open-source-hygiene — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited open-source-hygiene (Rules) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Multi-server MCP tool bridge — expose banking, email, calendar, and custom API tools over the Model Context Protocol.
Prism lets you define multiple servers, each with its own bearer token and set of accounts. AI clients (Cursor, Claude Desktop, etc.) connect to a server's MCP endpoint and get access to only the tools and accounts that server is configured for.
┌─────────────┐ ┌─────────────┐
│ AI Client │ │ AI Client │
│ (Cursor) │ │ (Claude) │
└──────┬───────┘ └──────┬───────┘
│ Bearer A │ Bearer B
▼ ▼
┌──────────────────────────────────┐
│ Prism │
│ /mcp/server-a /mcp/server-b │
│ ┌──────────┐ ┌──────────┐ │
│ │ 9 accts │ │ 3 accts │ │
│ │ 17 tools │ │ 11 tools │ │
│ └──────────┘ └──────────┘ │
└────┬────┬────┬────┬─────────────┘
│ │ │ │
▼ ▼ ▼ ▼
bunq IMAP Cal CyansEach server exposes the same tool types but scoped to its own accounts. A personal server sees all your email accounts; a shared server only sees the shared mailbox.
| Category | Tool | Description |
|---|---|---|
| bunq | bunq_list_accounts | List configured bank accounts |
bunq_list_transactions | List transactions with date/amount filters | |
bunq_get_transaction | Get full transaction details | |
bunq_get_transaction_notes | Get notes and attachments on a transaction | |
email_list_accounts | List configured email accounts | |
email_list_folders | List mailbox folders with unread counts | |
email_search | Search emails by sender, subject, date, flags | |
email_get_messages | Fetch one or many messages (same-folder or folder+uid combos) | |
email_send | Send a new message or reply (markdown, threaded, saved to Sent) | |
| Calendar | calendar_list_calendars | List configured ICS calendars |
calendar_list_events | List upcoming events with date range filter | |
calendar_get_event | Get event details by UID | |
| Cyans | cyans_get_open_topics | Get open topics for a user |
cyans_get_topic_details | Get full topic with posts | |
cyans_search_topics | Search topics by subject | |
cyans_add_post | Add a post to a topic | |
| Picnic | picnic_list_accounts | List configured Picnic accounts |
picnic_search_products | Search grocery products by name | |
picnic_get_cart | Get the current shopping cart | |
picnic_add_to_cart | Add a product to the cart | |
picnic_remove_from_cart | Remove a product from the cart | |
picnic_list_deliveries | List past and upcoming deliveries (optional state filter) | |
picnic_get_delivery | Get full details of a single delivery | |
| Utility | day_name | Get day-of-week for a date |
sum | Sum an array of numbers |
git clone https://github.com/YOUR_ORG/prism.git
cd prism
composer install
npm install && npx encore devCopy the example config and edit it:
cp prism.config.yaml.example prism.config.yamlservers:
my-server:
label: "My Personal Server"
bearer_token: "generate-a-random-token"
accounts:
my-email:
type: email
label: "Personal Email"
imap:
host: "imap.example.com"
port: 993
encryption: ssl
username: "[email protected]"
password: "app-password"
validate_cert: true
smtp:
host: "smtp.example.com"
port: 465
encryption: ssl
identity:
email: "[email protected]"
name: "Example User"
my-picnic:
type: picnic
label: "Picnic NL"
username: "[email protected]"
password: "your-picnic-password"
country_code: "nl"Set admin credentials:
# .env.local
APP_AUTH_USER=admin
APP_AUTH_PASSWORD=a-secure-passworddocker compose up -dThe app is served via Traefik. Configure the hostname in docker-compose.yml.
Add to your Cursor .mcp.json:
{
"mcpServers": {
"prism": {
"url": "https://your-host/mcp/my-server",
"headers": {
"Authorization": "Bearer generate-a-random-token"
}
}
}
}Prism includes a built-in admin dashboard at /admin with:
.mcp.json snippetEach tab and tool detail page has its own URL for bookmarking.
| Type | Config Keys | What It Connects To |
|---|---|---|
bunq | api_key, environment, monetary_account_id | bunq banking API |
email | imap.*, smtp.*, identity.* | Any IMAP mailbox + SMTP relay (read, search, send, save-to-Sent) |
calendar | ics_url, summary | Any ICS/iCal feed (Google Calendar, etc.) |
cyans | dsn, username | Cyans topic tracking API |
picnic | username, password, country_code | Picnic grocery delivery (unofficial API) |
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.