Loading the registry…
The publisher performed an authenticated act of publication — proving control of a namespace in the official MCP registry, or appearing in a first-party catalogue an operator curates. That establishes WHO published it. It is not a security finding, and attested artifacts carry Flagged verdicts too.
Choose your runtime: the CLI writes the mcpServers config entry for that target.
nerlo install --target claude-code -- paypal/agent-toolkit
Install respects the composite badge: Clean proceeds, Caution prompts for confirmation, and Flagged is refused. Write operations require an API token.
Not yet scanned
This server is in the registry but has no completed scan yet. Per-scanner scoresheets appear here once the pipeline finishes its first run.
1 scan on record. Every scan's full results are retained immutably for 24 months.
| Completed | Composite | Change | Scanners | Status |
|---|---|---|---|---|
| — | Pending scan | — | — | queued |