sentrul-mcp-server
Allows research and analysis of arXiv papers using Sentrul's research agent, providing summaries, entities, claims, and trace URLs for academic content.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@sentrul-mcp-serverResearch https://example.com/privacy-policy and summarize key data practices"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
sentrul-mcp-server
Run Sentrul research, compliance, and trace-lookup agents from any MCP-aware client. 257 production agents behind one gateway.
Version: 0.1.0 | SDK: @modelcontextprotocol/sdk@1.29.0 | License: MIT
Install (Claude Desktop)
Add this snippet to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"sentrul": {
"command": "npx",
"args": ["-y", "sentrul-mcp-server"],
"env": { "SENTRUL_API_KEY": "optional — free tier auto-provisions" }
}
}
}Restart Claude Desktop. The server auto-provisions a free-tier key on first use — no signup required.
Related MCP server: The Mine Works MCP servers
Tools
sentrul_research
Fetch a URL and run Sentrul's research-agent on the content. Returns summary, entities, claims, and a public Langfuse trace URL.
Example prompts
"Research https://example.com/report and summarise the key claims"
"Do a full-depth research pass on https://arxiv.org/abs/2401.00001"
sentrul_compliance_scan
Scan text for common compliance patterns (PII, PCI, HIPAA, GDPR data). Returns findings + severity. Not legal advice.
Example prompts
"Scan this document for PII and PCI violations: [paste text]"
"Check the following privacy policy for GDPR data patterns"
sentrul_trace_lookup
Retrieve a public Langfuse trace by ID. Returns the structured trace payload for inspection.
Example prompts
"Fetch trace clm8abc123xyz from Sentrul"
"Show me the observation tree for trace ID abc-def-456"
Environment variables
Variable | Required | Default | Description |
| No | auto-provisioned | Your Sentrul API key. Leave unset to use the free tier. |
| No |
| Override the Sentrul gateway base URL (staging / local dev). |
Anonymous free tier
If SENTRUL_API_KEY is not set, the server:
Checks for a cached key at
~/.sentrul/mcp-key.If no cache exists, calls
POST /v1/mcp/keys/anonymousto auto-provision a rate-limited free key.Writes the key to
~/.sentrul/mcp-key(mode 0600) for future runs.
You can upgrade at any time by setting SENTRUL_API_KEY in your MCP client config.
Security notes
No shell execution — the server never runs shell commands or spawns subprocesses.
No PII logging — environment variables and API keys are never written to logs or stdout.
Read-only — all three tools are read-only at launch; no writes to user files or external state.
Filesystem writes — the only writes are to
~/.sentrul/mcp-key(the key cache). Nothing else is written outside that directory.Supply-chain — publish uses 2FA-enforced npm account + sigstore attestation (see
SECURITY.mdwhen available).
Development
pnpm install
pnpm run build # tsc → dist/
pnpm test # vitest run
# Smoke test — should print 3 tools in the tools/list response:
echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | node dist/index.jsLinks
Homepage: https://sentrul.com
Repository: https://github.com/sentrul/sentrul-mcp-server
Issues: https://github.com/sentrul/sentrul-mcp-server/issues
MIT License — Copyright (c) 2026 Sentrul
Available Tools
3 toolssentrul_compliance_scanC
Scan text for common compliance patterns (PII, PCI, HIPAA, GDPR data). Returns findings + severity. Not legal advice.
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | ||
| frameworks | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions the tool 'Returns findings + severity,' which gives some insight into output behavior, but lacks details on error handling, rate limits, authentication needs, or performance characteristics. For a scanning tool with no annotation coverage, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is highly concise and front-loaded, consisting of two efficient sentences that convey core functionality and a disclaimer. Every sentence earns its place with no wasted words, making it easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (scanning for compliance patterns), lack of annotations, and no output schema, the description is incomplete. It doesn't explain the structure of returned findings, severity levels, error cases, or limitations. For a tool with two parameters and behavioral uncertainty, more context is needed to be fully helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, so the description must compensate. It implies the 'text' parameter is the input to scan and lists compliance frameworks (PII, PCI, HIPAA, GDPR) that relate to the 'frameworks' parameter. However, it doesn't fully explain parameter semantics, such as allowed values for 'frameworks' or format expectations for 'text.' The baseline is 3 due to some added meaning but incomplete coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Scan text for common compliance patterns (PII, PCI, HIPAA, GDPR data).' It specifies the verb ('scan'), resource ('text'), and scope ('compliance patterns'). However, it doesn't explicitly differentiate from sibling tools like 'sentrul_research' or 'sentrul_trace_lookup,' which prevents a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides minimal usage guidance. It mentions what the tool does but offers no explicit advice on when to use it versus alternatives, nor does it mention prerequisites or exclusions. The disclaimer 'Not legal advice' is helpful but doesn't constitute usage guidelines for tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentrul_researchA
Fetch a URL and run Sentrul's research-agent on the content. Returns summary, entities, claims, and a public Langfuse trace URL.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | ||
| depth | No | quick |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions fetching a URL and running a research-agent, which implies external network calls and processing, but lacks details on permissions, rate limits, error handling, or what 'quick' vs. 'full' depth entails. It states the return values but not their format or potential side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that efficiently conveys the core action, inputs, and outputs without redundancy. It is front-loaded with the main purpose and appropriately sized for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no annotations, no output schema, and 0% schema description coverage, the description is incomplete. It covers the basic purpose and outputs but lacks details on behavioral traits, parameter meanings, and usage context. For a tool with external dependencies and processing, more information is needed to be fully helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description does not explicitly mention parameters, but with 0% schema description coverage, it must compensate. It implies the 'url' parameter by stating 'Fetch a URL' and hints at 'depth' through 'run Sentrul's research-agent on the content' (suggesting analysis depth). However, it doesn't detail the enum values ('quick', 'full') or their effects, leaving some semantic gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with specific verbs ('fetch', 'run') and resources ('URL', 'Sentrul's research-agent'), and distinguishes it from siblings by specifying the research-agent focus (vs. compliance_scan or trace_lookup). It explicitly lists the outputs (summary, entities, claims, Langfuse trace URL).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus the sibling tools (sentrul_compliance_scan, sentrul_trace_lookup). It mentions the tool's function but offers no context about alternatives, prerequisites, or exclusions, leaving the agent to infer usage scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentrul_trace_lookupC
Retrieve a public Langfuse trace by ID. Returns the structured trace payload for inspection in the client.
| Name | Required | Description | Default |
|---|---|---|---|
| trace_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the tool retrieves a 'public' trace and returns a 'structured trace payload', but lacks details on permissions, rate limits, error handling, or what 'public' entails (e.g., access controls). This leaves significant gaps for a tool that likely involves data access.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized with two sentences that are front-loaded and efficient. It avoids unnecessary details, though it could be slightly more structured (e.g., separating purpose from output).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's low complexity (1 parameter, no output schema, no annotations), the description is somewhat complete but lacks depth. It covers the basic action and output intent, but misses behavioral aspects like authentication needs or error cases, making it adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds minimal meaning beyond the input schema, which has 0% coverage. It implies 'trace_id' is used to look up a trace, but doesn't specify format, source, or constraints (e.g., length, pattern). With low schema coverage, the description doesn't fully compensate, so it meets the baseline for adding some context.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Retrieve') and resource ('public Langfuse trace by ID'), making the purpose specific and understandable. However, it doesn't explicitly differentiate from sibling tools like 'sentrul_compliance_scan' or 'sentrul_research', which might have overlapping domains but different functions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, such as the sibling tools. It mentions 'for inspection in the client' but doesn't clarify scenarios, prerequisites, or exclusions, leaving usage context implied at best.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool has a clearly distinct purpose with no overlap. sentrul_compliance_scan analyzes text for compliance patterns, sentrul_research processes web content for research insights, and sentrul_trace_lookup retrieves specific trace data. An agent can easily differentiate between scanning, researching, and trace lookup functions.
All tool names follow a consistent 'sentrul_' prefix with descriptive suffixes (compliance_scan, research, trace_lookup). The naming pattern is uniform and predictable, using snake_case throughout without any deviations or mixed conventions.
With only 3 tools, the set feels thin for a server named 'sentrul-mcp-server', which suggests a broader scope for compliance and research operations. While each tool is distinct, the count is borderline low, potentially limiting functionality for agents working in this domain.
The tools cover scanning, research, and trace lookup, but there are notable gaps for a compliance/research domain. Missing operations include updating or managing scans, configuring research parameters, or handling trace modifications, which could lead to dead ends in agent workflows.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
A paid remote MCP for agent memory MCP, built to return verdicts, receipts, usage logs, and audit-re
100+ MCP tools for AI agents: content metadata, trade intelligence, business-expertise analysis.
Agent-driven search: build, import, tune, search, and score result quality — all over MCP.
Hosted MCP with 91 agent tools: X, domains, SEO, Maps, Trends, Search, YouTube, TikTok, and more.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceMCP server giving AI agents real-time web search, page scraping, company intelligence, email discovery, local lead generation, and a persistent knowledge graph. Pay only for what you use, no subscriptions.24MIT
- AlicenseNot gradedqualityCmaintenanceSeven remote MCP servers exposing 51 published Apify scrapers as agent tools: company diligence, social listening, recruiting, real estate, lead generation, e-commerce and academic research. Billed per result, and a call that returns nothing is never charged.1MIT
- AlicenseNot gradedqualityAmaintenanceHosted MCP server granting AI agents access to 20M+ SEC EDGAR filings, 100M+ exhibits, and comprehensive entity data through 49 tools, with support for raw documents, extracted sections, and structured JSON.251MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to scan real-time search data for brand threats, security vulnerabilities, and DeFi risks via MCP-compatible tools.Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sentrul/sentrul-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server