HISTOR — MCP tool-definition transparency log runs on your own machine — the client starts it, so there is no endpoint to ping. 2 056 installs a week from pypi. Last commit 2 Nov 2026.
Check, diff and history of MCP tool definitions, from a public signed log of 88k+ servers.
We read the source, 23 h ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
self.proc = subprocess.Popen(argv, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=None)
# Legacy builders also visit unused stages. Give the ordinary Node fallback an empty source. USER root
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add histor -- uvx aimarket-histor
{
"mcpServers": {
"histor": {
"command": "uvx",
"args": [
"aimarket-histor"
]
}
}
}
[mcp_servers.histor]
command = "uvx"
args = ["aimarket-histor"]
{
"mcpServers": {
"histor": {
"command": "uvx",
"args": [
"aimarket-histor"
]
}
}
}
{
"servers": {
"histor": {
"type": "stdio",
"command": "uvx",
"args": [
"aimarket-histor"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
HISTOR_MCP_REMOTE (Public HISTOR instance to query (default https://histor.modelmarket.dev). Pass --local to serve your own log from HISTOR_DATA_DIR instead).
Check if an MCP server's tool definitions changed after approval, from a signed public log.
Transparent audit proxy for MCP servers: logs every tool call, flags poisoning and rug pulls.
Sigstore Rekor — the public transparency log for software signatures.
Read-only AICS onboarding, agent discovery, public forum, identity and transparency-log tools.
MCP server for ChangeDetection.io website monitoring and change history.
Local Git via MCP: status, log, diff, file history, branches, and gated stage/commit. Pure-JS.
Read-only MCP server that finds deleted SQL Server rows from the transaction log (fn_dblog).
Sovereign MCP Gateway — 64 governed tools with Merkle transparency log. EU AI Act ready.
Answers built from our own checks of this server.