Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Python MCP server that wraps the Kapruka.com REST API and exposes it as tools for LLMs and third-party MCP clients.
# 1. Create and activate a virtual environment
python -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
# 2. Install dependencies
pip install -e ".[dev]"
# 3. Configure environment
cp .env.example .env
# Edit .env with your Kapruka API URL and key# Start the MCP server (streamable HTTP, default port 8000)
python cli.py server
# Start with stdio transport (for use with MCP Inspector)
python cli.py server --stdio
# Health-check the Kapruka REST API
python cli.py ping
# List registered MCP tools
python cli.py toolsnpx @modelcontextprotocol/inspector python cli.py server --stdiosrc/
server.py # FastMCP server entry point
tools/ # One module per tool group (products, orders, …)
api/
client.py # Async httpx client + error handling
config/
settings.py # Env-based configuration
tests/ # pytest test suite
cli.py # Developer CLIFirst-party callers that can't be IP-allowlisted (e.g. Kapruka's web assistant on Cloudflare Workers) authenticate with an X-Partner-Key header instead, with optional per-customer limits via X-Partner-Customer-Id. Configured with PARTNER_KEYS / PARTNER_SCOPES / PARTNER_LIMITS. See docs/PARTNER_ACCESS.md and the deploy steps in deploy/README.md.
pytest~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.