← Index

Volante

io.github.ribato22/volantev0.10.0Other

Routes to the best predicted fit from configured metadata/evidence after hard-capability filtering.

The current version, v0.10.0, was published to the official MCP registry on 2026-08-15. It is distributed as volante on PyPI, filed under Other by this index, and declares 85 environment variables. Removals and unreachable sources are measured across every server this index tracks, contract drift across the servers that answer in consecutive snapshots; the index's current counts put this record in context.

In-path gate · all MCP tools

Using Volante in Claude, Cursor, Gemini CLI, Cline, or Zed?

MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).

Install the mcpindex gate (one command)

Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less

uv tool install mcpindex-gate && mcpindex-config-wire
Trust verdict · v1 advisory · method
REVIEWstatus: PARTIALfresh until 2026-09-17 14:30 UTC
screened 2026-07-27tier: scannedgranularity: description-levelsource: registry

Semantic screen found no manipulation pattern in the description. Conformance probe not yet run.

mcpindex.integrity.descriptionpassINFO

evidenceNo malicious instructions foundvia static_description

Limits of this verdict
  • - Semantic screen only - the deterministic conformance probe has not run on this server
  • - Confidence is reported but not yet calibrated (v1)
  • - Screen reads the tool description, not the live behavior
  • - advisory
  • - registry description only no input schema
  • - screen model 8b
  • - Still current: the description we screened is unchanged, re-checked against the registry
  • - The registry listing (version, packages, links) changed after this screen ran - the description we assessed did not

Semantic screen: an LLM judge reads the tool description for hidden instructions (status PARTIAL). A pass means the description is not lying, not that the tool is safe: a high-capability tool with an honest description still warrants caution. The deterministic conformance probe has not been run on this server yet, so the screen here is semantic-only. Posture: advisory. Confidences are reported but not yet calibrated (calibrated=false at v1). Full verdict history is not shown on this page.

Own this server? Screen its description →

That verdict was true at screening time (snapshot 2026-09-10).

Contracts can change after screening, with no version bump. The gate pins Volante’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.

See your first HOLD in 2 minutes →

Related: how to trust an MCP server · screen before install · silent contract drift

Cite this record

People vet a server before wiring it in. One line on your project site or docs answers that with an independent record: screening verdict, registry provenance, contract drift history. It stays current as new screens and drift events land.

Markdown
[Independent trust record for Volante](https://mcpindex.ai/server/io-github-ribato22-volante) - screening verdict, registry provenance, and contract drift monitoring.
HTML
<a href="https://mcpindex.ai/server/io-github-ribato22-volante">Independent trust record for Volante</a> - screening verdict, registry provenance, and contract drift monitoring.
Embed this badge

A live verdict badge for your README or listing. It reflects the current screen, links back here, and updates when the verdict does.

Markdown
[![mcpindex](https://mcpindex.ai/api/v1/badge/io-github-ribato22-volante)](https://mcpindex.ai/server/io-github-ribato22-volante)
HTML
<a href="https://mcpindex.ai/server/io-github-ribato22-volante"><img src="https://mcpindex.ai/api/v1/badge/io-github-ribato22-volante" alt="mcpindex verdict" height="20" /></a>
Environment variables
ANTHROPIC_API_KEY
secret

Anthropic API key.

ANTHROPIC_MODELS

Comma-separated Anthropic wire model ids.

ANTHROPIC_NAMES

Optional comma-separated canonical model ids.

ANTHROPIC_STRENGTHS

Shared comma-separated routing strengths.

ANTHROPIC_CONTEXT

Shared context-window tokens.

ANTHROPIC_MAX_OUTPUT

Shared maximum output tokens.

ANTHROPIC_TOOLS

Declare tool-call support (1 or 0).

ANTHROPIC_COST_IN

Shared USD per 1k input tokens.

ANTHROPIC_COST_OUT

Shared USD per 1k output tokens.

ANTHROPIC_TIER

Shared capability tier from 1 to 4.

MOONSHOT_API_KEY
secret

Moonshot API key.

MOONSHOT_BASE_URL

Moonshot OpenAI-compatible base URL.

MOONSHOT_MODELS

Comma-separated Moonshot wire model ids.

MOONSHOT_NAMES

Optional comma-separated canonical model ids.

MOONSHOT_STRENGTHS

Shared comma-separated routing strengths.

MOONSHOT_CONTEXT

Shared context-window tokens.

MOONSHOT_MAX_OUTPUT

Shared maximum output tokens.

MOONSHOT_TOOLS

Declare tool-call support (1 or 0).

MOONSHOT_COST_IN

Shared USD per 1k input tokens.

MOONSHOT_COST_OUT

Shared USD per 1k output tokens.

MOONSHOT_TIER

Shared capability tier from 1 to 4.

OLLAMA_BASE_URL

Local Ollama OpenAI-compatible base URL.

OLLAMA_API_KEY
secret

Optional credential for the Ollama endpoint.

OLLAMA_MODELS

Comma-separated Ollama wire model ids.

OLLAMA_NAMES

Optional comma-separated canonical model ids.

OLLAMA_STRENGTHS

Shared comma-separated routing strengths.

OLLAMA_CONTEXT

Shared context-window tokens.

OLLAMA_MAX_OUTPUT

Shared maximum output tokens.

OLLAMA_TOOLS

Declare tool-call support (1 or 0).

OLLAMA_COST_IN

Shared USD per 1k input tokens.

OLLAMA_COST_OUT

Shared USD per 1k output tokens.

OLLAMA_TIER

Shared capability tier from 1 to 4.

CLAUDE_CODE_ENABLED

Set to 1 to enable the logged-in Claude Code CLI.

CLAUDE_CODE_MODELS

Comma-separated Claude Code model ids.

CLAUDE_CODE_TIER

Shared capability tier from 1 to 4.

CLAUDE_CODE_MAX_OUTPUT

Shared maximum output tokens.

CLAUDE_CODE_TIMEOUT

Per-call timeout in seconds.

CLAUDE_CODE_SYSTEM_PROMPT_MODE

System-prompt mode: replace or append.

CODEX_ENABLED

Set to 1 to enable the logged-in Codex CLI.

CODEX_MODELS

Comma-separated Codex model ids.

CODEX_TIER

Required capability tier from 1 to 4 when enabled.

CODEX_CONTEXT

Shared context-window tokens.

CODEX_MAX_OUTPUT

Shared maximum output tokens.

CODEX_COST_IN

Shared API-equivalent input valuation.

CODEX_COST_OUT

Shared API-equivalent output valuation.

CODEX_TIMEOUT

Per-call timeout in seconds.

OPENAI_COMPAT_BASE_URL

Compatible slot 1 base URL.

OPENAI_COMPAT_KEY
secret

Compatible slot 1 API key.

OPENAI_COMPAT_MODEL

Compatible slot 1 wire model id.

OPENAI_COMPAT_NAME

Compatible slot 1 canonical model id.

OPENAI_COMPAT_STRENGTHS

Compatible slot 1 comma-separated strengths.

OPENAI_COMPAT_CONTEXT

Compatible slot 1 context-window tokens.

OPENAI_COMPAT_MAX_OUTPUT

Compatible slot 1 maximum output tokens.

OPENAI_COMPAT_TOOLS

Compatible slot 1 tool-call support (1 or 0).

OPENAI_COMPAT_COST_IN

Compatible slot 1 input cost.

OPENAI_COMPAT_COST_OUT

Compatible slot 1 output cost.

OPENAI_COMPAT_TIER

Compatible slot 1 capability tier.

OPENAI_COMPAT_2_BASE_URL

Compatible slot 2 base URL.

OPENAI_COMPAT_2_KEY
secret

Compatible slot 2 API key.

OPENAI_COMPAT_2_MODEL

Compatible slot 2 wire model id.

OPENAI_COMPAT_2_NAME

Compatible slot 2 canonical model id.

OPENAI_COMPAT_2_STRENGTHS

Compatible slot 2 comma-separated strengths.

OPENAI_COMPAT_2_CONTEXT

Compatible slot 2 context-window tokens.

OPENAI_COMPAT_2_MAX_OUTPUT

Compatible slot 2 maximum output tokens.

OPENAI_COMPAT_2_TOOLS

Compatible slot 2 tool-call support (1 or 0).

OPENAI_COMPAT_2_COST_IN

Compatible slot 2 input cost.

OPENAI_COMPAT_2_COST_OUT

Compatible slot 2 output cost.

OPENAI_COMPAT_2_TIER

Compatible slot 2 capability tier.

OPENAI_COMPAT_3_BASE_URL

Compatible slot 3 base URL.

OPENAI_COMPAT_3_KEY
secret

Compatible slot 3 API key.

OPENAI_COMPAT_3_MODEL

Compatible slot 3 wire model id.

OPENAI_COMPAT_3_NAME

Compatible slot 3 canonical model id.

OPENAI_COMPAT_3_STRENGTHS

Compatible slot 3 comma-separated strengths.

OPENAI_COMPAT_3_CONTEXT

Compatible slot 3 context-window tokens.

OPENAI_COMPAT_3_MAX_OUTPUT

Compatible slot 3 maximum output tokens.

OPENAI_COMPAT_3_TOOLS

Compatible slot 3 tool-call support (1 or 0).

OPENAI_COMPAT_3_COST_IN

Compatible slot 3 input cost.

OPENAI_COMPAT_3_COST_OUT

Compatible slot 3 output cost.

OPENAI_COMPAT_3_TIER

Compatible slot 3 capability tier.

VOLANTE_QUALITY_PROFILES_FILE

Local strict-JSON quality-evidence file.

VOLANTE_MODEL_OVERRIDES_FILE

Local strict-JSON per-model metadata override file.

VOLANTE_FETCH_ALLOWLIST

Comma-separated domains that enable fetch_url.

VOLANTE_READ_ROOT

Root directory that enables confined read_file.

VOLANTE_SANDBOX

Agentic execution sandbox. Unset auto-selects docker when available and otherwise disables code execution; subprocess opts in to unisolated execution.

VOLANTE_MAX_SUBSCRIPTION_CALLS

Physical subscription calls allowed per run.

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
15
installability
25
documentation
15
stability
5
Alternatives in Other