Skip to content
808bits logo

808bits MCP server

Which servers in the official MCP registry are 808bits's own, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.

read 2026-10-20

← Back to 808bits

Whose server it is
  • Registry namecom.808bits/fips-cmvpverified in the MCP registry

The registry name sits under 808bits.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

When we asked itchecked 2026-10-20
  • Stateanswerschecked 2026-10-20
  • Tools6
  • Server calls itselffips-cmvp
  • Server version0.1.0
  • Protocol version2025-06-18

On 2026-10-20 the server answered initialize and tools/list without a sign-in. First answer in 265 ms.

Should an agent connect itSkip it
  • Its tools do none of the product's use cases we checked: decode raw blockchain transactions byte by byte in a browser; test threshold signing steps through a walkthrough of key generation.

Once connected

  • Parameters are untyped or undescribed in 6 of 6 tools: check arguments before calling.

Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.

Measured dailydaily checks: 7, the first on 2026-10-20
  • INITE MCP score53 of 100answers 100 · does the job 0 · definitions 67 · context 100 · use 0
  • What an agent can do with it0 of 2 use cases
  • Answered100% of days7 of 7 daily checks
  • Median first answer300 ms
  • Space in an agent's context≈ 1,110 tokensthe definitions of all its tools (6), which an agent carries on every turn
  • Tool definitionsC · 67 of 100
  • Typed results0 of 6 toolsdeclared outputSchema: results come typed, read once
  • Parameters without a description: in 6 of 6
  • Not saying whether it only reads or can destroy: 6 of 6

What an agent can do with it

  • not sure · search FIPS 140 certificates and check their sunset dates
  • cannot · decode raw blockchain transactions byte by byte in a browser
  • cannot · test threshold signing steps through a walkthrough of key generation

Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?

Worth a look

None of the five warning signs in these definitions.

A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (30%), doing the product's job (25%), definitions (20%), context (10%) and use (15%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →

Tools it offers6 tools · read 2026-10-20
  • fips_cert

    Look up one FIPS 140 cryptographic module validation by certificate number. Returns status (active, historical or revoked), overall level, sunset date, validation history, approved algorithms and tested configurations.

  • fips_search

    Search FIPS 140 validations by module name or vendor. Use this to answer whether a given product or vendor holds a current validation, and at what level. Results are ordered by status, then how well they match, then newest first, so the…

  • fips_in_process

    Search NIST's Modules in Process queue: submissions awaiting FIPS 140-3 validation, with the review phase each one is sitting in. Use this when a vendor claims a validation is 'coming' and you need to know whether it has actually been…

  • fips_vendor

    Everything one company holds, grouped across the spelling variants NIST filed it under. Cisco alone appears as three different strings. Returns a breakdown by status and standard plus the certificates themselves. Note this groups…

  • fips_cve

    Which FIPS-validated modules are associated with a given CVE, or which CVEs are associated with a vendor's modules. Answers 'we have a validated module, is it caught up in this advisory'. The association is name-based against the product…

  • fips_sunset

    List active FIPS validations by sunset date, the day each moves to NIST's historical list and stops being valid for new procurement. Answers 'what expires before date X' and 'which vendors are about to have nothing valid'. A certificate…

How to connect

Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:

{
  "mcpServers": {
    "fips-cmvp": {
      "type": "http",
      "url": "https://fips.808bits.com/mcp"
    }
  }
}

Add it

Claude Code, in a terminal

claude mcp add --transport http 808bits https://fips.808bits.com/mcp

Add to CursorAdd to VS Code

claude.ai, ChatGPT and other clients: add https://fips.808bits.com/mcp as a custom connector in the settings.

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.