with-streamable-http — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited with-streamable-http (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A small MCP wrapper around the Reactive Resume REST API. Use it to manipulate resumes using MCP tools.
Requirements: Python 3.11+.
pip install rxresume-mcpConfigure your MCP client to run the installed console script:
Add this to your MCP client config (stdio transport). Some clients (like Cursor) may require uv to be pointed at the project path, in which case include --project /absolute/path/to/rxresume-mcp in the args.
Use this as a starting point for your MCP client configuration (stdio transport).
{
"mcpServers": {
"rxresume": {
"command": "uv",
"args": ["run", "rxresume-mcp", "--mcp-transport", "stdio"],
"env": {
"APP_URL": "https://rxresu.me",
"REST_API_KEY": "your-rxresume-api-key",
"REST_API_TIMEOUT": "30",
"REST_API_USER_AGENT": "rxresume-mcp/<package version>"
}
}
}
}If you want to run it manually for debugging:
APP_URL="http://localhost:3000" REST_API_KEY="rxresume-key" rxresume-mcp --mcp-transport stdioRun the published image from GHCR:
docker run --rm -p 8000:8000 \
-e APP_URL="http://localhost:3000" \
-e REST_API_KEY="rxresume-key" \
ghcr.io/a-earthperson/rxresume-mcp:latestFor a local clone quickstart, see DEVELOPING.md.
Use this as a starting point for your MCP client configuration (stdio transport).
{
"mcpServers": {
"rxresume": {
"command": "uv",
"args": ["run", "rxresume-mcp", "--mcp-transport", "stdio"],
"env": {
"APP_URL": "https://rxresu.me",
"REST_API_KEY": "your-rxresume-api-key",
"REST_API_TIMEOUT": "30",
"REST_API_USER_AGENT": "rxresume-mcp/<package version>"
}
}
}
}Cursor example (note the --project path):
{
"mcpServers": {
"rxresume": {
"command": "uv",
"args": [
"run",
"--project",
"/absolute/path/to/rxresume-mcp",
"rxresume-mcp",
"--mcp-transport",
"stdio"
],
"env": {
"APP_URL": "https://rxresu.me",
"REST_API_KEY": "your-rxresume-api-key",
"REST_API_TIMEOUT": "30",
"REST_API_USER_AGENT": "rxresume-mcp/<package version>"
}
}
}
}Spin up Reactive Resume (plus dependencies) and the MCP server together:
docker compose up --buildOnce healthy, the MCP server is available on port 8000 and the app on 3000.
For full development instructions, see DEVELOPING.md. Quick start:
uv sync --extra dev
uv run ruff check src
uv run pytest~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.