "Bearer mess_sk_YOUR_KEY" }
}
}
}Any other MCP client that speaks streamable HTTP works the same way.
There is also a plain REST surface (/api/v1/accounts) with the same
keys, for scripts and CI.
Related MCP server: kevros-mcp
The surface
Four tools, one prompt:
| Log an account the moment it's created — provider, label, owning email, project, cost, where the credentials live. Idempotent. |
| Find accounts by project, provider, email, plan — the orientation call when picking a project back up. |
| The whole ledger in one call. |
| Correct a row, record an owner, mark an account cancelled. There is no delete — history is kept. |
| The dig: a field-tested procedure that inventories the accounts this machine and your projects touch and backfills the ledger. In Claude Code: |
Optional Claude Code hooks (one paste, served from the app): a session-start brief — every session opens knowing what the current project runs on — and a write-moment nudge that speaks up when a session touches a provider CLI. Only a provider name and repo folder name are ever sent.
Full disclosure
The handshake instructions the server sends your agent are published verbatim at mess.fyi/mcp — every variant, plus the dig procedure and the hook nudges. If you'd rather your agent didn't volunteer writes, don't wire it in.
Free to 20 accounts. Teams share one ledger (scoped digs, personal stays personal). Questions: hello@mess.fyi.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Alicense-qualityDmaintenanceAccess your team's 2FA codes from AI agents without sharing secrets. List accounts, generate TOTP codes, and maintain full audit trails. Built for DevOps, CI/CD pipelines, and automated workflows that need to authenticate to protected services.Last updated34MIT
- Alicense-quality-maintenanceGovernance primitives for autonomous agents. Verify actions against policy, record signed provenance, and bind intents cryptographically. Free tier available.Last updated

AgentValetofficial
AlicenseAqualityAmaintenanceIdentity and credential governance for AI agents. Every agent gets its own cryptographic identity, scoped short-lived credentials per platform, human approval on sensitive actions, and an immutable audit log.Last updated71MIT- Alicense-qualityBmaintenanceSelf-hostable control plane for managing the full lifecycle of non-human identities (AI agents), with short-lived credential issuance, attestation, and an MCP authorization gateway for per-tool access control.Last updatedMIT
Related MCP Connectors
Agent registry with Nostr identity, reputation, escrow, observability, and Lightning payments.
Agent payments, API key vaulting, and governed mandates. Agents spend within user-defined limits.
Signed agent discovery, security attestations, paid work, and verified settlement reputation.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/currentlyprivate/mess-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server