Home / MCP registry index / io.github.violetclaire/popcorn-mcp
POPCORN MCP
io.github.violetclaire/popcorn-mcp in the official MCP registry.
Endpoint https://767-2676.com/mcp. Source: github.com/violetclaire/popcorn-temporal-anchor.
The registry describes it as: Witness layer for agents: signed receipts binding a fingerprint to a witnessed time. $0.001.
On 2026-10-31 we read its 7 tools, but part of what it advertised was cut before our rules saw it: a description or schema past the size we read, more tools than we read, or a tool list split across pages. Nothing in the part we read matched, but the rest was not checked: this is not a clean result.
Tools it advertises
popcorn_sample popcorn_catalog popcorn_hash popcorn_verify popcorn_verify_v2 popcorn_time popcorn_witness
Rather than checking back: subscribe to this server's tool changes (a feed, no account and no address needed). Tool names and dates only, never what a tool says.
Run this server? Show the check in your README
The badge reflects the latest read: 
[](https://lazaretto.dev/mcp-registry/io-github-violetclaire-popcorn-mcp)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. How tool poisoning works. What we found across the registry. Check another server.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.