indexagentica-mcpCAUTION
Read-only remote MCP server (Streamable HTTP) and REST search for indexagentica.com
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Read-only remote MCP server (Streamable HTTP) and REST search API for Index Agentica, the agent-first directory of skills, harnesses, MCP servers, tools, protocols and APIs, plus its long-form guides, comparisons, stacks and downloadable Agent Skills. Runs on Cloudflare Workers (free plan), stateless, no Durable Objects, no auth, CORS open.
Install
Remote server: no install, no API key. Streamable HTTP at https://mcp.indexagentica.com/mcp (live).
claude mcp add --transport http indexagentica https://mcp.indexagentica.com/mcp
Other clients: add the URL as a Streamable HTTP server with no auth (see llms-install.md). The same Worker also answers at https://indexagentica-mcp.indexagentica.workers.dev/mcp (see DEPLOY.md).
Endpoints
2c4a12c26148OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add indexagentica-mcp -- npx -y [email protected]
{
"mcpServers": {
"indexagentica-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (4)
4 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_content | read | Fetch one Index Agentica long-form item by type and id (as returned by search). Returns its metadata (title, summary, author, tags, dates, referenced entries with links, related items, sources, links) |
get_entry | read | Fetch one Index Agentica entry by its id (kebab-case slug, e.g. \ |
list_categories | read | List all Index Agentica categories with their slug, name, description, entry count and links (HTML page and JSON). Use a slug as the category filter for search. |
search | read | Search Index Agentica: the directory of agent-usable resources (skills, harnesses, MCP servers, tools, protocols, APIs, information sources, finance/payments, directories) |
Trust audit
CAUTIONgrade B · trust 84/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (7 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (13)
summary: "Site usage beacon (used by indexagentica.com's inline script; accepts only that origin). Body: {t: pageview|click|download, p: page path, id?, h?, k?}. No cookies, IPs or ids are stored.",["2026-10-03 04:55:00", "2026-10-03 05:50:00"], // usage-stats feature: live E2E, beacon and footer checks
if (/unknown table|does not exist|not found/i.test(text) && query.includes(HITS_DS)) return []; // no beacon written yet
"site.page_views": "Page views reported by the site's inline beacon (browsers with JavaScript; skipped for navigator.webdriver, Do Not Track and Global Privacy Control).",
streamable-http
npm run dev # wrangler dev on http://127.0.0.1:8787 (no Cloudflare login needed)
DATA_BASE_URL=http://127.0.0.1:8089 npm test # point the local Workers at another copy of the site
site with drafts published (e.g. `INCLUDE_DRAFTS=1 SITE_URL=http://127.0.0.1:8089 node scripts/build.mjs`
npx mcp-inspector --cli http://127.0.0.1:8787/mcp --transport http --method tools/list
npx mcp-inspector --cli http://127.0.0.1:8787/mcp --transport http --method tools/call \
const bin = atob(m[1]);
@modelcontextprotocol/inspector, wrangler
The server is read-only and unauthenticated: it serves public data from https://indexagentica.com and stores no user data or credentials. Usage logs (Cloudflare Workers Analytics Engine) record reques
Gates applied: no_behavioural_pass.
2c4a12c26148full audit observations/trust-audit/mcp-server/drudley__indexagentica-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 2c4a12c26148 | CAUTION | B | 84 | first audit |
Questions
What is the indexagentica-mcp MCP server?
Read-only remote MCP server (Streamable HTTP) and REST search for indexagentica.com
What tools does indexagentica-mcp expose?
4 in total: 4 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is indexagentica-mcp safe to connect to an agent?
With care. The audit graded it B (84/100) and found 13 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does indexagentica-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does indexagentica-mcp run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as indexagentica-mcp at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (2c4a12c26148), read on 2026-10-12. The repository is watched and re-audited when it changes.