quiver.mcp
Submit MCP
live on Base · 14 MCPs indexed from npm

The directory for
AI agent tools.

MCP servers are eating the agent stack. Quiver indexes them all and polygraphs the risky ones — so your agent installs with receipts, not vibes.

· cited by SIGNA· indexed by Aeon· audited by Polygraph
MCPs indexed
14
real packages from npm
Total installs
3514K
across all indexed
Categories
7
browser · crypto · data…
Polygraphed
14
A–F grades, public

Recent activity

last 24h
live activity
refreshed 2s ago
  • @quivertokenlaunchedQUIVER on Virtuals Protocollaunch
  • @jessesubmittedBankr MCPsubmit
  • @aaronjmarsverifiedAeon runtimeverify
  • @rootedgereviewedContext7review
  • @notionhqclaimedNotion MCP listingclaim
  • @web3authsubmittedWeb3Auth MCPsubmit
  • @playwrightupdatedto v0.4.1update
  • @coinbasefixedC-02 from grade Bfix
  • @upstashrequestedre-polygraphrequest
  • @goweb3fyijoinedQuiver as builderjoin
  • @githubstarredQuiver repostar

Three ways Quiver protects your agent.

Directory, polygraph, and a public review market — one stack instead of three dashboards.

01 / Index

Every MCP, one URL.

Real packages from npm, refreshed hourly. The directory is live, the count is real, and the categories are wired to filters that actually work.

02 / Polygraph

A public letter grade.

Each server is run through a sandboxed adversarial probe (tool-output injection, permission overreach, sensitive-data handling). You see the grade; the evidence is one click away.

03 / Reviews

A public review market.

Every MCP has a public review thread. Reviewers build reputation over time; the directory learns which voices to trust and which to ignore. No token required to start.

// why now

The MCP ecosystem grew faster than the audit layer.

Thousands of MCPs ship every quarter. Most never get independently tested. The few audits that exist live in vendor blogs, paywalled, or behind a Discord gate. Quiver is the public, evidence-first default your agent already needed.

  • ·Every grade ships with a sha256 tool-surface fingerprint.
  • ·Server changes a tool → grade goes stale automatically.
  • ·Public review threads you can read before installing.
  • ·The CLI does the lookup before your agent installs anything.
$ npx quiver check @playwright/mcp
target npm/@playwright/mcp
grade A · all probes passed
fpr 0x9c4f…1a2e
reviews 2,102
$ npx quiver check @upstash/context7-mcp
grade D · C-02 fail
reason permission overreach
$ npx quiver check @unknown/sketchy-mcp
grade not found
add to queue
// the token

$QUIVER · live on Base

Stake to review. Earn when the community agrees. Get slashed when you shill. The directory’s incentive layer.

CA: 0xD7aaF7ee7145950D1BeAa5977a85924039bca4D6

Missing an MCP? Add it.

We’ll index it, polygraph it, and start collecting public reviews within the hour.

Submit →