Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Spoolis

NPM · @SPOOLIS/MCP · 2 COMPONENTS · SCANNED SEP 24

Verify work against acceptance criteria; signed receipts attest what passed and was earned.

+4 this week 74 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
Schema Quality & AI Usability61
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2245 tokens (~124/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage67
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 0% of tool parameters carry a description.Fail
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the Spoolis MCP server?

Spoolis runs locally as an npm package, launched with npx -y @spoolis/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @spoolis/mcp

# add to Claude Code
claude mcp add com-spoolis-mcp -- npx -y @spoolis/mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "com-spoolis-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@spoolis/mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "com-spoolis-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@spoolis/mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add com-spoolis-mcp -- npx -y @spoolis/mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-spoolis-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@spoolis/mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-spoolis-mcp --command npx --arg -y --arg @spoolis/mcp
# ~/.hermes/config.yaml
mcp_servers:
  com-spoolis-mcp:
    command: "npx"
    args: ["-y", "@spoolis/mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "com-spoolis-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@spoolis/mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add com-spoolis-mcp -t stdio -c npx -a -y @spoolis/mcp
// mcp.json
{
  "mcpServers": {
    "com-spoolis-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@spoolis/mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 24 Sept 26 +1
    • Stability: 0.97 → pass security
  • 22 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 18 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Sept 26 +15
    • Malware scan: unverified → pass security
  • 11 Sept 26 −14
    • Tool safety: pass → unverified security
    • Stability: 0.53 → unverified security
    • Malware scan: pass → unverified security
    • Tool coverage: 100 → unverified functional
    • Capabilities: pass → unverified functional
    • First check of Schema quality: unverified functional
    • Package version: 0.1.4 → 0.1.5 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 24 Sept 2026 · Analysed npm/@spoolis/mcp@0.1.5

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 95 packages
Packages resolved 95
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 18 exposed · ~2,211 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
abandon_spool ~62

Abandon an active Spool (the agreement object) before payment is committed. Use when the initiator no longer wants to proceed; this ends the agreement and cannot verify work or settle value. Works in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

accept_spool ~78

Confirm the compiled contract by accepting a proposed Spool (the agreement object). Use only after reviewing its terms and acceptance criteria; this records agreement acceptance but does not verify fulfillment or settle payment. Production agent agreements require the current quote digest. Works in the no-key sandbox.

NameTypeReqDescription
idstringyes
quote_digeststring

No output schema declared.

No examples provided.

amend_spool ~93

Change acceptance criteria or unit-based earned-value rules on a proposed Spool (the agreement object). Use before acceptance when the draft does not match the intended purchase; this replaces proposal details and does not accept or verify the work. Works in the no-key sandbox.

NameTypeReqDescription
add_conditionsarray
idstringyes
remove_condition_idsarray
unitizationobject

No output schema declared.

No examples provided.

cancel_spool ~70

Cancel a Spool (the agreement object) that should not continue. Use only when cancellation is an allowed action; this changes lifecycle state and does not verify fulfillment or settle payment. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

commit_payment ~90

Ask the configured settlement adapter to authorize and, where supported, hold the maximum value for a Spool (the agreement object). Use after terms are accepted when the selected payment path requires commitment; this may create a payment authorization or hold, but does not verify work or determine earned value. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

compile_spool ~96

Turn purchase intent into a proposed DRAFT Spool (the agreement object) with explicit acceptance criteria and earned-value rules. Use before both parties confirm terms; do not use for one-call unilateral result verification. This creates a persisted draft to inspect, then accept_spool confirms it, amend_spool changes conditions or unitization, and abandon_spool discards it. Works in the no-key sandbox.

NameTypeReqDescription
sourcestringyes

No output schema declared.

No examples provided.

complete_spool ~72

Read a Spool (the agreement object) whose outcome is already completed. Use for compatibility when a completed result is expected; it has no side effects and does not run verification or settlement. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

create_counterparty_invite ~101

Create a 15-minute, single-use grant that lets the other party join a Spool (the agreement object). Use when a counterparty needs scoped access without signing in; do not use as payment authority. This creates a credential that expires after use or 15 minutes. Requires the initiator's full-scope key. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

create_spool ~216

Create a production Spool (the agreement object) from structured terms and acceptance criteria. Use when both parties will participate in the agreement lifecycle; do not use for one-call unilateral verification. This persists a proposed agreement and may send the counterparty invite reported in the response handoff block. The type field defaults to the person or business service path, while agent selects the agent settlement rail. Conditions may declare verification_method third_party with an external_judge so verification consumes your own evaluator's bound result instead of Spoolis judging those conditions. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
agreementobject
conditionsarrayyes
deliverableobjectyes
dispute_policyobject
economicsobject
gated_actionstring
gated_action_notestring
partiesarrayyes
termsarrayyes
typestring
valueobjectyes

No output schema declared.

No examples provided.

decline_spool ~69

Decline a proposed Spool (the agreement object). Use when the counterparty rejects its terms; this ends the proposal without accepting it, verifying work, or settling payment. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

get_receipt_status ~55

Check whether an Outcome Receipt is still current or has been superseded, before acting on it. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
receipt_idstringyes

No output schema declared.

No examples provided.

get_spool ~98

Read a Spool (the agreement object), including hash-covered evidence requirements, dispute policy, and salted unit identity configuration. Use for status checks; it has no side effects. A party named in who_may_dispute can supersede an issued receipt through POST /api/v1/receipts/{receipt_id}/supersede. There is no review queue or UI. Works in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

get_spool_events ~61

Read the canonical audit history for a Spool (the agreement object), including agreement, fulfillment, verification, and settlement events. Use to reconstruct what happened; it has no side effects. Works in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

propose_spool ~77

Move a draft Spool (the agreement object) into the proposed state so the counterparty can review it. Use after the acceptance criteria are ready; this changes agreement state and does not accept terms or settle payment. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.

NameTypeReqDescription
idstringyes

No output schema declared.

No examples provided.

run_sandbox_scenario ~264

Evaluate Spoolis without a key or account: run a seeded synthetic scenario through a real demo Spool (the agreement object), verification, and a signed demo Outcome Receipt. Use to observe which units may continue after verification and inspect seeded truth only after the Outcome exists. Scenarios: data_enrichment runs a synthetic company-enrichment delivery with configurable defect and adversarial rates and returns per-unit verdicts with partial earned value; external_judge_two_consumers walks a signed external evaluator judgment, bound to the agreement and evidence, through one shared Outcome consumed independently by billing and workflow, then shows tamper rejection and missing-unit uncertainty; qualified_meetings runs ten vendor-reported meetings through buyer acceptance criteria and returns seven accepted, two rejected, and one uncertain with a signed receipt; production_migration verifies local delivery checks plus buyer-owned billing telemetry through the external evaluator path, then shows deploy blocking and remediation. This persists only run parameters and aggregate results; modeled economics are labeled modeled. Works in the no-key sandbox.

NameTypeReqDescription
adversarial_case_countinteger
defect_ratenumber
modeled_cost_per_unitnumber
record_countinteger
scenariostringyes
seedstring

No output schema declared.

No examples provided.

submit_evidence ~117

Attach fulfillment evidence to an acceptance criterion in a Spool (the agreement object). Use after work is delivered and before verification; this persists evidence but does not decide whether it passes or what was earned. Works in the no-key sandbox.

NameTypeReqDescription
claim_classstring
condition_idstringyes
idstringyes
metadataobject
on_behalf_ofstring
provenancestring
sourcestringyes
typestringyes

No output schema declared.

No examples provided.

verify_result ~382

Get a signed, durable, portable Outcome Receipt: a verdict artifact, per unit for unitized work, another system can fetch and independently verify. Spoolis makes it by verifying returned work against explicit acceptance criteria. Use when an agent, vendor, or tool reports work as done and the next action depends on whether the delivery actually met the agreed criteria. This runs in one call using exactly one of inline conditions or a locally registered recipe slug and hash, creating an inspectable unilateral Spool, the versioned acceptance policy. The maximum amount field is optional for verification-only runs. Omit it when nobody is paying; the earned amount is then zero and the receipt omits committed value. The maximum amount field is required when unit is present because unit math needs the cap. Recipe verification uses the hosted conditions exactly as written and fails closed when the hash differs. The external provider does not accept conditions in Spoolis. For a batch delivery where items can pass, fail, or remain uncertain individually, pass unit (its unit count matching the item count) AND evidence type dataset with exactly one row per delivered item, keeping a field present with a null value when it is missing; that returns distinct per-unit verdicts and earned value only for passing units. Text evidence with unit is batch-only and settles all-or-nothing. For a keyless production alternative, use POST /api/v1/verify/x402. Sandbox dataset evidence is limited to 100 records. Works in the no-key sandbox.

NameTypeReqDescription
conditionsstring|array
evidenceobjectyes
gated_actionstring
gated_action_notestring
idempotency_keystring
max_amount_centsinteger
recipeobject
settlementstring
unitobject

No output schema declared.

No examples provided.

verify_spool ~210

Issue a signed, durable, portable Outcome Receipt from this Spool, the versioned acceptance policy. The receipt is a verdict artifact, per unit for unitized work, another system can fetch and independently verify. Spoolis makes it by evaluating submitted evidence against the acceptance criteria and determining what was earned. Use after evidence is attached; this records the verdict and required evidence as present, missing, stale, unavailable, or provenance unsatisfied. Missing required evidence defaults to uncertain. Conditions with verification_method third_party keep your own judge: verification consumes the declared external evaluator's result, bound to this agreement and evidence per its declared proof requirement, instead of Spoolis judging those conditions itself. Unitized receipts may include salted public unit identities. Sandbox dataset evidence is limited to 100 records. Canonical recipe: compile -> verify -> Outcome Receipt -> verifyReceipt -> optional status check -> consumer acts on earned. Works in the no-key sandbox.

NameTypeReqDescription
confirmationsarray
idstringyes

No output schema declared.

No examples provided.

Common questions

What is the Spoolis MCP server?

Spoolis is an MCP server listed in the public MCP registry as com.spoolis/mcp. Verify work against acceptance criteria; signed receipts attest what passed and was earned. This page covers its npm package (@spoolis/mcp).

Is the Spoolis MCP server safe to use?

Spoolis scores 74 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 24 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Spoolis MCP server expose?

Spoolis exposes 18 tools: verify_result, run_sandbox_scenario, compile_spool, create_spool, get_spool, and 13 more. Their descriptions and schemas cost roughly 2,211 tokens of context every time the server is loaded.

Is the Spoolis MCP server still maintained?

Spoolis is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Spoolis MCP server under?

Spoolis declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.