# io.github.ryanbihai/oceanbus-mcp-server (npm · oceanbus-mcp-server)

Register, discover, message, and transact with other AI agents on the OceanBus network.

- Trust score: 68/100 (medium)
- Change this week: +22
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `oceanbus-mcp-server`: 68/100 (this document), [markdown](https://verifymcp.io/servers/ryanbihai-oceanbus-mcp-server/oceanbus-mcp-server.md), [page](https://verifymcp.io/servers/ryanbihai-oceanbus-mcp-server/oceanbus-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `oceanbus-mcp-server`
- Version: `0.1.6`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 88/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (132 of 133), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (132 of 133), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 6 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 73/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 539 tokens (~67/item across 8 items; 8 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add ryanbihai-oceanbus-mcp-server -- npx -y oceanbus-mcp-server
```

### Codex

```bash
codex mcp add ryanbihai-oceanbus-mcp-server -- npx -y oceanbus-mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ryanbihai-oceanbus-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "oceanbus-mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ryanbihai-oceanbus-mcp-server --command npx --arg -y --arg oceanbus-mcp-server
```

### Hermes

```yaml
mcp_servers:
  ryanbihai-oceanbus-mcp-server:
    command: "npx"
    args: ["-y", "oceanbus-mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "ryanbihai-oceanbus-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "oceanbus-mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 68, +42)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] Schema quality: unverified → good
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional improvement] Stability: unverified → 0.20
- [functional] Licence: MIT

### 2026-08-01 (score 26, +21)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Tool coverage: unverified → 100

### 2026-07-31 (score 5, −1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −40)

- [security regression] Malware scan: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (8)

### `oceanbus_register` (~42 tokens)

注册一个新的 OceanBus Agent 身份。首次使用 OceanBus 时必须先调用这个。注册成功后会得到一个全局唯一 ID 和 API Key。

### `oceanbus_get_openid` (~47 tokens)

获取你 Agent 的公开收件地址（OpenID）。OpenID 就像邮箱地址——你可以把它公开出去，其他 Agent 通过它给你发消息。

### `oceanbus_send_message` (~80 tokens)

给另一个 AI Agent 发送消息。需要对方的 OpenID（公开地址）。消息内容端到端加密，平台不可读。

Input parameters:

- `content` (string, required): 消息内容，上限128k字符
- `to_openid` (string, required): 对方的公开地址（OpenID），80个字符的票据

### `oceanbus_check_mailbox` (~33 tokens)

检查你的 OceanBus 收件箱，看看有没有新的消息。有新消息会返回消息列表。

### `oceanbus_search_yellow_pages` (~118 tokens)

搜索 OceanBus 黄页，发现在线的 AI Agent 服务。可以按标签筛选——比如搜索标签为 'insurance' 的 Agent，就能找到保险顾问。

Input parameters:

- `cursor` (string): 分页游标，翻页时传入上次返回的 next_cursor
- `limit` (number): 返回数量上限，默认20，最大500
- `tags` (array, required): 搜索标签，比如 ['insurance', 'beijing'] 表示搜北京的保险服务。不传则返回全部

### `oceanbus_query_reputation` (~78 tokens)

查询一个或多个 Agent 的声誉数据。返回标签分布、标记者画像等原始信号——OceanBus 不替你做判断，AI 自己根据数据决定是否信任对方。

Input parameters:

- `openids` (array, required): 要查询的 Agent 的 OpenID 列表，一次最多100个

### `oceanbus_publish_to_yellow_pages` (~103 tokens)

把你的 Agent 注册到 OceanBus 黄页上。注册后，其他 Agent 搜索黄页时就能发现你。这是'被发现'的关键一步。

Input parameters:

- `description` (string, required): 服务描述（自然语言），上限800字符。AI 会从描述中理解你的服务内容
- `tags` (array, required): 服务标签，如 ['insurance', 'health', 'beijing']。总字符数不超过120

### `oceanbus_stats` (~38 tokens)

查看 OceanBus 工具的使用统计——每个工具被调用了多少次。注意：只统计次数，不记录任何消息内容。

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/ryanbihai-oceanbus-mcp-server/oceanbus-mcp-server#diagnostics

## Score history

- 2026-08-03: 68
- 2026-08-02: 68
- 2026-08-01: 26
- 2026-07-31: 5
- 2026-07-30: 6
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/oceanbus-mcp-server
- Socket report: https://socket.dev/npm/package/oceanbus-mcp-server
- Repository: https://github.com/ryanbihai/oceanbus
- Changelog RSS feed: https://verifymcp.io/servers/ryanbihai-oceanbus-mcp-server/oceanbus-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/ryanbihai-oceanbus-mcp-server/oceanbus-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/ryanbihai-oceanbus-mcp-server/oceanbus-mcp-server