Polyform MCP server
Which MCP servers are Polyform's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.
read 2026-10-26
- Registry nameorg.polyform/polyformverified in the MCP registry
The registry name sits under polyform.org. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.
- Stateanswerschecked 2026-10-26
- Tools70
- Server calls itselfpolyform
- Server version1.0.0
- Protocol version2025-06-18
On 2026-10-26 the server answered initialize and tools/list without a sign-in. First answer in 39 ms.
- Its tools do every use case we checked: check a vehicle's specs and open safety recalls by VIN; vet a domain's registration age and email posture; screen a person or company name against US sanctions lists.
- Checked on 1 of the 7 days it takes to judge reliability.
Once connected
- For "check a vehicle's specs and open safety recalls by VIN", the likely first call is vehicle_vin.
- For "vet a domain's registration age and email posture", the likely first call is domain_due_diligence.
- For "screen a person or company name against US sanctions lists", the likely first call is legal_sanctions_screen.
Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.
- INITE MCP scoreafter a weeka score needs 7 daily checks: 1 so far
- What an agent can do with it3 of 3 use cases
- Answeredmeasuring1 of the 7 daily checks it takes to print a share
- Median first answer257 ms
- Space in an agent's context≈ 8,765 tokensthe definitions of all its tools (70), which an agent carries on every turn
- Tool definitionsA · 100 of 100
- Typed results0 of 70 toolsdeclared outputSchema: results come typed, read once
- Every tool passes all six checks.
What an agent can do with it
- can do · check a vehicle's specs and open safety recalls by VIN
- can do · vet a domain's registration age and email posture
- can do · screen a person or company name against US sanctions lists
Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?
Worth a look
None of the five warning signs in these definitions.
A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →
vehicle_vinVIN decode + open recalls (NHTSA) — Decode any US-market VIN to full vehicle specs and list open safety recalls. Source: US NHTSA (federal, authoritative). JSON. Price: $0.005 USDC (Base, via x402).
vehicle_deal_checkUsed-car deal check verdict — Given vin, asking price and miles: decoded specs, open recall count, fuel-cost estimate, and a buy/caution/walk verdict with reasoning. All public federal data. Price: $0.25 USDC (Base, via x402).
vehicle_fuel_economyFuel economy lookup (EPA) — EPA MPG figures and estimated annual fuel cost for a year/make/model. Source: fueleconomy.gov. JSON. Price: $0.003 USDC (Base, via x402).
domainDomain intelligence (RDAP) — Registration intelligence for any domain: creation/expiry dates, age in days, registrar, statuses, nameservers. Source: registry RDAP. JSON. Price: $0.005 USDC (Base, via x402).
email_domain_checkEmail domain deliverability check — Can this domain receive mail, and is it configured seriously? MX, SPF and DMARC via DNS-over-HTTPS with a deliverability summary. JSON. Price: $0.003 USDC (Base, via x402).
sec_companySEC company facts (EDGAR) — Latest key financial facts for a US public company by ticker or CIK: revenue, net income, assets, EPS from XBRL filings. Source: SEC EDGAR. JSON. Price: $0.01 USDC (Base, via x402).
fda_recallsFDA recall search (openFDA) — Search US FDA enforcement recalls for drugs, food, or devices by free-text query. Source: openFDA. JSON. Price: $0.005 USDC (Base, via x402).
ai_chatInference gateway (Llama on Workers AI) — Pay-per-call LLM completion. POST {messages:[{role,content},...]} (OpenAI-style), returns {reply}. No account, no API key — one x402 payment per call. Price: $0.01 USDC (Base, via x402).
weather_forecastUS weather forecast (NWS) — 7-day forecast for any US coordinate: periods with temperature, wind, precipitation chance, narrative. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).
weather_alertsActive US weather alerts (NWS) — Active watches/warnings/advisories for a US state or coordinate: event type, severity, headline, timing. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).
weather_hourlyUS hourly forecast (NWS) — Hour-by-hour forecast for any US coordinate: temperature, precipitation chance, wind, conditions for the next 48 hours. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).
weather_currentUS current conditions (NWS) — Latest observed conditions near a US coordinate: temperature, wind, humidity, visibility, pressure from the nearest weather station. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).
weather_metarAviation weather METAR/TAF (NOAA) — Raw and decoded METAR (and optional TAF) for any airport ICAO code. Source: NOAA Aviation Weather Center. JSON. Price: $0.003 USDC (Base, via x402).
weather_travel_riskUS weather travel-risk verdict — Judgment call for a US coordinate and date (within 7 days): LOW/MODERATE/HIGH/SEVERE weather risk with reasons, built from NWS forecast plus active alerts. JSON. Price: $0.015 USDC (Base, via x402).
geo_geocodeUS address geocoding (Census) — US street address to coordinates plus matched/normalized address. Source: US Census Bureau geocoder. JSON. Price: $0.002 USDC (Base, via x402).
geo_reverseUS reverse geocoding (Census) — Coordinates to US state, county, tract and block geography. Source: US Census Bureau. JSON. Price: $0.002 USDC (Base, via x402).
sec_filings_searchSEC filings full-text search (EDGAR) — Full-text search across SEC filings; filter by form type. Returns filing metadata and links. Source: SEC EDGAR full-text search. JSON. Price: $0.01 USDC (Base, via x402).
fda_drug_labelFDA drug label lookup (openFDA) — Official FDA label data for a drug by brand or generic name: indications, warnings, dosage. Source: openFDA. JSON. Price: $0.005 USDC (Base, via x402).
ipIP network intelligence (RDAP) — Who operates an IP: registry, network range, organization, country. Source: RIR RDAP. JSON. Price: $0.003 USDC (Base, via x402).
threat_ipIP threat / abuse reputation — Is this IP hostile? Reputation verdict for an IPv4 from public abuse feeds (blocklist.de, Spamhaus DROP) plus Polyform's own observed scanner traffic. Returns malicious flag, 0-100 score, and which sources…
threat_scannersPolyform observed-scanner feed — Recent IPs caught probing Polyform's honeypot paths (credential/vuln scanners) — Polyform's own first-party telemetry, not a repackaged public list. Returns up to 500 most-recent scanner IPs with…
econ_worldbankWorld Bank indicator lookup — Latest value of any World Bank indicator for a country (GDP, inflation, population...). Source: World Bank API. JSON. Price: $0.005 USDC (Base, via x402).
time_business_daysUS business-days calculator — Business days between two dates (exclusive of end), skipping weekends and US federal holidays; also returns the holiday list in range. Pure computation. JSON. Price: $0.001 USDC (Base, via x402).
vehicle_reportVehicle full report (bundle) — One call: decoded VIN specs + all open safety recalls + EPA fuel economy & annual cost + a buy/caution/walk verdict with reasoning. Fuses multiple NHTSA & EPA sources. JSON. Price: $0.25 USDC (Base, via x402).
domain_due_diligenceDomain due-diligence (bundle) — One call to vet a domain: registration/RDAP intel (age, registrar, status) + email deliverability (MX/SPF/DMARC) + threat reputation of the domain's hosting IP. For counterparties, sellers, links. JSON…
geo_location_briefLocation brief (bundle) — One call for a US place — pass an address OR lat+lon: normalized address + county/state + current conditions + active weather alerts. JSON. Price: $0.02 USDC (Base, via x402).
sec_company_snapshotCompany snapshot (bundle) — One call: SEC company facts (revenue, net income, assets, EPS) + the company's most recent filings. Ticker or CIK. JSON. Price: $0.03 USDC (Base, via x402).
finance_health_scanCompany financial-health scan (bundle) — One call: a public company's revenue & margin trend, current ratio, profitability and recent material filings (8-K/10-K/10-Q) fused into a healthy/watch/distress verdict. Ticker or CIK. SEC EDGAR…
realestate_site_riskProperty site-risk brief (bundle) — One call for a US property — pass an address OR lat+lon: FEMA flood-zone determination (SFHA yes/no), county/state, current conditions and active weather alerts, fused into a site-risk verdict. For…
logistics_route_briefRoute & shipment brief (bundle) — One call: driving distance and time between two US points (addresses or lat,lon), an estimated fuel cost, and weather + active alerts at both ends, fused into a go/caution verdict. JSON. Price: $0.05 USDC…
crypto_token_reportToken due-diligence (bundle) — One call to vet an ERC-20 token on Base or Ethereum: live USD price, holder count, and security signals (honeypot, mintable, open-source, buy/sell tax, owner & holder concentration) fused into a risk…
health_drug_briefDrug safety brief (bundle) — One call for a medication: RxNorm identity, FDA label safety text (boxed warning, warnings, interactions, contraindications) and the most-reported real-world adverse reactions (FDA FAERS). Reference data, not…
legal_sanctions_screenSanctions & watchlist screen (bundle) — One call to screen a person or company name against the US Consolidated Screening List — OFAC SDN + Consolidated, BIS Entity/Denied/Unverified, State Dept debarred — with aliases: match/no-match…
finance_insider_activityInsider trading activity (bundle) — One call: recent SEC Form 4 insider transactions for a public company — who bought/sold, share counts and dollar value over the last ~120 days, netted into a bullish/bearish/neutral insider signal…
crypto_protocolDeFi protocol brief (bundle) — One call for a DeFi protocol by slug: total value locked (USD), category, chains it runs on with per-chain TVL, audit status and a one-line description. From DefiLlama. JSON. Price: $0.03 USDC (Base, via…
legal_reg_watchRegulatory watch (bundle) — One call: the most recent US Federal Register documents (rules, proposed rules, notices) matching a topic — with agency, type, date, and abstract. Optional agency filter. For compliance monitoring. JSON. Price…
finance_company_360Company 360 report (bundle) — One premium call: a public company's financial-health verdict (margins, current ratio, revenue trend), insider-trading signal (Form 4 buys/sells), SEC facts and recent filings — the full equity picture…
business_vetBusiness counterparty vet / KYB (bundle) — One premium call to vet a business before onboarding: OFAC/Consolidated sanctions screen of the name + domain due-diligence (registration age, email posture, hosting-IP threat reputation) fused…
health_clinical_trialsClinical trials search (bundle) — One call: recent clinical trials for a condition and/or intervention — NCT id, title, status, phase, sponsor and last-update date. From ClinicalTrials.gov. For pharma, research, diligence. JSON. Price…
geo_earthquakesSeismic risk brief (bundle) — One call for a US point (address or lat+lon): recent earthquakes within a radius — count, largest magnitude, list, and a seismic-risk level. For insurance, siting, diligence. USGS. JSON. Price: $0.03 USDC…
realestate_property_reportProperty hazard report (bundle) — One premium call for a US property — address or lat+lon: FEMA flood-zone determination + USGS seismic history (1yr) + current weather and active alerts, fused into an overall hazard verdict with factors…
domain_brand_protectionBrand-protection typosquat scan (bundle) — One call to find look-alike / typosquat domains impersonating a brand: generates common misspellings, character swaps, homoglyphs and alternate TLDs of your domain, checks which are actually…
finance_peer_compareCompany peer comparison (bundle) — One premium call comparing two public companies head-to-head: revenue, net income, net margin, YoY growth, current ratio and financial-health verdict side by side, with per-metric winners and a…
trade_party_screenTrade-compliance party screen (bundle) — One premium call for import/export compliance: screens a counterparty name against the US Consolidated Screening List (OFAC + BIS + State) AND pulls recent US Federal Register actions on the…
dns_lookupDNS record lookup — Resolve any DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) for a hostname via DNS-over-HTTPS. JSON. Price: $0.002 USDC (Base, via x402).
crypto_gasEVM gas price — Current gas price for Base or Ethereum mainnet, in gwei and wei. Source: public RPC. JSON. Price: $0.002 USDC (Base, via x402).
crypto_balanceWallet balance (Base) — Native ETH + USDC balance for any address on Base mainnet. Source: public RPC. JSON. Price: $0.003 USDC (Base, via x402).
wiki_summaryWikipedia summary — Concise summary/extract for any Wikipedia topic, with the canonical URL. Source: Wikimedia REST API. JSON. Price: $0.003 USDC (Base, via x402).
url_checkURL status & redirect check — HTTP status, final URL after redirects, content-type and key response headers for a URL — without downloading the body. For link vetting and uptime checks. JSON. Price: $0.003 USDC (Base, via x402).
text_summarizeText summarizer (Workers AI) — Summarize arbitrary text into a concise summary. POST {text, sentences?}. Runs Llama on Workers AI. JSON. Price: $0.008 USDC (Base, via x402).
fx_rateFX exchange rate + convert — Live foreign-exchange rate (ECB reference rates via Frankfurter) from one base currency to one or more targets, with optional amount conversion. Price: $0.003 USDC (Base, via x402).
crypto_priceCrypto spot prices (USD) — Current USD spot price for one or more crypto assets by CoinGecko id (bitcoin, ethereum, solana, ...), from DefiLlama, with confidence and timestamp. Price: $0.003 USDC (Base, via x402).
crypto_fear_greedCrypto Fear & Greed Index — Current Crypto Fear & Greed Index (0=extreme fear, 100=extreme greed) with classification - a widely-used market-sentiment signal. Price: $0.002 USDC (Base, via x402).
business_onboard_decisionOnboarding decision (bundle) — One call: APPROVE/REVIEW/REJECT onboarding gate + 0-100 risk score, fusing KYB counterparty vet, OFAC/CSL sanctions screening, and adverse US regulatory actions. Price: $0.50 USDC (Base, via x402).
finance_diligence_briefInvestment diligence brief (bundle) — One call: CONSTRUCTIVE/NEUTRAL/CAUTION posture on a public company, fusing financial-health + insider activity (SEC EDGAR), optional peer comparison, and issuer sanctions screening. Price: $0.50 USDC…
trade_shipment_clearanceShipment clearance (bundle) — One call: CLEAR/REVIEW/HOLD export/import pre-screen — screens the counterparty (US CSL), checks the destination against US embargo lists, and flags export-controlled commodities. Price: $0.45 USDC (Base, via…
realestate_underwriteProperty underwriting (bundle) — One call: STANDARD/SURCHARGE/REFER hazard-underwriting posture for a US address, fusing FEMA flood zone, USGS seismic history, and active NWS weather alerts. Price: $0.40 USDC (Base, via x402).
ip_intelligenceIP intelligence report (bundle) — One call: ALLOW/REVIEW/BLOCK connection-risk verdict + 0-100 score for an IP — fuses RDAP ownership/registry, reverse-DNS (PTR), abuse-feed & first-party honeypot threat reputation, and…
url_safetyURL / link safety check (bundle) — One call: SAFE/CAUTION/DANGER verdict for a URL — checks reachability & redirects, destination domain age, and hosting-IP reputation before an agent follows the link. Price: $0.05 USDC (Base, via x402).
email_sender_trustEmail sender trust (bundle) — One call: TRUST / REVIEW / REJECT verdict + 0-100 risk for an email address or sending domain — fuses SPF/DMARC enforcement, domain age (RDAP), and the sending domain's hosting-IP threat reputation. For…
The first 60 of 70, as the server listed them.
How to connect
Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:
{
"mcpServers": {
"polyform": {
"type": "http",
"url": "https://api.polyform.org/mcp"
}
}
}Add it
Claude Code, in a terminal
claude mcp add --transport http polyform https://api.polyform.org/mcpclaude.ai, ChatGPT and other clients: add https://api.polyform.org/mcp as a custom connector in the settings.
OpenAPI spec
70 paths, read 2026-10-26. Open the spec ↗
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.