Mcp Poc Kc — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Poc Kc (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Read-only MCP server with hybrid search — dense semantic (all-MiniLM-L6-v2) + sparse keyword (BM-25) — fused with Qdrant's built-in RRF.
| Layer | Tool | Cost |
|---|---|---|
| MCP framework | FastMCP | Free |
| Vector DB | Qdrant Cloud | Free (1 GB) |
| Embeddings | FastEmbed (local, ONNX) | Free |
| Hosting | Render | Free tier |
| ChatGPT | Deep Research connector | Free (Pro plan) |
python -m venv .venv && source .venv/bin/activate
pip install -r requirements.txtcp .env.example .env
# fill in QDRANT_URL, QDRANT_API_KEY, MCP_API_KEYpython ingest.py --file report.pdf --dept 1 --pos 2
python ingest.py --file notes.md
python ingest.py --list
python ingest.py --delete <document_id>Supported formats: pdf, docx, md, txt, rst
python server.py
# → http://localhost:8000/mcp.env is gitignored)QDRANT_URL, QDRANT_API_KEY, KEYCLOAK_REALM_URL, KEYCLOAK_CLIENT_ID/mcp/MCP_API_KEY+ → Deep Research → select your connector| Tool | Description |
|---|---|
search(query, top_k) | Hybrid search. Returns point IDs. |
fetch(id) | Get chunk content by point ID. |
list_documents() | List all documents. |
get_document(id) | Full text of a document by document_id. |
search + fetch follow the ChatGPT Deep Research contract.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.