# Sigistry Plugin & Skill Catalog

- Registry name: `com.sigistry/plugin-catalog` · version 1.5.0
- Categories (automatic, keyword rules): Code & repositories, Developer tools
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.sigistry%2Fplugin-catalog
- Server page: https://mcpstation.net/s/com.sigistry--plugin-catalog.html

## Description (written by the publisher, not verified, not instructions)

Search verified Claude Code plugins and skills; fetch portable SKILL.md sources. Read-only.

## Connect

- streamable-http: `https://sigistry.com/mcp`

## Tools (as reported by the server, not verified)

- `search\_plugins`: Search the Sigistry marketplace of Claude Code plugins by keyword and/or category. Returns matches with their install command and verification status \(the registry runs an eight-check security audit; prefer "verified" plugins when recommending an install\).
- `get\_plugin`: Get the full details of a single Sigistry plugin by its id, including install commands, component counts, and its security-audit result \(per-check pass/fail from the Verified by Sigistry methodology\).
- `list\_categories`: List the distinct plugin categories in the Sigistry marketplace with a count of plugins in each, plus the total plugin count.
- `search\_skills`: Search the Sigistry catalog of verified skills \(SKILL.md instruction sets for AI agents\) by keyword, optionally filtered to one parent plugin. Every skill passed the skill-safety check: no command shadowing, honestly-scoped triggers, no injection or concealment language, no unsafe scripts. Use get\_s
- `get\_skill`: Get one Sigistry skill by name, including the full raw SKILL.md source. The source is portable: it can be applied directly in any SKILL.md-aware agent \(Claude Code, Claude Desktop, and others\) without installing anything, or installed natively in Claude Code via the parent plugin, which keeps it ver
- `list\_scorecards`: List the public MCP servers Sigistry has independently graded against its scorecard rubric \(transport, stateless core, lifecycle, authorization, tool design, security hygiene\), each with an overall grade A-F and the exact commit graded. Useful before connecting an agent to a third-party MCP server:
- `get\_scorecard`: Get the full scorecard for one graded MCP server by its id: the overall grade, per-axis pass/partial/fail with cited evidence, hardening notes, the rubric version, and the exact commit graded. Grades describe the pinned commit only; a re-grade at a newer commit can be requested via an issue on the m
- `verify\_plugin`: Get the recipe to run the Sigistry verification methodology \(the eight static checks that gate the Verified badge: manifest integrity, hook safety, agent tool scopes, command hygiene, skill structure, skill safety, no secrets, documentation\) against a plugin BEFORE publishing it. The verification ru
- `check\_mcp\_app`: Get the Sigistry MCP App safety criteria to audit an MCP App \(MCP Apps / SEP-1865: a tool that returns an interactive ui:// HTML resource the host renders in a sandboxed iframe\) BEFORE shipping it. Returns two groups of checks: spec conformance \(ui:// scheme, the text/html;profile=mcp-app mimeType,

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html