프로토타입 · 미리 보기: 공식 레지스트리의 모든 서버를 담고 있으며 30분마다 동기화해요. Google로 로그인하면 리뷰를 쓸 수 있어요.프로토타입 · 30분마다 업데이트
PopNx MCPAI를 쓰는 사람을 위한 MCP 서버 · 쉬운 말로 설명해요

Overwing

제작자: frod27버전 0.15.0i★ 0i컴퓨터 또는 클라우드
레지스트리 이름ai.overwing/mcp

설치 방법

What it does

Guardrails for LLM output: pass / fail / review verdicts and one recommended action. Hosted or npm.

  • Connects 컴퓨터 또는 클라우드
  • Account or key Cloud: Works without a key · add Authorization if you have one (often raises limits) · Local: No key needed
  • Category 검색 및 AI 기억

설치

쓰고 있는 AI 앱을 고른 다음 설정을 복사하세요.

검사 5/5 통과 · 내가 묻는 내용은 제작자 서버(overwing.ai)를 거쳐요 · ✓ 명령 확인 2026년 11월 14일

먼저: 어떤 AI를 쓰시나요?

쓰는 앱을 고르면 아래에 단계가 나옵니다.

Claude에 연결할 수 있어요 · 약 2분

키 필요 없음, 설치 필요 없음 · claude.ai나 데스크톱 앱에서 한 번 설정하면 채팅에서 쓸 수 있어요 · 무료 계정은 1개까지 · Team/Enterprise는 소유자(Owner)가 추가

  1. Claude의 Connectors 페이지 열기

    CustomizeConnectors

    CustomizeConnectors1Add2https://…3Add4
  2. “Add” → “Custom” → “Web”를 누르고 이 2칸 채우기

    여기서 복사해 Claude의 같은 이름 칸에 붙여 넣고 Continue를 누르세요

    Name · 이름Overwing
    Remote MCP server URL · 주소https://overwing.ai/mcp

    Claude가 찾은 로그인 설정 화면에서 Continue를 누르고 · Authentication은 제작자 안내대로(Sign in now, Sign in when needed, No sign in) 고른 뒤 Add를 누르세요

  3. 채팅에서 켜기

    +ConnectorsOverwing

  4. 해 보기

    Overwing을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐

    ✓ Claude가 Overwing을 쓰고 있다고 하거나 답에 Overwing 도구 이름이 나오면 연결된 거예요

메뉴 이름은 2026년 11월 11일에 Anthropic 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요

ChatGPT 연결은 요금제에 따라 달라요

전체 MCP: 웹 ChatGPT Business, Enterprise, Edu · Pro: 읽기/가져오기 권한으로 연결, 데이터를 바꾸는 도구는 안 될 수 있어요 · Plus: 공식 문서 미확인, 플러그인 화면에 사용자 지정 MCP 추가 항목이 보이면 시도해 볼 수 있어요 · 웹만

  1. 웹 ChatGPT에서 MCP 추가 페이지 열기

    Plugins+Add custom MCP server

    ChatGPTPlugins1+2https://…3Create4
  2. 이름과 주소 입력

    이름을 넣고 Connection에 주소를 붙여 넣은 뒤 경고에 체크하고 Create as a plugin을 누르세요

    Name · 이름Overwing
    Connection · 주소https://overwing.ai/mcp
  3. 채팅에서 Overwing 고르기

    새 채팅을 열고 입력 전에 플러그인 목록에서 Overwing을 고르세요

  4. 해 보기

    Overwing을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐

    ✓ ChatGPT가 Overwing을 쓰고 있다고 하거나 답에 Overwing 도구 이름이 나오면 연결된 거예요

메뉴 이름은 2026년 11월 11일에 OpenAI 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요

Claude Code에 연결할 수 있어요 · 약 2분

키 필요 없음, 설치 필요 없음

  1. 터미널 열기

    Mac: Command+스페이스를 누르고 Terminal 입력 · Windows: PowerShell 열기

  2. 이 명령을 붙여 넣고 Enter

    claude mcp add --transport http --scope user overwing https://overwing.ai/mcp
  3. Claude Code에서 /mcp 입력

    Overwing이 목록에 있고 연결됨으로 보이면 돼요

  4. 해 보기

    Overwing을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐

    ✓ Claude Code가 Overwing을 쓰고 있다고 하거나 답에 Overwing 도구 이름이 나오면 연결된 거예요

메뉴 이름은 2026년 11월 11일에 Anthropic 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요

Cursor에 연결할 수 있어요 · 약 2분

키 필요 없음, 설치 필요 없음

  1. 이 버튼으로 Cursor 열기

    Cursor에서 열기

    Cursor가 설치를 확인하면 Install을 누르세요

  2. Cursor에서 AI 채팅을 Agent 모드로 열기

  3. 해 보기

    Overwing을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐

    ✓ Cursor가 Overwing을 쓰고 있다고 하거나 답에 Overwing 도구 이름이 나오면 연결된 거예요

메뉴 이름은 2026년 11월 11일에 Cursor 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요

VS Code에 연결할 수 있어요 · 약 2분

키 필요 없음, 설치 필요 없음

  1. 이 버튼으로 VS Code 열기

    VS Code에서 열기

    VS Code가 설치를 확인하면 Install을 누르세요

  2. VS Code에서 AI 채팅을 Agent 모드로 열기

  3. 해 보기

    Overwing을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐

    ✓ VS Code가 Overwing을 쓰고 있다고 하거나 답에 Overwing 도구 이름이 나오면 연결된 거예요

메뉴 이름은 2026년 11월 11일에 VS Code 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요

Windsurf, Zed, Gemini CLI 같은 다른 MCP 앱은 추가 방법이 저마다 달라요. 앱 목록에서 확인하세요

MCP를 쓰는 앱 모두 보기 →

웹으로 연결하는 앱용 주소

주소https://overwing.ai/mcp

JSON 설정은 아래 “개발자용”에 있어요

막혔나요? Overwing을 쓰는 사람에게 물어보세요💬 토론 →
개발자용: 터미널 명령과 JSON 설정

웹으로 연결

Claude Code

claude mcp add --transport http --scope user overwing https://overwing.ai/mcp

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "overwing": {
      "url": "https://overwing.ai/mcp"
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "overwing": {
      "type": "http",
      "url": "https://overwing.ai/mcp"
    }
  }
}

컴퓨터에 설치

Claude Code

claude mcp add --scope user overwing -- npx -y overwing-mcp

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "overwing": {
      "command": "npx",
      "args": [
        "-y",
        "overwing-mcp"
      ]
    }
  }
}

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "overwing": {
      "command": "npx",
      "args": [
        "-y",
        "overwing-mcp"
      ]
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "overwing": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "overwing-mcp"
      ]
    }
  }
}

직접 입력할 값

  • OVERWING_API_KEY 비밀 env
    Overwing organization key (ow_live_...). Optional: evaluate and atlas_lookup work without it, 10 a day each. Needed for higher limits, rule sets and Tower setup. Get one at https://overwing.ai/login…
  • OVERWING_AGENT_KEY 비밀 env
    Optional Overwing Tower agent key (ow_agent_...). Without it, the tower_create_agent tool mints one for the session
  • OVERWING_BASE_URL env
    Override the API base URL for self-hosted deployments (default https://overwing.ai)
  • Authorization 비밀 HTTP header
    Optional. "Bearer ow_live_..." lifts the free limits; evaluate and atlas_lookup work without it, 10 a day each

설명은 아직 영어 원문입니다.

이 설정은 제작자의 레지스트리 정보로 만들었어요. README와 다르면 README를 따르세요.

한눈에 보기

주간 다운로드i
157/주
확인된 도메인
✓ overwing.ai
연결 방식
컴퓨터 또는 클라우드
전송 방식
stdio, streamable-http
최신 버전i
0.15.0
레지스트리 공개i
2026년 10월 14일
코드 마지막 변경i
2026년 11월 13일
제작자
frod27
패키지
npm: overwing-mcp
웹사이트
overwing.ai
레지스트리 상태
활성

어떤 앱에서 쓸 수 있나요

이 서버의 연결 방식과 각 앱의 공식 문서를 바탕으로 했어요. 2026년 11월 10일 확인.

인터넷으로 연결하는 앱

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

내 컴퓨터에서 실행하는 앱

ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast

모든 앱과 장단점 →

할 수 있는 일

도구 이름과 설명은 서버가 2026년 11월 13일에 알려 준 그대로예요. 우리가 아니라 제작자가 쓴 글이고, 일반 텍스트로만 보여 드려요.

  • evaluate

    Works with no API key: 10 evaluations a day, inputs up to 2,000 characters, and the text is not stored. With a key: 250 a day and up, inputs up to 100,000 characters, and your own rule sets. Score any text (typically an LLM's output) against an Overwing rule set. The text can be

  • evaluate_batch

    Score up to 50 texts against one rule set in a single call. Each item counts as one evaluation. Returns a summary plus per-item verdicts; items can fail independently. Needs an organization key.

  • list_rule_sets

    List the prebuilt and custom rule sets available to this organization. Needs an organization key.

  • get_rule_set

    Fetch a rule set with its full rule definitions. Use 'content-safety' as a worked example when writing your own. Needs an organization key.

  • create_rule_set

    Create a custom rule set with 1 to 25 rules. Each rule is a choice (pick one option), score (position on an ordered scale), or noul (yes/no) question with a fail condition, optional review threshold, weight, and action (block, redact, or review) that callers should take when it f

  • get_evaluation

    Fetch a stored evaluation by id, including the original input and per-rule results. Needs an organization key.

  • list_evaluations

    List recent evaluations, newest first, with optional verdict and rule set filters. Use next_cursor to page. Needs an organization key.

  • get_usage

    Daily usage, remaining quota for today, and plan limits. Needs an organization key.

  • whoami

    Identify the organization and plan behind the API key on this request, the key's scope, the organization's data settings (store_inputs, retention_days), and whether billing is set up. Needs an organization key.

  • create_account

    Create an Overwing account for yourself, with no email: an organization and an API key, returned once. Nothing is sent to anyone. Use it when you have no key and nobody has given you one; do not create a second account if you already have a key (whoami says which account a key be

  • prove_domain

    Begin proving that your account controls a domain. For an account with no email the domain stands in for one: it raises the limits to the normal free tier, opens full Beacon reports, and lets a lost key be replaced. Returns one value to publish at the domain, as a DNS TXT record

  • verify_domain

    Look for the value prove_domain asked for, at the domain. Found: the domain is the account's. Not found: an error saying what was looked for; DNS changes can take a few minutes, and calling again is safe. Needs an organization key.

  • list_plans

    Public plan catalog: prices, daily limits, and per-minute burst limits. No API key needed.

  • atlas_lookup

    Say what a User-Agent string claims to be and whether the claim can be trusted, from the Overwing Atlas registry of AI crawlers, fetchers and browser agents. Returns the claimed agent, operator, purpose class, verification method (Web Bot Auth signature, user-agent string only, o

  • atlas_agents

    Browse or search Overwing Atlas, the registry of AI crawlers, fetchers and browser agents: name, operator, user-agent tokens, Web Bot Auth key directory, robots.txt behaviour, and (with Atlas Pro or Team) purpose class, verification, evasion flags and traffic shares. Filter by fr

  • atlas_register_agent

    Add an agent or crawler you operate to the Overwing Atlas registry, free, so a site that looks up its User-Agent learns who runs it. Give the agent's name, the operator (the company or person running it), the operator's domain, and the token the User-Agent carries (the product na

  • atlas_verify_registration

    Look for the proof at the operator's domain: the DNS TXT record or the file that atlas_register_agent asked for. Found: the entry is published in the registry, or held for a person when the operator name already belongs to someone. Not found: an error saying what was looked for;

  • atlas_list_registrations

    The agents this organization has registered in Overwing Atlas, newest first, each with its status (pending_verification, pending_review, published, rejected) and, while unverified, the value to publish at the domain. Needs an organization key.

  • atlas_withdraw_registration

    Withdraw a registration. A published entry leaves the registry, so lookups stop naming the agent; an unfinished request is abandoned. This cannot be undone: register again to put it back. Needs an organization key.

  • atlas_summary

    Public numbers from Overwing Atlas: registry counts by purpose and verification, published browser-agent traffic shares, sector field-scan headlines (e.g. how many OSINT sites carry AI-crawler rules or any agent-payable surface), and the summary of the Agent Consumers report on w

  • beacon_start

    Overwing Beacon answers one question about a site: is this product reachable by agents? It checks robots.txt rules for AI agents, llms.txt, the sitemap, the MCP server card, hosted MCP endpoint and MCP Registry listing, the A2A agent card, OpenAPI discovery, and how the home page

  • beacon_report

    The report for a check started with beacon_start. The first call runs the check. With an Overwing key on the connection: score (0 to 100), verdict (yes, partly, no), the find / read / use answers, every check with what was found and a fix when it did not pass, and top_fixes ranke

  • cad_create

    Makes a real CAD part from a description: a bracket, an enclosure, an adapter, a jig. Overwing writes a parametric script, builds it with a CAD kernel, measures it, checks it against what was asked, and stores a STEP file and STL files for 30 days. Costs 300 credits a part from t

  • cad_get

    With an id from cad_create: the job's status. While it is building, ask again in about 20 seconds. When complete: the title, the script, the measurements, the checks that were run, part_url (a page showing the part in 3D with download buttons; give this to the person) and files_u

  • feedback

    Send one message to the people who run Overwing: a verdict you think was wrong, an error you could not act on, a payment you could not make, a tool that did not do what its description says. Read by a person, not answered automatically; give a contact if you want an answer. No ke

  • beacon_sample

    A real Overwing Beacon report, free: the check of overwing.ai itself, refreshed daily. Read it to see exactly what a full report holds before starting a check. No key needed.

  • preflight_payment

    Call this with the 402 you were given, before signing an x402 payment. It reads the terms (network, asset, amount, payee, timeout, resource) and answers allow, review or refuse with reasons: the terms against your policy, the payee against x402-list's directory (verified delivery

  • preflight_check

    Call this before signing any Solana transaction. Overwing Preflight simulates the unsigned transaction against the chain as it is now, works out what it would take from the wallet you name (SOL, tokens, and control of its token accounts) and answers allow or refuse against your p

  • preflight_verdict

    The public record of one Preflight verdict: its decision, reason codes, the programs the transaction would run, the transaction's digest, our signature, and every landed transaction reported against it. Never the wallet, the amounts or the transaction. No key needed.

  • preflight_report

    After a transaction that Preflight allowed has landed, report its signature. Preflight reads the landed transaction from the chain and says whether the allow held: not_a_miss, or miss when it took more from the wallet than the policy permitted. The outcome is published. A covered

  • preflight_record

    Everything Preflight has said and how it held up: counts of verdicts and misses, every miss with what the chain showed, the latest verdicts, and what the guarantee's reserve holds. Read it before deciding whether to rely on Preflight. No key needed.

  • preflight_overview

    The reference for Overwing Preflight: every policy field, every reason code a refusal can carry, what a verdict does and does not promise, the price, and the terms of the guarantee. Read it once before the first preflight_check. No key needed.

  • tower_load_template

    Set up Overwing Tower for this organization by loading the starter workflow: email purchase order to order entry, with create_order, update_order and cancel_order against a mock IBM i system, and a starter policy. Idempotent. Needs an organization key. Returns a sample input you

  • tower_create_agent

    Create a scoped agent identity and its key. Needs an organization key. Scope it to the operations the agent needs (for example create_order) rather than * where you can. The key (ow_agent_...) is returned once, in this result, and this server does not keep it: store it, and send

  • tower_list_agents

    List this organization's Tower agents with scopes, status and last use. Keys are never returned. Needs an organization key.

  • tower_revoke_agent

    Revoke an agent. Its key stops working at once and cannot be restored. Needs an organization key.

  • tower_capabilities

    List the operations this agent is allowed to call, each with the JSON Schema its input must match and its compensating operation. Call this first; build inputs from the schema rather than guessing. Needs an agent key.

  • tower_decide

    Ask Tower how it would rule on an operation without doing anything: auto (would execute), review (a person must approve), or reject. Returns the score, the reason, and each policy question's answer. No side effects. Needs an agent key.

  • tower_submit_action

    Ask Tower to perform an operation on the legacy system. Tower decides: executed (done), pending (a person must approve; poll tower_get_action, do not resubmit), or rejected (do not retry unchanged). Always send an idempotency_key that is stable for this business request, such as

  • tower_get_action

    Status and result of an action: pending, approved, executed, failed, compensated, or rejected. Use it to poll an action that is waiting on human review. Needs an agent key.

  • tower_compensate

    Run the compensating operation for an executed action, for example cancel the order that create_order made. Runs once; repeating it returns the first outcome. Needs an agent key.

  • tower_get_receipt

    Fetch one signed receipt by id or by sequence number: the payload, its hash, the previous link's hash, and the Ed25519 signature. Needs an agent key.

  • tower_verify_receipts

    Recompute every hash and check every signature over a range of this organization's receipts. Reports the first break, if any. Defaults to the whole chain (up to 5,000 links per call). Needs an agent key.

기본 점검i

누구나 볼 수 있는 정보를 점검했고, 코드는 읽지 않았어요. 해당하지 않는 항목은 개수에서 뺐어요. · 2026년 11월 16일 점검

  • ✓ 통과

    제작자와 저장소 일치

    레지스트리 이름이 도메인 overwing.ai 기준으로 확인되었어요(레지스트리가 도메인 소유를 확인해요)

  • ✓ 통과

    계속 관리되고 있음

    코드 마지막 변경: 3일 전

  • ✓ 통과

    라이선스 있음

    MIT 사용

  • ✓ 통과

    엔드포인트 응답

    151ms 만에 응답(HTTP 200)

  • – 해당 없음

    OAuth로 로그인

    로그인 필요 없음

  • ✓ 통과

    도구 설명에 숨겨진 지시 없음

    도구 설명 43개를 읽었고, AI에게 보내는 숨겨진 지시는 없었어요

공개된 취약점 (OSV.dev)

OSV.dev에 overwing-mcp@0.15.0 항목이 없습니다

이 버전의 패키지 자체만 확인하며 모든 의존성은 아닙니다 · 확인 2026년 11월 15일

우리가 확인하는 것 → · JSON

제작자: 재확인 요청 또는 잘못된 정보 신고

토론

질문하고, 팁을 나누고, 안 되는 점을 알려 주세요. "도움이 됨"이 많은 순서예요.

아직 글이 없어요. 처음으로 질문하거나 공유해 보세요.

이곳의 글은 사용자가 쓴 것으로, PopNx 팀의 글이 아니에요.

로그인하고 글쓰기

사용자 리뷰

아직 리뷰가 없어요

로그인하고 리뷰 쓰기

검색 및 AI 기억 카테고리의 다른 서버와 비교i

  • 이 카테고리의 다른 서버 6188개 중 0%보다 스타가 많아요
  • 이 카테고리의 다른 서버 6188개 중 53%보다 최근에 레지스트리에 공개됐어요
  • 기본 점검 결과가 이 카테고리의 다른 서버 6188개 중 100%와 같거나 더 좋아요

레지스트리에서 이 카테고리의 활성 서버 전체와 비교했어요. 스타는 게시자가 저장소를 소유한 경우에만 세요.

자주 묻는 질문

Overwing, 안전한가요?

해당하는 기본 점검 5개 중 5개를 통과했어요. 코드는 읽지 않았어요. 키나 토큰을 넣기 전에 서버가 어떤 권한을 요구하는지 확인하고, 꼭 필요한 권한만 있는 키를 쓰세요.

어떤 키나 코드가 필요한가요?

레지스트리에 필수 키가 나와 있지 않아요. 다만 처음 쓸 때 로그인을 요구하는 서버도 있어요.

내 컴퓨터에서 실행되나요, 클라우드에서 실행되나요?

둘 다 가능해요. 내 컴퓨터에 설치해도 되고, 클라우드 버전에 연결해도 돼요.

아직 관리되고 있나요?

GitHub 저장소는 마지막으로 3일 전 변경됐고, 최신 버전(0.15.0)은 33일 전 레지스트리에 올라왔어요.

어떤 앱에서 쓸 수 있나요?

Claude Desktop, Claude Code, Cursor, VS Code처럼 MCP를 지원하는 앱에서 쓸 수 있어요. URL로 연결되므로 원격 MCP를 받는 앱에서도 쓸 수 있어요. 예: 웹 ChatGPT(Business 이상은 전체 MCP, Pro는 읽기 전용).

대신 쓸 수 있는 건 뭐가 있나요?

같은 카테고리에는: OpenSEO, Exa, Mockserver, Microsoft Learn MCP, Docs

비슷하게 동작하는 다른 것

같은 카테고리, 다른 제작자, 명령 확인 완료. 공식이 먼저, 그다음 스타 순.

카드 보는 법:↓ 주간 다운로드i★ GitHub 스타i세 기둥: 리뷰 · 점검 · 사용 정도i업데이트 = 최신 버전을 레지스트리에 공개한 날i

OpenSEO

Keyword research, site audits, rank tracking and AI visibility for your AI agent.

제작자: every-app널리 사용됨★ 2.8만그저께 업데이트

클라우드에서 실행✓ everyapp.com

Exa

Connect AI agents to Exa for web search, content fetching, and multi-step research.

제작자: exa-labs널리 사용됨★ 5.2천2개월 전 업데이트

클라우드에서 실행✓ 서비스 회사 · exa.aiPopNx 팀이 직접 써 봄

Mockserver

Mock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.

제작자: mock-server성장 중★ 5천20일 전 업데이트

내 컴퓨터에서 실행✓ 서비스 회사 · mock-server.com

Microsoft Learn MCP

Official Microsoft Learn MCP Server – real-time, trusted docs & code samples for AI and LLMs.

제작자: MicrosoftDocs널리 사용됨★ 2천12개월 전 업데이트

클라우드에서 실행✓ 서비스 회사 · microsoft.comPopNx 팀이 직접 써 봄

Docs

Search and read Empryo's documentation. Read-only, no auth, no local access.

제작자: proxysoul성장 중★ 1.6천2개월 전 업데이트

클라우드에서 실행✓ empryo.com
  • OpenSEO — 클라우드에서 동작, 설치 불필요 · 키 불필요
  • Exa — 클라우드에서 동작, 설치 불필요 · 키 불필요 · Claude 디렉터리에 있음
  • Mockserver — 컴퓨터에 설치 필요 · 키 불필요
  • Microsoft Learn MCP — 클라우드에서 동작, 설치 불필요 · 키 불필요 · Claude 디렉터리에 있음
  • Docs — 클라우드에서 동작, 설치 불필요 · 키 불필요

제작자의 README

README 열기

제작자의 저장소에서 쓰인 그대로 가져왔어요. PopNx MCP가 검토하거나 보증한 내용이 아니에요. HTML, 이미지, 스크립트는 제거했어요. 링크를 누르면 이 사이트를 벗어나요.

Guardrails for LLM output, as MCP tools.

Score any text for safety and quality. Get pass / fail / review verdicts with calibrated confidence, usually in under 500 ms.

简体中文 · 日本語 · 한국어


Overwing is an API that checks what your model said before it ships. This package exposes it to any MCP-capable agent: Claude Desktop, Claude Code, Cursor, Windsurf, VS Code, OpenAI's Agents SDK, and anything else that speaks the Model Context Protocol.

  • Real verdicts, not vibes. Every rule returns a typed answer, a probability, and a confidence. fail means a rule matched; review means it was unsure; pass means neither.
  • Prebuilt `content-safety` and `outbound-message` rule sets: toxicity, personal data, confidential leaks, self-harm, sexual content, severity. Or write your own rules in plain language.
  • Built for agents. Sign up, pay, evaluate, rotate keys, and cancel, all as JSON. No CAPTCHA, no browser required. See overwing.ai/llms.txt.

Try it without installing anything: paste text into the console at overwing.ai.

Hosted, no install

The same 41 tools are served at https://overwing.ai/mcp (Streamable HTTP). Point any client that takes a remote MCP URL at it:

claude mcp add --transport http overwing https://overwing.ai/mcp

No key is needed for evaluate, atlas_lookup, atlas_summary, list_plans, create_account, the three beacon_ tools, and preflight_verdict, preflight_report, preflight_record and preflight_overview. For the rest, send Authorization: Bearer ow_live_... on the connection.

Install

It works with no API key: evaluate and atlas_lookup each run 10 times a day free, and text sent without a key is not stored. For more, get a key at overwing.ai/login, or let your agent make its own account with the create_account tool. That account has no email: nothing is sent to anyone, and the key is returned once. The same call from a shell:

curl -X POST https://overwing.ai/api/v1/signup

Put the key in OVERWING_API_KEY. An account with no email starts at 50 evaluations a day; proving a domain (prove_domain, verify_domain) raises it to the normal free limits and makes a lost key recoverable.

Claude Code

claude mcp add overwing -e OVERWING_API_KEY=ow_live_... -- npx -y overwing-mcp

Claude Desktop, Cursor, Windsurf, VS Code (any JSON-configured client)

{

"mcpServers": { "overwing": { "command": "npx", "args": ["-y", "overwing-mcp"], "env": { "OVERWING_API_KEY": "ow_live_..." } } } }

Set OVERWING_BASE_URL to point at a self-hosted deployment. Requires Node 20+.

For Overwing Tower, set OVERWING_AGENT_KEY=ow_agent_... to operate as an existing agent. Without it, tower_create_agent mints a key with the organization key and keeps it in memory for the session.

evaluate, atlas_lookup, atlas_summary and list_plans work with no key at all.

For Overwing Preflight, preflight_check needs OVERWING_API_KEY; the other preflight_ tools need no key. No Preflight tool takes a private key, and none should ever be given one.

The text can be in any language. It was tested on 2026-09-29 in Spanish, Portuguese, French, German, Japanese, Simplified Chinese, Korean, Arabic and Hindi: a small test, not a benchmark. Results come back in English.

Tools

ToolWhat it does
evaluateScore one text against a rule set. Returns the verdict, a recommended_action (block, redact, review, or allow), aggregate score, confidence, latency, and per-rule results with each rule's action. Takes an optional context object (recipient, channel, ownership) that context-aware rule sets such as outbound-message read, and store: false to run the check without keeping the text.
evaluate_batchScore up to 50 texts in one call, with a summary and per-item verdicts and recommended actions.
list_rule_sets · get_rule_set · create_rule_setBrowse the prebuilt set or define your own rules: yes/no questions, classifications, or scored scales.
get_evaluation · list_evaluationsRead stored results, filter by verdict or rule set, page with a cursor.
create_account · prove_domain · verify_domainAn account for the agent itself, with no email: create_account returns a key and sends nothing to anyone. Proving a domain (a DNS TXT record or a file) takes the place of the email: it raises the limits, opens full Beacon reports, and makes a lost key recoverable.
atlas_lookupOverwing Atlas: say what a User-Agent string claims to be and whether the claim can be trusted (Web Bot Auth, spoofable string, or unattributable). Works with no key, 10 a day; 100 a day with a free key.
atlas_agents · atlas_summarySearch the registry of AI crawlers, fetchers and browser agents; get traffic shares, sector field-scan headlines, and the agent-spending summary.
atlas_register_agent · atlas_verify_registration · atlas_list_registrations · atlas_withdraw_registrationAdd an agent you operate to the Atlas registry, free, so a lookup of its User-Agent names you. Register it, publish the value you are given at the operator's domain (a DNS TXT record or a file), then verify. Needs OVERWING_API_KEY.
beacon_start · beacon_report · beacon_sampleOverwing Beacon: is a site reachable by agents? Checks robots.txt, llms.txt, the MCP server card, endpoint and Registry listing, the A2A agent card and OpenAPI, and how the home page reads to a model. A check is free: beacon_start returns an id and beacon_report runs the check and returns the report. With OVERWING_API_KEY it is the full report, saved to your dashboard; with no key it is the summary (the score, the three answers and the first fix). beacon_sample is a real report in full.
feedbackTell the people who run Overwing what went wrong: a wrong verdict, an error you could not act on, a payment you could not make. No key needed.
preflight_checkOverwing Preflight: should the agent sign this Solana transaction? Give it the unsigned transaction in base64 and a policy: the wallet to protect, the most SOL that may leave it (max_sol_out, fees included, or max_sol_out_lamports), and optionally max_token_out, min_token_in, allowed_programs and allow_delegation. It simulates the transaction and answers allow or refuse with every reason. Sign only on allow; a refusal, an error or anything else means do not sign. A verdict is valid for about two minutes. It never takes a private key. One check counts as one evaluation. Needs OVERWING_API_KEY.
preflight_paymentShould the agent sign this x402 payment? Reads the 402's terms and checks the payee against x402-list's directory and the server's own manifest, and the price against the record. allow, review or refuse with reasons. No key needed.
preflight_verdict · preflight_report · preflight_record · preflight_overviewPreflight's public side, with no key: read one published verdict, report the transaction that landed after a verdict (by its signature) to learn whether the verdict held, read the record of every verdict and miss, and read the overview of policy fields, reason codes, limits and prices.
tower_load_template · tower_create_agent · tower_list_agents · tower_revoke_agentOverwing Tower setup, with the organization key: load the starter order-entry workflow, then mint a scoped agent identity. The new agent key is used for the rest of the session.
tower_capabilities · tower_decide · tower_submit_action · tower_get_action · tower_compensateOverwing Tower operations, with the agent key: see which operations you may call and their input schemas, ask how a request would be ruled, submit it (executed, pending human review, or rejected), poll it, undo it.
tower_get_receipt · tower_verify_receiptsRead a signed receipt, or recompute every hash and signature in the chain.
get_usage · whoami · list_plansToday's quota, the org behind the key, and the public plan catalog.

The overwing://guide resource returns the full plain-text API guide.

Data handling and security

What this server does on your machine: it reads three environment variables (OVERWING_API_KEY, OVERWING_AGENT_KEY, OVERWING_BASE_URL) and makes HTTPS requests to the Overwing API. It reads no files, runs no commands, and talks to no other host. It has two runtime dependencies (@modelcontextprotocol/sdk, zod), and the whole server is one file: src/index.ts.

What happens to text you evaluate:

  • It is sent to the Overwing API, and from there to TypeSafe, whose Jev model produces the verdict. It is not used to train models.
  • Without a key the text is never stored.
  • With a key the text, context and verdict are stored so you can read them back with get_evaluation, until you delete them. To change that:
  • pass store: false to evaluate or evaluate_batch to keep no text or context for that call;
  • set store_inputs: false on the organization (PATCH /api/v1/org, or the dashboard) to keep none at all;
  • set retention_days on the organization to delete evaluations after that many days.
  • A Solana transaction you check with preflight_check is sent to the Overwing API with its policy, and simulated against a Solana node. What is published is the verdict: its id, decision, reason codes, programs and the transaction's digest. Never the wallet, the amounts or the transaction. No private key is ever sent, and the tool does not accept one.
  • Traffic is encrypted in transit (TLS) and the database is encrypted at rest (AES-256).

Give your agent a restricted key. A key with scope evaluate can run checks and read rule sets, and cannot read stored evaluations, change rule sets, manage keys, webhooks or billing, or delete anything:

curl -X POST https://overwing.ai/api/v1/api-keys \

-H "Authorization: Bearer ow_live_..." -H "Content-Type: application/json" \ -d '{"name":"agent","scope":"evaluate"}'

Overwing is a young service and has not had an independent security audit. The full picture, including subprocessors and what we have not done, is at overwing.ai/security; the privacy policy is at overwing.ai/privacy. To report a vulnerability, see SECURITY.md.

Example

Ask your agent:

Check this reply before I send it: "Reach me at dana@example.com or 555-0142 to sort out the refund."

It calls evaluate and gets back:

Verdict: FAIL  score=0.82  confidence=0.97  251ms

toxicity: pass (answer="safe", confidence=1) pii_detected: fail (answer=true, confid

앞부분만 보여 드려요. 나머지는 저장소에서 읽어 보세요