Fix My Comments Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Fix My Comments Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for Fix My Comments — exposes local VS Code comment threads to AI agents (Claude Code, Cursor, Windsurf, etc.) through the Model Context Protocol.
The server is intentionally small: it reads and writes the same JSON files as the VS Code extension, under ~/.fixmycomments/<repo>-<hash>/<branch>/, and communicates over stdio.
process.cwd() and the current Git branch.threads.json and messages.json files.Run your agent from inside the repository root. If you start it from another directory, the server will resolve a different storage path.
npm install -g fix-my-comments-mcpThen add it to Claude Code:
claude mcp add fix-my-comments --scope user -- fix-my-commentsgit clone <this-repo>
cd fix-my-comments-mcp
npm install
npm run build
npm link
claude mcp add fix-my-comments --scope user -- fix-my-comments| Tool | Description |
|---|---|
list_open_threads | List open, non-outdated threads for the current branch. Optionally filter by file path. |
get_thread | Get a thread and its messages; use messageLimit to fetch only the latest messages. |
get_message | Get one comment/message with its thread summary and position. |
get_message_context | Get one message plus N messages before/after it to avoid loading a whole long thread. |
post_agent_reply | Append an AI reply, optionally tied to a message and optionally posted as a code suggestion. |
set_thread_status | Resolve or reopen a thread. |
set_task_message_status | Check or uncheck a task message. |
add_reaction | Add an emoji reaction to a message. |
remove_reaction | Remove an agent's emoji reaction from a message. |
Agents should prefer the smallest read tool that answers the question:
list_open_threads to discover work.get_message when a message id is already known.get_message_context to fetch a small window around one message.get_thread only when the whole thread is needed, or pass messageLimit for the latest messages.By default, the server filters out and blocks writes to outdated threads whose anchored line changed.
list_open_threads excludes outdated threads unless includeOutdated=true.get_thread, get_message, and get_message_context require includeOutdated=true to inspect stale comments.post_agent_reply, set_task_message_status, add_reaction, and remove_reaction are blocked on outdated threads.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.