VERAX MCP server
The body an agent asks before it acts: decide, approve, and keep a signed record on your machine.
0 stars255 downloads/wk
Reviews
Write oneNobody has reviewed VERAX yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
VERAX tools (6, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
audit.explainReads one decision back from the signed ledger by its ref and explains it.
memory.getReads one memory item this tenant stored earlier with memory.put, by its id.
memory.putwrite actionWrites one memory item for this tenant, or replaces the item with the same id, in the body's state directory on this machine.
message.readReads this tenant's inbox, the messages placed for it in the body's state directory on this machine, and returns them as a JSON array in arrival order, oldest first.
message.sendwrite actionQueues one message in this tenant's outbox on this machine for the delivery step the operator runs; this call opens no network connection and nothing leaves the body from it.
spendAsks the body to authorize a payment and records the decision; the body never moves money, so authorized: true is a signed permission for a later payment step, not a transfer.
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
- Code scan69 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- mediumNetwork call to a raw IP address
net.raw-ipdist/doctor.js: …n checks; } const DEFAULT_REDIRECTS = ["http://127.0.0.1:5173/", "http://127.0.0.1:4173/"]; function s…
Grade history
- 2026-09-19downgradeA → Bscore 83: Network call to a raw IP address
Install directly
Runs npx -y @verax-ai/body on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add verax -- npx -y @verax-ai/body
VERAX: common questions
- Is VERAX MCP server safe?
- Mostly: it is graded B (83/100). Read the VERAX safety report
- How do I install VERAX?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does VERAX need an API key?
- No secret keys are declared. It reads 7 settings from the environment.
- Is VERAX maintained?
- The last commit was in the last day (2026-09-19). The latest release is v0.2.0.
- What can I use instead of VERAX?
- Servers from other publishers that do the same job: Ratchet MCP server, Lockstep MCP server and MCP server. Compare all VERAX alternatives.
Alternatives to VERAX
Same job from other publishers: the closest match first, then the best rated.
RatchetYour agent asks before it acts, so the same real-world action is attempted at most once.not reviewedGrowingB
LockstepDecision memory for AI coding agents: captures decisions once, briefs every agent before it acts.not reviewedGrowingA- MCPAuthorize consequential AI agent actions before executionnot reviewedEstablishedA
MockserverMock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.not reviewedEstablishedA- Roast My Design SystemAudit your Design System and serve your Agent the rules that keep AI-written UI on-system.not reviewedEstablishedA
