Mcp Harbor — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Harbor (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP Harbor is a Node.js application that provides a Model Context Protocol (MCP) server for interacting with Harbor container registry.
Before installing MCP Harbor, ensure you have:
git clone https://github.com/nomagicln/mcp-harbor.git cd mcp-harbor npm install npm run buildThe application accepts the following command line arguments:
Options:
--url Harbor API URL [string] [required]
--username Harbor username (or robot account name) [string] [required]
--password Harbor password (mutually exclusive with --token) [string]
--token Harbor token for robot/service accounts [string]
--insecure Disable TLS/SSL certificate validation [boolean] [default: false]
--debug Enable debug mode [boolean] [default: false]
--help Show help [boolean]Note: You must provide either--passwordor--token, but not both.
Instead of command line arguments, you can also use environment variables. Create a .env file in the root directory:
# Harbor API Configuration
HARBOR_URL=https://harbor.example.com
HARBOR_USERNAME=admin
# Authentication: use either PASSWORD or TOKEN (mutually exclusive)
# Option 1: Password-based authentication
HARBOR_PASSWORD=Harbor12345
# Option 2: Token-based authentication (for robot/service accounts)
# HARBOR_USERNAME=robot$myrobot
# HARBOR_TOKEN=your-robot-token-here
# Debug Mode (true/false)
DEBUG=false
# Disable TLS/SSL certificate validation (true/false)
# HARBOR_INSECURE=false#### Token Authentication (Robot/Service Accounts)
Harbor supports robot accounts for automated access. To use token-based authentication:
--username (e.g., robot$myrobot)--tokenmcp-harbor --url https://harbor.example.com --username "robot\$myrobot" --token "your-robot-token"#### Claude Desktop
Add the following to your Claude Desktop configuration file (claude_desktop_config.json):
Using password authentication:
{
"mcpServers": {
"harbor": {
"command": "npx",
"args": [
"mcp-harbor",
"--url", "https://harbor.example.com",
"--username", "admin",
"--password", "your-password"
]
}
}
}Using token authentication (robot/service account):
{
"mcpServers": {
"harbor": {
"command": "npx",
"args": [
"mcp-harbor",
"--url", "https://harbor.example.com",
"--username", "robot$myrobot",
"--token", "your-robot-token"
]
}
}
}With self-signed certificates:
{
"mcpServers": {
"harbor": {
"command": "npx",
"args": [
"mcp-harbor",
"--url", "https://harbor.example.com",
"--username", "admin",
"--password", "your-password",
"--insecure"
]
}
}
}#### Cursor / Windsurf
Add the following to your MCP configuration file (.cursor/mcp.json or .windsurf/mcp.json):
{
"mcpServers": {
"harbor": {
"command": "npx",
"args": [
"mcp-harbor",
"--url", "https://harbor.example.com",
"--username", "admin",
"--password", "your-password"
]
}
}
}#### Using environment variables
You can also reference environment variables to avoid hardcoding credentials:
{
"mcpServers": {
"harbor": {
"command": "npx",
"args": ["mcp-harbor"],
"env": {
"HARBOR_URL": "https://harbor.example.com",
"HARBOR_USERNAME": "admin",
"HARBOR_PASSWORD": "your-password"
}
}
}
}#### SSE Transport (remote/shared server)
If you prefer running the MCP server as a standalone process with SSE transport:
npx mcp-harbor --url https://harbor.example.com --username admin --password your-password --sse --port 3000Then configure your MCP client to connect via SSE at http://localhost:3000/sse.
The MCP server exposes the following tools:
| Tool Name | Description | Parameters |
|---|---|---|
list_projects | List all projects in Harbor | None |
get_project | Get project details by ID | projectId: string |
create_project | Create a new project | project_name: string, metadata?: object |
delete_project | Delete a project | projectId: string |
list_repositories | List repositories in a project | projectId: string |
delete_repository | Delete a repository | projectId: string, repositoryName: string |
list_tags | List tags in a repository | projectId: string, repositoryName: string |
delete_tag | Delete a tag | projectId: string, repositoryName: string, tag: string |
list_charts | List Helm charts | projectId: string |
list_chart_versions | List chart versions | projectId: string, chartName: string |
delete_chart | Delete chart version | projectId: string, chartName: string, version: string |
npm run dev# Run all tests
npm test
# Run tests with coverage
npm run test:coveragemcp-harbor
├── src
│ ├── app.ts # Main application entry point (MCP server)
│ ├── definitions
│ │ └── tool.definitions.ts # Tool definitions for MCP
│ ├── services
│ │ └── harbor.service.ts # Harbor service implementation
│ └── types
│ └── index.ts # TypeScript type definitions
├── test
│ └── harbor.test.ts # Tests for Harbor service
├── .env.example # Example environment variables
├── .gitignore # Git ignore file
├── .eslintrc.json # ESLint configuration
├── package.json # Project dependencies
├── jest.config.js # Jest configuration
├── tsconfig.test.json # TypeScript configuration for tests
├── tsconfig.json # TypeScript configuration
├── LICENSE # Project license
└── README.md # Project documentation Error: Unable to connect to Harbor instance Error: Invalid credentials Error: TypeScript compilation failednpm install to ensure all dependencies are installeddist directory and rebuildEnable debug mode by using the --debug flag or setting:
DEBUG=trueFor additional help:
This project is licensed under the MIT License - see the LICENSE file for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.