Cordra Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cordra Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Cordra is a configurable digital object repository system that stores digital objects as JSON documents with associated metadata and optional binary payloads. This Model Context Protocol (MCP) server provides AI assistants with read-only access to explore and understand Cordra repositories. This allows AI systems to quickly understand the data model and schema structure of a Cordra repository and to explore digital objects and their relationships.
Example
ensuring safe exploration without risk of data modification or corruption.
list_types - List all available types in the Cordra repository.get_type_schema - Retrieve the JSON schema definition for a specific type.type_name - The name of the type (e.g., "Person", "Document", "Project")get_object - Retrieve a digital object by its complete ID/handle.object_id - Complete object ID (e.g., "test/abc123")search_objects - Search for digital objects using a query string with pagination support.query - Lucene/Solr compatible search querytype - Optional filter by object typelimit - Number of results per page (default: 25)page_num - Page number to retrieve, 0-based (default: 0)count_objects - Count the total number of objects matching a query.query - Lucene/Solr compatible search querytype - Optional filter by object typeget_design_object - Retrieve the Cordra design object containing repository configuration.#### Query Syntax
CRITICAL: JSON properties MUST be prefixed with /
✅ Correct Examples:
/title:*report* - Wildcard search in title field/author/name:Daniel - Nested property access/status:active AND /priority:high - Boolean operatorstype parameter instead of including type: in query❌ Wrong (will fail):
name:John - Missing / prefixauthor/name:Daniel - Missing leading /type:Person - Use the type parameter insteadOperators: * (wildcard), ? (single char), AND, OR, NOT, "phrases"
The MCP server can be configured using environment variables:
CORDRA_BASE_URL - Cordra server URL (default: https://localhost:8443)CORDRA_USERNAME - Username for authentication (optional)CORDRA_PASSWORD - Password for authentication (optional)CORDRA_VERIFY_SSL - SSL certificate verification (default: true)CORDRA_TIMEOUT - Request timeout in seconds (default: 30)LOGLEVEL - Logging level (default: INFO, options: DEBUG, INFO, WARNING, ERROR, CRITICAL)Run the MCP server:
uv run mcp-cordraYou can add this MCP to Claude Code by registering it in the settings of your project or creating a .mcp.json file in your workdir:
Example using the docker build:
{
"mcpServers": {
"cordra": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"CORDRA_BASE_URL",
"ghcr.io/dnlbauer/cordra-mcp:latest"
],
"env": {
"CORDRA_BASE_URL": "https://cordra.example.de"
}
}
}
}Example using the python package with uvx:
{
"mcpServers": {
"cordra": {
"command": "uvx",
"args": [
"cordra-mcp"
],
"env": {
"CORDRA_BASE_URL": "https://cordra.example.de"
}
}
}
}~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.