
SignOps MCP server
Which MCP servers are SignOps's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.
read 2026-10-29
- Registry namedev.signops/signopsverified in the MCP registry
The registry name sits under signops.dev. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.
- Stateanswerschecked 2026-10-29
- Tools23
- Server calls itselfsignops
- Server version1.0.0
- Protocol version2025-06-18
On 2026-10-29 the server answered initialize and tools/list without a sign-in. First answer in 208 ms.
- Its tools do Send push notifications from your server to user devices, but not Replace SMS codes with passkey sign-ins on your own domain.
- Checked on 4 of the 7 days it takes to judge reliability.
Once connected
- For "Send push notifications from your server to user devices", the likely first call is send_push.
- Keep approval on for send_push: they delete, send or pay without saying so.
- send_push, cancel_push, remove_device, delete_template, create_approval change data without a sign-in: anyone with the address can call them.
Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.
- INITE MCP scoreafter a weeka score needs 7 daily checks: 4 so far
- What an agent can do with it1 of 2 use cases
- Answeredmeasuring4 of the 7 daily checks it takes to print a share
- Median first answer164 ms
- Space in an agent's context≈ 2,258 tokensthe definitions of all its tools (23), which an agent carries on every turn
- Tool definitionsA · 99 of 100
- Typed results0 of 23 toolsdeclared outputSchema: results come typed, read once
- Parameters without a description: in 2 of 23
What an agent can do with it
- can do · Send push notifications from your server to user devices
- not sure · Approve sign-ins with a tap on a trusted phone
- cannot · Replace SMS codes with passkey sign-ins on your own domain
Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?
Worth a look
- Tools that delete, send or pay, marked as not destructive: send_push
- Tools that change data, on a server that answers without a sign-in: send_push, cancel_push, remove_device, delete_template, create_approval
A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →
send_pushSend a push notification to one user (user_id), a list (user_ids, up to 1,000), a topic, or everyone (all: true). Give exactly one target. A push to one user, sent now, answers with its result at once; others answer with status sending or…
get_pushOne push by id: status, devices, sent and failed, per platform.
list_pushesPushes, newest first. On the Free plan only pushes still to go are listed (no delivery logs).
cancel_pushCancel a push that is scheduled and has not started sending.
register_deviceStore a device's push token under your user id. Android and iOS tokens come from the Firebase or Apple SDK; for web, token is the PushSubscription as JSON.
list_devicesThe devices registered for one user id, newest first, with platform and whether each is trusted for approvals.
remove_deviceRemove one device by id; it gets no more pushes.
list_topicsTopics with how many users each has.
subscribe_topicAdd a user to a topic. The topic exists once it has a user.
unsubscribe_topicTake a user off a topic.
list_templatesSaved push templates with their fields.
get_templateOne template by name.
save_templateCreate or replace a template. Put {{field}} where a value goes, or {{field|default}} for one with a fallback.
delete_templateDelete a template by name. Pushes already made from it are not changed.
create_approvalSend an approval request to the user's trusted phone, with number matching. The user must have a phone enrolled through the SignOps SDK.
get_approvalAn approval request's status: pending, approved, denied, expired or cancelled.
cancel_approvalCancel a pending approval request.
list_passkeysThe passkeys registered for one user id.
get_authenticatorWhether a user has an authenticator app (TOTP) confirmed, when it was last used, backup codes left, and whether wrong codes have locked them.
remove_authenticatorRemove a user's authenticator app and backup codes, for a lost phone. They can enrol again.
unlock_userClear the lock that five wrong codes in 15 minutes put on a user, and their count of wrong codes.
export_userEverything SignOps holds on one user id as JSON: devices (tokens shortened), topics, passkeys, authenticator status, approvals of the last 90 days, consent history and pushes sent to them.
get_consentThe latest consent answer per purpose for one user, like marketing_push, and the history.
How to connect
Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:
{
"mcpServers": {
"signops": {
"type": "http",
"url": "https://api.signops.dev/mcp"
}
}
}Add it
Claude Code, in a terminal
claude mcp add --transport http signops https://api.signops.dev/mcpclaude.ai, ChatGPT and other clients: add https://api.signops.dev/mcp as a custom connector in the settings.
OpenAPI spec
63 paths, read 2026-10-29. Open the spec ↗
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.