Mcp Tools Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Tools Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Small remote MCP server for course experiments with Model Context Protocol
The project exposes custom MCP tools over Streamable HTTP
Current implementation contains a GitHub-related tool that reads recent commits from a public repository
get_recent_commitsReturns recent commits from a public GitHub repository
Input parameters:
owner — GitHub repository owner, for example JetBrainsrepo — GitHub repository name, for example kotlinlimit — number of commits to return, from 1 to 10Example input:
{
"owner": "JetBrains",
"repo": "kotlin",
"limit": 3
}The tool calls the public GitHub REST API and returns a short text summary with commit SHA, message, author, date and URL
start_price_watchStarts periodic price monitoring for a market symbol and stores snapshots in JSON
Input:
symbol — market symbol, for example BTCUSDTintervalSeconds — collection interval in seconds, from 10 to 3600get_price_watch_summaryReturns an aggregated summary for collected price snapshots
Summary includes:
stop_price_watchStops periodic price monitoring for a market symbol and removes stored watch state
echoSimple test tool that returns the input text back to the client
Used to verify that MCP tool calls work
Price watch data is stored locally in:
storage/price-watch-state.jsonThe file is created at runtime and is not committed to Git
GET /Health-check endpoint
Example response:
{
"service": "mcp-tools-server",
"status": "ok",
"tools": ["echo", "get_recent_commits"]
}POST /mcpMCP endpoint for Streamable HTTP clients
Install dependencies:
npm installStart development server:
npm run devBuild project:
npm run buildStart compiled version:
npm startBy default the server runs on port 3000
Local MCP endpoint:
http://localhost:3000/mcpStart the server:
npm run devRun MCP Inspector:
npx @modelcontextprotocol/inspectorUse the following settings:
Transport Type: Streamable HTTP
URL: http://localhost:3000/mcpThen open the Tools tab, list available tools and run get_recent_commits
Current limitations:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.