io.github.tang-vu/keryx
REMOTE · KERYX.CC · 2 COMPONENTS
Budgeted research with cited evidence and visible payment state on the selected Arc network.
Available components
Last scanned (4 hours ago)
Scores higher than 89% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Education and Research
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability65
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3071 tokens (~113/item across 27 items; 27 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
- Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage81
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 33% of tool parameters carry a description.Partial
- Structured output schemas are declared (19% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 27 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Stability: pass → 0.97 functional
- 3 Nov 26 0
- Stability: 0.97 → pass security
- 2 Nov 26 0
- Stability: pass → 0.97 functional
- 29 Oct 26 +61
- Stability: unverified → pass ▲ security
- Injection markers: unverified → pass ▲ security
- Authorization: unverified → partial ▲ security
- Transport: fail → pass ▲ security
- HSTS header: fail → pass ▲ security
- Endpoint reachability: not serving MCP → reachable ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- 28 Oct 26 −61
- Endpoint reachability: reachable → not serving MCP ▼ security
- Stability: pass → unverified ▼ security
- Authorization: partial → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- HSTS header: pass → fail ▼ security
- Transport: pass → fail ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 25 Oct 26 0
- Tool coverage: 12% → 19% ▲ functional
- Server version: 0.3.18 → 0.3.19 functional
- New tool “research_feedback_submit” functional
- New tool “research_feedback_read” functional
- 22 Oct 26 0
- “evidence_procurement” added an optional parameter “format” cosmetic
1 cosmetic change on this day. Switch on “Show cosmetic changes” to see it.
- 20 Oct 26 +61
- Stability: unverified → pass ▲ security
- Injection markers: unverified → pass ▲ security
- Authorization: unverified → partial ▲ security
- Transport: fail → pass ▲ security
- HSTS header: fail → pass ▲ security
- Endpoint reachability: not serving MCP → reachable ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://keryx.cc/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=keryx.cc | CN=WE1,O=Google Trust Services,C=US | 12 Oct 2026 | 10 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 84cd7d4de2f77a700e87b1e446f8478e |
| SANs: keryx.cc, *.keryx.cc | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of keryx.cc. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| cc. | present | 12593 | 13 | Verified |
| keryx.cc. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://rpc.blockdaemon.mainnet.arc.io https://gateway-api.circle.com https://*.supabase.co wss://*.supabase.co https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.reown.com wss://*.reown.com https://*.metamask.io wss://*.metamask.io; worker-src 'self' blob:; frame-src 'self' https://*.walletconnect.com https://*.walletconnect.org https://*.metamask.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://keryx.cc/mcp | Verified | 200 | |
| http (plaintext) | http://keryx.cc/mcp | HTTPS enforced | 301 | https://keryx.cc/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
deliverable_acceptance_read Read your delivered-version acceptance ~71
Owner-only ordinary prepaid A2A deliverable state. Requires explicit deliverable:read. Historical remedy:none and missing response window remain visible. Native/enrolled, Monthly, private v2 and browser-only originals are unavailable. Not source-decision agreement or semantic verification.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
deliverable_acceptance_submit Record your deliverable choice or request ~100
Record Accept, Request revision or Reject for the original customer's exact retained delivery. Requires explicit deliverable:write, expected current revision/digests and an idempotency key. Reason is private; publishState explicitly shares state/timestamp only. Request storage does not execute a revision/refund, recharge, change reservations or claw back rewards. Your MCP client may retain private messages.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
| submission | object | yes | – |
No output schema declared.
No examples provided.
draft_check Check a draft's cited claims against supplied source text ~210
Split a private passage into sentences, bind citation markers ([3], cite{key}, [@key], Author (Year)) to a BibTeX, RIS or DOI/link reference list, and compare each cited sentence with source text you supply. Each verdict (supported, partly-supported, not-found, source-unavailable) carries a verbatim excerpt of that text or states that no supporting passage was found; a source without supplied text is always source-unavailable. Deterministic wording comparison, not semantic review. No fetching, model, database, history, payment or reward I/O. Inputs and results can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.
| Name | Type | Req | Description |
|---|---|---|---|
| check | – | – | Version-1 private-draft-check contract, method lexical-overlap-v2, at most 65536 UTF-8 bytes. Optional sources[].identity binds exact DOI/URL and contentVersion; suggestions[] stays separate from wri… |
No output schema declared.
No examples provided.
evidence_draft Assemble a private retained-evidence draft ~239
Assemble user-selected claim spans and related-work quote themes from saved Include paper records and caller-supplied retained Keryx report rows. A theme may carry author-written statements (contribution, agreement, disagreement, gap); a statement naming a paper is exported only with a citation and a selected retained excerpt from each named paper, otherwise it is withheld. Exported citations and BibTeX/RIS entries are checked to correspond one to one. Exact version/excerpt matching does not authenticate imported reports or verify semantic support. No fetching, model, database, history, payment or reward I/O. Inputs and returned draft can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.
| Name | Type | Req | Description |
|---|---|---|---|
| draft | – | – | Version-1 private-evidence-draft contract, at most 65536 UTF-8 bytes. Optional assembly {mode:append} or {mode:regenerate,themeId} quotes retained text without model calls; optional readingStatuses s… |
No output schema declared.
No examples provided.
evidence_procurement Plan and inspect private evidence procurement ~183
Assess missing evidence requirements, supplied provider offers, selections, deliveries and caller reviews with the shared private evidence procurement contract. Amounts are exact integer micro-USDC. Signature and content-binding checks do not establish delivery quality, buyer authority, payment or settlement. No fetching, model, provider, database, history, purchase, escrow or reward I/O. Caller selections and reviews are assertions, not financial authorization. Inputs and results may be retained by your MCP client; choose its privacy settings before sharing private material.
| Name | Type | Req | Description |
|---|---|---|---|
| format | – | – | Optional receipt format: json (default), markdown or csv. Formatted text is bounded to 524288 UTF-8 bytes and cannot be restored. Structured procurement stays unchanged. |
| packet | – | – | Version-1 private-evidence-procurement packet, at most 65536 UTF-8 bytes. Supply original inputs, never a derived procurement result. |
No output schema declared.
No examples provided.
history_export Export your owned history metadata ~65
Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
history_owned_read Read your owned history ~66
Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
history_private_jobs_detail Read one of your completed private results ~85
Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| capabilities | object | yes | – |
| format | string | yes | – |
| qualification | string | yes | – |
| result | object | yes | – |
| row | object | yes | – |
| scope | string | yes | – |
| wallet | string | yes | – |
No examples provided.
history_private_jobs_export Export your private job metadata ~145
Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority. Manual finite JSON metadata export only; complete/truncated and continuation are returned. Result bodies are excluded.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| from | string | – | – |
| limit | integer | – | – |
| network | string | – | – |
| search | string | – | – |
| surface | string | – | – |
| to | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| bounds | object | yes | – |
| capabilities | object | yes | – |
| complete | boolean | yes | – |
| format | string | yes | – |
| nextCursor | – | yes | – |
| pages | integer | yes | – |
| qualification | string | yes | – |
| rows | array | yes | – |
| scope | string | yes | – |
| truncated | boolean | yes | – |
| wallet | string | yes | – |
No examples provided.
history_private_jobs_list List your completed private jobs ~125
Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| from | string | – | – |
| limit | integer | – | – |
| network | string | – | – |
| search | string | – | – |
| surface | string | – | – |
| to | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| capabilities | object | yes | – |
| format | string | yes | – |
| nextCursor | – | yes | – |
| qualification | string | yes | – |
| rows | array | yes | – |
| scanLimited | boolean | yes | – |
| scannedIntents | integer | yes | – |
| scope | string | yes | – |
| wallet | string | yes | – |
No examples provided.
history_read Read your attributed dispatch history ~119
Read bounded pages of the verified API-key wallet's ordinary current-store runs. Requires explicit history:read. Literal case-sensitive question search; storeNetwork describes the deployment, not per-run settlement. Recorded spend/allocation is not a payment receipt. No wallet selector, linked accounts, archive, private jobs, research or payment.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| from | string | – | – |
| funding | string | – | – |
| limit | integer | – | – |
| search | string | – | – |
| surface | string | – | – |
| to | – | – | – |
No output schema declared.
No examples provided.
keryx_operator_status Keryx business Operator status ~84
Observe public prepaid research operations, queue, recorded ordinary/recovered/unknown completion latency cohorts and hold/review rationale. Timing is order createdAt to updatedAt (acceptance to recorded completion/update); later reconciliation can extend it. It is not first-answer or settlement time. Missing capability stays null. No spending or execution authority; exact books and customer jobs stay private.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
keryx_public_job_ledger Public job transfer ledger ~114
Inspect a partial selected-network public web-dispatch transfer ledger and balanced exact micro-USDC vouchers. Browser funding and Keryx sponsorship are separate. Pending/ambiguous/batched-attribution legs do not enter settled totals. No customer questions/identities, private invoices, complete business books, margin, cash balance, signing or execution authority. days1–31, default7. Export via /api/operator/ledger; a checksum is not authenticity or independent settlement proof.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | – |
No output schema declared.
No examples provided.
keryx_purchase_outcomes Recorded dispatch purchase outcomes ~113
Read a public dispatch's retained exact-version BUY/citation/payment observations. Returns bounded sample counts, citation hit rate, calibration bands and integer micro-USDC uncited access cost. Recorded settlement is not revalidated on chain. Historical participant cohort is unknown; causal regret, missed value and cost per supported claim are unmeasured. No research, paid read, current-source backfill, private reviews, signing or learning. Use an existing dispatch ID, never a URL.
| Name | Type | Req | Description |
|---|---|---|---|
| dispatchId | string | yes | – |
No output schema declared.
No examples provided.
keryx_source_learning Recorded source learning sample ~125
Read the same bounded observational source/topic record as the public creator page and API. Only write-time independently classified/funded outside observations qualify; owners, unknown and private history are excluded. Source-declared public topics, counts, recorded citation contribution, exact rational average access price, descriptive uncertainty and abrupt-shift flag. No questions, wallets or receipt identifiers. Recorded settlement is not independently revalidated. Live learned selection and exploration are withheld, with zero live exploration allowance. No research, source read, payment, private inspection or policy activation.
| Name | Type | Req | Description |
|---|---|---|---|
| sourceId | string | yes | – |
No output schema declared.
No examples provided.
keryx_status Keryx remote MCP status ~25
Describe this MCP surface, its payment behavior, and the active caller tier.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
operator_obligations_read Read delegated Operator obligations ~79
Read a private conservative obligation projection for the exact server-delegated reader with explicit operator:read API-key scope. Disabled without protected reader/role configuration. Partial native history remains unknown with zero safe/advisory surplus. No cash probe, signer, custody, spending, release, refund or scheduler authority. No caller owner/role selectors.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
paper_lookup Look up paper bibliography ~216
Find paper titles, recorded contributors, DOI and exact repository versions without research or payment. Default: retained catalog metadata with observation times. Set searchRepositories=true only to explicitly send the query to arXiv/Crossref (at most two requests, no paper-body reading). Missing DOI, peer review and withdrawal/replacement status remain unknown. Returns a field-scoped bibliography card with provenance, a short reference and reusable BibTeX/RIS text. Use this for exact title/ordered author/year/journal/DOI/version questions before requesting paid research; original paper text is not required for recorded metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | Language for bibliography labels: en (default), fr or vi. Original titles, author names and venue names are preserved. |
| query | string | yes | Title/topic (up to 120 characters), exact DOI (up to 200), or versioned arXiv ID/official URL. |
| searchRepositories | boolean | – | Explicit external metadata lookup; false by default. Sends the query to official scholarly providers. |
No output schema declared.
No examples provided.
profile_identities_read Read your verified profile identities ~58
Read only the verified key owner's saved ORCID/GitHub identities. Requires explicit profile:read scope. No wallet selector, provider OAuth, linking, unlinking, research or payment. Link identities interactively in your private profile browser page.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
profile_read Read your private profile ~34
Read the verified key owner's private profile and attributed activity. Requires explicit profile:read scope. No public identity, research or payment.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
profile_update Update your private profile ~75
Replace the verified key owner's private display name, handle, one-line bio/purpose and links. Requires explicit profile:write scope. No wallet selector or identity verification; no payment/history changes.
| Name | Type | Req | Description |
|---|---|---|---|
| profile | object | yes | Complete replacement; empty text clears a field. Links are bounded HTTPS links to the allowed providers or a public website. |
No output schema declared.
No examples provided.
research Research with Keryx ~361
Research a question under a USDC creator-payment budget. Keryx selects sources, pays access tolls and weighted citation rewards on the configured Arc network, then returns qualified source excerpts and a receipt. Complete synthesis and per-assertion entailment remain unverified. This remote surface uses Keryx's treasury; anonymous research is sponsored, not caller-funded usage. Public research may send your question to our search provider. The source USDC budget is separate from model and search operating costs. For retained or repository bibliography use free paper_lookup with an exact identifier. An ordinary explicit exact-original bibliography request can also return a separate metadata-only record and references without a model call or creator payment; page status and full-paper evidence remain separate. New runs record remote MCP ingress. A verified ask-scoped API key attributes the run to its wallet; anonymous runs have no wallet owner. Editable client names establish no identity or spending authority.
| Name | Type | Req | Description |
|---|---|---|---|
| budget | number | – | Maximum creator-payment budget in USDC; 0 allows free sources without purchases or rewards. Clamped to the caller's tier. |
| language | string | – | Language of generated labels only; the original question and answer are unchanged. Omitted labels follow qualified recorded answer language when available; historical and unqualified answer language… |
| mode | string | – | Research depth; default deep. |
| model | string | – | Optional Keryx model catalog id, for example deepseek-chat. |
| question | string | yes | Research question. |
| researchMode | – | – | – |
| responseMode | – | – | – |
| reviewFirst | boolean | – | Review-first requires the authenticated live browser; this adapter refuses true. |
| scholarly | boolean | – | Opt in to bounded Crossref/arXiv paper discovery; sends the question to those providers. |
No output schema declared.
No examples provided.
research_feedback_read Read feedback for your original answer ~103
Original-caller private opinion on the exact delivered ordinary research answer. Requires its private bearer capability; a public report ID or link grants no authority. First choice is retained, exact retries are idempotent. Silence is no response. No research, source fetching, revision execution, refunds, signing or payments.
| Name | Type | Req | Description |
|---|---|---|---|
| token | string | yes | Private capability received with your original completed answer. Keep it out of reports, prompts to Keryx research, public links and exports. |
| Name | Type | Req | Description |
|---|---|---|---|
| deliveredDigest | string | yes | – |
| execution | string | yes | – |
| feedback | – | yes | – |
| format | string | yes | – |
| runId | string | yes | – |
No examples provided.
research_feedback_submit Record usefulness of your original answer ~117
Original-caller private opinion on the exact delivered ordinary research answer. Requires its private bearer capability; a public report ID or link grants no authority. First choice is retained, exact retries are idempotent. Silence is no response. No research, source fetching, revision execution, refunds, signing or payments.
| Name | Type | Req | Description |
|---|---|---|---|
| choice | string | yes | – |
| reason | string | – | – |
| token | string | yes | Private capability received with your original completed answer. Keep it out of reports, prompts to Keryx research, public links and exports. |
| Name | Type | Req | Description |
|---|---|---|---|
| deliveredDigest | string | yes | – |
| execution | string | yes | – |
| feedback | – | yes | – |
| format | string | yes | – |
| runId | string | yes | – |
No examples provided.
research_monthly Research Monthly pilot ~40
Read the four-request, 30-day Research Monthly quote and handoff. The current quote identifies its payment network. Never buys or redeems a plan.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
run_owner_export Export your question record ~63
Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
| requestId | string | yes | – |
No output schema declared.
No examples provided.
run_privacy_read Read your question privacy ~56
Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
How do I install the io.github.tang-vu/keryx MCP server?
io.github.tang-vu/keryx is a hosted endpoint at https://keryx.cc/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · keryx.cc
claude mcp add --transport http tang-vu-keryx 'https://keryx.cc/mcp'
What is the io.github.tang-vu/keryx MCP server?
io.github.tang-vu/keryx is an MCP server listed in the public MCP registry as io.github.tang-vu/keryx. Budgeted research with cited evidence and visible payment state on the selected Arc network. This page covers its hosted endpoint (https://keryx.cc/mcp).
Is the io.github.tang-vu/keryx MCP server safe to use?
io.github.tang-vu/keryx scores 84 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.tang-vu/keryx MCP server expose?
io.github.tang-vu/keryx exposes 27 tools: evidence_draft, research_feedback_read, research_feedback_submit, draft_check, evidence_procurement, and 22 more. Their descriptions and schemas cost roughly 3,071 tokens of context every time the server is loaded.
Does the io.github.tang-vu/keryx MCP server require authentication?
No. We connected to io.github.tang-vu/keryx without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.tang-vu/keryx MCP server still maintained?
io.github.tang-vu/keryx is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.