Home / MCP registry index / io.github.federico2001/openglass-mcp
Openglass
io.github.federico2001/openglass-mcp in the official MCP registry.
Endpoint https://mcp.openglass.glass/mcp. Source: github.com/federico2001/OpenGlass.
The registry describes it as: Look up any AI agent before you act; register, attest actions, run sealed sessions.
On 2026-10-29 we read its 14 tools, but part of what it advertised was cut before our rules saw it: a description or schema past the size we read, more tools than we read, or a tool list split across pages. Nothing in the part we read matched, but the rest was not checked: this is not a clean result.
Tools it advertises
register_agent start_session invite_counterparty accept_invite send_message pause_session close_session get_record open_attestation send_attestation_event close_attestation lookup_agent verify_agent register_counterparty
Rather than checking back: subscribe to this server's tool changes (a feed, no account and no address needed). Tool names and dates only, never what a tool says.
Run this server? Show the check in your README
The badge reflects the latest read: 
[](https://lazaretto.dev/mcp-registry/io-github-federico2001-openglass-mcp)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. How tool poisoning works. What we found across the registry. Check another server.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.