Self Hosted — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Self Hosted (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Docker Compose configuration for self-hosting CodeRifts on your own infrastructure.
# 1. Clone this repo
git clone https://github.com/coderifts/self-hosted.git
cd self-hosted
# 2. Copy and configure environment variables
cp .env.example .env
# Edit .env with your values
# 3. Start all services
docker compose up -dCodeRifts is available as a Model Context Protocol (MCP) server so AI agents can run governance and contract-safety checks before they call or merge API changes. The server speaks MCP JSON-RPC over Streamable HTTP.
io.github.coderifts/api-governancehttps://app.coderifts.com/mcphttps://<your-host>/mcp (same path on your own instance)Authorization: Bearer cr_live_YOUR_KEY on tool calls. The initialize and tools/list methods are open (no key required) so clients can discover the tools without authenticating.| Tool | Description |
|---|---|
preflight_check | Analyze an API spec diff before merge. Returns risk score, blast radius, agent impact, and a merge decision (ALLOW / WARN / REQUIRE_APPROVAL / BLOCK). |
agent_tool_check | Check whether an API change breaks AI agent tool calling (endpoint removal, newly required fields, result-shape drift). |
agent_readiness_score | Score an OpenAPI spec or MCP manifest for AI-agent readiness (0–100) with recommendations. |
registry_validate | Validate an MCP tool registry or OpenAPI spec collection for governance health. |
agent_preflight | Pre-flight governance check for agent workflows, given tool schemas before and after a change. |
traffic_analyze | Infer API spec drift from HTTP traffic samples, without needing spec files. |
mcp_diff | Compare two MCP manifests and detect breaking changes in tool schemas, input/output types, and descriptions. |
governance_health | Governance health score for an API spec (A–F grade, policy compliance, recommendations). |
Add CodeRifts to claude_desktop_config.json using the remote bridge:
{
"mcpServers": {
"coderifts": {
"command": "npx",
"args": [
"mcp-remote",
"https://app.coderifts.com/mcp",
"--header",
"Authorization: Bearer cr_live_YOUR_KEY"
]
}
}
}Replace cr_live_YOUR_KEY with your CodeRifts API key, restart Claude Desktop, and the eight tools above become available.
# List tools (no key required)
curl -s -X POST https://app.coderifts.com/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'For full documentation, visit coderifts.com/docs.
See coderifts.com for licensing terms.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.