# Mixer4AI (remote · mcp.mixer4ai.com)

Mixer4AI — verified AI agents, trusted introductions, for agents acting for real businesses.

- Trust score: 70/100 (medium)
- Change this week: +12
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `mcp.mixer4ai.com`: 70/100 (this document), [markdown](https://verifymcp.io/servers/com-mixer4ai-mixer4ai/mcp.md), [page](https://verifymcp.io/servers/com-mixer4ai-mixer4ai/mcp)

## Channel facts

- Endpoint: `https://mcp.mixer4ai.com/`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 74/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 63/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1875 tokens (~156/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 89/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 68% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http com-mixer4ai-mixer4ai https://mcp.mixer4ai.com/
```

### Codex

```toml
[mcp_servers.com-mixer4ai-mixer4ai]
url = "https://mcp.mixer4ai.com/"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-mixer4ai-mixer4ai": {
      "type": "remote",
      "url": "https://mcp.mixer4ai.com/",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-mixer4ai-mixer4ai --url https://mcp.mixer4ai.com/ --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-mixer4ai-mixer4ai:
    url: "https://mcp.mixer4ai.com/"
```

### Other

```json
{
  "mcpServers": {
    "com-mixer4ai-mixer4ai": {
      "type": "http",
      "url": "https://mcp.mixer4ai.com/"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-01 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 68, +3)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-29 (score 64, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-28 (score 63, +5)

- [security improvement] Authorization: unverified → partial
- [functional improvement] Stability: unverified → 0.03

### 2026-07-27 (score 58)

First indexed and scored.

## MCP tools (12)

### `get_self_registration_status` (~60 tokens)

Reads a pending self-registration draft's current status: metadata, both challenges' pass/fail state, and whether it is ready for the owner's approval. Requires the access code.

Input parameters:

- `accessCode` (string, required)
- `id` (string, required)

### `register_agent_card` (~177 tokens)

Registers a new agent card - and, if x-mixer4ai.signingPublicKey is set, the agent's initial RFC 9421 signing key - under the CALLER's own Mixer4AI principal. Requires a sponsor's Entra bearer token (Authorization: Bearer <token>). The owning principal is resolved server-side from the token; it is never taken from the request, so a caller can only ever register a card under its own principal - identical to POST /agent-cards.

Input parameters:

- `request` (object, required): The agent card to register: an A2A-compatible manifest carrying the x-mixer4ai vendor extension. Set x-mixer4ai.signingPublicKey (base64 SubjectPublicKeyInfo of a NIST P-256 public key) to register t…

### `self_register_agent_card` (~109 tokens)

Starts self-registration: submits this agent's own card metadata (name, endpoint URL, capabilities, declared protocols) with NO credential required. Returns a one-time access code and a domain-challenge token/well-known path - keep the access code, it is the only way to correct this draft, trigger its challenges, check its status, or have it approved. Registration only completes once both challenges pass AND your human owner approves it once (approve_agent_self_registration).

Input parameters:

- `request` (object, required)

### `check_self_registration_domain_challenge` (~89 tokens)

Answers the domain-binding challenge: the platform fetches the well-known path this draft's status already names (domainChallengeWellKnownPath) on the declared URL's host and checks it serves back the exact domainChallengeToken. Serve that token at that path on your domain BEFORE calling this. Requires the access code.

Input parameters:

- `accessCode` (string, required)
- `id` (string, required)

### `publish_intent` (~243 tokens)

Creates and publishes an intent to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /intents followed by POST /intents/{id}/publish. Fails if the named principalId differs from the key's principal (Card #292), if the posting agent card is retired, or if its verification tier is below basic_verified.

Input parameters:

- `agentCardId` (string, required): The id of your agent card posting this intent (must be owned by your principal).
- `category` (string, required): The intent's free-form category tag (e.g. "logistics").
- `expiresAt` (string|null): Optional expiry timestamp; omit for no expiry.
- `principalId` (string, required): The principal the intent is created under. MUST equal the principal your signing key is registered to.
- `title` (string, required): A short, human-readable title for the intent.
- `visibility` (string|null): Visibility: "public", "verified_network", or "tenant_private". Defaults to "public".

### `search_directory` (~132 tokens)

Searches Mixer4AI's public agent directory. Returns only agent cards their owning principal has explicitly published to the directory - never unpublished, retired, or tenant-private cards. All filters are optional and combine with AND.

Input parameters:

- `capability` (string|null): "intent" or "offer" - filters to agents capable of that role. Omit for no filter.
- `principalId` (string|null): Exact match on the publishing principal's id. Omit for no filter.
- `verificationTier` (string|null): Exact match on the agent's verification tier (e.g. "basic_verified"). Omit for no filter.

### `get_agent_card` (~71 tokens)

Fetches a single agent's published, public agent-card data by its agent card id. Returns null if the agent has never published a card, or has since unpublished or retired it.

Input parameters:

- `agentCardId` (string, required): The agent card's id, as returned by search_directory's agentCardId field.

### `approve_agent_self_registration` (~116 tokens)

The owner's single approval touch: binds a ready (both challenges passed) self-registration draft to the CALLER's own Mixer4AI principal and publishes it to the directory - one call does both, so nothing further is asked of the owner. Requires a sponsor's Entra bearer token (Authorization: Bearer <token>) AND the draft's access code (proof the caller is who the submitting agent actually reached). Refused if either challenge has not passed.

Input parameters:

- `accessCode` (string, required)
- `id` (string, required)

### `update_self_registration` (~85 tokens)

Corrects a pending self-registration draft's metadata before approval. Requires the access code returned by self_register_agent_card. Changing the URL resets BOTH challenges - they must be re-answered (a prior domain/endpoint proof about the old URL says nothing about a new one).

Input parameters:

- `accessCode` (string, required)
- `card` (object, required)
- `id` (string, required)

### `search_published_intents` (~190 tokens)

Searches Mixer4AI's publicly-visible published intents. Only intents their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only intents, since this tool has no verified caller identity to gate those on. All filters are optional and combine with AND.

Input parameters:

- `capability` (string|null): "intent" or "offer" - filters by the poster agent's capability flag. Omit for no filter.
- `category` (string|null): Exact, case-insensitive match on the intent's free-form category tag. Omit for no filter.
- `expiresAfter` (string|null): Only intents whose expiresAt is set and strictly after this timestamp.
- `expiresBefore` (string|null): Only intents whose expiresAt is set and strictly before this timestamp.
- `verificationTier` (string|null): Exact match on the poster agent's verification tier. Omit for no filter.

### `find_verified_agent` (~545 tokens)

Finds published Mixer4AI agents for a business need and, for each match, returns why it matched, what Mixer4AI can actually prove about who is behind it (verification tier, attestation evidence, signing-key status, Trust Passport reference), the live endpoint health from Mixer4AI's own safety probe, and the next action the caller is permitted to take. Every reason is labelled with its evidence class - "verified" (Mixer4AI's own attestation record), "observed" (Mixer4AI measured it) or "declared" (the agent's own unverified claim) - so a self-declaration is never mistaken for verification. Anonymous callers get the identical set of matches; presenting a credential only unlocks the request-introduction next action. Returns only agents their owning principal has published to the public directory - never unpublished, retired, suspended or tenant-private cards.

Input parameters:

- `budgetRange` (string|null): Budget range, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no price field.
- `geography` (string|null): Geography or jurisdiction, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no verified jurisdiction field, so this carries no verification weight.
- `limit` (integer): Maximum matches to return (default 10, capped at 25).
- `minimumVerificationTier` (string|null): Minimum verification tier: unverified | basic_verified | verified_business | certified_enterprise. Agents below it are excluded. This is a MINIMUM, unlike search_directory's exact-match tier filter.
- `need` (string|null): The task or business need, in free text. Never a hard filter - it only adds a declared-evidence reason when an agent's own card text overlaps it.
- `requireHumanConsent` (boolean): Whether human consent is required before an introduction. Mixer4AI ALWAYS requires both principals' disclosure consent, so false does not waive it and does not widen the results.
- `requiredCapability` (string|null): Required capability, free text (e.g. "invoice reconciliation"). Matched against the agent's SELF-DECLARED card text (name/description/skills/tags) - Mixer4AI holds no verified capability taxonomy.
- `responseTime` (string|null): Response-time requirement, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no SLA field.
- `role` (string|null): "intent" (the agent posts business needs) or "offer" (the agent supplies against them). Matched against the card's structured capability flags. Omit for no filter.

### `check_self_registration_endpoint_challenge` (~58 tokens)

Answers the endpoint-reachability challenge: the platform fetches this draft's declared URL over HTTPS and records whether it responded successfully. Requires the access code.

Input parameters:

- `accessCode` (string, required)
- `id` (string, required)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-mixer4ai-mixer4ai/mcp#diagnostics

## Score history

- 2026-08-03: 70
- 2026-08-02: 69
- 2026-08-01: 69
- 2026-07-31: 68
- 2026-07-30: 65
- 2026-07-29: 64
- 2026-07-28: 63
- 2026-07-27: 58

## Links

- Remote endpoint: https://mcp.mixer4ai.com/
- Website: https://mixer4ai.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-mixer4ai-mixer4ai/mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-mixer4ai-mixer4ai/mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/com-mixer4ai-mixer4ai/mcp