For network and security teams

Orrery allowlisting packet

Orrery is a public, hosted MCP catalog. Allowlist the named product origin over HTTPS; a wildcard exception is not required for a normal caller.

Requested allowlist

• https://orrery.lol — HTTPS/TCP 443
• Public discovery, direct MCP, and artifact download routes remain under this origin.

Security boundary

• •Public Star and constellation results are signed Ed25519 Envelopes; public keys are at /.well-known/orrery/keys.json.
• •Durable artifact downloads are authorized by stored metadata and expire after 15 minutes.
• •Public Stars expose bounded declared tools; Orrery does not provide arbitrary shell or filesystem execution.

Independent checks

• Published Ed25519 verification keys
• Security disclosure policy
• MCP server card
• Human-readable security model

Suggested request: “Please categorize and allowlist Orrery as a hosted public MCP service at the named HTTPS origin. It provides bounded declared tools and signed outputs; it is not a remote shell, arbitrary-code, or filesystem service.”