Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

HeyClaude — Claude & AI workflow directory

REMOTE · HEYCLAU.DE · 2 COMPONENTS

Search the HeyClaude directory of Claude Code agents, MCP servers, skills, and tools.

0 this week 90 Trust /100

Last scanned (19 hours ago)

Scores higher than 98% of remote servers

Reachable. Last reached 4 Nov 2026.

Category Developer Tools

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security80
Transport & Reachability100
Schema Quality & AI Usability88
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 3237 tokens (~77/item across 42 items; 28 tools + 14 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 99% of tool parameters carry a description.Partial
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 28 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 29 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Aug 26 0
    • Stability: 0.97 → pass security
  • 29 Aug 26 0
    • Stability: pass → 0.97 functional
  • 26 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Aug 26 0
    • Stability: 0.97 → pass security
  • 11 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 31 Jul 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Probed https://heyclau.de/api/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=heyclau.de CN=WE1,O=Google Trust Services,C=US 4 Oct 2026 2 Jan 2027 ECDSA 256 ECDSA-SHA256 7243a0db90e39a1413d4558774034c1c
SANs: heyclau.de, www.heyclau.de, *.www.heyclau.de
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of heyclau.de. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
de. present 26755 8 Verified
heyclau.de. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=15552000; includeSubDomains
content-security-policy default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://api.github.com https://img.shields.io https://challenges.cloudflare.com https://submission-gate.heyclau.de; frame-src https://challenges.cloudflare.com; form-action 'self' https://github.com; manifest-src 'self'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), payment=(), usb=(), bluetooth=(), browsing-topics=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://heyclau.de/api/mcp Verified 200
http (plaintext) http://heyclau.de/api/mcp HTTPS enforced 301 https://heyclau.de/api/mcp
MCP tools · 28 exposed · ~2,985 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
entry.asset ~168

Fetch the category-aware copy/install asset for a HeyClaude entry without writing local files. Pass assetType (e.g. 'install_command', 'config_snippet') to return only that asset and avoid the full_content/script payloads when you do not need them.

NameTypeReqDescription
assetTypestring–Return only this asset type instead of every asset. Use it to avoid paying for the full_content or script payload (up to tens of KB) when you only need, e.g., the install_command or config_snippet.
categorystringyesCategory of the entry (e.g. 'mcp', 'skills').
platformstring–Target platform to tailor the install command or config snippet.
slugstringyesSlug of the entry to fetch the asset for.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

entry.compare ~71

Compare 2-5 read-only HeyClaude entries by fit, category, platforms, source metadata, and install complexity.

NameTypeReqDescription
entriesarrayyes2–5 entries to compare, each identified by category and slug.
platformstring–Target platform for the comparison (affects install steps shown).
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

entry.coverage ~109

Compare 2-5 HeyClaude entries side by side by how much trust metadata they disclose (source, package, safety, privacy, and review provenance) and rank them by deterministic signal coverage. This measures disclosed-metadata completeness only; it is not a malware scan, a safety verdict, or installation approval, and a higher score does not mean an entry is safe.

NameTypeReqDescription
entriesarrayyes2-5 entries to compare by disclosed trust metadata coverage.
platformstring––
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

entry.detail ~243

Fetch a read-only HeyClaude registry entry detail payload by category and slug. By default (bodyMode='excerpt') the body markdown is trimmed to a short lead and large copyable fields are omitted to conserve context, with bodyChars/bodyTruncated/omittedFields describing what was dropped; pass bodyMode='full' for the complete content or 'none' to drop the body entirely. Use entry.asset to retrieve omitted install/script content.

NameTypeReqDescription
bodyModestring–How much entry content to return. 'excerpt' (default) trims the body markdown to a short lead and omits large copyable fields (scriptBody, fullCopyableContent, copySnippet), reporting what was droppe…
categorystringyesCategory of the entry (e.g. 'mcp', 'skills', 'agents').
slugstringyesSlug of the entry to fetch.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

entry.related ~89

Fetch read-only related HeyClaude entries based on category, tags, platforms, keywords, and source metadata.

NameTypeReqDescription
categorystringyesCategory of the reference entry (e.g. 'mcp', 'skills').
limitinteger–Maximum related entries to return (1–25, default 8).
slugstringyesSlug of the reference entry to find related entries for.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

entry.safety ~96

Review 1-5 HeyClaude entries for source, package, safety, and privacy metadata fit before install or recommendation. This is a metadata review only and does not provide malware scanning, automatic safety guarantees, or installation approval.

NameTypeReqDescription
entriesarrayyes1–5 entries to review for safety and privacy metadata, each identified by category and slug.
platformstring–Target platform to contextualize safety and compatibility notes.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

entry.trust ~93

Explain deterministic trust, source, package, safety, privacy, and review metadata signals for one HeyClaude entry. This is a metadata review only and does not provide malware scanning, automatic safety guarantees, or installation approval.

NameTypeReqDescription
categorystringyesCategory of the entry (e.g. 'mcp', 'skills', 'agents').
slugstringyesSlug of the entry to explain trust signals for.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

install.adapter ~59

Fetch generated read-only platform adapter content, currently Cursor rule adapters for skill packages.

NameTypeReqDescription
platformstring–Target platform for the adapter (defaults to 'cursor').
slugstringyesSlug of the skill to generate a platform adapter for.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

install.compatibility ~51

Fetch platform compatibility metadata for a HeyClaude skill entry.

NameTypeReqDescription
categorystring–Entry category (defaults to 'skills').
slugstringyesSlug of the skill entry to check compatibility for.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

install.guidance ~91

Fetch read-only install, config, usage, and package guidance for a HeyClaude entry.

NameTypeReqDescription
categorystringyesCategory of the entry (e.g. 'mcp', 'skills').
platformstring–Target platform to tailor the install steps (e.g. 'claude-desktop', 'cursor').
slugstringyesSlug of the entry to get install guidance for.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

install.setup ~78

Fetch read-only MCP client setup snippets for Codex, Claude Desktop, Cursor, Windsurf, or remote HTTP clients.

NameTypeReqDescription
clientstring–MCP client to generate a setup snippet for (e.g. 'claude-desktop', 'cursor').
endpointUrlstring–Override the default remote MCP endpoint URL in the generated snippet.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.feeds ~27

List read-only HeyClaude registry feeds, category feeds, platform feeds, and artifact locations.

Input schema present but exposes no named parameters.

NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.info ~26

Fetch read-only HeyClaude MCP package, registry, tool, and public rate-limit metadata.

Input schema present but exposes no named parameters.

NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.list ~264

List read-only HeyClaude entries with bounded pagination and optional category, platform, tag, and query filters.

NameTypeReqDescription
categorystring–Category to list entries from (e.g. 'mcp', 'skills', 'agents').
claimStatusstring–Filter by claim or verification status ('unclaimed', 'pending', 'verified', or 'all').
downloadTruststring–Filter by package download trust level ('first-party', 'external', 'none', or 'all').
hasPrivacyNotesstring–Filter by whether entries include privacy notes ('true', 'false', or 'all').
hasSafetyNotesstring–Filter by whether entries include safety notes ('true', 'false', or 'all').
limitinteger–Number of entries per page (1–25, default 20).
offsetinteger–Pagination offset for large result sets (0–5000).
platformstring–Filter to entries compatible with this platform.
querystring–Keyword search to narrow the listing.
sourceStatusstring–Filter by whether the entry's source URL is reachable ('available', 'missing', or 'all').
tagstring–Filter to entries carrying this exact tag.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.plan ~155

Plan a read-only Claude or Codex workflow toolbox from ranked HeyClaude registry entries. Each entry includes an inline install block (install command, config snippet, download URL) and the recommended stack is summarized as a copy-pasteable installPlan, alongside trust and follow-up guidance.

NameTypeReqDescription
categorystring–Constrain recommendations to a single category (e.g. 'mcp', 'skills').
goalstringyesPlain-language description of the workflow or goal to build a toolbox for.
limitinteger–Maximum number of recommendations to include (1–10, default 6).
platformstring–Target platform or client for the toolbox (e.g. 'claude-desktop', 'cursor').
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.recommend ~190

Answer 'what should I use to do X' in one call. Given a plain-language task (and optional platform/category), returns the best-match HeyClaude entries ranked by fit — each with why it fits, trust summary, disclosed safety/privacy notes, and an inline install block — plus a topPick and a consolidated installPlan. Unlike workflow.plan it does not force category diversity; it returns the genuinely best matches. Collapses the search → compare → detail → asset loop into a single answer-shaped response.

NameTypeReqDescription
categorystring–Restrict recommendations to a single category.
limitinteger–Maximum recommendations to return (default 3).
platformstring–Restrict to entries compatible with this platform.
taskstringyesPlain-language description of what you want to accomplish, e.g. 'review pull requests in Claude Code' or 'connect to a Postgres database'.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.search ~266

Search read-only HeyClaude registry entries by query, category, exact tag, and skill platform compatibility.

NameTypeReqDescription
categorystring–Restrict results to this category (e.g. 'mcp', 'skills', 'hooks').
claimStatusstring–Filter by claim or verification status ('unclaimed', 'pending', 'verified', or 'all').
downloadTruststring–Filter by package download trust level ('first-party', 'external', 'none', or 'all').
hasPrivacyNotesstring–Filter by whether entries include privacy notes ('true', 'false', or 'all').
hasSafetyNotesstring–Filter by whether entries include safety notes ('true', 'false', or 'all').
limitinteger–Maximum number of results to return (1–25, default 10).
platformstring–Restrict to entries compatible with this platform (e.g. 'claude-desktop', 'cursor').
querystring–Keywords to search for in entry titles, descriptions, and tags.
sourceStatusstring–Filter by whether the entry's source URL is reachable ('available', 'missing', or 'all').
tagstring–Return only entries carrying this exact tag.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.stats ~27

Fetch aggregate read-only registry stats, freshness, category counts, and real source-signal coverage.

Input schema present but exposes no named parameters.

NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

registry.updates ~263

List recently added or upstream-updated HeyClaude entries from generated registry metadata.

NameTypeReqDescription
categorystring–Restrict to a single category (e.g. 'mcp', 'hooks').
claimStatusstring–Filter by claim or verification status ('unclaimed', 'pending', 'verified', or 'all').
downloadTruststring–Filter by package download trust level ('first-party', 'external', 'none', or 'all').
hasPrivacyNotesstring–Filter by whether entries include privacy notes ('true', 'false', or 'all').
hasSafetyNotesstring–Filter by whether entries include safety notes ('true', 'false', or 'all').
limitinteger–Maximum entries to return (1–25, default 10).
platformstring–Filter to entries compatible with this platform.
querystring–Keyword search to narrow the listing.
sincestring–Return only entries updated after this date, e.g. '2026-05-01'.
sourceStatusstring–Filter by whether the entry's source URL is reachable ('available', 'missing', or 'all').
tagstring–Filter to entries carrying this exact tag.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.duplicates ~229

Search generated registry artifacts for likely duplicate entries before a user opens a submission PR.

NameTypeReqDescription
brandDomainstring–Brand's canonical domain (e.g. 'example.com') to check for duplicates.
categorystring–Category to scope the duplicate search.
docsUrlstring–Documentation URL to check for duplicates.
downloadUrlstring–Download or release URL to check for duplicates.
githubUrlstring–GitHub repository URL to check for duplicates.
limitinteger–Maximum number of duplicate candidates to return (1–10).
namestring–Tool or resource name to search for near-duplicates.
slugstring–Slug to check for an exact existing entry.
sourceUrlstring–Primary source URL to check against existing entries.
sourceUrlsarray–Multiple source URLs to check (e.g. GitHub repo + docs site).
titlestring–Display title to search for near-duplicates.
websiteUrlstring–Homepage or product URL to check for duplicates.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.examples ~44

Fetch read-only category examples and templates for faster, more accurate HeyClaude submissions.

NameTypeReqDescription
categorystring–Category to fetch submission examples for. Returns cross-category examples if omitted.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.guidance ~43

Fetch category-specific HeyClaude contribution guidance, required fields, and review expectations.

NameTypeReqDescription
categorystring–Category to fetch contribution guidelines for. Returns general guidance if omitted.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.policy ~30

Fetch HeyClaude's read-only submission, artifact, import, and maintainer-review policy for contributors and agents.

Input schema present but exposes no named parameters.

NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.prepare ~46

Build a read-only maintainer-reviewed HeyClaude submission draft with canonical PR text and URLs.

NameTypeReqDescription
fieldsobjectyesSubmission field values to compile into a canonical maintainer-reviewed PR draft.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.review ~71

Review a HeyClaude submission draft locally for schema errors, duplicate risk, and maintainer checklist items without writing to GitHub.

NameTypeReqDescription
duplicateLimitinteger–Maximum number of duplicate candidates to include in the review.
fieldsobjectyesSubmission field values to review for schema errors and maintainer checklist items.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.schema ~42

Fetch read-only HeyClaude submission schemas for PR-first intake by category.

NameTypeReqDescription
categorystring–Submission category to fetch the schema for. Returns all schemas if omitted.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.urls ~67

Build prefilled HeyClaude submit and review URLs for a validated PR-first submission draft without making write calls.

NameTypeReqDescription
fieldsobjectyesValidated submission field values to encode into submit and review URLs.
includePrBodyboolean–Include a pre-filled PR body in the returned URL.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

submission.validate ~47

Validate a HeyClaude content submission draft locally without creating GitHub issues, pull requests, or publishing content.

NameTypeReqDescription
fieldsobjectyesSubmission field values to validate against the HeyClaude content schema.
NameTypeReqDescription
okbooleanyes–
policyobject––

No examples provided.

Install

How do I install the HeyClaude — Claude & AI workflow directory MCP server?

HeyClaude — Claude & AI workflow directory is a hosted endpoint at https://heyclau.de/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · heyclau.de

# add to Claude Code
claude mcp add --transport http jsonbored-heyclaude 'https://heyclau.de/api/mcp'
Common questions

What is the HeyClaude — Claude & AI workflow directory MCP server?

HeyClaude — Claude & AI workflow directory is an MCP server listed in the public MCP registry as io.github.JSONbored/heyclaude. Search the HeyClaude directory of Claude Code agents, MCP servers, skills, and tools. This page covers its hosted endpoint (https://heyclau.de/api/mcp).

Is the HeyClaude — Claude & AI workflow directory MCP server safe to use?

HeyClaude — Claude & AI workflow directory scores 90 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the HeyClaude — Claude & AI workflow directory MCP server expose?

HeyClaude — Claude & AI workflow directory exposes 28 tools: registry.search, registry.plan, registry.recommend, registry.info, registry.list, and 23 more. Their descriptions and schemas cost roughly 2,985 tokens of context every time the server is loaded.

Does the HeyClaude — Claude & AI workflow directory MCP server require authentication?

No. We connected to HeyClaude — Claude & AI workflow directory without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the HeyClaude — Claude & AI workflow directory MCP server still maintained?

HeyClaude — Claude & AI workflow directory is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.