{"slug":"verdict-kechlab-com-v1-mcp-vet-92df9a","title":"Before an agent installs an MCP server, skill or tool","host":"verdict.kechlab.com","method":"POST","resource":"https://verdict.kechlab.com/v1/mcp-vet","category":"code","description":"Before an agent installs an MCP server, skill or tool: is the description poisoned (hidden orders to the agent), does it ask for more permissions than its purpose, does it imitate a known tool? Code checks (lookalike names, broad permissions, hidden text) then a reading of the descriptions. Judges t","price_listed":0.0214,"price_asked":0.0217,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":628,"reported_calls_30d":0,"reported_payers_30d":0,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"description":"Returns the current weather for a city name.","name":"weather-lookup","permissions":["network"],"tools":[{"description":"Current weather for a city","name":"get_weather"}]},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"description":{"description":"description of the tool","type":"string"},"name":{"description":"name of the tool or server","type":"string"},"permissions":{"description":"(optional) list of requested permissions (e.g. filesystem:write, network, shell)","items":{"type":"string"},"type":"array"},"tools":{"description":"(optional) list of { name, description } of the exposed functions","items":{"type":"object"},"type":"array"}},"required":["name","description"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-20","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.0217,"price_match":false,"latency_ms":628,"error":null}],"description_full":"Before an agent installs an MCP server, skill or tool: is the description poisoned (hidden orders to the agent), does it ask for more permissions than its purpose, does it imitate a known tool? Code checks (lookalike names, broad permissions, hidden text) then a reading of the descriptions. Judges t","last_updated":"2026-10-20T13:33:30.002Z","schemes":["exact"]}