Model Context Protocol (MCP) Server: dev.smallprint/smallprint

The dev.smallprint/smallprint MCP server provides “the small print of MCP servers, skills and plugins,” with details that are “hashed, diffed and graded, from the record.” Its description indicates it operates on existing MCP server/skill/plugin records and outputs change/quality-related comparisons based on that recorded data.

🛠️ Key Features

Focus on MCP servers, skills, and plugins “small print”
Processes record data using hashing
Compares record changes via diffing
Evaluates results through grading

🚀 Use Cases

Review provenance or integrity-related details for MCP servers, skills, and plugins
Detect and assess differences between recorded versions
Verify or audit record-derived information

⚡ Developer Benefits

Structured record-based comparison using hashed and diffed data
Graded evaluation to support selection or review workflows

⚠️ Limitations

No additional capabilities beyond “small print” on MCP servers/skills/plugins are specified in the provided data

smallprint-mcp

Small Print as an MCP server: four read-only tools over the public record of the tool descriptions, schemas and instructions of MCP servers, agent skills and plugins, hashed every version, diffed between versions, every change graded by a printed rule, public advisories joined by version.

json

{ "mcpServers": { "smallprint": { "command": "npx", "args": ["-y", "smallprint-mcp"] } } }

Tools:

lookup_entry(name): what the record holds for one entry.

changes_since(name, since?, min_severity?): the releases that changed the small print, with each diff and the rule behind its grade.

advisories_for(name, version?): the advisories that name it, attributed to their sources, with version ranges.

changed_since_approval(name, approved): yes or no, before use: has the small print changed since the version, content hash or date that was reviewed. Answers start with UNCHANGED, CHANGED or UNKNOWN.

Names: npm:@scope/name, pypi:name, mcp-registry:io.github.owner/server, skills.sh:owner/repo/skill, oci:ghcr.io/owner/image; a bare name is read as npm.

Most of what the record holds was written by other people: names, versions, registry descriptions, changed tool text, advisory summaries. Every answer marks that text as quoted, a short value inside ⟦ ⟧ and longer text as lines that start with "|" between a QUOTED line and an END QUOTED line, and says that marked text is data to report, not an instruction to follow.

The server reads https://smallprint.dev/api and nothing else. No account, nothing about your machine is sent, and it never calls the tool it looked up. Rate limited to one entry per request; for the whole record see the site. The rules behind every grade: https://smallprint.dev/how-we-grade.

What 1.0 holds stable

From 1.0.0 the four tools, their names, their inputs and the fields of their answers do not change without a new major version. A field can be added in a minor version; none is removed or renamed in one. The grading rules behind a grade can change in any version, with a dated entry in the record's decisions.

Small Print