Mcp Maintainer Toolkit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Maintainer Toolkit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
[!IMPORTANT] This repository is archived and no longer maintained.
>
It targets MCP TypeScript SDK v1 (@modelcontextprotocol/sdk), which has been superseded by the v2 packages (@modelcontextprotocol/server,/client,/core, …). A complete, reviewed v1 → v2 migration exists on thechore/migrate-mcp-sdk-v2branch and in PR #58 (closed unmerged) if you want to fork and continue from it.
>
mcp-maintainer-toolkitremains published on npm at0.1.5; archiving does not unpublish it, but it will receive no further updates.
>
Known defect, unfixed: a single module-scopeMcpServeris shared across all Streamable HTTP sessions.Server._clientCapabilitiesis one field overwritten by the most recent session, so a session that advertisedelicitationcan have it overwritten by one that did not — a laterelicitationAllOptionalcall then hangs for the full 10-minute request timeout. Anyone reviving this should restructure around SDK v2'screateMcpHandler/McpServerFactory, which gives each session its own server instance.
A Model Context Protocol (MCP) server with utilities to help with maintaining MCP repositories. This toolkit provides various tools and utilities for repository maintenance, testing, and development workflows.
npm install -g mcp-maintainer-toolkitOr install locally:
npm install mcp-maintainer-toolkitAfter global installation, you can run the server directly:
# Start with STDIO transport (default)
mcp-maintainer-toolkit
# Start with SSE transport
mcp-maintainer-toolkit sse
# Start with Streamable HTTP transport
mcp-maintainer-toolkit streamableHttpimport { createServer } from 'mcp-maintainer-toolkit';
const { server, cleanup } = createServer();
// Use the server with your preferred transportIf installed locally, you can use the npm scripts:
# Build the project
npm run build
# Start development server with watch mode
npm run watch
# Start with different transports
npm run start # STDIO
npm run start:sse # SSE on port 3001
npm run start:streamableHttp # Streamable HTTP on port 3002PORT: Port for SSE and Streamable HTTP servers (default: 3001 for SSE, 3002 for Streamable HTTP)Add to your MCP client configuration:
{
"mcpServers": {
"maintainer-toolkit": {
"command": "mcp-maintainer-toolkit",
"args": []
}
}
}# Clone the repository
git clone https://github.com/olaservo/mcp-maintainer-toolkit.git
cd mcp-maintainer-toolkit
# Install dependencies
npm install
# Build the project
npm run build
# Start development with watch mode
npm run watch~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.