Stompy Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Stompy Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Persistent memory system that prevents context loss between AI sessions. Store, search, and recall project knowledge across conversations.
Search @mcp stompy in the extensions gallery, or add manually:
// .vscode/mcp.json
{
"servers": {
"stompy": {
"type": "http",
"url": "https://mcp.stompy.ai"
}
}
}Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"stompy": {
"url": "https://mcp.stompy.ai"
}
}
}claude mcp add stompy --transport streamable-http https://mcp.stompy.ai| Tool | Description |
|---|---|
lock_context | Store content as immutable versioned snapshot |
recall_context | Retrieve locked context by topic |
context_search | Hybrid semantic + keyword search |
ticket | CRUD + lifecycle for project tickets |
ticket_board | View ticket board grouped by status |
detect_conflicts | Detect contradictions using NLI |
ingest_document | Ingest documents with AI processing |
project_create | Create a new project with isolated storage |
db_query | Read-only SQL queries against project database |
Stompy uses OAuth2 authentication. On first connection, your MCP client will prompt you to authorize via browser.
https://mcp.stompy.ai~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.