Mcp Xpath — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Xpath (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP Server for executing XPath queries on XML content.
<a href="https://glama.ai/mcp/servers/@thirdstrandstudio/mcp-xpath"> <img width="380" height="200" src="https://glama.ai/mcp/servers/@thirdstrandstudio/mcp-xpath/badge" alt="mcp-xpath MCP server" /> </a>
xpathxml (string): The XML content to queryquery (string): The XPath query to executemimeType (optional, string): The MIME type (e.g. text/xml, application/xml, text/html, application/xhtml+xml)xpathwithurlurl (string): The URL to fetch XML/HTML content fromquery (string): The XPath query to executemimeType (optional, string): The MIME type (e.g. text/xml, application/xml, text/html, application/xhtml+xml)To install mcp-xpath for Claude Desktop automatically via Smithery:
npx -y @smithery/cli install @thirdstrandstudio/mcp-xpath --client claude# Install dependencies
npm install
# Build the package
npm run buildAdd the following to your claude_desktop_config.json:
#### npx
{
"mcpServers": {
"xpath": {
"command": "npx",
"args": [
"@thirdstrandstudio/mcp-xpath"
]
}
}
}#### Direct Node.js
{
"mcpServers": {
"xpath": {
"command": "node",
"args": [
"/path/to/mcp-xpath/dist/index.js"
]
}
}
}Replace /path/to/mcp-xpath with the actual path to your repository.
// Select all <item> elements from XML
const result = await callTool("xpath", {
xml: "<root><item>value1</item><item>value2</item></root>",
query: "//item/text()",
mimeType: "text/xml"
});// Get all links from HTML
const result = await callTool("xpath", {
xml: "<html><body><a href='link1.html'>Link 1</a><a href='link2.html'>Link 2</a></body></html>",
query: "//a/@href",
mimeType: "text/html"
});// Get all links from a webpage
const result = await callTool("xpathwithurl", {
url: "https://example.com",
query: "//a/@href",
mimeType: "text/html"
});# Install dependencies
npm install
# Start the server in development mode
npm startThis MCP server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.