grappleai — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited grappleai (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An AI-driven dispute resolution platform built with React frontend and AWS CDK Lambda backend. GrappleAI advocates for consumers in post-purchase disputes using autonomous agents and the Model Context Protocol (MCP).
Get up and running in 5 minutes:
# Frontend
cd app && npm install && npm run dev
# Backend (separate terminal)
cd backend && npm install && npm run cdk:deploySee QUICKSTART.md for detailed instructions.
React Frontend (Vite)
↓ HTTP/REST
API Gateway (AWS)
↓
Lambda Function (Node.js 20.x)
├─ MCP Server
├─ Request Handler
└─ Business Logic
↓
┌───┴───┬────────┐
↓ ↓ ↓
DynamoDB S3 DynamoDB
Disputes Evidence Negotiationsgrappleai/
├── app/ # React frontend
│ ├── src/
│ │ ├── components/ # React components
│ │ ├── pages/ # Page components
│ │ ├── services/ # API client
│ │ ├── store/ # State management
│ │ └── types/ # TypeScript types
│ └── package.json
│
├── backend/ # AWS CDK backend
│ ├── lib/
│ │ ├── cdk/ # CDK stack
│ │ ├── lambda/ # Lambda handler
│ │ ├── mcp/ # MCP server
│ │ └── types/ # TypeScript types
│ └── package.json
│
├── SDLC to AIDLC/ # Methodology docs
│ ├── AIDLC.md
│ └── SDLC.md
│
├── AI-DLC/ # AI-DLC documentation
│ └── AI-DLC.md
│
├── QUICKSTART.md # 5-minute setup
├── SETUP.md # Complete setup guide
├── PROJECT_OVERVIEW.md # Architecture overview
└── README.md # This filecd app
npm install
npm run devVisit: http://localhost:5173
cd backend
npm install
npm run cdk:deployUpdate app/.env.local:
VITE_API_URL=https://your-api-endpoint.com/apiPOST /disputes - Create disputeGET /disputes - List disputesGET /disputes/{id} - Get dispute detailsPUT /disputes/{id} - Update disputePOST /evidence/upload - Upload evidenceGET /evidence/{id} - Get evidencePOST /evidence/{id}/verify - Verify evidencePOST /negotiation/initiate - Start negotiationGET /negotiation/{txId} - Get statusThe backend implements these MCP tools:
Monthly (small-medium usage):
npm run dev # Start dev server
npm run build # Build for production
npm run lint # Run linter
npm run type-check # Check typesnpm run build # Compile TypeScript
npm run cdk:deploy # Deploy to AWS
npm run cdk:destroy # Destroy stack
npm run cdk:diff # Preview changesvercel deploynetlify deploy --prod --dir=distaws s3 sync dist/ s3://bucket/cd backend
npm run cdk:deployMIT
GrappleAI is building the trust layer for India's digital economy. By combining AI, law, and technology, we're creating an active advocate for every consumer—ensuring that disputes are resolved fairly, quickly, and in the consumer's preferred language.
Ready to build? Start with QUICKSTART.md!
GrappleAI - Active Defense Layer for Consumers Building trust in India's digital economy, one dispute at a time.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.