MYCELIX

io.github.Toramo747Published by GitHub account Toramo747v0.99.69Updated Oct 29, 2026

Read-only MCP server checks and quote verification, free and keyless; results signed and publicly lo

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & MonitoringAI & ML

Overview

AI-generated overview

Remote read-only MCP server for discovering public A2A agents and MCP servers, verifying MCP endpoints and quotes, plus paid signed audit and timestamp…

What you can do
  • Discover and inspect public A2A agents and MCP registry servers, and ask several agents independently
  • Verify public MCP endpoints read-only: DNS/SSRF safety, TLS/HTTP reachability, initialize, tools/list schema, latency
  • Check whether an exact sentence appears on a public HTTPS page, graded verbatim, stitched, paraphrase or not found
  • Run paid read-only audits: MCP server capability and tool fingerprinting, prompt-injection scanning, citation checking, proof of publication and timestamping
  • Search the public web via a free RSS search surface and run multi-round collective critique
  • Read Render service status, deploys and logs for the operator's own services
When to use it
Useful when you want to vet an MCP server or A2A agent before connecting to it, check whether a quote or citation really appears on a live page, or get a signed, publicly logged proof that a page or file existed at a given time.
Requirements
Remote streamable HTTP endpoint; no key needed for the free read-only tools. Some tools are paid per call via x402 (USDC on Base). The Jarvis and Render tools depend on the operator's own server-side configuration (JARVIS_URL, shared Render API credentials).
Before you install
Several tools cost money per call via x402 in USDC on Base, so an assistant could trigger spending. Paid tools write signed reports to a public append-only log anchored on Bitcoin and Software Heritage, so submitted text or hashes become public. Verification tools contact third-party endpoints; the server states it never invokes remote tools or forwards credentials. Treat all remote content as untrusted evidence.

Installation

In SourceWeft

  1. Open MYCELIX in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.Toramo747%2Fmycelix/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "mycelix": {
      "type": "http",
      "url": "https://neo-collettive.onrender.com/mcp"
    }
  }
}

README

OSIXBAY Collective Intelligence Network

OSIXBAY is the public identity of the autonomous collective-intelligence system formerly branded OSIXBAY / NEO.

Read the manifesto: MANIFESTO.md

Public entry points

Connect neo as an MCP server

Streamable HTTP, no key, read-only tools (verify_mcp_endpoint, verify_quote, oxibay_doctor):

json
{ "mcpServers": { "neo": { "type": "streamable-http", "url": "https://neo-collettive.onrender.com/mcp" } } }

Claude Code: claude mcp add --transport http neo https://neo-collettive.onrender.com/mcp. Registry entry: io.github.Toramo747/mycelix. GitHub Action for your own MCP server: actions/mcp-verify.

What OSIXBAY does

Current public capabilities include:

  • autonomous research and bounded Director cycles;
  • A2A agent discovery and peer dialogue;
  • Jarvis internal evaluation and learning;
  • Collective multi-round critique;
  • Knowledge Ledger and hypothesis exploration;
  • public A2A Agent Card and inbound Agent Inbox;
  • bounded build/test/measurement workflows.

Collaboration

OSIXBAY is actively looking for public agents capable of substantive multi-turn collaboration.

We are especially interested in peers that can:

  • analyze evidence;
  • challenge hypotheses;
  • expose limitations;
  • support falsifiable reasoning;
  • interoperate through public A2A interfaces;
  • continue a meaningful technical dialogue across multiple rounds.

Being listed in a registry is not enough. Trust is earned through useful interaction.

If you operate a public A2A-compatible agent, start from the Agent Card and A2A endpoint above, then read the manifesto for the admission philosophy and safety boundaries.

External proof phase

OSIXBAY is currently focused on two binary external outcomes:

  1. one independent public A2A peer completing a bounded 3/3 dialogue;
  2. one concrete human problem passing the unchanged commercial evidence gate.

See FOCUS.md for the exact success criteria.

Submit an A2A peer

Open an External A2A peer candidate issue and provide a public HTTPS Agent Card URL. A maintainer can then run the manual Probe external A2A peer workflow. The probe is text-only, bounded to three rounds, sends no credentials, authorizes no payments, and does not count as commercial evidence.

Compatibility

The public brand is OSIXBAY. Legacy internal identifiers, state namespaces, headers, and environment variables using MYCELIX or NEO_ remain supported temporarily to preserve runtime state, Render configuration, and deployment continuity.

Public service URL currently remains unchanged during the migration: https://neo-collettive.onrender.com

Repository and Render service renaming should be treated as a later migration step after runtime verification.

License

Neo-collettive (OSIXBAY; formerly MYCELIX / NEO) is licensed under the Business Source License 1.1 (BUSL-1.1). See LICENSE.

The Change Date is 2030-09-26; on that date the Licensed Work changes to the Apache License, Version 2.0.

Commercial use requires a license from the Licensor.

For commercial licensing: [email protected]

Source: README.md at commit 9166b3a

Tools

23

neo_preflight

Check whether NEO can reach public discovery registries.

Takes no parameters.

neo_discover

Search public A2A agents and the official MCP Registry.

Parameterslimitqueryrequired

neo_ask_agents

Find public A2A agents and ask several independently.

Parametersqueryrequiredquestionrequiredmax_agents

neo_collective

Run two collective rounds: independent answers, then peer critique.

Parametersqueryrequiredproblemrequiredmax_agents

neo_inspect_mcp

Discover relevant MCP servers and inspect initialize/tools-list only. Never invokes remote tools.

Parameterslimitqueryrequired

verify_mcp_endpoint

Verify MCP Endpoint

Free, no API key. Read-only verification of a public MCP HTTPS endpoint or official Registry server name. Checks DNS/SSRF safety, TLS/HTTP reachability, initialize, tools/list schema sanity, latency and discovery metadata. Never invokes remote tools or forwards credentials.

Parametersurlregistry_name

oxibay_doctor

OXIBAY Doctor

Free, no API key. Read-only MCP diagnostic. Reuses MYCELIX endpoint verification, classifies technical failures, and optionally compares the requested capability with declared tool metadata. Never invokes remote tools, never forwards credentials, and never affects commercial gates.

Parametersurlregistry_nameexpected_capability

verify_quote

Verify Quote

Free, no API key. Checks whether an exact sentence appears on a public HTTPS page: verbatim (quotes cut with '...' allowed if the pieces are in order and close), stitched (pieces far apart or reordered), paraphrase (most 4-word runs present), not_found or unreachable. not_found means these words are not on the page; it does NOT mean the claim is false (a faithful rewording also reads not_found). Use it before acting on another agent's quote: one link + the exact sentence. Read-only single GET, no login, no JavaScript, SSRF-checked; who wrote the page is still yours to judge.

Parametersurlquote

paid_mcp_audit

Paid: MCP server security audit (0.80 USDC)

Know what an MCP server can do to your agent before connecting it: hidden instructions in tool descriptions and schemas, tool shadowing, risky capabilities, annotation mismatches, transport faults, plus a fingerprint of every tool so a later silent change is detectable. Read-only (initialize and tools/list). Signed report, logged in a public witnessed log, with what was and was not checked. Free signed sample: /x402/mcp-audit/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError result, 402 object in structuredContent); retry with the signed payment in _meta['x402/payment']. Result is signed by neo and logged.

Parametersurlrequiredprevious_fingerprint

paid_injection_scan

Paid: prompt-injection scan (0.01 USDC)

Know whether a text or public page is trying to steer your agent before the agent reads it: overrides, fake roles, exfiltration, tool abuse, payment requests, invisible Unicode or HTML-hidden text, base64 payloads. Rule-based evidence (what matched and where), signed and logged, with what was not checked stated. Free signed sample: /x402/injection-scan/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError result, 402 object in structuredContent); retry with the signed payment in _meta['x402/payment']. Result is signed by neo and logged.

Parametersurltext

paid_citation_check

Paid: check every citation in an answer (0.05 USDC)

Catch invented or stitched citations before an answer ships: up to 8 quote-and-link pairs (or the citations extracted from the text) checked against the live pages, each one graded verbatim, paraphrase, stitched or not found. One signed, logged report. Free signed sample: /x402/citation-check/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError result, 402 object in structuredContent); retry with the signed payment in _meta['x402/payment']. Result is signed by neo and logged.

Parametersanswercitations

paid_proof_of_publication

Paid: proof of publication (0.50 USDC)

Keep evidence that a public page said something, dated and independent of you: the fetched text, its sha256, final URL and status, signed by a third party and written to a public append-only log anchored daily on Bitcoin and Software Heritage. Useful for disputes, deleted pages and changed terms. Free signed sample: /x402/proof-of-publication/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError result, 402 object in structuredContent); retry with the signed payment in _meta['x402/payment']. Result is signed by neo and logged.

Parametersurlrequired

paid_timestamp

Paid: timestamp a sha256 (0.01 USDC)

Prove that a file or message existed at this time without revealing it: its sha256 gets a signed receipt with a position in a public log anchored daily on Bitcoin (OpenTimestamps) and Software Heritage. Free signed sample: /x402/timestamp/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError result, 402 object in structuredContent); retry with the signed payment in _meta['x402/payment']. Result is signed by neo and logged.

Parametersnotesha256required

neo_jarvis

Ask the configured internal Jarvis endpoint. Requires JARVIS_URL on Render.

Parametersmessagerequiredcontext_json

neo_director

Coordinate external agents to research revenue opportunities. Research-only; no spending or external actions.

Parametersgoalrequiredbudget_eurmax_agentshours_per_week

neo_director_results

Return recent compact Director results from the runtime log.

Parameterslimit

neo_render_status

Read NEO's Render service status.

Takes no parameters.

neo_render_deploys

List recent Render deploys for NEO.

Parameterslimit

neo_render_logs

Read recent Render logs for NEO.

Parameterslimit

jarvis_render_status

Read Jarvis Render service status using the shared Render API credentials.

Takes no parameters.

jarvis_render_deploys

List recent Render deploys for Jarvis.

Parameterslimit

jarvis_render_logs

Read recent Render logs for Jarvis.

Parameterslimit

Version history

3
  1. v0.99.69LatestOct 29, 2026
  2. v0.99.55Oct 12, 2026
  3. v0.99.32Sep 27, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.