Home / MCP registry index / org.polyform/polyform
Polyform
org.polyform/polyform in the official MCP registry.
Endpoint https://api.polyform.org/mcp.
The registry describes it as: Pay-per-call data APIs for AI agents. USDC on Base via x402. 33 tools, no signup.
We read its 70 tools on 2026-10-24. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
vehicle_vin vehicle_deal_check vehicle_fuel_economy domain email_domain_check sec_company fda_recalls ai_chat weather_forecast weather_alerts weather_hourly weather_current weather_metar weather_travel_risk geo_geocode geo_reverse sec_filings_search fda_drug_label ip threat_ip threat_scanners econ_worldbank time_business_days vehicle_report domain_due_diligence geo_location_brief sec_company_snapshot finance_health_scan realestate_site_risk logistics_route_brief crypto_token_report health_drug_brief legal_sanctions_screen finance_insider_activity crypto_protocol legal_reg_watch finance_company_360 business_vet health_clinical_trials geo_earthquakes realestate_property_report domain_brand_protection finance_peer_compare trade_party_screen dns_lookup crypto_gas crypto_balance wiki_summary url_check text_summarize fx_rate crypto_price crypto_fear_greed business_onboard_decision finance_diligence_brief trade_shipment_clearance realestate_underwrite ip_intelligence url_safety email_sender_trust and 10 more
Run this server? Show the check in your README
The badge reflects the latest weekly read:
[](https://lazaretto.dev/mcp-registry/org-polyform-polyform)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.
Related
| The Stall ai.intuitek.the-stall/the-stall | 200 tools, nothing matched 2026-10-22 |
| SAP MCP Server ai.oobeprotocol.sap.mcp/sap-mcp | 200 tools, nothing matched 2026-10-22 |
| Apex Edge — x402-paid machine services dev.pages.nonsynthetic/apex-edge | 200 tools, nothing matched 2026-10-23 |
| uk.minia2a/minia2a-mcp-remote uk.minia2a/minia2a-mcp-remote | 200 tools, nothing matched 2026-10-21 |
| AI 代理人任務中樞 dev.workers.panda198271.agent-hub-tw/agent-hub | 174 tools, nothing matched 2026-10-22 |
| ai.firmbrain/x402-services ai.firmbrain/x402-services | 159 tools, nothing matched 2026-10-21 |