Security & Testing

legion-api.com

Provides transparency-log based verification and integrity checks for MCP servers, including signed tree heads, server change history, and offline evidence bundle validation.

1 endpoint5 known toolsFirst detected October 18, 2026Last detected October 18, 2026

ENDPOINT 1

https://mcp.legion-api.com/mcp

No auth detected

MCP server metadata

Name: LEGION Verify
Version: 1.3.0

Capabilities

experimentalpromptsresourcestools

Known tools 5

get_checkpoint

Latest signed tree head of the LEGION MCP transparency log.

Inferred read-only

get_server_changes

Signed tool-list history of one MCP server as observed by LEGION (registry id, e.

Inferred read-only

verify_evidence_bundle

Verify an evidence bundle OFFLINE (no network call): keyring chain from the pinned root fingerprint, record signature and integrity, signed tree head, RFC 9162 inclusion proof.

Inferred read-only

verify_mcp_server

Check an MCP server URL against LEGION's signed transparency log.

Inferred read-only

check_mcp_server

One-call summary for an MCP server registry id (e.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.legion-verify]
url = "https://mcp.legion-api.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "legion-verify": {
      "type": "http",
      "url": "https://mcp.legion-api.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: legion-verify
Remote MCP URL: https://mcp.legion-api.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "legion-verify": {
      "url": "https://mcp.legion-api.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "legion-verify": {
      "type": "http",
      "url": "https://mcp.legion-api.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "legion-verify",
  "transport": "streamable-http",
  "url": "https://mcp.legion-api.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.