Curatedmcp Catalog Mcp

io.github.oneprofile-devPublished by GitHub account oneprofile-devv0.1.1Updated Nov 3, 2026

Search the CuratedMCP catalog of risk-classified MCP servers and check verification status.

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Searches the CuratedMCP catalog of human-reviewed, risk-classified MCP servers and checks verification status from inside an MCP client.

What you can do
  • Search the catalog by keyword and category
  • Fetch a server's full risk profile: risk level, declared capabilities such as file access, network egress and shell exec, compatible clients, transport and install command
  • Check whether a server name or npm package is in the verified catalog
When to use it
Useful before installing an unfamiliar MCP server: ask the assistant to look it up in the catalog and review its risk profile and verification status without leaving the conversation.
Requirements
Runs locally via npx from the npm package @curatedmcp/mcp; Node.js and network access to the CuratedMCP API are needed. No account or API key is declared. The optional CURATEDMCP_APP_URL variable overrides the API base URL, intended for local development.
Before you install
Queries are sent to the third-party CuratedMCP API at curatedmcp.com by default. The catalog is advisory: a verified listing or low risk rating is not a guarantee, so review the server's own code and permissions before installing it.

Installation

In SourceWeft

  1. Open Curatedmcp Catalog Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@curatedmcp/mcp

An MCP server that exposes the CuratedMCP catalog — search human-reviewed, risk-classified MCP servers, check whether a server is verified, and pull its full risk/capability profile, all from inside any MCP client.

npx -y @curatedmcp/mcp

Why

Before installing an unfamiliar npx some-mcp-server command, ask your AI agent to check it against the catalog first — no need to leave the conversation.

Tools

ToolWhat it does
search_mcp_catalogSearch the catalog by keyword and/or category
get_mcp_server_detailsFull risk profile for one server: risk level, declared capabilities (file access, network egress, shell exec, etc.), compatible clients, transport type, install command
check_mcp_server_verifiedQuick check: is this server name or npm package in the verified catalog?

Client config

json
{  "mcpServers": {    "curatedmcp": {      "command": "npx",      "args": ["-y", "@curatedmcp/mcp"]    }  }}

Development

bash
npm installnpm run buildnode test/smoke.mjs   # exercises all three tools against curatedmcp.com

By default the server calls the production API at https://curatedmcp.com. Override with CURATEDMCP_APP_URL for local development against a different deployment.

Source: README.md at commit 96167e2

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts