Home / MCP registry index / io.github.Keyveve/veqen

Veqen: AI cost monitoring and protection

io.github.Keyveve/veqen in the official MCP registry. Endpoint https://veqen-app.com/mcp.

The registry describes it as: AI cost monitoring and protection: spend per person and customer, stolen-key alerts and bill checks.

On 2026-10-28 this server asked for credentials before it would list its tools, so we could not read them. Nothing was checked: this is not a clean result.

Connect it

The endpoint is live and asks for credentials before it lists its tools. Add it to your client:

Claude Code
claude mcp add --transport http veqen https://veqen-app.com/mcp
Cursor: ~/.cursor/mcp.json
{
  "mcpServers": {
    "veqen": {
      "url": "https://veqen-app.com/mcp"
    }
  }
}
VS Code
code --add-mcp '{"name":"veqen","type":"http","url":"https://veqen-app.com/mcp"}'

Most clients open the server's sign-in page the first time they connect. If it wants an API key instead, the server's own docs say where to put it.

Check its tools after you sign in

We could not read this server's tools without an account, so nothing above says they are clean. Once you are signed in, your agent can pass the tool list it received to the free check_mcp_tools tool on our MCP server, which runs the same tool-poisoning rules. No key needed.

Add Lazaretto to Claude Code
claude mcp add --transport http lazaretto https://lazaretto.dev/mcp

Run this server? Show the check in your README

The badge reflects the latest weekly read: MCP tool check badge

Markdown
[![MCP tool check](https://lazaretto.dev/mcp-registry/io-github-keyveve-veqen/badge.svg)](https://lazaretto.dev/mcp-registry/io-github-keyveve-veqen)

How this was checked

Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.

To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.

Related

Monitoring and observability MCP servers

PeppolStatus
com.peppolstatus/api
65 tools, nothing matched
2026-10-28
Agentdata Nl
io.github.DarthSander/agentdata-nl
53 tools, nothing matched
2026-10-22
Uk Flood Monitoring
io.github.pipeworx-io/uk-flood-monitoring
48 tools, nothing matched
2026-10-30
Epa Aqs
io.github.pipeworx-io/epa-aqs
46 tools, nothing matched
2026-10-27
Netmon (demo)
com.netmon/netmon-demo
36 tools, nothing matched
2026-10-28
AgentResolver — Agent Commerce Health Monitoring
io.github.waxsway/agentresolver
36 tools, nothing matched
2026-10-22