Claude Mcp Bridge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Claude Mcp Bridge (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server that lets any agent or MCP host (Cursor, Codex, Antigravity, another Claude Code, your own app) delegate to Claude Code running headless (claude -p). Claude is the strongest model here, so the tool surface is deliberately narrow — reasoning, review and autonomous work. Cheap mechanical work (mapping a repo, scanning files) is intentionally left out: it would burn expensive tokens, and Claude already explores natively (Explore subagent + LSP/Grep/Glob) inside delegate. For cheap exploration use a lighter bridge (e.g. cursor-mcp-bridge).
Mirrors the ergonomics of agy-bridge / codex: every tool takes an optional model and effort, returns a session_id, and supports follow_up to continue without resending context.
| Tool | Purpose |
|---|---|
delegate | Full autonomous task — Claude runs its own loop with tool access in cwd. |
adversarial_review | Strict review of a diff/plan/files: bugs, security, edge cases. Read-only. |
follow_up | Continue a prior session by session_id. |
Every tool accepts: cwd (project root), model (e.g. opus, sonnet, haiku), effort (low \| medium \| high).
claude CLI installed and authenticated (claude once to log in).git clone https://github.com/JaimeJunr/claude-mcp-bridge.git
cd claude-mcp-bridge
npm install
npm run buildClaude Code:
claude mcp add claude-bridge -s user -- node /abs/path/to/claude-mcp-bridge/dist/index.jsCursor / Codex / any host — add to its mcp.json:
{
"mcpServers": {
"claude-bridge": {
"command": "node",
"args": ["/abs/path/to/claude-mcp-bridge/dist/index.js"]
}
}
}| Var | Default | Meaning | |||
|---|---|---|---|---|---|
CLAUDE_BIN | claude | Path to the claude binary. | |||
CLAUDE_BRIDGE_PERMISSION | acceptEdits | Permission mode: plan \ | default \ | acceptEdits \ | bypassPermissions. |
CLAUDE_BRIDGE_TIMEOUT_MS | 600000 | Per-call timeout. |
Security:acceptEditslets delegated Claude edit files autonomously;bypassPermissionsadditionally allows unrestricted shell. Only raise this for trusted workspaces. The review / analyze / search tools instruct Claude to stay read-only regardless.
npm test # vitest — unit tests for arg building / json parsing
npm run dev # run from source via tsxMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.