# MCP Precheck (ChatGPT Plugin)

> Check MCP servers first

- Type: plugin
- Publisher: PolicyLayer
- Categories: Security
- Website: https://chatgpt.com/plugins/plugins_6a5672a6f8288191b0635a124c19bdac
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6a5672a6f8288191b0635a124c19bdac
- Version: 1.0.0
- Listed: 2026-10-15

## About

Check configured or proposed MCP servers against PolicyLayer registry records for identity, authentication posture, tool capabilities, risk grade and recent changes.

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “MCP Precheck” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Skills

- **mcp-precheck**: Check MCP servers against the PolicyLayer registry before connecting to them. Use when you are about to add, install or configure any MCP server (editing .mcp.json or a client config, running `claude mcp add` or an npx-launched server), when your human asks you to evaluate or vet an MCP server, when asked to scan or review the MCP stack already configured on this machine, or when asked to install or remove the precheck hook.

## Example prompts

- "Audit every MCP server configured. Flag anything risky, unknown or recently changed, and tell me what needs my decision."
- "Before I connect this MCP server, check its identity, authentication, capabilities, risk grade and recent changes"
- "Review my MCP stack and propose enforceable deny rules for any dangerous tools. Ask before changing any settings."

## Related

- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [Static Analysis (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-static-analysis.md): CodeQL, Semgrep and SARIF parsing skills for security bug hunting
- [Differential Review (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-differential-review.md): Security-focused review of code diffs with blast-radius estimation
- [Supply Chain Risk Auditor (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-supply-chain-risk-auditor.md): Audit npm, PyPI and Go dependencies for supply-chain risk
- [Aivana Security Investigator](https://chatgptplugins.directory/plugins/aivana-security-investigator.md): Run safe KQL investigations
- [Atbash Safety](https://chatgptplugins.directory/plugins/atbash-safety.md): Guard tool calls with Atbash

---
Source: https://chatgptplugins.directory/plugins/mcp-precheck · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.