Policylayer MCP Registry

What is Policylayer MCP Registry?

Policylayer MCP Registry is a hosted MCP server that vets any MCP server by returning its published safety record: verified identity, A–F risk grade, auth posture, and a risk classification for every tool. It covers 32,500+ published servers and 515,000+ classified tools via continuous scanning.

How to use Policylayer MCP Registry?

Connect your agent to the streamable HTTP endpoint (https://api.policylayer.com/mcp) using Claude Code (claude mcp add --transport http policylayer https://api.policylayer.com/mcp) or configure it in Claude Desktop, Cursor, Windsurf, or VS Code as a custom MCP connector. Then instruct your agent to check any server against PolicyLayer before installing. Free single-server lookups require no key.

Key features of Policylayer MCP Registry

• Free single-server lookups without an API key
• Full registry record: identity, risk grade, posture, and tool classifications
• Continuous scanning keeps 32,500+ servers and 515,000+ tools current
• Tools classify severity, OWASP categories, and recommend a policy action
• get_change_events feed (with licence) reports drifts, posture flips, and impostor flags

Use cases of Policylayer MCP Registry

• Vet an MCP server before installing it in your agent
• Search the registry for a verified server by name or package
• Check a specific tool’s risk classification and recommended policy
• Monitor changes to servers you depend on (with a licence key)

FAQ from Policylayer MCP Registry

What is the endpoint for Policylayer MCP Registry?

The endpoint is https://api.policylayer.com/mcp (Streamable HTTP).

Do I need an API key to use Policylayer MCP Registry?

No. All single-server lookups (via check_mcp_server, search_registry, check_tool) are free and require no key. A Registry Licence key is needed only for the get_change_events tool.

How many servers does Policylayer MCP Registry cover?

The registry includes 32,500+ published servers and 515,000+ classified tools, kept current by continuous scanning.

How do I add a licence key for Policylayer MCP Registry?

For Claude Code, append --header "Authorization: Bearer plr_..." to the add command. For Cursor/Windsurf/VS Code, add "headers": { "Authorization": "Bearer plr_..." } inside the server entry. Claude desktop/web connectors cannot send headers, so only free lookups are available.

What tools are available in Policylayer MCP Registry?

Four tools: check_mcp_server (full record for one server), search_registry (search servers by name), check_tool (classification for one tool), and get_change_events (change feed, needs licence). The first three are free.