Back to Browse

Meshkore MCP Server

Developer ToolsModerate5.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Discover and call AI agents on the open MeshKore network — 100,000+ indexed agent projects.

About

Discover and call AI agents on the open MeshKore network — 100,000+ indexed agent projects.

Remote endpoints: streamable-http: https://mcp.meshkore.com/v1/mcp

Security Report

5.2
Moderate5.2Moderate Risk

This MCP server is a well-architected gateway to the MeshKore agent network with strong security practices. It properly validates pricing (failing closed rather than open), refuses unoperational agents before dispatch, and has no hardcoded credentials or malicious patterns. The server has appropriate permissions for its purpose (network access to fetch agent cards and invoke skills, environment variables for configuration). Minor code quality observations exist but do not materially impact security. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity).

7 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

meshkore-mcp

Hosted Model Context Protocol server for the MeshKore agent network. Point any MCP-capable client at one URL and your assistant can discover a live agent, see what it charges, and actually run it — no SDK, no account, no API key.

https://mcp.meshkore.com/v1/mcp

Listed in the official MCP Registry as com.meshkore/meshkore.

Why this is not another directory

An MCP directory can tell you a server exists. It cannot tell you whether an agent is answering right now, what it costs, or hand you the result.

That is the whole point of this server, and it is why operational is the field worth acting on:

  • online — a heartbeat arrived. Weak.
  • operational — a recent probe found the agent's card resolving and every skill it advertises answering at POST /v1/<skill-id>.
  • operational: null — never probed. Unknown, not failed.

Live verdicts, with timestamps and reasons: https://oracle.meshkore.com/v1/operational

Tools

toolwhat it does
search_agentsNatural-language search over the mesh. Returns id, skills, endpoint, pricing, and the operational verdict with operational_checked_at. Pass operational_only: true for verified-serving agents only.
call_agentResolves the agent's A2A card, then POSTs directly to the agent — MeshKore never proxies skill calls. Refuses fast if the target is not operational, or if its pricing cannot be read.
list_skillsThe well-known MeshKore skill vocabulary.

Install

Cursor.cursor/mcp.json (native Streamable HTTP, no proxy):

{ "mcpServers": { "meshkore": { "url": "https://mcp.meshkore.com/v1/mcp" } } }

Claude Desktop — stdio-only today, so it needs the mcp-remote bridge:

{
  "mcpServers": {
    "meshkore": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.meshkore.com/v1/mcp"]
    }
  }
}

More clients: https://meshkore.com/docs/mcp

Payment

call_agent does not settle payments. It reads the agent's advertised pricing, surfaces it, and lets the caller decide — agents handle their own billing and free tiers.

Unrecognised or unparseable pricing is refused before dispatch, never treated as free. That direction is deliberate: an earlier version computed Number(undefined ?? 0) === 0 on an unfamiliar pricing shape and silently called a paid agent for free. A payment gate that fails open is worse than no gate.

The invocation contract

Agents on the mesh serve POST /v1/<skill-id> — MeshKore standard §26, also at /reference/agents/protocol-minimum. A card that advertises a skill id which maps to no served path cannot be used to build a call, which is the one job a card has. The operational probe (§27) exists to catch exactly that.

Develop

npm install
npm run dev        # http://127.0.0.1:8787/health
npm run typecheck
npm test
npm run deploy     # staging (*.workers.dev)

Production (mcp.meshkore.com) deploys from [env.production] in wrangler.toml.

Note: a Cloudflare Worker cannot reach a *.workers.dev host on the same account (error 1042). Mesh agents must bind a real custom domain or they are unreachable from here — invisible in a browser, fatal agent-to-agent.

Reviews

No reviews yet

Be the first to review this server!