Acornio Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Acornio Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides access to knowledge base documents from GitHub repositories.
listKnowledgeBases, listDocuments, searchDocuments, getDocumentThis is a Next.js application that can be deployed to any platform that supports Next.js.
npm run buildnpm run build && npm startGITHUB_TOKEN (optional, for higher API rate limits)MCP_AUTH_TOKEN (optional, for securing access to your MCP server)npm run build and publish directory: .nextNODE_ENV=productionEdit app/api/[transport]/route.ts to configure your knowledge bases:
const KNOWLEDGE_BASES = [
{
id: 'vision',
name: 'My Knowledge Base',
description: 'Description of knowledge base',
owner: 'github-username',
repo: 'repo-name',
branch: 'main',
path: './docs', // path to markdown files
},
// Add more...
];This MCP server supports optional token-based authentication to secure access to your knowledge bases.
MCP_AUTH_TOKEN is not set, the server accepts all requests (useful for local development or private networks)MCP_AUTH_TOKEN is set, clients must provide this token in the Authorization headerBearer <token> and <token> formatsopenssl rand -hex 32)MCP_AUTH_TOKEN environment variable on your hosting platform| Variable | Description | Required |
|---|---|---|
GITHUB_TOKEN | GitHub personal access token for higher API rate limits (60/hr → 5000/hr) | No |
MCP_AUTH_TOKEN | Authentication token for securing MCP server access. When set, clients must provide this token in the Authorization header. | No |
Add to your MCP config (replace https://your-app.example.com with your deployed URL):
{
"mcpServers": {
"acornio-knowledge": {
"url": "https://your-app.example.com/api/mcp"
}
}
}If you've configured MCP_AUTH_TOKEN, add authentication:
{
"mcpServers": {
"acornio-knowledge": {
"url": "https://your-app.example.com/api/mcp",
"headers": {
"Authorization": "Bearer your_token_here"
}
}
}
}Or use mcp-remote for stdio transport:
{
"mcpServers": {
"acornio-knowledge": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://your-app.example.com/api/mcp"]
}
}
}With authentication:
{
"mcpServers": {
"acornio-knowledge": {
"command": "npx",
"args": ["-y", "mcp-remote", "--header", "Authorization: Bearer your_token_here", "https://your-app.example.com/api/mcp"]
}
}
}Note: Replace your-app.example.com with your actual deployment URL:
your-app.vercel.appyour-app.railway.appyour-app.netlify.appyour-domain.comnpm install
npm run devServer runs at http://localhost:3000/api/mcp
listKnowledgeBasesLists all configured knowledge bases and their document counts.
listDocumentsLists all documents, optionally filtered by knowledge base.
searchDocumentsSearches for documents by name/title across knowledge bases.
getDocumentRetrieves the full content of a specific document.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.