Hrevn Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hrevn Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- mcp-name: io.github.ai-human-andalusia/hrevn-mcp-server -->
Minimal stdio MCP server for HREVN, backed by the live managed runtime at https://api.hrevn.com.
This repo exposes HREVN as real MCP tools instead of ad hoc helper scripts. It stays intentionally thin:
risk_flags, remedy_payload, and check_id
baseline_checkprofile_validategenerate_bundleverify_bundleexport HREVN_API_BASE_URL="https://api.hrevn.com"
export HREVN_API_KEY="replace-with-issued-alpha-key"Optional environment variables:
HREVN_MCP_TIMEOUT_SECONDSHREVN_MCP_SERVER_NAMEHREVN_MCP_SERVER_VERSIONcd hrevn-mcp-server
python3 -m pip install -e .python3 -m pip install hrevn-mcp-serverThe console entry point is:
hrevn-mcp-serverhrevn-mcp-serverThe server uses MCP stdio transport.
hrevn-mcp-server --version
hrevn-mcp-server --list-tools
hrevn-mcp-server --self-testIf you are running directly from source without an installed entry point:
PYTHONPATH=src python3 -m hrevn_mcp_server.server --list-tools
PYTHONPATH=src python3 -m hrevn_mcp_server.server --self-testThe self-test runs a live baseline_check against the configured HREVN managed API.
baseline_checkMinimal payload:
{
"task_type": "ai_workflow",
"profile": "eu_readiness_profile",
"record": {
"agent_name": "example_agent",
"summary": "baseline smoke test"
},
"metadata": {
"surface": "mcp",
"stage": "pre_completion"
}
}profile_validateMinimal payload:
{
"profile": "eu_readiness_profile",
"record": {},
"metadata": {}
}generate_bundleMinimal payload:
{
"record": {},
"traces": [],
"options": {
"include_report_pdf": false
}
}verify_bundleMinimal payload:
{
"source": "/path/to/bundle-or-artifact"
}Use a local stdio configuration like this:
{
"mcpServers": {
"hrevn": {
"command": "python3",
"args": [
"-m",
"hrevn_mcp_server.server"
],
"env": {
"PYTHONPATH": "/ABSOLUTE/PATH/TO/hrevn-mcp-server/src",
"HREVN_API_BASE_URL": "https://api.hrevn.com",
"HREVN_API_KEY": "YOUR_HREVN_API_KEY"
}
}
}
}See also:
HREVN can already be explored experimentally in Google Antigravity through custom MCP configuration.
What is already validated:
https://api.hrevn.combaseline_check returns real structured resultsWhat is not claimed yet:
This repo includes:
as a machine-readable manifest describing the MCP server, package, transport, and repository metadata.
This server must not reimplement HREVN truth locally. It should expose stable MCP tools that call the managed API.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.