Sigistry Plugin Catalog (formerly Claude Registry)
Renamed: prefer com.sigistry/plugin-catalog. This legacy endpoint keeps working.
Connect it
Settings → Connectors → Add custom connector
URL: https://clauderegistry.com/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://clauderegistry.com/mcp{
"mcpServers": {
"plugin-catalog": {
"url": "https://clauderegistry.com/mcp"
}
}
}claude mcp add --transport http plugin-catalog https://clauderegistry.com/mcp{
"servers": {
"plugin-catalog": {
"type": "http",
"url": "https://clauderegistry.com/mcp"
}
}
}9 tools, verified live
search_pluginsread-onlySearch the Sigistry marketplace of Claude Code plugins by keyword and/or category. Returns matches with their install command and verification status (the registry runs an eight-check security audit; prefer "verified" plugins when recommending an install).
get_pluginread-onlyGet the full details of a single Sigistry plugin by its id, including install commands, component counts, and its security-audit result (per-check pass/fail from the Verified by Sigistry methodology).
list_categoriesread-onlyList the distinct plugin categories in the Sigistry marketplace with a count of plugins in each, plus the total plugin count.
search_skillsread-onlySearch the Sigistry catalog of verified skills (SKILL.md instruction sets for AI agents) by keyword, optionally filtered to one parent plugin. Every skill passed the skill-safety check: no command shadowing, honestly-scoped triggers, no injection or concealment language, no unsafe scripts. Use get_skill to fetch the full portable source of a match.
get_skillread-onlyGet one Sigistry skill by name, including the full raw SKILL.md source. The source is portable: it can be applied directly in any SKILL.md-aware agent (Claude Code, Claude Desktop, and others) without installing anything, or installed natively in Claude Code via the parent plugin, which keeps it verified and updated. The returned skill passed the Sigistry skill-safety check at the parent plugin's
list_scorecardsread-onlyList the public MCP servers Sigistry has independently graded against its scorecard rubric (transport, stateless core, lifecycle, authorization, tool design, security hygiene), each with an overall grade A-F and the exact commit graded. Useful before connecting an agent to a third-party MCP server: check whether it has been assessed and how it scored. Use get_scorecard for the full per-axis breakd
get_scorecardread-onlyGet the full scorecard for one graded MCP server by its id: the overall grade, per-axis pass/partial/fail with cited evidence, hardening notes, the rubric version, and the exact commit graded. Grades describe the pinned commit only; a re-grade at a newer commit can be requested via an issue on the marketplace repo.
verify_pluginread-onlyGet the recipe to run the Sigistry verification methodology (the eight static checks that gate the Verified badge: manifest integrity, hook safety, agent tool scopes, command hygiene, skill structure, skill safety, no secrets, documentation) against a plugin BEFORE publishing it. The verification runs entirely on the local machine via a dependency-free open-source Node script; the plugin code neve
check_mcp_appread-onlyGet the Sigistry MCP App safety criteria to audit an MCP App (MCP Apps / SEP-1865: a tool that returns an interactive ui:// HTML resource the host renders in a sandboxed iframe) BEFORE shipping it. Returns two groups of checks: spec conformance (ui:// scheme, the text/html;profile=mcp-app mimeType, tool-to-UI linkage via _meta.ui.resourceUri, a text fallback, visibility values, and CSP coverage of
Alternatives in Other
Compare →
Intangible Asset Valuation MCP ServerB
Intangible asset valuation: 14 tools, 124+ formulas for IP, technology, goodwill, PPA, impairment.
TracePassB
Manage products, EU Digital Product Passports, operator parties, and GS1 EPCIS supply-chain events.
MBmailbox.botB
Hosted mailbox.bot postal MCP. $15/mo mailboxes are live now.
MAMacfaxB
Identify any Apple serial and read its device record, plus used-Mac prices, listings and checks.
KNKenwea NotaryB
Signed, traced record of what an npm package or file attempts when run, network included. No key.
ABaboardB
Falsifiable claims about systemic problems: causal graph, forecasts, dossiers.