Mcp Server Grf — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server Grf (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for managing Git reference repositories - add, load, and sync reference code from any Git repository.
mcp-server-grf (Git Reference) is a Model Context Protocol (MCP) server that enables AI assistants to manage Git reference repositories. It allows you to:
When an AI assistant needs to reference code implementations from open-source projects, this tool enables quick loading of reference code into the current working directory for the AI to read and learn from.
owner/repo, or just repo name.gitignoreNo installation required - run directly with npx:
npx mcp-server-grfnpm install -g mcp-server-grfThen run:
mcp-server-grfAdd the following to your Claude Desktop configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"grf": {
"command": "npx",
"args": ["-y", "mcp-server-grf"]
}
}
}For other MCP-compatible clients, configure the server command as:
npx -y mcp-server-grf#### grf_add
Add a reference repository to the global cache.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
url | string | Yes | - | Git repository URL (HTTPS or SSH format) |
name | string | No | - | Custom repository name |
branch | string | No | - | Specify branch |
shallow | boolean | No | true | Use shallow clone |
depth | number | No | 1 | Shallow clone depth |
#### grf_list
List all cached repositories.
_No parameters required._
#### grf_get
Get detailed information about a repository.
| Parameter | Type | Required | Description |
|---|---|---|---|
name | string | Yes | Repository name (supports full name or short name) |
#### grf_update
Update cached repositories.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
name | string | No | - | Repository name (updates all if not specified) |
checkOnly | boolean | No | false | Only check for updates, don't pull |
#### grf_clean
Clean cached repositories.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
name | string | No | - | Repository name to delete |
all | boolean | No | false | Delete all cached repositories |
#### grf_switch_branch
Switch repository branch.
| Parameter | Type | Required | Description |
|---|---|---|---|
name | string | Yes | Repository name |
branch | string | Yes | Target branch |
#### grf_load
Copy reference repository to the current directory.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
name | string | Yes | - | Repository name, short name, or Git URL |
targetPath | string | No | .gitreference/<repo-path> | Target path |
subdir | string | No | - | Only copy specified subdirectory |
updateGitignore | boolean | No | true | Update .gitignore |
branch | string | No | - | Specify branch (only for Git URL) |
workingDirectory | string | No | Current directory | Working directory |
#### grf_unload
Remove reference code from the project.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
name | string | No | - | Repository name |
all | boolean | No | false | Remove all reference code |
workingDirectory | string | No | Current directory | Working directory |
#### grf_loaded
List loaded reference code.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
workingDirectory | string | No | Current directory | Working directory (returns all if not specified) |
all | boolean | No | false | Return loading entries for all working directories |
#### grf_sync
Sync loaded reference code to the latest version.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
entryId | string | No | - | Entry ID (specify entry to sync) |
all | boolean | No | false | Sync all entries |
force | boolean | No | false | Force sync (ignore version check) |
workingDirectory | string | No | Current directory | Working directory |
#### grf_sync_status
Get sync status of loaded reference code.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
workingDirectory | string | No | Current directory | Working directory |
#### grf_config
Manage global configuration.
| Parameter | Type | Required | Description |
|---|---|---|---|
action | string | Yes | Operation type: get, set, or list |
key | string | No | Configuration key (required for get/set) |
value | string/number/boolean | No | Configuration value (required for set) |
grf_add url="https://github.com/expressjs/express" grf_load name="express" grf_loaded grf_sync all=true grf_unload name="express"Load only the lib directory from a repository:
grf_load name="express" subdir="lib"Load directly from a Git URL without pre-adding:
grf_load name="https://github.com/lodash/lodash" subdir="src"Check if updates are available without pulling:
grf_update checkOnly=true| Key | Type | Default | Description |
|---|---|---|---|
defaultBranch | string | "main" | Default branch name |
shallowClone | boolean | true | Use shallow clone |
shallowDepth | number | 1 | Shallow clone depth |
# List all configuration
grf_config action="list"
# Get specific configuration
grf_config action="get" key="shallowClone"
# Set configuration
grf_config action="set" key="shallowDepth" value=5~/.gitreference/
├── config.json # Global configuration
├── repos-index.json # Repository index
├── loading-state.json # Loading state records
└── repos/ # Cached repositories<project>/
├── .gitreference/ # Default loading directory
└── .gitignore # Automatically adds .gitreference/ entryMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.