# @curatedmcp/mcp

An MCP server that exposes the [CuratedMCP](https://curatedmcp.com) catalog — search human-reviewed, risk-classified MCP servers, check whether a server is verified, and pull its full risk/capability profile, all from inside any MCP client.

```
npx -y @curatedmcp/mcp
```

## Why

Before installing an unfamiliar `npx some-mcp-server` command, ask your AI agent to check it against the catalog first — no need to leave the conversation.

## Tools

| Tool | What it does |
|---|---|
| `search_mcp_catalog` | Search the catalog by keyword and/or category |
| `get_mcp_server_details` | Full risk profile for one server: risk level, declared capabilities (file access, network egress, shell exec, etc.), compatible clients, transport type, install command |
| `check_mcp_server_verified` | Quick check: is this server name or npm package in the verified catalog? |

## Client config

```json
{
  "mcpServers": {
    "curatedmcp": {
      "command": "npx",
      "args": ["-y", "@curatedmcp/mcp"]
    }
  }
}
```

## Development

```bash
npm install
npm run build
node test/smoke.mjs   # exercises all three tools against curatedmcp.com
```

By default the server calls the production API at `https://curatedmcp.com`. Override with `CURATEDMCP_APP_URL` for local development against a different deployment.