Install VERAX in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add verax -- <command to start the server>Frequently asked questions
What does the VERAX MCP server do?
Sits between an agent and its tools: every call passes a policy gate and leaves a signed decision record before it runs, a refusal is recorded like an approval, payments wait for an operator on the same machine, and the ledger stays there and verifies offline. Apache-2.0.
Is the VERAX MCP server free?
Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.
Does VERAX run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add VERAX to Claude Code?
Follow the install steps in the project's README at https://github.com/verax-ai/verax, then register it with "claude mcp add".
More security & identity MCP servers
View allverify-proof
Fulcrum-Enterprises/verify-proof
Verify blockchain-anchored timestamp proofs locally: recompute a file's SHA-256, walk the Merkle path and check the anchor on Polygon or Bitcoin.
Shodan
BurtTheCoder/mcp-shodan
Query the Shodan API and Shodan CVEDB: IP lookups, device searches, DNS lookups, vulnerability queries and CPE lookups.
Verity
meloliva14/verity-mcp
Fail-closed trust gate for agents: fact-checking, prompt-injection detection, content moderation, PII and secret detection, and a pre-action guardrail.
Seal
aurumflux20/seal
Exactly-once payments for agents: prevents double settlement across processes and retries, confirms charges with the provider and reconciles out-of-band spend.
Virustotal
BurtTheCoder/mcp-virustotal
Query the VirusTotal API: scan URLs, analyze file hashes and retrieve IP address reports.
SaveSaveSaveSave
stefantsezarov/SaveSaveSaveSave
Read-only checks before an agent acts: prompt-injection and phishing scan of untrusted text (local), npm package check for malware, hijacked releases and typosquats, crypto address and token scan, and address-poisoning comparison. Zero dependencies.