[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_119":120},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":49,"_84":-5,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94,"_95":96},"apiUrl","https://odel.app/api","creator","verificate-dev","moduleId","verificate-mcp-quickstart","@verificate-dev/verificate-mcp-quickstart","displayName","Verificate MCP","tagline","Agentic code review, no signup to try: reality gates + frontier-model review, with veto.","iconKey","https://verificate.ai/icon-512.png","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.verificate.ai/mcp\",\"transport\":\"streamable-http\",\"authType\":\"bearer\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1785212307000,"updatedAt",1787026742000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=ai.verificate%2Fmcp","sourceVerified",false,"sourceMissingSince","importedAt","upstreamStars",1,"upstreamUpdatedAt",1786087942000,"detectedTransport","streamable-http","detectedAuthType","none","probeStatus","ok","lastProbedAt",1786335551000,"githubRepoUrl","https://github.com/Verificate-Dev/verificate-mcp-quickstart","githubRepoFullName","Verificate-Dev/verificate-mcp-quickstart","releaseId","ext-verificate-dev-verificate-mcp-quickstart","version","1.8.7","descriptionMarkdown","# Verificate MCP — your vibe-coded MVP, all the way to production\r\n\r\n

\r\n $\"Verificate$ \r\n

\r\n\r\n

Real output from the live server: 12 lines of AI-written payment code — rejected, fixed, approved, in seconds.

\r\n\r\n**You vibe-coded the demo. This ships it.** Between a working demo and a launched product used to stand an experienced CTO and a senior dev team — the people who catch the mock refund path, the invented SDK call, the loop that dies at real traffic. Verificate MCP is that review team as an MCP server: **17 deterministic reality gates with veto power**, fused with a **frontier-model enterprise review** (ISO/IEC 25010: performance, scalability, reliability), run on every AI-written change before it reaches your codebase. The AI writes; the gate holds the bar; you ship. Hosted, zero-install, binary verdict in seconds — in Claude Code, Cursor, Windsurf or any MCP client.\r\n\r\n**Not another linter wrapper.** The code-quality shelf on every MCP directory is two things: scanners (ESLint, Semgrep and SonarQube bridges — deterministic rules, no judgment) and prompt relays that pipe your repo to your own LLM key (self-review with extra steps). Verificate is neither: the gates hold veto power that no model output can override.\r\n\r\n[![License: MIT](https://img.shields.io/badge/License-MIT-8CCB43.svg)](LICENSE)\r\n[![Official MCP Registry](https://img.shields.io/badge/MCP_Registry-ai.verificate%2Fmcp-blue)](https://registry.modelcontextprotocol.io/v0/servers?search=verificate)\r\n[![Docker MCP Registry](https://img.shields.io/badge/Docker_MCP-PR_%234551-2496ED)](https://github.com/docker/mcp-registry/pull/4551)\r\n[![Free trial](https://img.shields.io/badge/Free_trial-30_days,_no_card-8CCB43)](https://verificate.ai/auth/signup)\r\n\r\nYour coding assistant writes a mock and calls it done. It invents an SDK call that doesn't exist. It ships an N+1 loop that passes every test and dies under load. Verificate MCP runs the deep review pass on every AI output — deterministic reality gates first (any one can veto), then an enterprise-grade review scores what survives — **before the code reaches your codebase**.\r\n\r\n## A real rejection (verbatim)\r\n\r\n12 plausible lines of AI-written payment code were sent through the production gateway. Verdict: **REJECTED — score 30.8/100, vetoed by `code_reality_gate`**, with findings including:\r\n\r\n> *\"N+1 synchronous API calls … For 100 items, this results in 100 sequential HTTP roundtrips, taking ~10–20 seconds and blocking the event loop/worker thread … will trigger Stripe rate limiting (100 req/sec limit).\"*\r\n> *\"`stripe.Inventory` is not a valid Stripe SDK resource.\"*\r\n> *\"Floating-point representation issues lead to rounding errors in financial transactions; Stripe API requires integer cents.\"*\r\n\r\nEach of those is an afternoon of production debugging, caught in seconds.\r\n\r\n## Measured — vs. asking the model to review its own code\n\nA frontier model asked *\"is this OK to merge?\"* in a natural workflow missed reward-gaming (a test\nthat only does `assert True`) and a hallucinated API (`stripe.Refund.create_partial`) in **0 of 6\nruns each**. Verificate's gate caught both **6 of 6 — deterministically**, with **0 false positives**\non clean code.\n\n| Adversarial case | LLM review alone | **Verificate gate** |\n|---|---|---|\n| Reward-gaming (`assert True` test) | 0 / 6 | **6 / 6** |\n| Hallucinated API (nonexistent SDK call) | 0 / 6 | **6 / 6** |\n\n**Battle-tested:** 2,581 audited validations over 5 weeks (66 rejected, 270 flagged unfit),\nincluding guarding the write-path of a **21M-entity source-cited knowledge base** (98.6% cited,\n100% licensed across 268 sources). Reproduce it: [`scripts/`](https://github.com/Verificate-Dev/verificate-mcp-quickstart/blob/master/scripts/) · full write-up: [`COMPARISON.md`](https://github.com/Verificate-Dev/verificate-mcp-quickstart/blob/master/COMPARISON.md).\n\n## Tools\r\n\r\nEach tool has one job — two gates that return verdicts, one advisor that doesn't, one generator:\r\n\r\n| Tool | Job | Returns |\r\n|---|---|---|\r\n| `validate_ai_output` | **The merge gate for AI-written code.** Deterministic reality gates (mock/placeholder veto, gaming & bypass detection, invented-API checks) run first and can't be overridden; ISO/IEC 25010 review scores what survives. | Binary **approve/reject** verdict + severity-ranked findings |\r\n| `validate_plan` | **The gate for plans and designs**, before any code exists — completeness, feasibility, scalability implications, risk. The cheapest place to catch a bad design. | Binary **approve/reject** verdict + findings |\r\n| `analyze_code` | **Advisory deep-dive** on existing code — hot paths, rate-limit math, failure modes, tech debt. Use it to understand a rejection or review inherited code. | Scores + findings, deliberately **no verdict** |\r\n| `generate_code` | **Generate + gate in one step** — the LLM writes it, the same protection engine vets it before you see it. | Gated code (no placeholders, no invented APIs) |\r\n\r\n### Beyond tools\r\n\r\nThe server also ships **prompts** and **resources** for a richer client experience:\r\n\r\n- Prompts `gate_my_changes` / `review_my_plan` — one-click workflows that loop validate → fix → re-validate until approved.\r\n- Resources `verificate://gates` (what each of the 17 deterministic gates watches for) and `verificate://example-verdict` (a verbatim production rejection).\r\n\r\n## Quick start — no signup, no token, 30 seconds\r\n\r\nEvery machine gets **25 free validations** — no account, no card, no key. Add the URL and go:\r\n\r\n**Claude Code**\r\n\r\n```bash\r\nclaude mcp add --transport http verificate https://mcp.verificate.ai/mcp\r\n```\r\n\r\n**Cursor / VS Code — one-click install:**\r\n\r\n[![Add Verificate to Cursor](https://img.shields.io/badge/Cursor-Add_Verificate_%E2%80%94_25_free_calls-111111?labelColor=8CCB43)](https://cursor.com/en/install-mcp?name=verificate&config=eyJ1cmwiOiJodHRwczovL21jcC52ZXJpZmljYXRlLmFpL21jcCJ9)\r\n[![Add to VS Code](https://img.shields.io/badge/VS_Code-Add_Verificate-0078d7?labelColor=8CCB43)](https://vscode.dev/redirect/mcp/install?name=verificate&config=%7B%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.verificate.ai%2Fmcp%22%7D)\r\n[![Add to VS Code Insiders](https://img.shields.io/badge/VS_Code_Insiders-Add_Verificate-24bfa5?labelColor=8CCB43)](https://insiders.vscode.dev/redirect/mcp/install?name=verificate&config=%7B%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.verificate.ai%2Fmcp%22%7D)\r\n\r\n*LM Studio and Goose one-click buttons are at (GitHub strips their custom-protocol links).*\r\n\r\n**Windsurf / any MCP client (JSON)**\r\n\r\n```json\r\n{\r\n \"mcpServers\": {\r\n \"verificate\": {\r\n \"url\": \"https://mcp.verificate.ai/mcp\",\r\n \"transport\": \"http\"\r\n }\r\n }\r\n}\r\n```\r\n\r\nCursor: `~/.cursor/mcp.json`. Windsurf: `~/.codeium/windsurf/mcp_config.json`.\r\n\r\nThen ask your assistant to *\"validate this function with verificate\"* — a structured verdict comes back in seconds, and every free-tier response shows how many validations you have left and what the gate has caught for you.\r\n\r\n### Keep going after the free 25\r\n\r\nSign up at (30-day trial, no card — then $30/mo) and add your token to the same config:\r\n\r\n```bash\r\nclaude mcp add --transport http verificate \\\r\n https://mcp.verificate.ai/mcp \\\r\n --header \"Authorization: Bearer YOUR_TRIAL_TOKEN\"\r\n```\r\n\r\nor in the JSON config add `\"headers\": { \"Authorization\": \"Bearer YOUR_TRIAL_TOKEN\" }`.\r\n\r\n## Make gating the default\r\n\r\nTools an agent *may* call are tools it will skip under pressure. Add a standing rule (Claude Code: `CLAUDE.md`; Cursor: a rule file):\r\n\r\n```text\r\nBefore presenting any substantive code change as complete:\r\n1. Call validate_ai_output on the change.\r\n2. If the verdict is REJECTED, fix the findings and re-validate.\r\n3. Never claim tests pass or systems are deployed without proof.\r\n```\r\n\r\nOne-paste setup prompts that install these rules for you: [PROMPTS.md](https://github.com/Verificate-Dev/verificate-mcp-quickstart/blob/master/PROMPTS.md). Or wire it into CI as a merge gate — see [`examples/`](https://github.com/Verificate-Dev/verificate-mcp-quickstart/blob/master/examples/).\r\n\r\n## How it decides\r\n\r\n```text\r\nAI output ──► Reality gates (deterministic, any one vetoes)\r\n • mock/placeholder in the wire path\r\n • invented/hallucinated APIs\r\n • claimed-complete without proof\r\n • gaming & bypass detection\r\n │ survivors only\r\n ▼\r\n Enterprise review (ISO/IEC 25010 + MLOps)\r\n performance · scalability · reliability · tech debt\r\n │\r\n ▼\r\n Verdict: score /100 + severity-ranked findings\r\n (REJECTED = agent fixes findings and re-validates)\r\n```\r\n\r\nThe two stages are deliberately separate: if reality and quality were blended into one score, a beautifully structured function that fakes its refund path could still average out to \"acceptable.\" A veto architecture makes that impossible.\r\n\r\n## The category, honestly\r\n\r\nEverything else on the MCP code-quality shelf is free — and that's fair, because a wrapper should be free. What you can't get for free is **judgment with authority**:\r\n\r\n| What you'll find on the directories | What it is | What it structurally can't do |\r\n|---|---|---|\r\n| **Linter wrappers** — ESLint MCP, Semgrep MCP, SonarQube MCP | Rule-based scanners exposed as MCP tools. Deterministic, free, worth running. | No judgment. Rules can't know the refund function *never calls the payment provider*, or that `stripe.Inventory` doesn't exist. No verdict, no veto — findings your agent is free to ignore. |\r\n| **BYO-key review relays** | Your repo + a review prompt, piped to your own OpenAI/Anthropic key. | Self-review with extra steps: the reviewer shares the generator's blind spots, there are no deterministic gates underneath, and whatever the model says goes. You maintain keys, versions and hosting. |\r\n| **A bigger model** | Hope the generator reviews itself better. | Self-review inherits self-blindness. An external gate holds the same bar for every model — which also makes **smaller, cheaper models safe to ship with**: same gate either way. |\r\n| **Human review of every AI diff** | The gold standard, at human speed. | Doesn't scale at AI generation speed. The gate does the first pass in seconds; humans review verdicts, not raw diffs. |\r\n| **Verificate MCP** | Deterministic reality gates **with veto**, then a frontier-model enterprise review — fused into one binary verdict. Hosted, always on the current model. | — |\r\n\r\nThat second layer is the part you pay for: a frontier agent doing the deep review — production arithmetic, failure modes, SDK reality — with a deterministic floor under it that the agent itself cannot argue away.\r\n\r\n## Run locally (stdio bridge)\r\n\r\nThis repo is also a runnable, zero-dependency MCP server: a stdio bridge that serves `initialize`/`tools/list` locally and forwards tool calls to the hosted gateway. Use it with clients that prefer stdio servers:\r\n\r\n```bash\r\nVERIFICATE_TOKEN= npx github:Verificate-Dev/verificate-mcp-quickstart\r\n```\r\n\r\nOr with Docker:\r\n\r\n```bash\r\ndocker build -t verificate-mcp .\r\ndocker run -i -e VERIFICATE_TOKEN= verificate-mcp\r\n```\r\n\r\nWithout `VERIFICATE_TOKEN`, introspection still works and tool calls return instructions for getting a trial token.\r\n\r\n## FAQ\r\n\r\n**Does it slow the agent down?** Each validation takes seconds, inside the loop, before work is presented. Compare with a defect found in CI or production plus the context switch to fix it — gating is net-faster for any change that matters.\r\n\r\n**Which languages?** Validation is language-agnostic; analysis covers mainstream languages (Python, JS/TS, C++, SQL, Swift, …). Pass `context.language` for best results.\r\n\r\n**Can it block my agent?** Yes — that's the point. A REJECTED verdict is designed to send the agent back to fix findings instead of presenting broken work. Your standing rule decides how hard the stop is.\r\n\r\n**What about false positives?** Verdicts come with specific findings and the math, so they're auditable in seconds — you're never asked to trust a bare score.\r\n\r\n## Security & privacy\r\n\r\n- Requests are authenticated with your personal token; keys are single-user and rate-limited, with key-sharing detection.\r\n- Code is processed to produce the verdict and is not used to train models.\r\n- `initialize`/`tools/list` are public (so clients and directories can introspect); every `tools/call` requires your key.\r\n\r\n## Pricing\r\n\r\n30-day free trial, then USD $30/month (launch offer: 50% off for 3 months). Volume and academic pricing: info@verificate.ai.\r\n\r\n## Guides\r\n\r\n- [How to catch AI-hallucinated code before it ships](https://verificate.ai/articles/catch-ai-hallucinated-code/)\r\n- [Add a code-review gate to Claude Code in 5 minutes](https://verificate.ai/articles/claude-code-review-mcp-server/)\r\n- [Why AI assistants miss deep performance bugs](https://verificate.ai/articles/ai-coding-performance-bugs/)\r\n- [Use smaller, cheaper AI coding models — safely](https://verificate.ai/articles/cheaper-ai-coding-models-validation-gate/)\r\n- [*Every Bob needs a Wendy*](https://community.ibm.com/community/user/viewdocument/every-bob-needs-a-wendy?CommunityKey=300ac388-08f0-427e-a600-0199bfc9dd2a&tab=librarydocuments) (IBM Community)\r\n\r\n## About\r\n\r\nBuilt by [Verificate Pty Ltd](https://verificate.ai) (Sydney, Australia) — an IBM Business Partner. Verificate builds sovereign AI infrastructure: the HELIX inference engine (calibrated confidence scores on every answer), the deterministic Decision Transformer, and this MCP validation server. Product page: · Official registry: [`ai.verificate/mcp`](https://registry.modelcontextprotocol.io/v0/servers?search=verificate)\r\n\r\n## Licensing\r\n\r\nThis repo (the stdio bridge, client configs and CI examples) is **MIT** — use it freely.\r\nThe Verificate validation engine and hosted gateway it talks to are a **commercial service**\r\n(30-day free trial, then subscription): the 17 protection gates and the frontier-model review\r\nrun server-side and are not part of this repository.\r\n\r\n\r\n## Glama\r\n\r\n[![Verificate MCP server score](https://glama.ai/mcp/servers/Verificate-Dev/verificate-mcp-quickstart/badges/score.svg)](https://glama.ai/mcp/servers/Verificate-Dev/verificate-mcp-quickstart)\r\n\n\n---\n\n**🌐 Not an English speaker?** Install instructions in हिन्दी · Português · Bahasa Indonesia · Español · 中文 · Tiếng Việt → [INSTALL.md](https://github.com/Verificate-Dev/verificate-mcp-quickstart/blob/master/INSTALL.md)\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"upstream",{"_105":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":116},"requiredSecrets",[],"tags",[99,100,101,102,103,104],"assets",[],"stats",{"_97":86,"_98":86},"ratingAvg","reviewCount","ai-code-review","claude","code-quality","cursor","developer-tools","llm-validation","topics",[99,100,101,102,103,104,117,118],"license","MIT","language","JavaScript","registryName","ai.verificate/mcp","homepage","https://verificate.ai/mcp","packages",[],"mcp","mcp-server","ENV",{"_121":122,"_123":124,"_125":126},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]