Atlas / MCP servers / astranl / astranl-mcp

astranl-mcpSAFE

mcp/astranl/astranl-mcp

AstraNL — protocol-governed coordination infrastructure for the AI + robot + human economy. Live MCP server, Europe-wide robot & drone database.

Verdict
SAFE
Grade
B
Trust score
88 /100
Exposed tools
—
Transport
sse · streamable-http
License
—
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://glama.ai/mcp/servers/vxwvj77twe)

AstraNL MCP Server — Give AstraNL one real thing you need changed. It coordinates the rest. AstraNL is the neutral coordination and evidence layer between intent and real-world execution. It connects existing systems, agents and organisations to the right real-world capability - human, company, machine, robot, stock, transport or service - and returns a typed record of what was actually observed, agreed, executed and settled.

AstraNL turns an intent into verified real-world execution: a KvK-registered executor performs the work; the client pays that provider directly on the agreed provider-owned business rail. Stripe is optional. AstraNL never receives or controls the work amount and invoices only its separate 1% coordination fee after a paid, confirmed outcome.

Fee: 1% coordination fee - only on a paid outcome, in force since 2026-09-01.

Money: broker; custody never - AstraNL does not receive or hold the principal amount. Each order explicitly binds its payment rail and named provider. Optional Stripe uses the existing executor destination-charge model. Direct business-bank payment is independently initiated by the principal to the provider's verified business account.; Stripe rail only: existing hold-release terms apply. Ordinary bank transfers have no AstraNL hold, automatic release or automatic refund.. This is not insurance.

Geography: ordering open to a principal anywhere; execution Netherlands, where KvK-registered executors stand (registry ID checked; each executor's verification state is shown on its card at /truth/executors.json - never a bare "verified"). a country is listed the day a registry-checked, payout-ready executor stands in it, never before.

Public capabilities: ask_astranl, check_counterparty_nl, check_task, construction_economy, construction_events, construction_laws, `construction_lead

Read from source at commit 788c0f43e74cOBSERVED · 2026-10-12
02

Trust audit

SAFEgrade B · trust 88/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (3)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
sse,streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-12 · audit v0.4.1 · source sha 788c0f43e74cfull audit observations/trust-audit/mcp-server/astranl__astranl-mcp.json · Report an issue / request a re-scan
03

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12788c0f43e74cSAFEB88first audit
04

Questions

What is the astranl-mcp MCP server?

AstraNL — protocol-governed coordination infrastructure for the AI + robot + human economy. Live MCP server, Europe-wide robot & drone database.

Is astranl-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (88/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does astranl-mcp need?

No credential environment variables were found in its source, so it appears to need none.

How does astranl-mcp run?

It speaks sse and streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (788c0f43e74c), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement