Bikefuchs Mcp Stub — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Bikefuchs Mcp Stub (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This is not the real Bikefuchs MCP server. It is a namespace-defense placeholder that reserves @bikefuchs on Smithery while the production server is developed. It exposes one informational tool and nothing else.One tool: `get_info`
Returns a text message with the Bikefuchs launch status, the list of tools that will be available in the real server, and a link to bikefuchs.de.
Q3 2026, following the public launch of bikefuchs.de. The production server will include tools for cart optimization, product search, EAN lookup, and shop info across 5+ German/Austrian bike shops. This repo will be replaced or superseded at that point.
The canonical entry point is the Vercel deployment. Use mcp-remote to proxy it into Claude Desktop:
{
"mcpServers": {
"bikefuchs": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.bikefuchs.com/mcp"
]
}
}
}Add this to your claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json).
Follow this order exactly. Smithery verifies the live URL during publishing — publishing before DNS is configured will fail.
git remote add origin https://github.com/bikefuchs/bikefuchs-mcp-stub.git
git push -u origin mainLog into Vercel with an account that has access to the bikefuchs GitHub org (not a personal account). Import bikefuchs/bikefuchs-mcp-stub. Default Next.js settings are correct — no env vars required.
Trigger the first deploy. Confirm the build succeeds and the default .vercel.app URL returns a valid MCP response.
In the Vercel project → Settings → Domains, add mcp.bikefuchs.com.
Under bikefuchs.com, create a subdomain mcp and set a CNAME record pointing to the value Vercel provides (typically cname.vercel-dns.com). Allow up to 30 minutes for propagation.
curl -i https://mcp.bikefuchs.com/mcpExpected: HTTP 2xx or 4xx with a valid MCP response body — not a 404 or connection refused.
Log into smithery.ai using the bikefuchs GitHub org. Submit the repo URL https://github.com/bikefuchs/bikefuchs-mcp-stub. Set the namespace to @bikefuchs in the Smithery dashboard.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.