1. Conduid
  2. AI
  3. Qwed MCP
MCP server · AI

Qwed MCP

MCP Server for QWED Verification - Use QWED verification tools in Claude Desktop, VS Code, and any MCP client

65Good

Scored 8 days ago · breakdown

About Qwed MCP

Qwed MCP is an MCP server published by QWED-AI in the AI category: mCP Server for QWED Verification - Use QWED verification tools in Claude Desktop, VS Code, and any MCP client.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/QWED-AI/qwed-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (1)

execute_python_code**Subprocess Execution**

Parameters not published.

Ask AI

✦

Ask AI about Qwed MCP

Powered by Claude · Grounded in docs

I know everything about Qwed MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

3 checks have not been run yet.

Releases

v0.2.2v0.2.2 — Security Release: Math Sandbox RCE Fix (GHSA-2p69-jpm6-jrxh) · 27 Aug 2026Security fix — Critical Residual RCE bypass of the CVE-2026-55546 (GHSA-mw6r-2hvm-4rp2) fix, reported under GHSA-2p69-jpm6-jrxh. The v0.2.1 denylist in `safe_parser.py` only matched literal dunder strings, so it could be evaded with:…
v0.2.1v0.2.1 - Critical Security Patch & PyJWT Update · 13 Jun 2026🚨 Critical Security Release This patch release addresses **GHSA-mw6r-2hvm-4rp2 (CWE-94)**, a critical Remote Code Execution (RCE) vulnerability in the math verification engine reported responsibly by @EQSTLab. All users of `qwed-mcp` MUST…
v0.1.0v0.1.0 - Initial Release · 17 Jan 2026

README

PyPI Docker Verified Docker Scout Cloudflare Snyk Security Docs by Mintlify Deploys by Netlify License MCP GitHub stars Verified by QWED

MCP Server for QWED Verification — Bring deterministic verification to Claude Desktop, VS Code, and any MCP-compatible AI assistant.

📚 Full Documentation: docs.qwedai.com/mcp


⚡ Quick Install

pip install qwed-mcp

🚀 Setup with Claude Desktop

Step 1: Find your config file

OS Path
Windows %APPDATA%\Claude\claude_desktop_config.json
macOS ~/Library/Application Support/Claude/claude_desktop_config.json
Linux ~/.config/Claude/claude_desktop_config.json

Step 2: Add QWED-MCP

macOS/Linux:

{
  "mcpServers": {
    "qwed-verification": {
      "command": "qwed-mcp"
    }
  }
}

Windows (use python -m):

{
  "mcpServers": {
    "qwed-verification": {
      "command": "python",
      "args": ["-m", "qwed_mcp.server"]
    }
  }
}

Step 3: Restart Claude Desktop

Quit completely (system tray → Quit) and reopen.

Step 4: Test it!

Ask Claude:

"Write a python script that verifies a 10,000 investment at 7.5% for 5 years using the qwed_new math engine, and run it using execute_python_code."


⚠️ Migration Note: Deprecation of verify_* Tools

To solve "context bloat" and align with the new MCP standard (RFC-9728), all 1:1 functional tools (e.g., verify_math, verify_sql, verify_code) have been removed as of v0.2.0.

They have been replaced with a single, highly capable tool: 👉 execute_python_code

Before:

"Use verify_math to check this formula." (Claude loads 14 different tool schemas into context)

After:

"Use execute_python_code to write and run a script that imports qwed_new.engines.math_engine to verify..." (Claude loads 1 tool schema into context)

If you see an "Unknown tool" error, it means Claude is trying to use a legacy tool. Simply tell Claude: "The verify_* tools are removed. Use execute_python_code to natively write and run a Python verification script."


🔧 Available Tools

Tool Description Use Case
execute_python_code Subprocess Execution The single entrypoint for all QWED capabilities. Executes dynamically generated Python code in a subprocess with restricted environment variables. Note: Runs with server privileges; ensure inputs are trusted.

💡 Example Prompts for Claude

Note: Claude already knows how to use QWED natively via standard Python imports.

Financial Calculations

A bank says: "Invest $10,000 at 7.5% compounded quarterly for 5 years = $14,356.29"
Please write a short Python script using the standard compound interest formula to verify this, and run it with execute_python_code.

Loan EMI Verification

Verify: ₹10,00,000 loan at 9% for 5 years = EMI of ₹20,758
Write a python script importing necessary tools to verify this EMI calculation, and execute it using execute_python_code.

Complex Reasoning Workflows (The Power of Python)

Read the user terms in the attached document. 
1. Use execute_python_code to extract and verify the legal clauses using qwed_legal.
2. In the same script, verify if the referenced financial penalties align with the allowed boundaries.

🏗️ How It Works

┌───────────────────────────────────────────┐
│      Claude Desktop / VS Code             │
│           (MCP Client)                    │
└─────────────────┬─────────────────────────┘
                  │ MCP Protocol (JSON-RPC)
                  ▼
┌───────────────────────────────────────────┐
│           QWED-MCP Server                 │
├───────────────────────────────────────────┤
│ execute_python_code()                     │
│  └─► Subprocess Execution (Restricted Env)│
│       └─► Native QWED library execution   │
└───────────────────────────────────────────┘

🎯 Why QWED-MCP?

Note: Subprocess execution provides answers/checks purely based on what QWED SDK methods are invoked inside the executed scripts. Execution itself does not guarantee injection detection without specific SDK calls.

Without QWED-MCP With QWED-MCP
LLM calculates → 95% correct Executes Python script calling qwed_finance → 100% correct
LLM writes SQL → might inject Script uses qwed_new analyzer → injection detected
LLM reasons → might be wrong Z3 solver executed via SDK → formally proven
LLM codes → might be unsafe AST check script executed → security checked

💡 What QWED-MCP Is (and Isn't)

✅ QWED-MCP IS:

  • MCP Server that adds verification tools to Claude Desktop and VS Code
  • Deterministic — uses SymPy (math), Z3 (logic), AST (code) for exact verification
  • Open source — works with any MCP-compatible AI assistant
  • A safety layer — catches LLM hallucinations in real-time

❌ QWED-MCP is NOT:

  • A replacement for Claude — it enhances Claude with verification tools
  • A chatbot — it's a backend server that Claude calls
  • Internet-connected — all verification happens locally
  • A fine-tuned model — uses symbolic engines, not ML

Think of QWED-MCP as giving Claude a "calculator" for math and a "theorem prover" for logic.

Claude reasons. QWED-MCP verifies.


🆚 How We're Different from Other MCP Servers

Aspect Other MCP Servers QWED-MCP
Purpose Connect to APIs, databases, files Verify LLM outputs
Approach Fetch external data Compute deterministic proofs
Engines API wrappers SymPy, Z3, AST analyzers
Accuracy Depends on data source 100% mathematically proven
Offline Often need internet Fully local, no APIs

With Claude Desktop

┌───────────────────┐     ┌───────────────────────┐     ┌───────────────────┐
│      Claude       │     │       QWED-MCP        │     │  Verified Answer  │
│ "What's d/dx x³?" │ ──► │ execute_python_code() │ ──► │      "3x²" ✓      │
│ "Write script to  │     │ Runs SymPy natively   │     │ (STDOUT Captured) │
│ check."           │     └───────────────────────┘     └───────────────────┘
└───────────────────┘

🔒 Security & Privacy

All verification happens locally. Nothing is sent to external servers.

Concern QWED-MCP Approach
Data Transmission ❌ No external API calls
Storage ❌ Nothing logged or stored
Dependencies ✅ Local engines (SymPy, Z3)
Code Analysis ✅ Your code never leaves your machine

Perfect for:

  • Enterprises with strict security policies
  • Air-gapped development environments
  • Sensitive code review workflows

❓ FAQ

Yes! Open source under Apache 2.0. Use it commercially, modify it, distribute it.

QWED-MCP works with any MCP-compatible client. VS Code with Claude extension supports MCP, so yes!

No. QWED-MCP runs entirely locally. No API keys, no cloud calls.

QWED-Core is the Python library. QWED-MCP wraps it as an MCP server so Claude can use it as a tool.

Yes! The server is extensible. Fork it and add your custom @mcp.tool() functions.


🗺️ Roadmap

✅ Released (v0.2.0)

  • Context bloat resolution (RFC-9728 compatibility)
  • Unified execute_python_code environment
  • Secure process isolation (env-restricted) and robust timeouts
  • Claude Desktop integration
  • Windows/macOS/Linux support

🚧 In Progress

  • verify_json — JSON Schema validation tool
  • verify_finance — NPV/IRR/amortization tool
  • Cursor IDE integration guide

🔮 Planned

  • verify_legal — Deadline and liability verification
  • verify_statistics — Hypothesis test validation
  • SSE (Server-Sent Events) transport for web UIs
  • TypeScript implementation

📁 Examples

See the examples/ folder for:

  • Python client usage
  • Sample verification scripts
  • Integration examples

🛠️ Development

# Clone
git clone https://github.com/QWED-AI/qwed-mcp.git
cd qwed-mcp

# Install with dev dependencies
pip install -e ".[dev]"

# Run tests
pytest tests/ -v

# Format code
black src/

📖 Documentation

Resource Link
Full Docs docs.qwedai.com/mcp
Tools Reference docs.qwedai.com/mcp/tools
Examples docs.qwedai.com/mcp/examples
Troubleshooting docs.qwedai.com/mcp/troubleshooting
MCP Protocol modelcontextprotocol.io

🔗 Related Projects


📄 License

Apache 2.0 — See LICENSE


README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About Qwed MCP

How do I install Qwed MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Qwed MCP safe to use with an AI agent?

Its trust score is 65 out of 100 (good). It passes 2 of the 3 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Qwed MCP still maintained?

Yes — the latest release is v0.2.2 (27 Aug 2026), and the last commit was a month ago. The repository has 0 stars.