Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.tang-vu/keryx

REMOTE · KERYX.CC · 2 COMPONENTS

Budgeted research with cited evidence and visible payment state on the selected Arc network.

0 this week 84 Trust /100

Last scanned (4 hours ago)

Scores higher than 89% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Education and Research

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security80
Transport & Reachability100
Schema Quality & AI Usability65
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 3071 tokens (~113/item across 27 items; 27 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
  • Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage81
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 33% of tool parameters carry a description.Partial
  • Structured output schemas are declared (19% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 27 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 0
    • Stability: pass → 0.97 functional
  • 3 Nov 26 0
    • Stability: 0.97 → pass security
  • 2 Nov 26 0
    • Stability: pass → 0.97 functional
  • 29 Oct 26 +61
    • Stability: unverified → pass ▲ security
    • Injection markers: unverified → pass ▲ security
    • Authorization: unverified → partial ▲ security
    • Transport: fail → pass ▲ security
    • HSTS header: fail → pass ▲ security
    • Endpoint reachability: not serving MCP → reachable ▲ functional
    • MCP protocol: unverified → pass ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
  • 28 Oct 26 −61
    • Endpoint reachability: reachable → not serving MCP ▼ security
    • Stability: pass → unverified ▼ security
    • Authorization: partial → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • HSTS header: pass → fail ▼ security
    • Transport: pass → fail ▼ security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
  • 25 Oct 26 0
    • Tool coverage: 12% → 19% ▲ functional
    • Server version: 0.3.18 → 0.3.19 functional
    • New tool “research_feedback_submit” functional
    • New tool “research_feedback_read” functional
  • 22 Oct 26 0
    • “evidence_procurement” added an optional parameter “format” cosmetic

    1 cosmetic change on this day. Switch on “Show cosmetic changes” to see it.

  • 20 Oct 26 +61
    • Stability: unverified → pass ▲ security
    • Injection markers: unverified → pass ▲ security
    • Authorization: unverified → partial ▲ security
    • Transport: fail → pass ▲ security
    • HSTS header: fail → pass ▲ security
    • Endpoint reachability: not serving MCP → reachable ▲ functional
    • MCP protocol: unverified → pass ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://keryx.cc/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=keryx.cc CN=WE1,O=Google Trust Services,C=US 12 Oct 2026 10 Jan 2027 ECDSA 256 ECDSA-SHA256 84cd7d4de2f77a700e87b1e446f8478e
SANs: keryx.cc, *.keryx.cc
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of keryx.cc. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
cc. present 12593 13 Verified
keryx.cc. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000; includeSubDomains; preload
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://rpc.blockdaemon.mainnet.arc.io https://gateway-api.circle.com https://*.supabase.co wss://*.supabase.co https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.reown.com wss://*.reown.com https://*.metamask.io wss://*.metamask.io; worker-src 'self' blob:; frame-src 'self' https://*.walletconnect.com https://*.walletconnect.org https://*.metamask.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://keryx.cc/mcp Verified 200
http (plaintext) http://keryx.cc/mcp HTTPS enforced 301 https://keryx.cc/mcp
MCP tools · 27 exposed · ~3,071 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
deliverable_acceptance_read ~71

Owner-only ordinary prepaid A2A deliverable state. Requires explicit deliverable:read. Historical remedy:none and missing response window remain visible. Native/enrolled, Monthly, private v2 and browser-only originals are unavailable. Not source-decision agreement or semantic verification.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

deliverable_acceptance_submit ~100

Record Accept, Request revision or Reject for the original customer's exact retained delivery. Requires explicit deliverable:write, expected current revision/digests and an idempotency key. Reason is private; publishState explicitly shares state/timestamp only. Request storage does not execute a revision/refund, recharge, change reservations or claw back rewards. Your MCP client may retain private messages.

NameTypeReqDescription
idstringyes–
submissionobjectyes–

No output schema declared.

No examples provided.

draft_check ~210

Split a private passage into sentences, bind citation markers ([3], cite{key}, [@key], Author (Year)) to a BibTeX, RIS or DOI/link reference list, and compare each cited sentence with source text you supply. Each verdict (supported, partly-supported, not-found, source-unavailable) carries a verbatim excerpt of that text or states that no supporting passage was found; a source without supplied text is always source-unavailable. Deterministic wording comparison, not semantic review. No fetching, model, database, history, payment or reward I/O. Inputs and results can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.

NameTypeReqDescription
check––Version-1 private-draft-check contract, method lexical-overlap-v2, at most 65536 UTF-8 bytes. Optional sources[].identity binds exact DOI/URL and contentVersion; suggestions[] stays separate from wri…

No output schema declared.

No examples provided.

evidence_draft ~239

Assemble user-selected claim spans and related-work quote themes from saved Include paper records and caller-supplied retained Keryx report rows. A theme may carry author-written statements (contribution, agreement, disagreement, gap); a statement naming a paper is exported only with a citation and a selected retained excerpt from each named paper, otherwise it is withheld. Exported citations and BibTeX/RIS entries are checked to correspond one to one. Exact version/excerpt matching does not authenticate imported reports or verify semantic support. No fetching, model, database, history, payment or reward I/O. Inputs and returned draft can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.

NameTypeReqDescription
draft––Version-1 private-evidence-draft contract, at most 65536 UTF-8 bytes. Optional assembly {mode:append} or {mode:regenerate,themeId} quotes retained text without model calls; optional readingStatuses s…

No output schema declared.

No examples provided.

evidence_procurement ~183

Assess missing evidence requirements, supplied provider offers, selections, deliveries and caller reviews with the shared private evidence procurement contract. Amounts are exact integer micro-USDC. Signature and content-binding checks do not establish delivery quality, buyer authority, payment or settlement. No fetching, model, provider, database, history, purchase, escrow or reward I/O. Caller selections and reviews are assertions, not financial authorization. Inputs and results may be retained by your MCP client; choose its privacy settings before sharing private material.

NameTypeReqDescription
format––Optional receipt format: json (default), markdown or csv. Formatted text is bounded to 524288 UTF-8 bytes and cannot be restored. Structured procurement stays unchanged.
packet––Version-1 private-evidence-procurement packet, at most 65536 UTF-8 bytes. Supply original inputs, never a derived procurement result.

No output schema declared.

No examples provided.

history_export ~65

Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

history_owned_read ~66

Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

history_private_jobs_detail ~85

Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.

NameTypeReqDescription
idstringyes–
NameTypeReqDescription
capabilitiesobjectyes–
formatstringyes–
qualificationstringyes–
resultobjectyes–
rowobjectyes–
scopestringyes–
walletstringyes–

No examples provided.

history_private_jobs_export ~145

Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority. Manual finite JSON metadata export only; complete/truncated and continuation are returned. Result bodies are excluded.

NameTypeReqDescription
cursorstring––
fromstring––
limitinteger––
networkstring––
searchstring––
surfacestring––
to–––
NameTypeReqDescription
boundsobjectyes–
capabilitiesobjectyes–
completebooleanyes–
formatstringyes–
nextCursor–yes–
pagesintegeryes–
qualificationstringyes–
rowsarrayyes–
scopestringyes–
truncatedbooleanyes–
walletstringyes–

No examples provided.

history_private_jobs_list ~125

Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.

NameTypeReqDescription
cursorstring––
fromstring––
limitinteger––
networkstring––
searchstring––
surfacestring––
to–––
NameTypeReqDescription
capabilitiesobjectyes–
formatstringyes–
nextCursor–yes–
qualificationstringyes–
rowsarrayyes–
scanLimitedbooleanyes–
scannedIntentsintegeryes–
scopestringyes–
walletstringyes–

No examples provided.

history_read ~119

Read bounded pages of the verified API-key wallet's ordinary current-store runs. Requires explicit history:read. Literal case-sensitive question search; storeNetwork describes the deployment, not per-run settlement. Recorded spend/allocation is not a payment receipt. No wallet selector, linked accounts, archive, private jobs, research or payment.

NameTypeReqDescription
cursorstring––
fromstring––
fundingstring––
limitinteger––
searchstring––
surfacestring––
to–––

No output schema declared.

No examples provided.

keryx_operator_status ~84

Observe public prepaid research operations, queue, recorded ordinary/recovered/unknown completion latency cohorts and hold/review rationale. Timing is order createdAt to updatedAt (acceptance to recorded completion/update); later reconciliation can extend it. It is not first-answer or settlement time. Missing capability stays null. No spending or execution authority; exact books and customer jobs stay private.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

keryx_public_job_ledger ~114

Inspect a partial selected-network public web-dispatch transfer ledger and balanced exact micro-USDC vouchers. Browser funding and Keryx sponsorship are separate. Pending/ambiguous/batched-attribution legs do not enter settled totals. No customer questions/identities, private invoices, complete business books, margin, cash balance, signing or execution authority. days1–31, default7. Export via /api/operator/ledger; a checksum is not authenticity or independent settlement proof.

NameTypeReqDescription
daysinteger––

No output schema declared.

No examples provided.

keryx_purchase_outcomes ~113

Read a public dispatch's retained exact-version BUY/citation/payment observations. Returns bounded sample counts, citation hit rate, calibration bands and integer micro-USDC uncited access cost. Recorded settlement is not revalidated on chain. Historical participant cohort is unknown; causal regret, missed value and cost per supported claim are unmeasured. No research, paid read, current-source backfill, private reviews, signing or learning. Use an existing dispatch ID, never a URL.

NameTypeReqDescription
dispatchIdstringyes–

No output schema declared.

No examples provided.

keryx_source_learning ~125

Read the same bounded observational source/topic record as the public creator page and API. Only write-time independently classified/funded outside observations qualify; owners, unknown and private history are excluded. Source-declared public topics, counts, recorded citation contribution, exact rational average access price, descriptive uncertainty and abrupt-shift flag. No questions, wallets or receipt identifiers. Recorded settlement is not independently revalidated. Live learned selection and exploration are withheld, with zero live exploration allowance. No research, source read, payment, private inspection or policy activation.

NameTypeReqDescription
sourceIdstringyes–

No output schema declared.

No examples provided.

keryx_status ~25

Describe this MCP surface, its payment behavior, and the active caller tier.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

operator_obligations_read ~79

Read a private conservative obligation projection for the exact server-delegated reader with explicit operator:read API-key scope. Disabled without protected reader/role configuration. Partial native history remains unknown with zero safe/advisory surplus. No cash probe, signer, custody, spending, release, refund or scheduler authority. No caller owner/role selectors.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

paper_lookup ~216

Find paper titles, recorded contributors, DOI and exact repository versions without research or payment. Default: retained catalog metadata with observation times. Set searchRepositories=true only to explicitly send the query to arXiv/Crossref (at most two requests, no paper-body reading). Missing DOI, peer review and withdrawal/replacement status remain unknown. Returns a field-scoped bibliography card with provenance, a short reference and reusable BibTeX/RIS text. Use this for exact title/ordered author/year/journal/DOI/version questions before requesting paid research; original paper text is not required for recorded metadata.

NameTypeReqDescription
languagestring–Language for bibliography labels: en (default), fr or vi. Original titles, author names and venue names are preserved.
querystringyesTitle/topic (up to 120 characters), exact DOI (up to 200), or versioned arXiv ID/official URL.
searchRepositoriesboolean–Explicit external metadata lookup; false by default. Sends the query to official scholarly providers.

No output schema declared.

No examples provided.

profile_identities_read ~58

Read only the verified key owner's saved ORCID/GitHub identities. Requires explicit profile:read scope. No wallet selector, provider OAuth, linking, unlinking, research or payment. Link identities interactively in your private profile browser page.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

profile_read ~34

Read the verified key owner's private profile and attributed activity. Requires explicit profile:read scope. No public identity, research or payment.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

profile_update ~75

Replace the verified key owner's private display name, handle, one-line bio/purpose and links. Requires explicit profile:write scope. No wallet selector or identity verification; no payment/history changes.

NameTypeReqDescription
profileobjectyesComplete replacement; empty text clears a field. Links are bounded HTTPS links to the allowed providers or a public website.

No output schema declared.

No examples provided.

research ~361

Research a question under a USDC creator-payment budget. Keryx selects sources, pays access tolls and weighted citation rewards on the configured Arc network, then returns qualified source excerpts and a receipt. Complete synthesis and per-assertion entailment remain unverified. This remote surface uses Keryx's treasury; anonymous research is sponsored, not caller-funded usage. Public research may send your question to our search provider. The source USDC budget is separate from model and search operating costs. For retained or repository bibliography use free paper_lookup with an exact identifier. An ordinary explicit exact-original bibliography request can also return a separate metadata-only record and references without a model call or creator payment; page status and full-paper evidence remain separate. New runs record remote MCP ingress. A verified ask-scoped API key attributes the run to its wallet; anonymous runs have no wallet owner. Editable client names establish no identity or spending authority.

NameTypeReqDescription
budgetnumber–Maximum creator-payment budget in USDC; 0 allows free sources without purchases or rewards. Clamped to the caller's tier.
languagestring–Language of generated labels only; the original question and answer are unchanged. Omitted labels follow qualified recorded answer language when available; historical and unqualified answer language…
modestring–Research depth; default deep.
modelstring–Optional Keryx model catalog id, for example deepseek-chat.
questionstringyesResearch question.
researchMode–––
responseMode–––
reviewFirstboolean–Review-first requires the authenticated live browser; this adapter refuses true.
scholarlyboolean–Opt in to bounded Crossref/arXiv paper discovery; sends the question to those providers.

No output schema declared.

No examples provided.

research_feedback_read ~103

Original-caller private opinion on the exact delivered ordinary research answer. Requires its private bearer capability; a public report ID or link grants no authority. First choice is retained, exact retries are idempotent. Silence is no response. No research, source fetching, revision execution, refunds, signing or payments.

NameTypeReqDescription
tokenstringyesPrivate capability received with your original completed answer. Keep it out of reports, prompts to Keryx research, public links and exports.
NameTypeReqDescription
deliveredDigeststringyes–
executionstringyes–
feedback–yes–
formatstringyes–
runIdstringyes–

No examples provided.

research_feedback_submit ~117

Original-caller private opinion on the exact delivered ordinary research answer. Requires its private bearer capability; a public report ID or link grants no authority. First choice is retained, exact retries are idempotent. Silence is no response. No research, source fetching, revision execution, refunds, signing or payments.

NameTypeReqDescription
choicestringyes–
reasonstring––
tokenstringyesPrivate capability received with your original completed answer. Keep it out of reports, prompts to Keryx research, public links and exports.
NameTypeReqDescription
deliveredDigeststringyes–
executionstringyes–
feedback–yes–
formatstringyes–
runIdstringyes–

No examples provided.

research_monthly ~40

Read the four-request, 30-day Research Monthly quote and handoff. The current quote identifies its payment network. Never buys or redeems a plan.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

run_owner_export ~63

Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.

NameTypeReqDescription
idstringyes–
requestIdstringyes–

No output schema declared.

No examples provided.

run_privacy_read ~56

Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

Install

How do I install the io.github.tang-vu/keryx MCP server?

io.github.tang-vu/keryx is a hosted endpoint at https://keryx.cc/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · keryx.cc

# add to Claude Code
claude mcp add --transport http tang-vu-keryx 'https://keryx.cc/mcp'
Common questions

What is the io.github.tang-vu/keryx MCP server?

io.github.tang-vu/keryx is an MCP server listed in the public MCP registry as io.github.tang-vu/keryx. Budgeted research with cited evidence and visible payment state on the selected Arc network. This page covers its hosted endpoint (https://keryx.cc/mcp).

Is the io.github.tang-vu/keryx MCP server safe to use?

io.github.tang-vu/keryx scores 84 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.tang-vu/keryx MCP server expose?

io.github.tang-vu/keryx exposes 27 tools: evidence_draft, research_feedback_read, research_feedback_submit, draft_check, evidence_procurement, and 22 more. Their descriptions and schemas cost roughly 3,071 tokens of context every time the server is loaded.

Does the io.github.tang-vu/keryx MCP server require authentication?

No. We connected to io.github.tang-vu/keryx without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.github.tang-vu/keryx MCP server still maintained?

io.github.tang-vu/keryx is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.