Trademe Tinymcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Trademe Tinymcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A simple Model Context Protocol (MCP) server for integrating with Trade Me APIs through an external SDK.
This MCP server provides tools for interacting with Trade Me APIs. It's designed to work with Claude Code and other MCP-compatible applications.
This MCP server depends on a separate Trade Me SDK project that must be installed alongside it.
Both projects should be located in the same parent directory:
parent-folder/
├── trademe-sdk/ # Trade Me SDK project (required dependency)
└── trademe-tinymcp/ # This MCP server projecttrademe-sdk project from: https://github.com/nzduck/trademe-sdk cd trademe-tinymcp uv syncOr using pip:
pip install -e . pip install -e ../trademe-sdk uv sync --group devFor development, you can use the provided script to install both the SDK and MCP server:
bash src/scripts/update-sdk-mcp.shThis script will:
Run the MCP server using the command-line interface:
python -m trademe_mcp.serverOr using the installed script:
trademe-mcpTest that the server is working correctly:
# Test basic functionality
python -c "
import asyncio
from trademe_mcp.server import mcp
async def test():
# This would typically be done by an MCP client
print('Server initialized successfully')
asyncio.run(test())
"To use this MCP server with Claude Code, add it to your Claude Code configuration:
{
"mcpServers": {
"trademe": {
"command": "python",
"args": ["-m", "trademe_mcp.server"],
"env": {}
}
}
}trademe-tinymcp/
├── src/trademe_mcp/
│ ├── __init__.py
│ ├── server.py # Main MCP server implementation
│ └── sdk_wrapper.py # Trade Me SDK wrapper (placeholder)
├── pyproject.toml # Project configuration
├── README.md # This file
└── .gitignore # Git ignore ruleshello_world(): Returns a simple greetingget_server_info(): Returns server metadata and available toolstest_sdk_connection(): Tests the connection to the Trade Me SDK wrappersrc/trademe_mcp/sdk_wrapper.py with your actual Trade Me SDK integration@mcp.tool() decorated functions in server.py@mcp.resource() decorators for data endpointsRun linting and formatting:
# Format code
uv run black src/
# Lint code
uv run ruff src/
# Run tests
uv run pytesttrademe-sdk project is in the correct location (sibling directory)pip install -e ../trademe-sdkbash src/scripts/update-sdk-mcp.shThis project is a development stub. Add your license information here.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.