Hive Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hive Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides integrations for Jira and Sourcegraph. This allows LLMs to interact with Jira issues and search code across repositories using Sourcegraph.
Package name: hive-mcp Tool prefix: Service name (e.g., jira_*, sourcegraph_*) Full tool names in LLM: mcp__hive-mcp__jira_get_issue etc.
This package is published as a private package on GitHub Packages. To install it, you need to authenticate with GitHub first.
#### 1. Create a GitHub Personal Access Token (PAT)
read:packages - Download packages from GitHub Package Registrywrite:packages - Upload packages to GitHub Package Registry (only needed for publishing)#### 2. Configure NPM to use GitHub Packages
Create or edit your ~/.npmrc file (in your home directory) and add:
@ocuco:registry=https://npm.pkg.github.com
//npm.pkg.github.com/:_authToken=YOUR_GITHUB_TOKENReplace YOUR_GITHUB_TOKEN with the token you created in step 1.
Note: On Windows, your home directory is %USERPROFILE% (usually C:\Users\YourUsername)
#### 3. Install the package
npm install -g @ocuco/hive-mcpgit clone https://github.com/ocuco/hive-mcp.git
cd hive-mcp
npm install
npm run build
npm linkCreate a .env file in your project root or set environment variables:
# Jira Configuration (On-Premise Server/Data Center)
JIRA_BASE_URL=https://jira.your-company.com
JIRA_API_TOKEN=your_personal_access_token
# Sourcegraph Configuration
SOURCEGRAPH_URL=https://sourcegraph.company.com
SOURCEGRAPH_TOKEN=your_sourcegraph_token#### Jira Personal Access Token (PAT) For Jira Server/Data Center on-premise installations:
JIRA_API_TOKENImportant Notes:
#### Sourcegraph Token
SOURCEGRAPH_TOKENAdd to your Claude Desktop configuration file:
MacOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"hive-mcp": {
"command": "node",
"args": ["/path/to/hive-mcp/dist/index.js"],
"env": {
"JIRA_BASE_URL": "https://jira.your-company.com",
"JIRA_API_TOKEN": "your_personal_access_token",
"SOURCEGRAPH_URL": "https://sourcegraph.company.com",
"SOURCEGRAPH_TOKEN": "your_sourcegraph_token"
}
}
}
}Or if installed globally from GitHub Packages:
{
"mcpServers": {
"hive-mcp": {
"command": "hive-mcp",
"env": {
"JIRA_BASE_URL": "https://jira.your-company.com",
"JIRA_API_TOKEN": "your_personal_access_token",
"SOURCEGRAPH_URL": "https://sourcegraph.company.com",
"SOURCEGRAPH_TOKEN": "your_sourcegraph_token"
}
}
}
}Note: After installing from GitHub Packages with npm install -g @ocuco/hive-mcp, the command name remains hive-mcp (defined in package.json bin field).
All tools are prefixed with their service name for easy identification in LLM tool lists.
Full name format in LLM: mcp__hive-mcp__<tool_name>
#### Jira Tools
#### jira_get_issue Get detailed information about a Jira issue.
Parameters:
issueIdOrKey (string): The issue key (e.g., "PROJ-123") or IDExample:
{
"issueIdOrKey": "PROJ-123"
}#### jira_get_comments Get all comments from a Jira issue. Returns comment history with authors and timestamps.
Parameters:
issueIdOrKey (string): The issue key (e.g., "PROJ-123") or IDReturns:
Example:
{
"issueIdOrKey": "PROJ-123"
}#### jira_add_comment Add a comment to a Jira issue.
Parameters:
issueIdOrKey (string): The issue key (e.g., "PROJ-123") or IDcomment (string): The comment text to add#### sourcegraph_search_code Search code across repositories.
Parameters:
query (string): Search query with optional operatorsrepo:owner/name - Filter by repositoryfile:path - Filter by file pathlang:python - Filter by languageExample:
{
"query": "function handleRequest repo:myorg/myrepo lang:typescript"
}#### sourcegraph_deep_search AI-powered Deep Search using natural language questions. This feature creates a conversation with Sourcegraph's AI agent (requires v6.7+).
Parameters:
question (string): Natural language question about your codebasetimeout_seconds (number, optional): Max wait time for answer (default: 60)Example:
{
"question": "How does authentication work in this codebase?"
}Response includes:
Note: Deep Search is async and may take 10-60 seconds. It uses credits/quota on Sourcegraph Enterprise.
MCP Resources allow LLMs to read Jira attachments like local files. The server handles caching and download automatically.
Resource URI Format:
#### jira://issues/{issueKey}/attachments List all attachments for a specific Jira issue.
Example:
jira://issues/PROJ-123/attachmentsReturns:
#### jira://attachments/{attachmentId} Read specific attachment content.
Example:
jira://attachments/10041Behavior:
Advantages:
Usage in Claude:
"Read jira://attachments/10041"
"Show me all attachments from PROJ-123"# Install dependencies
npm install
# Build
npm run build
# Development mode (watch for changes)
npm run dev
# Run the server
npm startNote: Only maintainers with write access to the @ocuco organization can publish.
write:packages scope (see Installation section)~/.npmrc has the authentication configurednpm whoami --registry=https://npm.pkg.github.com npm version patch # 1.0.0 -> 1.0.1
npm version minor # 1.0.0 -> 1.1.0
npm version major # 1.0.0 -> 2.0.0 npm run build npm publish git push
git push --tagsThe package is set as private ("access": "restricted" in publishConfig). Only members of the @ocuco organization with proper permissions can:
To manage package access:
hive-mcp packagehive-mcp/
├── src/
│ ├── index.ts # MCP server entry point
│ ├── config.ts # Environment configuration
│ ├── types.ts # Shared types
│ ├── jira/
│ │ ├── client.ts # Jira REST API client
│ │ ├── tools.ts # Jira MCP tools
│ │ └── types.ts # Jira types
│ └── sourcegraph/
│ ├── client.ts # Sourcegraph GraphQL client
│ ├── tools.ts # Sourcegraph MCP tools
│ └── types.ts # Sourcegraph types
└── dist/ # Compiled outputMIT
Contributions are welcome! Please feel free to submit a Pull Request.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.