{
  "markdown": "# graneth-mcp\n\nSource for **`@graneth/mcp-server`** — an account-free [MCP](https://modelcontextprotocol.io)\nserver that checks AI-written changes before they are committed: packages that do not\nexist, dependency risk shapes, and hardcoded secrets.\n\n```bash\nnpx @graneth/mcp-server\n```\n\n**Tool documentation, install snippets for Claude Code / Cursor / Windsurf, and the exact\nverdicts it returns: [`packages/mcp-server/README.md`](packages/mcp-server/README.md).**\n\n## What is in this repository\n\n| | |\n|---|---|\n| `packages/mcp-server` | the MCP server itself — stdio, hand-rolled JSON-RPC, no runtime dependencies |\n| `packages/core-checks` | the detection core it bundles: registry existence across six ecosystems, manifest parsing, secret patterns + entropy, risk scoring |\n\n## What is not\n\nThe hosted scanning service is a separate, closed codebase: pull-request scanning, the\nsecond-pass LLM triage, policy enforcement, signed receipts and billing are not here and\nare not open source. This repository is the free tool and the checks it runs — which is\nthe part you install on your machine, and therefore the part worth being able to read.\n\n## How it is maintained\n\nGenerated from the internal monorepo, which is the source of truth. Edits made directly\nhere are overwritten on the next sync, so please open an issue rather than a patch —\nthe fix lands upstream and comes back with the next release.\n\nThree of `core-checks`' test files are held back: they assert that the secret rules fire,\nso their fixtures are literal example credentials, and every scanner — GitHub's push\nprotection and this project's own — reads them as the real thing. The rules themselves\nare here in full (`packages/core-checks/src/secrets.ts`), as are the package's other tests.\n\n## Licence\n\nMIT. See [LICENSE](LICENSE).\n",
  "bytes": 1804,
  "sha": "54f028ede177df2e7524ff7cea0c3dd916dd84187a8a5bf9ecb26a2b768d665b",
  "repo_slug": "zubovartemiy/graneth-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_com_graneth_mcp_server_fe19ad10/readme"
}