# kyde score (remote · score.kyde.com)

Behavioral drift scores for AI agents from OpenTelemetry: create a key, send OTLP, read scores.

- Trust score: 61/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `score.kyde.com`: 61/100 (this document), [markdown](https://verifymcp.io/servers/com-kyde-score/score.md), [page](https://verifymcp.io/servers/com-kyde-score/score)

## Channel facts

- Endpoint: `https://score.kyde.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.5.2`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (rebaseline).
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 73/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 526 tokens (~105/item across 5 items; 5 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability check failed: schema churn in the 3 days we've observed: 0 tool removals, 1 breaking changes, 0 auth/transport breaks, 1 additions.
- **Tool Coverage**: 89/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 67% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### How do I install the kyde score MCP server?

kyde score is a hosted endpoint at https://score.kyde.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-kyde-score 'https://score.kyde.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "com-kyde-score": {
      "url": "https://score.kyde.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-kyde-score": {
      "type": "http",
      "url": "https://score.kyde.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-kyde-score]
url = "https://score.kyde.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-kyde-score": {
      "type": "remote",
      "url": "https://score.kyde.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-kyde-score --url 'https://score.kyde.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-kyde-score:
    url: "https://score.kyde.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "com-kyde-score": {
      "Transport": "http",
      "Url": "https://score.kyde.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-kyde-score -t streamable-http -u 'https://score.kyde.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "com-kyde-score": {
      "type": "http",
      "url": "https://score.kyde.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 61, −1)

- [security regression] Stability: 0.07 → fail
- [functional regression] “set_webhook” changed the type of “webhook_url”: string → string|null
- [functional improvement] Tool coverage: 56% → 67%
- [functional] Server version: 0.7.0 → 0.7.1
- [cosmetic] “set_webhook” reworded the description of “webhook_url”

### 2026-11-04 (score 62, +1)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] New tool “rebaseline”, which the server declares destructive
- [security] Tool “set_webhook” rewrote its description, which is the text the model reads
- [functional regression] Tool coverage: 67% → 56%
- [functional regression] Schema quality: 83 → 102
- [functional] Server version: 0.2.6 → 0.7.0

### 2026-11-03 (score 61, 0)

- [functional improvement] Stability: unverified → 0.03
- [functional] Server version: 2026.10.27-0 → 0.2.6

### 2026-11-02 (score 61)

First indexed and scored.

## MCP tools (5)

### `create_key` (~70 tokens)

Create scoring key

Create a scoring key (no signup). One key covers all agents, identified by OTel service.name. webhook_url (https) is optional but recommended: it receives an HMAC-signed POST when any agent's score changes band.

Input parameters:

- `webhook_url` (string): Optional https URL notified on band changes.

### `get_scores` (~69 tokens)

Get drift scores

Current drift score per agent under the key: 0-39 deviating, 40-69 watch, 70-100 normal; status 'learning' until the 30-run baseline freezes.

Input parameters:

- `key` (string): Scoring key; omit when sent as x-kyde-key header.

### `set_webhook` (~103 tokens)

Set alert webhook

Add or change the https webhook. It is POSTed on every band change and rebaseline, HMAC-SHA256-signed with the scoring key (header x-kyde-signature: sha256=<hex> over the raw body).

Input parameters:

- `key` (string): Scoring key; omit when sent as x-kyde-key header.
- `webhook_url` (string|null, required): https URL, or null to remove the webhook (the key becomes poll-only).

### `rebaseline` (~133 tokens)

Reset agent baseline

Forget one agent's learned baseline and score and relearn from its next 30 runs. For intended behavior changes (new model, new task) that left the agent permanently deviating. The reset is permanently visible: records and alarms stay stored, the agent carries rebaselined_at, and the reset itself is recorded as a rebaseline alarm naming the score/band it erased. Requires confirm=true and the human's explicit go-ahead.

Input parameters:

- `confirm` (boolean, required)
- `key` (string): Scoring key; omit when sent as x-kyde-key header.
- `service_name` (string, required)

### `revoke_key` (~53 tokens)

Revoke key and delete data

Revoke the key and permanently delete all data stored under it. Requires confirm=true.

Input parameters:

- `confirm` (boolean, required)
- `key` (string): Scoring key; omit when sent as x-kyde-key header.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-kyde-score/score#diagnostics

## Score history

- 2026-11-05: 61
- 2026-11-04: 62
- 2026-11-03: 61
- 2026-11-02: 61

## Common questions

### What is the kyde score MCP server?

kyde score is an MCP server listed in the public MCP registry as com.kyde/score. Behavioral drift scores for AI agents from OpenTelemetry: create a key, send OTLP, read scores. This page covers its hosted endpoint (https://score.kyde.com/mcp).

### Is the kyde score MCP server safe to use?

kyde score scores 61 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the kyde score MCP server expose?

kyde score exposes 5 tools: create_key, get_scores, set_webhook, rebaseline, revoke_key. Their descriptions and schemas cost roughly 428 tokens of context every time the server is loaded.

### Does the kyde score MCP server require authentication?

No. We connected to kyde score without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the kyde score MCP server still maintained?

kyde score is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://score.kyde.com/mcp
- Website: https://score.kyde.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-kyde-score/score.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-kyde-score/score.json
- HTML version of this page: https://verifymcp.io/servers/com-kyde-score/score