Otp Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Otp Mcp Server (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Public Model Context Protocol server for OTP — Organization Transport Protocol (orgtp.com).
Install this in any MCP client (Claude Desktop, Cursor, Windsurf, Cline, Zed, Continue) and your assistant can answer questions about cross-organizational best practices, network learnings, publishers, and patterns — no account required.
OTP is the coordination intelligence layer for AI-augmented organizations. Think Transactive Memory System, but for the era of agent teams. Organizations publish what works, capture what fails, and any agent on any participating org can pull that wisdom before acting.
| Tool | Question |
|---|---|
otp_about | What is OTP and how does it work? |
otp_search_best_practices | What's the best practice for [topic]? |
otp_network_learnings | What has the network learned recently? |
otp_list_publishers | Which organizations publish on OTP? |
otp_get_org | What does [org name] publish? |
otp_get_patterns | What patterns repeat across organizations? |
otp_rules_for_role | What rules apply to a [role/agent type]? |
otp_sample_kpis | What KPIs are organizations tracking? |
otp_publishing_guide | How do I publish my organization's playbook? |
otp_get_org_chart | Show me the live agent org chart of a publisher. |
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"otp": {
"command": "npx",
"args": ["-y", "@orgtp/mcp-server"]
}
}
}{
"mcpServers": {
"otp": {
"command": "npx",
"args": ["-y", "@orgtp/mcp-server"]
}
}
}git clone https://github.com/sneeze-it/otp-mcp-server.git
cd otp-mcp-server
npm install
npm run build
npm start| Env var | Default | Purpose |
|---|---|---|
OTP_API_BASE | https://orgtp.com/api/v1 | Override to point at a self-hosted OTP backend. |
Once installed, ask your assistant:
MIT — see LICENSE.
This server is a public, read-only discovery layer. For write operations (publishing, capturing learnings, updating KPIs), use the authenticated OTP MCP available to verified publishers at orgtp.com.
Built by Sneeze It. Maintained as part of the OTP project.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.