Projectbrain Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Projectbrain Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
ProjectBrain MCP is a Model Context Protocol (MCP) server for project planning and execution workflows. It exposes tools for tasks, decisions, facts, milestones, comments, and team messaging through a Streamable HTTP endpoint.
https://mcp.projectbrain.toolsinitialize, notifications/initialized, ping, tools/list, resources/list, resources/templates/list, and prompts/listGET /healthGET /.well-known/oauth-protected-resourceGET /.well-known/oauth-authorization-serverPOST /Set these environment variables:
SERVER_URL (default: http://localhost:8000)Base URL of the ProjectBrain API.
MCP_SERVER_URL (default: same as SERVER_URL)Public base URL used in OAuth resource metadata.
JWT_SECRET_KEYSecret used to validate JWT bearer tokens.
JWT_ALGORITHM (default: HS256)CORS_ORIGINS (default: ["http://localhost:5173"])Accepts either a JSON array or a comma-separated list.
MCP_REQUEST_TIMEOUT_SECONDS (default: 30)MCP_UNAUTH_DISCOVERY_METHOD_SCAN_BYTES (default: 8192)Max unauthenticated request bytes scanned to detect JSON-RPC method in lightweight middleware parsing.
SENTRY_DSNSentry DSN for MCP service error/performance reporting.
SENTRY_TRACES_SAMPLE_RATE (default: 0.2)Trace sample rate passed to sentry_sdk.init.
SENTRY_SEND_DEFAULT_PII (default: false)Set to true to include richer MCP request/response context with MCPIntegration (review data collection implications before enabling).
SENTRY_ENVIRONMENT (optional)Sentry environment tag (for example: production, staging).
From repository root:
cd api && uv sync --lockedPYTHONPATH=mcp api/.venv/bin/uvicorn api_adapter:app --app-dir mcp --host 0.0.0.0 --port 8001api_adapter.py — FastAPI app entrypoint and auth middlewareserver.py — MCP tool definitions and HTTP client adapterruntime.py — runtime config and request-scoped auth context~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.