io.github.vdineshk/dominion-observatory

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.

2 8 tools GitHub

No known CVEs

No license

Maintained

Last commit 35d ago

Works with most clients

Transport: http

8 tools · ~534 tok

Grade B · 0.3% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.vdineshk/dominion-observatory is an MCP server that runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools. Its tool list has not been published yet over http, requires no API key, and scores 65/100 on MCPpedia's security, maintenance and efficiency rubric.

Security Analytics

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-vdineshk-dominion-observatory": {
      "url": "<see-readme-for-url>"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-vdineshk-dominion-observatory)](https://mcppedia.org/s/io-github-vdineshk-dominion-observatory)

Read me

What io.github.vdineshk/dominion-observatory does

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

65/100across 5 weighted dimensions

How we score →

0255075100

−35

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (8)

Click any tool to inspect its schema.

~534 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.vdineshk/dominion-observatory safe to use?: io.github.vdineshk/dominion-observatory has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install io.github.vdineshk/dominion-observatory?: io.github.vdineshk/dominion-observatory is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint instead of running it locally.
What can io.github.vdineshk/dominion-observatory do?: io.github.vdineshk/dominion-observatory provides 8 tools: check_trust, report_interaction, get_leaderboard, get_baselines, check_anomaly and 3 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.vdineshk/dominion-observatory?: io.github.vdineshk/dominion-observatory is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.vdineshk/dominion-observatory actively maintained?: io.github.vdineshk/dominion-observatory is recently maintained - last commit was 35 days ago. It has 2 GitHub stars.

Similar servers

Others in security / analytics

View all →

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.KryptosAI/mcp-observatory92

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

120 4

io.github.PhilipAD/health-export-mcp92

Ask your agent about your own Apple Health data: 194 metrics, 22 tools, local, 0 deps.

11 6

io.github.dynatrace-oss/dynatrace-managed-mcp92

MCP server for Dynatrace Managed to access logs, events, and metrics.

34 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.vdineshk/dominion-observatory and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

What is this?

Every AI agent needs to know: "Can I trust this MCP server?" The Dominion Observatory answers that question with real runtime data — not GitHub stars, not static scans, but actual performance metrics from real agent interactions.

Before calling an unknown MCP server → check_trust tells you if it's reliable

After calling any MCP server → report_interaction contributes to the trust network

Every report makes scores better for everyone — this is a collective intelligence system

Tools (14)

Tool	Description
`check_trust`	Get the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 indicate risky servers.
`clawhub_skill_trust`	Check the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model), moderation verdict, and provenance. Malicious/suspicious/blocked => FAIL; unscanned => UNCERTAIN.
`verify_before_call`	Run a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.01/call), or call once without payment to receive x402 instructions and retry with payment_tx. Returns PASS/UNCERTAIN/FAIL/UNRATED, evidence freshness, recommendation, and a signed diligence receipt.
`paid_trust_verdict`	Get the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use) to receive the full verdict + receipt. The free check_trust tool remains available for basic scores.
`verify_attestation`	Cryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party gave you is authentic and untampered.
`preflight_check`	Run a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call this before connecting to or invoking any unfamiliar MCP server.
`report_interaction`	Report the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.
`get_leaderboard`	Get the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.
`get_baselines`	Get behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to

Tool

Description

check_trust

Get the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 indicate risky servers.

clawhub_skill_trust

Check the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model), moderation verdict, and provenance. Malicious/suspicious/blocked => FAIL; unscanned => UNCERTAIN.

verify_before_call

Run a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.01/call), or call once without payment to receive x402 instructions and retry with payment_tx. Returns PASS/UNCERTAIN/FAIL/UNRATED, evidence freshness, recommendation, and a signed diligence receipt.

paid_trust_verdict

Get the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use) to receive the full verdict + receipt. The free check_trust tool remains available for basic scores.

verify_attestation

Cryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party gave you is authentic and untampered.

preflight_check

Run a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call this before connecting to or invoking any unfamiliar MCP server.

report_interaction

Report the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.

get_leaderboard

Get the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.

get_baselines

Get behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to

Frequently Asked Questions

Is io.github.vdineshk/dominion-observatory safe to use?

io.github.vdineshk/dominion-observatory has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.

How do I install io.github.vdineshk/dominion-observatory?

io.github.vdineshk/dominion-observatory is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint instead of running it locally.

What can io.github.vdineshk/dominion-observatory do?

io.github.vdineshk/dominion-observatory provides 8 tools: check_trust, report_interaction, get_leaderboard, get_baselines, check_anomaly and 3 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.vdineshk/dominion-observatory?

io.github.vdineshk/dominion-observatory is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.vdineshk/dominion-observatory actively maintained?

io.github.vdineshk/dominion-observatory is recently maintained - last commit was 35 days ago. It has 2 GitHub stars.

What is this?

Before calling an unknown MCP server → check_trust tells you if it's reliable

After calling any MCP server → report_interaction contributes to the trust network

Every report makes scores better for everyone — this is a collective intelligence system

Tools (14)

Tool	Description
`check_trust`	Get the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 indicate risky servers.
`clawhub_skill_trust`	Check the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model), moderation verdict, and provenance. Malicious/suspicious/blocked => FAIL; unscanned => UNCERTAIN.
`verify_before_call`	Run a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.01/call), or call once without payment to receive x402 instructions and retry with payment_tx. Returns PASS/UNCERTAIN/FAIL/UNRATED, evidence freshness, recommendation, and a signed diligence receipt.
`paid_trust_verdict`	Get the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use) to receive the full verdict + receipt. The free check_trust tool remains available for basic scores.
`verify_attestation`	Cryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party gave you is authentic and untampered.
`preflight_check`	Run a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call this before connecting to or invoking any unfamiliar MCP server.
`report_interaction`	Report the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.
`get_leaderboard`	Get the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.
`get_baselines`	Get behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to

Tool

Description

check_trust

clawhub_skill_trust

verify_before_call

paid_trust_verdict

verify_attestation

preflight_check

report_interaction

get_leaderboard

get_baselines

Get behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to