io.github.rotifer-protocol/mcp-server

NPM · @ROTIFER/MCP-SERVER · SCANNED AUG 3

Search, compare, and install self-evolving AI Agent Genes ranked by Arena fitness

Available components

+24 this week 77 77 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security86

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency97

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to rotifer-protocol/rotifer-mcp-server). View diagnostics → Pass
Clear OSI-approved license (Apache-2.0).Pass
Actively maintained (last published 42 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability84

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 2522 tokens (~86/item across 29 items; 29 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @rotifer/mcp-server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add rotifer-protocol-mcp-server -- npx -y @rotifer/mcp-server

# add to Codex CLI

codex mcp add rotifer-protocol-mcp-server -- npx -y @rotifer/mcp-server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "rotifer-protocol-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@rotifer/mcp-server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add rotifer-protocol-mcp-server --command npx --arg -y --arg @rotifer/mcp-server

# ~/.hermes/config.yaml

mcp_servers:
  rotifer-protocol-mcp-server:
    command: "npx"
    args: ["-y", "@rotifer/mcp-server"]

// mcp.json

{
  "mcpServers": {
    "rotifer-protocol-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@rotifer/mcp-server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +72
- Provenance: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- The attested source repository moved: rotifer-protocol/rotifer-mcp-server security
- Schema quality: unverified → good ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- License: unverified → pass ▲ functional
- Schema quality: unverified → 100 ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: Apache-2.0 functional
1 Aug 26 −30
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
31 Jul 26 +9
- Malware scan: pass → unverified ▼ security
- Dependency health: partial → unverified ▼ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → 100 ▲ functional
29 Jul 26 +2
- Dependency health: unverified → partial ▲ functional
28 Jul 26 −29
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
27 Jul 26 53

First indexed and scored.

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@rotifer/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: rotifer-protocol/rotifer-mcp-server
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/rotifer-protocol/rotifer-mcp-server/.github/workflows/release.yml@refs/tags/v0.9.1
Rekor log index:: 1907813605
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:4fcbc029bb1b96a448618cf5cb2cfdb36331cce44fd23da72d4c2d5c3559b70edca525df550ba2ecefa02301736f8dba9ab6802dab51087c1316e97fa
Discovery method:: attestation_endpoint

Dependencies 94 packages

94 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 29 exposed · ~2,522 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

agent_run ~125

Run a local Agent by name. Executes via the Rotifer CLI (rotifer agent run <agent-name>). The Agent must exist in .rotifer/agents/. Returns stdout/stderr from the execution.

Input Output Examples

Name	Type	Req	Description
agent_name	string	yes	Agent name (as given during create_agent)
input	string	—	Input data to pass to the agent (JSON string)
no_sandbox	boolean	—	Force Node.js execution, skip WASM sandbox
project_root	string	—	Project root path
verbose	boolean	—	Show intermediate results for each gene step

No output schema declared.

No examples provided.

arena_submit ~132

Submit a Gene to the Arena with fitness metrics. Requires authentication (rotifer login). Upserts the Gene's Arena entry with 5-dimensional fitness scores.

Input Output Examples

Name	Type	Req	Description
fitness_value	number	yes	Overall fitness score F(g) (0-1)
gene_id	string	yes	Gene UUID to submit
latency_score	number	yes	Latency score (0-1, higher is better)
resource_efficiency	number	yes	Resource efficiency score (0-1)
safety_score	number	yes	Safety score (0-1)
success_rate	number	yes	Success rate (0-1)

No output schema declared.

No examples provided.

auth_status ~35

Check current authentication status. Returns whether the user is logged in, their username, provider, and how many minutes until the token expires.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

compare_genes ~48

Compare two or more Genes by their F(g) fitness metrics. Returns side-by-side fitness breakdown.

Input Output Examples

Name	Type	Req	Description
gene_ids	array	yes	Array of Gene UUIDs to compare (2-5)

No output schema declared.

No examples provided.

compile_gene ~121

Compile a local Gene to WASM via the Rotifer CLI (rotifer compile). The Gene must exist in the local genes/ directory. Returns compilation output.

Input Output Examples

Name	Type	Req	Description
check	boolean	—	Validate only, don't produce artifacts (default: false)
gene_name	string	yes	Gene name (directory name under genes/)
lang	string	—	Force compilation mode (auto-detected by default)
project_root	string	—	Project root path
wasm_path	string	—	Path to a pre-compiled .wasm file to wrap as IR

No output schema declared.

No examples provided.

create_agent ~172

Create a new Agent by composing one or more local Genes. The Agent is saved to .rotifer/agents/ in the project. Genes must exist locally (wrap them first with wrap_gene).

Input Output Examples

Name	Type	Req	Description
agent_name	string	yes	Agent name
composition	string	—	Composition strategy (default: Seq for multi-gene, Single for one gene)
domain	string	—	Domain tag for the agent (e.g. search.web). Metadata only, does not auto-select genes.
gene_ids	array	yes	Array of local gene names to compose (at least one required)
par_merge	string	—	Merge strategy for Par composition (default: first)
project_root	string	—	Project root path (defaults to cwd)
strategy	string	—	Gene selection strategy (default: greedy)

No output schema declared.

No examples provided.

get_arena_rankings ~96

Get Arena rankings for a domain with full 5-dimensional fitness metrics: fitness (F(g)), safety, success_rate, latency, and resource_efficiency. Use this to find the best Gene for a capability.

Input Output Examples

Name	Type	Req	Description
domain	string	—	Capability domain (e.g. search.web)
page	number	—	Page number (default 1)
per_page	number	—	Results per page (default 20)

No output schema declared.

No examples provided.

get_developer_profile ~31

Get a creator's public profile and reputation data by username.

Input Output Examples

Name	Type	Req	Description
username	string	yes	Creator username

No output schema declared.

No examples provided.

get_gene_detail ~84

Get detailed information about a specific Gene by its ID or content_hash, including phenotype, fitness, and metadata. At least one of gene_id or content_hash must be provided.

Input Output Examples

Name	Type	Req	Description
content_hash	string	—	SHA-256 content hash of the gene's phenotype (alternative to gene_id)
gene_id	string	—	Gene UUID (required if content_hash not provided)

No output schema declared.

No examples provided.

get_gene_reputation ~35

Get detailed reputation breakdown for a Gene (Arena, Usage, Stability scores).

Input Output Examples

Name	Type	Req	Description
gene_id	string	yes	Gene ID

No output schema declared.

No examples provided.

get_gene_stats ~47

Get download statistics for a Gene, broken down by time period (total, last 7 days, 30 days, 90 days).

Input Output Examples

Name	Type	Req	Description
gene_id	string	yes	Gene UUID

No output schema declared.

No examples provided.

get_leaderboard ~57

Get the creator reputation leaderboard. Shows top creators ranked by reputation score, including their published gene count, total downloads, and arena wins.

Input Output Examples

Name	Type	Req	Description
limit	number	—	Number of entries to return (default 20, max 100)

No output schema declared.

No examples provided.

get_mcp_stats ~56

Get MCP Server call analytics for a given time period. Returns total calls, success rate, average latency, top tools, and top genes. Requires authentication.

Input Output Examples

Name	Type	Req	Description
days	number	—	Time window in days (default 7)

No output schema declared.

No examples provided.

get_my_reputation ~24

Get the current logged-in creator's reputation and stats. Requires authentication.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

init_gene ~112

Initialize a new Rotifer Gene project. Creates a directory with phenotype.json template and starter files. Supports Wrapped, Hybrid, and Native fidelity types.

Input Output Examples

Name	Type	Req	Description
domain	string	—	Default gene domain (default: general)
fidelity	string	—	Gene fidelity type (default: Wrapped)
gene_name	string	yes	Gene name (will create genes/<gene_name>/ directory)
no_genesis	boolean	—	Skip genesis genes installation (default: false)
project_root	string	—	Project root path

No output schema declared.

No examples provided.

install_gene ~86

Install a Gene from the Rotifer Cloud Registry into the local project. Downloads phenotype and metadata. Requires a valid gene_id from search_genes or get_gene_detail.

Input Output Examples

Name	Type	Req	Description
force	boolean	—	Overwrite if gene already exists locally (default: false)
gene_id	string	yes	Gene UUID to install
project_root	string	—	Project root path (defaults to cwd)

No output schema declared.

No examples provided.

list_gene_versions ~60

List the version history chain of a Gene by creator and name. Returns all published versions in chronological order with changelog entries and previous_version_id links.

Input Output Examples

Name	Type	Req	Description
gene_name	string	yes	Gene name
owner	string	yes	Gene creator's username

No output schema declared.

No examples provided.

list_local_agents ~82

List Agents registered in the local project workspace. Returns each Agent's name, state, genome composition, strategy, and reputation. Agents are local constructs that compose multiple Genes into pipelines.

Input Output Examples

Name	Type	Req	Description
project_root	string	—	Project root path (defaults to current working directory)
state	string	—	Filter by agent state (e.g. 'Active', 'Inactive')

No output schema declared.

No examples provided.

list_local_genes ~93

List Genes installed in the local project workspace. Scans the genes/ directory for phenotype.json files and returns metadata, compile status, and cloud origin for each Gene.

Input Output Examples

Name	Type	Req	Description
domain	string	—	Filter by domain prefix (e.g. 'search' matches 'search.web')
fidelity	string	—	Filter by fidelity type
project_root	string	—	Project root path (defaults to current working directory)

No output schema declared.

No examples provided.

Log in to Rotifer Cloud. Opens the browser for OAuth authorization (GitHub or GitLab). After the user authorizes in the browser, credentials are saved locally. This must be done before using arena_submit or publish_gene.

Input Output Examples

Name	Type	Req	Description
endpoint	string	—	Cloud endpoint URL (uses default if omitted)
provider	string	—	OAuth provider (default: github)

No output schema declared.

No examples provided.

logout ~19

Log out from Rotifer Cloud. Clears locally saved credentials.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

publish_gene ~183

Publish a Gene to Rotifer Cloud Registry (default destination since v0.8.8). Calling this tool = explicit publish consent. Requires authentication (use login tool first). Validates with V(g) security scan (Grade >= B required), uploads, and optionally submits to Arena. Either gene_name or all=true must be provided.

Input Output Examples

Name	Type	Req	Description
all	boolean	—	Publish all local genes (default: false)
changelog	string	—	Changelog entry for this version (max 500 chars)
description	string	—	Gene description
gene_name	string	—	Gene name to publish (required unless all=true)
project_root	string	—	Project root path
skip_arena	boolean	—	Skip automatic Arena submission after publish (default: false)
skip_security	boolean	—	Skip pre-publish security checks (default: false)

No output schema declared.

No examples provided.

run_gene ~135

Execute a local Gene via the Rotifer CLI (rotifer run). The Gene must exist in the local genes/ directory. Returns execution output.

Input Output Examples

Name	Type	Req	Description
gene_name	string	yes	Gene name (directory name under genes/)
input	string	—	Input JSON data to pass to the gene
no_sandbox	boolean	—	Run without WASM sandbox, Node.js only (default: false)
project_root	string	—	Project root path
trust_unsigned	boolean	—	Allow Node.js execution for Cloud-installed genes (default: false)
verbose	boolean	—	Show detailed execution output (default: false)

No output schema declared.

No examples provided.

scan_genes ~102

Scan source files for candidate gene functions or local SKILL.md files that can be wrapped as Genes. Returns discovered candidates with metadata.

Input Output Examples

Name	Type	Req	Description
path	string	—	Path to scan (defaults to current directory)
project_root	string	—	Project root path
skills	boolean	—	Scan for SKILL.md files instead of source functions (default: false)
skills_path	string	—	Directory to scan for skills (default: .cursor/skills)

No output schema declared.

No examples provided.

search_genes ~131

Search the Rotifer Gene ecosystem. Returns a list of Genes matching the query, filterable by domain and fidelity.

Input Output Examples

Name	Type	Req	Description
domain	string	—	Filter by capability domain (e.g. search.web, code.format)
fidelity	string	—	Filter by gene fidelity type
page	number	—	Page number (default 1)
per_page	number	—	Results per page (default 20, max 50)
query	string	—	Free-text search by gene name or description
sort	string	—	Sort order (default: relevance when query is given, newest otherwise)

No output schema declared.

No examples provided.

suggest_domain ~33

Suggest top matching domains from the domain registry based on a description.

Input Output Examples

Name	Type	Req	Description
description	string	yes	Description to match against domains

No output schema declared.

No examples provided.

test_gene ~81

Test a Gene in the sandbox. Validates phenotype schema, runs input/output tests, and checks compilation.

Input Output Examples

Name	Type	Req	Description
compliance	boolean	—	Run structural compliance checks (default: false)
gene_name	string	yes	Gene name to test
project_root	string	—	Project root path
verbose	boolean	—	Show detailed output (default: false)

No output schema declared.

No examples provided.

vg_scan ~116

V(g) security scan — static analysis for Gene/Skill code safety. Returns a grade (A/B/C/D/?) and per-finding details with severity, file, line, and snippet.

Input Output Examples

Name	Type	Req	Description
all	boolean	—	Scan all code files, not just src/
gene_id	string	—	Gene/Skill identifier for the report
path	string	—	Path to Gene or Skill directory to scan (default: current project root)
project_root	string	—	Project root directory (auto-detected if omitted)

No output schema declared.

No examples provided.

wrap_gene ~145

Wrap a function or SKILL.md as a Rotifer Gene. Generates phenotype.json from the source. The target must exist in the project.

Input Output Examples

Name	Type	Req	Description
domain	string	—	Gene functional domain (e.g. search.web, code.format)
fidelity	string	—	Fidelity level (default: Wrapped)
from_clawhub	string	—	Create gene from a ClawHub skill (slug, downloads and converts automatically)
from_skill	string	—	Create gene from a SKILL.md file (path to SKILL.md or its directory)
gene_name	string	yes	Name of the function or skill to wrap
project_root	string	—	Project root path

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug