Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

ai.plith/plith

REMOTE · PLITH.AI · SCANNED SEP 21

AI agent infrastructure: dedup, cost prediction, validation, governance, failure intelligence.

Available components

0 this week 86 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security80
Transport & Reachability100
Schema Quality & AI Usability82
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2969 tokens (~141/item across 21 items; 15 tools + 6 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 16 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities20
  • Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
Install

How do I install the ai.plith/plith MCP server?

ai.plith/plith is a hosted endpoint at https://plith.ai/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · plith.ai

# add to Claude Code
claude mcp add --transport http ai-plith-plith 'https://plith.ai/api/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "ai-plith-plith": {
      "url": "https://plith.ai/api/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "ai-plith-plith": {
      "type": "http",
      "url": "https://plith.ai/api/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.ai-plith-plith]
url = "https://plith.ai/api/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-plith-plith": {
      "type": "remote",
      "url": "https://plith.ai/api/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add ai-plith-plith --url 'https://plith.ai/api/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  ai-plith-plith:
    url: "https://plith.ai/api/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "ai-plith-plith": {
      "Transport": "http",
      "Url": "https://plith.ai/api/mcp"
    }
  }
}
# add to Vellum
assistant mcp add ai-plith-plith -t streamable-http -u 'https://plith.ai/api/mcp'
// mcp.json
{
  "mcpServers": {
    "ai-plith-plith": {
      "type": "http",
      "url": "https://plith.ai/api/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 7 Sept 26 0
    • “rigor_execute” reworded the description of “task_type” cosmetic
    • “rigor_plan” reworded the description of “task_type” cosmetic

    2 cosmetic changes on this day. Switch on “Show cosmetic changes” to see them.

  • 30 Aug 26 0
    • Tool “rigor_workflows” rewrote its description, which is the text the model reads security
    • “rigor_workflows” added an optional parameter “created_after” cosmetic
    • “rigor_workflows” added an optional parameter “created_before” cosmetic
    • “rigor_workflows” added an optional parameter “folder_id” cosmetic
    • “rigor_workflows” added an optional parameter “q” cosmetic
  • 28 Aug 26 +8
    • Judged manipulation: unverified → pass security
    • Schema quality: unverified → excellent functional
  • 27 Aug 26 −8
    • Judged manipulation: pass → unverified security
    • Tool “rigor_execute” rewrote its description, which is the text the model reads security
    • Tool “rigor_plan” rewrote its description, which is the text the model reads security
    • Schema quality: excellent → unverified functional
    • “rigor_execute” reworded the description of “task_type” cosmetic
    • “rigor_plan” reworded the description of “task_type” cosmetic
  • 26 Aug 26 +1
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Aug 26 0
    • Stability: 0.97 → pass security
  • 24 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 11 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 21 Sept 2026 · Probed https://plith.ai/api/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=plith.ai CN=YR2,O=Let's Encrypt,C=US 14 Aug 2026 12 Nov 2026 RSA 2048 SHA256-RSA 5f8c76b4ee6972a11ce55394955901e92df
SANs: plith.ai
CN=YR2,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA 4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of plith.ai. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
ai. present 3799 8 Verified
plith.ai. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000; includeSubDomains; preload
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://umami.peaklight.news; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://api.stripe.com https://umami.peaklight.news; frame-ancestors 'none'; form-action 'self'; base-uri 'self'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://plith.ai/api/mcp Verified 200
http (plaintext) http://plith.ai/api/mcp HTTPS enforced 308 https://plith.ai/api/mcp
MCP tools · 15 exposed · ~2,789 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
burnrate_budget ~69

Get today's tracked LLM spend, per-model breakdown, projection, and budget alerts. Free — no credits charged.

NameTypeReqDescription
daily_limitnumberOptional. Daily budget in USD (e.g., 10.0 for a $10/day cap). Enables budget alerts and remaining-balance calculation.
NameTypeReqDescription
alertsarray
credits_remainingnumber
credits_usednumber
datestring
fallback_behaviorstring
projectionobject
request_idstring
spendobject

No examples provided.

burnrate_estimate ~74

Before executing a multi-step agent plan, estimate the total LLM cost. Returns per-step breakdown and optimization suggestions. If the estimate exceeds your budget, pipe the same plan into burnrate_optimize. Costs 1 credit.

NameTypeReqDescription
planarrayyesArray of plan steps with provider, model, and token estimates.
NameTypeReqDescription
credits_remainingnumber
credits_usednumber
estimateobject
fallback_behaviorstring
optimization_suggestionsarray
request_idstring

No examples provided.

burnrate_optimize ~128

Get a cheaper equivalent plan by substituting models with lower-cost alternatives. Call after burnrate_estimate if the estimated cost exceeds your budget. Returns the optimized plan with substituted models, new per-step costs, total savings, and whether the target_budget is met. Optionally set target_budget to constrain the optimization. Costs 1 credit.

NameTypeReqDescription
planarrayyesArray of plan steps. Same schema as burnrate_estimate: each step needs step, provider, model, estimated_input_tokens, estimated_output_tokens.
target_budgetnumberOptional. Target total cost in USD.
NameTypeReqDescription
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
optimizedobject
originalobject
request_idstring
stepsarray
suggestionsarray

No examples provided.

burnrate_track ~268

Log the actual cost of an LLM call after execution. Call this after every LLM request to build calibration data that improves burnrate_estimate accuracy over time. Free — no credits charged. Returns the recorded cost entry with computed margin versus the prior estimate when one exists for this model and token range.

NameTypeReqDescription
cache_read_tokensnumberOptional. Cache-read tokens.
input_tokensnumberyesActual prompt tokens used. Must be >= 0.
modelstringyesModel identifier as returned by the provider. Examples: claude-sonnet-4-6, gpt-4o, gemini-2.0-flash, mistral-large-latest. Unknown models are accepted but cost may show as $0.
output_tokensnumberyesActual completion tokens used. Must be >= 0.
providerstringyesLLM provider identifier. Supported: anthropic, openai, google, mistral, cohere, deepseek, together, fireworks, groq. Must match the provider of the model used.
task_idstringOptional task ID for cross-referencing spend with DedupQ deduplication results. Use the same task_id passed to dedupq_check to link cost tracking with deduplication.
NameTypeReqDescription
actual_cost_usdnumber
actual_cost_usd_formattedstring
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
input_tokensnumber
modelstring
output_tokensnumber
pricing_foundboolean
providerstring
record_idstring
request_idstring
trackedboolean

No examples provided.

dedupq_check ~169

Before executing any LLM task, check if an identical or semantically similar task has already been completed. Returns cached result on hit, saving one LLM call. On a miss, execute your task and call dedupq_complete to cache the result for future hits. Costs 1 credit.

NameTypeReqDescription
contentstringyesThe task content to check for duplicates. This is hashed and embedded for matching.
hash_onlybooleanIf true, skip vector similarity search and use exact hash matching only. Default: false.
similarity_thresholdnumberCosine similarity threshold for semantic matching, 0.0 to 1.0. Default: 0.80.
task_idstringOptional caller task ID for tracing and cross-referencing with BurnRate.
NameTypeReqDescription
cache_age_secondsnumber
cache_hitstring
content_hashstring
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
matchobject
request_idstring
statusstringhit | miss | in_progress

No examples provided.

dedupq_complete ~113

After executing a task, store the result so future identical or similar tasks return a cache hit via dedupq_check. Costs 2 credits.

NameTypeReqDescription
contentstringyesOriginal task content. Used to compute hash and embedding for future matching.
hash_onlybooleanIf true, skip embedding generation. Default: false.
resultyesThe task result to cache. Can be any JSON value.
task_idstringOptional task ID. Used as the database row ID if provided.
NameTypeReqDescription
content_hashstring
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
has_embeddingboolean
request_idstring
storedboolean
task_idstring

No examples provided.

guardrail_check ~121

Evaluate a proposed agent action against your governance policies. Returns allow or deny with the matched policy reason. Requires at least one active policy created via guardrail_create_policy. Deterministic rule evaluation — no LLM. Costs 1 credit.

NameTypeReqDescription
agent_idstringyesAgent identifier.
proposed_actionobjectyesAction to evaluate. Must contain a 'type' field. Example: {"type": "http_request", "url": "https://external.example.com"} or {"type": "file_write", "path": "/etc/config"}.
NameTypeReqDescription
audit_idstring
credits_remainingnumber
credits_usednumber
decisionstring
fallback_behaviorstring
policy_idstring
reasonstring
request_idstring

No examples provided.

guardrail_create_policy ~342

Create a persistent governance policy that guardrail_check evaluates on every subsequent call. Define rules using and/or/not operators over action types, resource patterns, and budget thresholds. Call this before using guardrail_check — checks require at least one active policy. Policies persist until explicitly deleted. Duplicate policy names return an error. Returns the created policy with its ID and active status.

NameTypeReqDescription
action_typesarrayOptional. Restrict this policy to only evaluate when proposed_action.type matches one of these values. Examples: ['file_write', 'api_call', 'db_delete']. Omit to apply the policy to all action types…
descriptionstringOptional human-readable summary of what this policy enforces. Returned in guardrail_check responses and guardrail_list_policies output for auditability.
namestringyesUnique policy name per org. Examples: 'no-delete-in-prod', 'budget-cap-50', 'pii-block'.
prioritynumberOptional. Evaluation order. Default: 0.
rulesarrayyesArray of rule objects evaluated against the proposed_action in guardrail_check. Leaf operators: eq, starts_with, contains, gt, lt (compare field to value). Compound operators: and, or, not (nest sub-…
NameTypeReqDescription
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
policyobject
request_idstring

No examples provided.

pitfalldb_query ~101

Check for known failure patterns before executing a task type. Returns pitfalls with severity, fix suggestions, and confidence scores. After your agent runs, submit failures via pitfalldb_report so others benefit. Costs 2 credits.

NameTypeReqDescription
filtersobjectOptional filters.
task_descriptionstringOptional. Natural-language task description for semantic search.
task_typestringyesTask category: code_generation, web_search, data_analysis, etc.
NameTypeReqDescription
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
pitfallsarray
request_idstring
total_matchingnumber

No examples provided.

pitfalldb_report ~69

Report an agent failure. PII-scrubbed before storage. Linked to existing pitfalls if similar. Free — no credits charged.

NameTypeReqDescription
failureobjectyesFailure details.
task_descriptionstringyesDescription of the failed task.
task_typestringyesTask category.
NameTypeReqDescription
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
linked_pitfall_idstring
messagestring
report_idstring
request_idstring
verifiedboolean

No examples provided.

qualitygate_validate ~230

After your agent generates output, validate it against your rules before shipping. Runs deterministic checks (regex, JSON schema, syntax) plus optional LLM-powered tone and factual analysis. Returns a structured verdict (pass, warn, or fail) with a 0-100 score and per-check issue details. Use qualitygate_trends to spot recurring failure patterns over time. Variable cost: 1 credit per deterministic check, 8 credits per LLM check.

NameTypeReqDescription
check_typesarrayChecks to run. Auto-inferred if omitted.
directivesarrayDirective objects. Types: must_include, must_not_include, must_match, must_not_match, must_contain, must_not_contain, min_length, max_length.
languagestringCode language for syntax check: json, python, javascript, typescript.
outputstringyesThe agent output text to validate.
overridebooleanForce pass. Requires override_reason.
override_reasonstringRequired when override is true.
schemaobjectJSON Schema to validate output against.
NameTypeReqDescription
checks_runarray
credits_remainingnumber
credits_usednumber
fallback_behaviorstring
issuesarray
request_idstring
summaryobject
verdictstring

No examples provided.

rigor_execute ~389

Execute a structured workflow end-to-end. Call rigor_plan first (free) to preview the step sequence and cost estimate before committing credits. Classifies the task, selects the optimal tool sequence, and executes each step with the right LLM model. Returns a complete deliverable — solution designs, competitive analyses, governance documents, and more. Supports SSE streaming for real-time progress, webhook callback, or polling. For atomic work — classification, scoring, ranking, entity extraction, query parsing — set preferences.execution to 'direct' and declare preferences.output_contract to get validated JSON records from a single call, routed to the cheapest model that holds the schema.

NameTypeReqDescription
contextobjectAdditional context for the workflow.
deliveryobjectDelivery method. Default: polling (MCP clients typically can't handle SSE).
preferencesobjectOptional workflow preferences.
task_descriptionstringyesNatural language description of the task. Be specific — include what you want produced, constraints, and context. Example: 'Design a caching layer for our API gateway with Redis integration.'
task_typestringOptional hint to bypass automatic classification. Passing it also removes the slowest classification tiers from the critical path, so send it whenever you know the shape. Multi-step deliverable types…
NameTypeReqDescription
available_modesarray
delivery_modestring
estimated_creditsnumber
executionstringPresent with value 'direct' when direct execution ran. Absent for standard multi-call execution.
execution_fallbackbooleanTrue when you explicitly requested direct execution and it could not be honoured — the workflow ran as standard multi-call instead. Never set for an auto-selected attempt, since you did not ask.
okboolean
poll_urlstring
statusstring
task_typestring
value_classstring
workflow_idstring

No examples provided.

rigor_plan ~286

Before executing a complex task, get a structured workflow plan with per-step cost estimates. Classifies your task, selects the optimal framework sequence, and returns the full plan without executing anything. The response's allowed_modes tells you whether this plan is eligible for direct execution. Free — no credits charged.

NameTypeReqDescription
preferencesobjectOptional workflow preferences.
task_descriptionstringyesNatural language description of the task. Be specific — include what you want produced, constraints, and context. Example: 'Design a caching layer for our API gateway with Redis integration.'
task_typestringOptional hint to bypass automatic classification. Passing it also removes the slowest classification tiers from the critical path, so send it whenever you know the shape. Multi-step deliverable types…
NameTypeReqDescription
generated_titlestring
okboolean
planobject

No examples provided.

rigor_status ~66

Check the status of a running or completed Rigor workflow. Returns progress, step results, and the full deliverable when complete. Use after rigor_execute with polling delivery to retrieve results.

NameTypeReqDescription
workflow_idstringyesThe workflow ID returned by rigor_execute (format: wr_xxx).
NameTypeReqDescription
okboolean
workflowobject

No examples provided.

rigor_workflows ~364

List and search Rigor workflows for your organization, with filtering and pagination. Returns status, progress, capacity usage, and available actions per workflow. Use to monitor workflow state, understand concurrent limit usage, identify stuck or completed workflows, and — via q — find prior work on a subject before commissioning it again. Pair a q hit with rigor_status to read that workflow's deliverable.

NameTypeReqDescription
counts_toward_limitstringFilter to workflows counting toward the concurrent limit
created_afterstringISO timestamp — only workflows created after this time
created_beforestringISO timestamp — only workflows created before this time
cursorstringPagination cursor (created_at timestamp from previous page)
folder_idstringFilter by folder ID. Pass "unassigned" for workflows in no folder
limitnumberPage size (default 20, max 100)
qstringSearch the workflow title and task description. Every whitespace-separated term must appear in one or the other, as a case-insensitive substring — so "vector search postgres" matches a task described…
statusstringFilter by status (comma-separated). Valid values: executing, step_executing, completed, failed, halted, pending_approval, cancelled. E.g. "halted,failed,pending_approval"
task_typestringFilter by classified task type
NameTypeReqDescription
concurrent_summaryobject
credits_remainingnumber
okboolean
paginationobject
workflowsarray

No examples provided.

Common questions

What is the ai.plith/plith MCP server?

ai.plith/plith is an MCP server listed in the public MCP registry as ai.plith/plith. AI agent infrastructure: dedup, cost prediction, validation, governance, failure intelligence. This page covers its hosted endpoint (https://plith.ai/api/mcp).

Is the ai.plith/plith MCP server safe to use?

ai.plith/plith scores 86 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ai.plith/plith MCP server expose?

ai.plith/plith exposes 15 tools: dedupq_check, dedupq_complete, burnrate_estimate, burnrate_track, burnrate_optimize, and 10 more. Their descriptions and schemas cost roughly 2,789 tokens of context every time the server is loaded.

Does the ai.plith/plith MCP server require authentication?

No. We connected to ai.plith/plith without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the ai.plith/plith MCP server still maintained?

ai.plith/plith is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.