Skip to content

Polyform MCP server

Which MCP servers are Polyform's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.

read 2026-10-26

← Back to Polyform

Whose server it is
  • Registry nameorg.polyform/polyformverified in the MCP registry

The registry name sits under polyform.org. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

When we asked itchecked 2026-10-26
  • Stateanswerschecked 2026-10-26
  • Tools70
  • Server calls itselfpolyform
  • Server version1.0.0
  • Protocol version2025-06-18

On 2026-10-26 the server answered initialize and tools/list without a sign-in. First answer in 39 ms.

Should an agent connect itNot proven either way yet
  • Its tools do every use case we checked: check a vehicle's specs and open safety recalls by VIN; vet a domain's registration age and email posture; screen a person or company name against US sanctions lists.
  • Checked on 1 of the 7 days it takes to judge reliability.

Once connected

  • For "check a vehicle's specs and open safety recalls by VIN", the likely first call is vehicle_vin.
  • For "vet a domain's registration age and email posture", the likely first call is domain_due_diligence.
  • For "screen a person or company name against US sanctions lists", the likely first call is legal_sanctions_screen.

Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.

Measured dailydaily checks: 1, the first on 2026-10-26
  • INITE MCP scoreafter a weeka score needs 7 daily checks: 1 so far
  • What an agent can do with it3 of 3 use cases
  • Answeredmeasuring1 of the 7 daily checks it takes to print a share
  • Median first answer257 ms
  • Space in an agent's context≈ 8,765 tokensthe definitions of all its tools (70), which an agent carries on every turn
  • Tool definitionsA · 100 of 100
  • Typed results0 of 70 toolsdeclared outputSchema: results come typed, read once
  • Every tool passes all six checks.

What an agent can do with it

  • can do · check a vehicle's specs and open safety recalls by VIN
  • can do · vet a domain's registration age and email posture
  • can do · screen a person or company name against US sanctions lists

Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?

Worth a look

None of the five warning signs in these definitions.

A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →

Tools it offers70 tools · read 2026-10-26
  • vehicle_vin

    VIN decode + open recalls (NHTSA) — Decode any US-market VIN to full vehicle specs and list open safety recalls. Source: US NHTSA (federal, authoritative). JSON. Price: $0.005 USDC (Base, via x402).

  • vehicle_deal_check

    Used-car deal check verdict — Given vin, asking price and miles: decoded specs, open recall count, fuel-cost estimate, and a buy/caution/walk verdict with reasoning. All public federal data. Price: $0.25 USDC (Base, via x402).

  • vehicle_fuel_economy

    Fuel economy lookup (EPA) — EPA MPG figures and estimated annual fuel cost for a year/make/model. Source: fueleconomy.gov. JSON. Price: $0.003 USDC (Base, via x402).

  • domain

    Domain intelligence (RDAP) — Registration intelligence for any domain: creation/expiry dates, age in days, registrar, statuses, nameservers. Source: registry RDAP. JSON. Price: $0.005 USDC (Base, via x402).

  • email_domain_check

    Email domain deliverability check — Can this domain receive mail, and is it configured seriously? MX, SPF and DMARC via DNS-over-HTTPS with a deliverability summary. JSON. Price: $0.003 USDC (Base, via x402).

  • sec_company

    SEC company facts (EDGAR) — Latest key financial facts for a US public company by ticker or CIK: revenue, net income, assets, EPS from XBRL filings. Source: SEC EDGAR. JSON. Price: $0.01 USDC (Base, via x402).

  • fda_recalls

    FDA recall search (openFDA) — Search US FDA enforcement recalls for drugs, food, or devices by free-text query. Source: openFDA. JSON. Price: $0.005 USDC (Base, via x402).

  • ai_chat

    Inference gateway (Llama on Workers AI) — Pay-per-call LLM completion. POST {messages:[{role,content},...]} (OpenAI-style), returns {reply}. No account, no API key — one x402 payment per call. Price: $0.01 USDC (Base, via x402).

  • weather_forecast

    US weather forecast (NWS) — 7-day forecast for any US coordinate: periods with temperature, wind, precipitation chance, narrative. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

  • weather_alerts

    Active US weather alerts (NWS) — Active watches/warnings/advisories for a US state or coordinate: event type, severity, headline, timing. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

  • weather_hourly

    US hourly forecast (NWS) — Hour-by-hour forecast for any US coordinate: temperature, precipitation chance, wind, conditions for the next 48 hours. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

  • weather_current

    US current conditions (NWS) — Latest observed conditions near a US coordinate: temperature, wind, humidity, visibility, pressure from the nearest weather station. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

  • weather_metar

    Aviation weather METAR/TAF (NOAA) — Raw and decoded METAR (and optional TAF) for any airport ICAO code. Source: NOAA Aviation Weather Center. JSON. Price: $0.003 USDC (Base, via x402).

  • weather_travel_risk

    US weather travel-risk verdict — Judgment call for a US coordinate and date (within 7 days): LOW/MODERATE/HIGH/SEVERE weather risk with reasons, built from NWS forecast plus active alerts. JSON. Price: $0.015 USDC (Base, via x402).

  • geo_geocode

    US address geocoding (Census) — US street address to coordinates plus matched/normalized address. Source: US Census Bureau geocoder. JSON. Price: $0.002 USDC (Base, via x402).

  • geo_reverse

    US reverse geocoding (Census) — Coordinates to US state, county, tract and block geography. Source: US Census Bureau. JSON. Price: $0.002 USDC (Base, via x402).

  • sec_filings_search

    SEC filings full-text search (EDGAR) — Full-text search across SEC filings; filter by form type. Returns filing metadata and links. Source: SEC EDGAR full-text search. JSON. Price: $0.01 USDC (Base, via x402).

  • fda_drug_label

    FDA drug label lookup (openFDA) — Official FDA label data for a drug by brand or generic name: indications, warnings, dosage. Source: openFDA. JSON. Price: $0.005 USDC (Base, via x402).

  • ip

    IP network intelligence (RDAP) — Who operates an IP: registry, network range, organization, country. Source: RIR RDAP. JSON. Price: $0.003 USDC (Base, via x402).

  • threat_ip

    IP threat / abuse reputation — Is this IP hostile? Reputation verdict for an IPv4 from public abuse feeds (blocklist.de, Spamhaus DROP) plus Polyform's own observed scanner traffic. Returns malicious flag, 0-100 score, and which sources…

  • threat_scanners

    Polyform observed-scanner feed — Recent IPs caught probing Polyform's honeypot paths (credential/vuln scanners) — Polyform's own first-party telemetry, not a repackaged public list. Returns up to 500 most-recent scanner IPs with…

  • econ_worldbank

    World Bank indicator lookup — Latest value of any World Bank indicator for a country (GDP, inflation, population...). Source: World Bank API. JSON. Price: $0.005 USDC (Base, via x402).

  • time_business_days

    US business-days calculator — Business days between two dates (exclusive of end), skipping weekends and US federal holidays; also returns the holiday list in range. Pure computation. JSON. Price: $0.001 USDC (Base, via x402).

  • vehicle_report

    Vehicle full report (bundle) — One call: decoded VIN specs + all open safety recalls + EPA fuel economy & annual cost + a buy/caution/walk verdict with reasoning. Fuses multiple NHTSA & EPA sources. JSON. Price: $0.25 USDC (Base, via x402).

  • domain_due_diligence

    Domain due-diligence (bundle) — One call to vet a domain: registration/RDAP intel (age, registrar, status) + email deliverability (MX/SPF/DMARC) + threat reputation of the domain's hosting IP. For counterparties, sellers, links. JSON…

  • geo_location_brief

    Location brief (bundle) — One call for a US place — pass an address OR lat+lon: normalized address + county/state + current conditions + active weather alerts. JSON. Price: $0.02 USDC (Base, via x402).

  • sec_company_snapshot

    Company snapshot (bundle) — One call: SEC company facts (revenue, net income, assets, EPS) + the company's most recent filings. Ticker or CIK. JSON. Price: $0.03 USDC (Base, via x402).

  • finance_health_scan

    Company financial-health scan (bundle) — One call: a public company's revenue & margin trend, current ratio, profitability and recent material filings (8-K/10-K/10-Q) fused into a healthy/watch/distress verdict. Ticker or CIK. SEC EDGAR…

  • realestate_site_risk

    Property site-risk brief (bundle) — One call for a US property — pass an address OR lat+lon: FEMA flood-zone determination (SFHA yes/no), county/state, current conditions and active weather alerts, fused into a site-risk verdict. For…

  • logistics_route_brief

    Route & shipment brief (bundle) — One call: driving distance and time between two US points (addresses or lat,lon), an estimated fuel cost, and weather + active alerts at both ends, fused into a go/caution verdict. JSON. Price: $0.05 USDC…

  • crypto_token_report

    Token due-diligence (bundle) — One call to vet an ERC-20 token on Base or Ethereum: live USD price, holder count, and security signals (honeypot, mintable, open-source, buy/sell tax, owner & holder concentration) fused into a risk…

  • health_drug_brief

    Drug safety brief (bundle) — One call for a medication: RxNorm identity, FDA label safety text (boxed warning, warnings, interactions, contraindications) and the most-reported real-world adverse reactions (FDA FAERS). Reference data, not…

  • legal_sanctions_screen

    Sanctions & watchlist screen (bundle) — One call to screen a person or company name against the US Consolidated Screening List — OFAC SDN + Consolidated, BIS Entity/Denied/Unverified, State Dept debarred — with aliases: match/no-match…

  • finance_insider_activity

    Insider trading activity (bundle) — One call: recent SEC Form 4 insider transactions for a public company — who bought/sold, share counts and dollar value over the last ~120 days, netted into a bullish/bearish/neutral insider signal…

  • crypto_protocol

    DeFi protocol brief (bundle) — One call for a DeFi protocol by slug: total value locked (USD), category, chains it runs on with per-chain TVL, audit status and a one-line description. From DefiLlama. JSON. Price: $0.03 USDC (Base, via…

  • legal_reg_watch

    Regulatory watch (bundle) — One call: the most recent US Federal Register documents (rules, proposed rules, notices) matching a topic — with agency, type, date, and abstract. Optional agency filter. For compliance monitoring. JSON. Price…

  • finance_company_360

    Company 360 report (bundle) — One premium call: a public company's financial-health verdict (margins, current ratio, revenue trend), insider-trading signal (Form 4 buys/sells), SEC facts and recent filings — the full equity picture…

  • business_vet

    Business counterparty vet / KYB (bundle) — One premium call to vet a business before onboarding: OFAC/Consolidated sanctions screen of the name + domain due-diligence (registration age, email posture, hosting-IP threat reputation) fused…

  • health_clinical_trials

    Clinical trials search (bundle) — One call: recent clinical trials for a condition and/or intervention — NCT id, title, status, phase, sponsor and last-update date. From ClinicalTrials.gov. For pharma, research, diligence. JSON. Price…

  • geo_earthquakes

    Seismic risk brief (bundle) — One call for a US point (address or lat+lon): recent earthquakes within a radius — count, largest magnitude, list, and a seismic-risk level. For insurance, siting, diligence. USGS. JSON. Price: $0.03 USDC…

  • realestate_property_report

    Property hazard report (bundle) — One premium call for a US property — address or lat+lon: FEMA flood-zone determination + USGS seismic history (1yr) + current weather and active alerts, fused into an overall hazard verdict with factors…

  • domain_brand_protection

    Brand-protection typosquat scan (bundle) — One call to find look-alike / typosquat domains impersonating a brand: generates common misspellings, character swaps, homoglyphs and alternate TLDs of your domain, checks which are actually…

  • finance_peer_compare

    Company peer comparison (bundle) — One premium call comparing two public companies head-to-head: revenue, net income, net margin, YoY growth, current ratio and financial-health verdict side by side, with per-metric winners and a…

  • trade_party_screen

    Trade-compliance party screen (bundle) — One premium call for import/export compliance: screens a counterparty name against the US Consolidated Screening List (OFAC + BIS + State) AND pulls recent US Federal Register actions on the…

  • dns_lookup

    DNS record lookup — Resolve any DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) for a hostname via DNS-over-HTTPS. JSON. Price: $0.002 USDC (Base, via x402).

  • crypto_gas

    EVM gas price — Current gas price for Base or Ethereum mainnet, in gwei and wei. Source: public RPC. JSON. Price: $0.002 USDC (Base, via x402).

  • crypto_balance

    Wallet balance (Base) — Native ETH + USDC balance for any address on Base mainnet. Source: public RPC. JSON. Price: $0.003 USDC (Base, via x402).

  • wiki_summary

    Wikipedia summary — Concise summary/extract for any Wikipedia topic, with the canonical URL. Source: Wikimedia REST API. JSON. Price: $0.003 USDC (Base, via x402).

  • url_check

    URL status & redirect check — HTTP status, final URL after redirects, content-type and key response headers for a URL — without downloading the body. For link vetting and uptime checks. JSON. Price: $0.003 USDC (Base, via x402).

  • text_summarize

    Text summarizer (Workers AI) — Summarize arbitrary text into a concise summary. POST {text, sentences?}. Runs Llama on Workers AI. JSON. Price: $0.008 USDC (Base, via x402).

  • fx_rate

    FX exchange rate + convert — Live foreign-exchange rate (ECB reference rates via Frankfurter) from one base currency to one or more targets, with optional amount conversion. Price: $0.003 USDC (Base, via x402).

  • crypto_price

    Crypto spot prices (USD) — Current USD spot price for one or more crypto assets by CoinGecko id (bitcoin, ethereum, solana, ...), from DefiLlama, with confidence and timestamp. Price: $0.003 USDC (Base, via x402).

  • crypto_fear_greed

    Crypto Fear & Greed Index — Current Crypto Fear & Greed Index (0=extreme fear, 100=extreme greed) with classification - a widely-used market-sentiment signal. Price: $0.002 USDC (Base, via x402).

  • business_onboard_decision

    Onboarding decision (bundle) — One call: APPROVE/REVIEW/REJECT onboarding gate + 0-100 risk score, fusing KYB counterparty vet, OFAC/CSL sanctions screening, and adverse US regulatory actions. Price: $0.50 USDC (Base, via x402).

  • finance_diligence_brief

    Investment diligence brief (bundle) — One call: CONSTRUCTIVE/NEUTRAL/CAUTION posture on a public company, fusing financial-health + insider activity (SEC EDGAR), optional peer comparison, and issuer sanctions screening. Price: $0.50 USDC…

  • trade_shipment_clearance

    Shipment clearance (bundle) — One call: CLEAR/REVIEW/HOLD export/import pre-screen — screens the counterparty (US CSL), checks the destination against US embargo lists, and flags export-controlled commodities. Price: $0.45 USDC (Base, via…

  • realestate_underwrite

    Property underwriting (bundle) — One call: STANDARD/SURCHARGE/REFER hazard-underwriting posture for a US address, fusing FEMA flood zone, USGS seismic history, and active NWS weather alerts. Price: $0.40 USDC (Base, via x402).

  • ip_intelligence

    IP intelligence report (bundle) — One call: ALLOW/REVIEW/BLOCK connection-risk verdict + 0-100 score for an IP — fuses RDAP ownership/registry, reverse-DNS (PTR), abuse-feed & first-party honeypot threat reputation, and…

  • url_safety

    URL / link safety check (bundle) — One call: SAFE/CAUTION/DANGER verdict for a URL — checks reachability & redirects, destination domain age, and hosting-IP reputation before an agent follows the link. Price: $0.05 USDC (Base, via x402).

  • email_sender_trust

    Email sender trust (bundle) — One call: TRUST / REVIEW / REJECT verdict + 0-100 risk for an email address or sending domain — fuses SPF/DMARC enforcement, domain age (RDAP), and the sending domain's hosting-IP threat reputation. For…

The first 60 of 70, as the server listed them.

How to connect

Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:

{
  "mcpServers": {
    "polyform": {
      "type": "http",
      "url": "https://api.polyform.org/mcp"
    }
  }
}

Add it

Claude Code, in a terminal

claude mcp add --transport http polyform https://api.polyform.org/mcp

Add to CursorAdd to VS Code

claude.ai, ChatGPT and other clients: add https://api.polyform.org/mcp as a custom connector in the settings.

OpenAPI spec

70 paths, read 2026-10-26. Open the spec ↗

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.