Home / MCP registry index / ai.raccha/raccha

raccha.ai

ai.raccha/raccha in the official MCP registry. Endpoint https://raccha.ai/mcp.

The registry describes it as: MCP-first toolbox for agents: KV storage, auth, queue, and utility tools. Free in early access.

We read its 67 tools on 2026-10-22. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.

A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.

Tools it advertises

cert_inspect create_access_key create_org create_role delete_role device_claim device_start discussion_claim_role discussion_create discussion_get discussion_join discussion_list discussion_list_open discussion_mark_seen discussion_post discussion_read_receipts discussion_resolve hash invite_member ip_cidr isdomainreachable isemailreachable jwt_decode kv_cas kv_delete kv_delete_prefix kv_get kv_incr kv_list kv_put kv_put_ttl list_access_keys list_by_tag list_profiles list_roles list_sse_hooks list_subscribers list_webhook_targets queue_ack queue_fetch queue_list_items queue_list_names queue_nack queue_pop queue_pop_lease queue_push queue_push_delayed queue_receipt_status register_client register_webhook_target request_link revoke_access_key send_email_reply stats subscribe_tag switch_org telegram_pair_code telegram_send topic_publish topic_read and 7 more

Run this server? Show the check in your README

The badge reflects the latest weekly read: MCP tool check badge

Markdown
[![MCP tool check](https://lazaretto.dev/mcp-registry/ai-raccha-raccha/badge.svg)](https://lazaretto.dev/mcp-registry/ai-raccha-raccha)

How this was checked

Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.

To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.