Look twice.Find the gem.

AI agents and MCP servers, each published with its source and what the checks found.

Marketplace

  • Everything
  • AI agents
  • Apps
  • MCP servers
  • Templates
  • What people want
  • What changed this week
  • The verification standard
  • The ooruby Index
  • Servers that publish no source
  • Reliability guides
  • What the catalogue holds
  • Sell here

Our library

  • Everything, in one place
  • Guides
  • Glossary
  • Calculators
  • Checklists and cheat sheets
  • Community

ooruby

  • Home
  • For teams
  • Site status
  • Company projects
  • RSS feed

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.

AI agentsAppsMCP serversTemplatesWantedCommunityOur library
Sign inSell
Catalogue/MCP servers/AI Dossier MCP Server

AI Dossier MCP Server

ai-dossier · MCP server

AI Dossier MCP Server lets an AI assistant discover, verify and run dossiers: portable, versioned agent skills that can be signed. It scans a directory for dossier files or searches the registry, checks integrity with SHA256 checksums and authenticity with Ed25519 or AWS KMS signatures, and reports declared risk. Multi-dossier journeys are resolved into an ordered plan with parallel groups and conflict detection, then run step by step. You choose which signing keys your agent will accept.

Written by ooruby from the README of @ai-dossier/mcp-server 1.6.5.

Not claimed by its maker. Is this yours? Prove it and answer the findings

Why it's useful

Your agent can check a skill's checksum and signature, and read its declared risk, before it follows the skill's instructions.

What you could do with it

  1. 1Ask your agent to list the dossiers in your project and read one before running it.
  2. 2Verify a dossier's checksum and signature before your agent follows its instructions.
  3. 3Preview a journey with a dry run that lists the files, commands and network access each step declares.

Written from its documentation: what it says it can do, not what our checks found.

ADMCP serverDeveloper tools

Maintenance

Not measured

No release date is on record for this package yet. The nightly publisher check records one as it reaches each npm package, about once every ten nights.

Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured

Not yet tested

What this does not cover

  • ·Everything. Treat it as you would software from anywhere else.

Receipt history: every signed receipt for every version of this listing, and what changed between them.

In its maker's words

MCP server for signed, versioned agent skills: discover, verify, and run skills for model-driven orchestration through the Model Context Protocol.

Compare with

  • Patent Search MCP Serverside by side
  • Deep Research MCP Serverside by side
  • Agent Deviceside by side
Compare all 4

How far this has been checked

Static scanned

What it establishes
Its published package, or for a hosted server its source repository at a recorded commit, was read file by file, without running it, by every check in our current scan.
What it does not
How it behaves when it runs, or anything the scan does not read yet: several rubric checks, the repository's history, and compiled code in folders named dist or build. For a hosted server, that the endpoint runs the code that was read. The ooruby Index sets out exactly what was read.
Exactly what was read
Version 1.6.5, the file with digest sha512-gimEHPPPfAUtixUUELy6SsQxGtLCGiq9YtO0/S65Xk3wxfcQhduZJP4Iw3n6JWgLK2BoVxWw3ev/pRdihstvkQ==, as the registry publishes it. A published version cannot be replaced, so this names the same bytes for anyone who checks.
Authentication
Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.
How the rungs work

Adding it

Paste this into your client's MCP configuration.

{
  "mcpServers": {
    "dossier-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@ai-dossier/mcp-server@1.6.5"
      ]
    }
  }
}

Or run it directly.

npx -y @ai-dossier/mcp-server@1.6.5

Pinned to 1.6.5, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.

Where this came from

Registry
npm
Package
@ai-dossier/mcp-server
Version read
1.6.5
Resolved
2026-10-10
Open the source(opens in a new tab)

Built from source, attested

npm publishes a signed statement that this exact package was built from the repository below, at this commit. It is verifiable without taking our word for it.

Repository
github.com/imboard-ai/ai-dossier
Commit
2953a1c6e8cc
Built by
github.com/actions/runner/github-hosted
Registry publish attestation
signed by npm · 2026-10-10
Checked
2026-10-10

The badge, if this is your listing

It renders the current rung (static scanned) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.

[![ooruby: static scanned](https://ooruby.com/api/badge/ai-dossier-mcp-server)](https://ooruby.com/market/ai-dossier-mcp-server)

About this listing

Kind
MCP server
Category
Developer tools
Pricing
Free
Sandbox
No
Hosted
No
Updated
2026-10-10
Price
Free
Get it freeVisit maker
Rating
no reviews yet
0 want this so far
Sign in to vote

Sign in to watch this listing and hear when its version, rung or findings change.

More from ai-dossier

See the storefront
ADagentDeveloper tools
1 findingStatic scanned
Signs skill files with a key and verifies the signature before your agent runs one. A registry takes published skills and rejects a bad signature, and skills can be exported from or installed into Claude Code.

AI Dossier CLI

ai-dossier
Free

Creates, signs, verifies and publishes versioned skills for your coding agents.

25.3k installs/moAGPL-3.0-only

Similar MCP servers

All MCP servers
STMCP serverDeveloper tools
2 findingsStatic scanned
A library rather than a ready-made server: it builds an HTTP handler whose tools list your components, show a component's docs and show a single story, read from Storybook manifests.

Storybook MCP

storybook
Free

Adds Storybook component and story documentation tools to an MCP server you run yourself.

9.4M installs/moMIT
CDMCP serverDeveloper tools
Clean scanStatic scanned
Uses Puppeteer to act in the page and wait for results. It turns performance traces into insights, analyses network requests, takes screenshots and shows console messages with source-mapped stack traces.

Chrome Devtools MCP

mathias
Free

Lets your agent control and inspect a live Chrome browser using Chrome DevTools.

9.9M installs/moApache-2.0
COMCP serverDeveloper tools
Clean scanStatic scanned
One tool resolves a library name to an identifier and another fetches the documentation for it, optionally focused on a topic and fetched page by page. An API key raises rate limits and adds private repositories.

Context7 MCP

upstash
Free

Pulls version-specific library docs and code examples straight into your agent's context.

3.9M installs/moMIT

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.