mcp server
mcp-server
Pre-flight check for AI coding agents: hallucinated packages + hardcoded secrets. Free, no account.
Description as published by the maintainer. Source
- version 0.6.0
- active
- security
active — Registry entry last updated 2026-07-14. Dashed tags are derived by ZBS Index from the published description, not stated by the maintainer.
What this server can do
4 functions, named and described by the server itself. Parameter names are shown because they say more about what a function does than its name usually does.
auto_remediate(ref, file, line, repo, owner, title, token, severity, description, finding_type, recommendation)- Generate an automated security fix for a specific finding. Creates a GitHub PR with the patched code. Verifies the fix with Level 1 SAST before opening the PR. Requires authentication, 3 credits, and ANTHROPIC_API_KEY. Required: owner, repo, token, file, line, finding_type, title, severity, description, recommendation.
get_findings(file, repo, owner, severity)- Retrieve security findings filtered by file or severity. Run scan_repository first to populate results. Required: owner, repo.
pre_flight_check(files, context)- Security pre-flight check for local file changes BEFORE committing. Run this whenever you are about to suggest `git commit`, `git push`, or open a pull request — especially when changes touch auth, secrets, SQL queries, package.json / requirements.txt, or environment variables. Returns CLEAR or BLOCKED with specific findings and remediation steps. Required: files.
scan_repository(repo, owner, token, pull_number)- Trigger a Level 1 + Level 2 security scan on a GitHub pull request. Returns SAST findings, taint flows, entropy-detected secrets, and (for PRO users) LLM-triaged results. Requires Graneth authentication. Required: owner, repo, pull_number, token.
Last successful function declaration observed on . Source: https://graneth.com/api/mcp. We list what the server declared; we do not call any of these functions.
Endpoint status observed on . Source: https://graneth.com/api/mcp.
Signals
These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.
| Signal | Value | What it measures | Window | Observed | Source |
|---|---|---|---|---|---|
| Package downloads | 234 downloads | Package downloads from the npm registry in this window. Includes continuous integration runs, mirrors and automated installs, so it overstates the number of human users. | 2026-07-30 to 2026-08-05 | npm | |
| Latest published version | 0.6.0 | Latest version string the maintainer published to the registry. | as of fetch | Model Context Protocol | |
| Registry record last updated | 2026-07-14 | When the registry record was last updated by its maintainer. | point in time | Model Context Protocol | |
| First listed in the MCP Registry | 2026-07-14 | Date this server was first published to the official MCP Registry. Not a usage or quality measure. | point in time | Model Context Protocol | |
| mcp tools declared | 4 tools | Number of functions the server itself declared when asked to list them. This is what the server offers an agent, not a measure of how well any of them work. | as of probe | graneth.com | |
| mcp endpoint status | ok | The server listed 4 functions when asked. | as of probe | graneth.com |
Where to get it
This record as data
Every field on this page, with its source and observation date, is in the catalog JSON. Fetch the whole kind at once instead of parsing this HTML.
GET /api/v1/entries/mcp_server.json