Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.
The publisher's own URL. Not a PlugMCP endpoint.
https://ailm.gtfo.dev/mcp
Claude opens with the name and URL filled in. You still confirm it there.
claude mcp add --transport http dev.gtfo-mcp-killchain-stage1-weather https://ailm.gtfo.dev/mcp
Run in a terminal.
{
"mcpServers": {
"dev.gtfo-mcp-killchain-stage1-weather": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://ailm.gtfo.dev/mcp"
]
}
}
}claude_desktop_config.json
Remote URL or a command on your machine? How the two installs differ
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchSecurity research: MCP registries verify identity, not tool behavior. See gtfo.dev.
README is not crawled yet. No repository on file.
No tool list yet. Remote servers get one after the first health check.