Is N1Mm Mcp safe to install?

SaferSkills independently audited N1Mm Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.8 KB · Markdown

n1mm-mcp

MCP server for N1MM Logger+ — live contest state via UDP broadcast.

Part of the qso-graph amateur radio MCP ecosystem.

Install

pip install n1mm-mcp

Tools (Phase 1 — 8 Composite State Views)

Tool	Description
`n1mm_current_state`	Station snapshot — connection, contest, operator, radios
`n1mm_lookup`	Pre-log callsign (Contest-Copilot trigger) + current band/mode
`n1mm_contacts`	QSO log — recent contacts, edits, deletes
`n1mm_bandmap`	Live spots, mult targets, band activity
`n1mm_performance`	Score, rate, bands, run/S&P, hourly timeline
`n1mm_multipliers`	Mult grid, needs, value analysis
`n1mm_clock`	Contest timing, off-time, pacing
`n1mm_diagnostics`	Server health, parse errors, memory
`get_version_info`	Service version + upstream UDP contract version (fleet identity attestation)

Quick Start

In N1MM: Config → Configure Ports → Broadcast Data — enable all message types
N1MM broadcasts to 255.255.255.255:12060 by default

Claude Desktop

{
  "mcpServers": {
    "n1mm": {
      "command": "n1mm-mcp"
    }
  }
}

Or with uvx (no install needed):

{
  "mcpServers": {
    "n1mm": {
      "command": "uvx",
      "args": ["n1mm-mcp"]
    }
  }
}

Claude Code

claude mcp add n1mm-mcp -- n1mm-mcp

Architecture

N1MM Logger+ (Windows)
    │ UDP broadcast (port 12060, XML)
    ▼
n1mm-mcp (Python, any OS on same LAN)
    ├── UDP Listener Thread (background)
    ├── State Engine (in-memory, partitioned by StationName)
    │   MCP protocol (stdio)
    ▼
AI Assistant (Claude, qsp-mcp, etc.)

Passive listener — N1MM doesn't know we exist
Stream-to-state — UDP packets → in-memory state → tool queries
Multi-station — state partitioned by StationName (SO2R, multi-op)
Zero auth — no credentials needed

CLI Options

Option	Default	Description
`--port`	`12060`	UDP listen port
`--transport`	`stdio`	MCP transport (`stdio` or `streamable-http`)
`--heartbeat-timeout`	`60`	Seconds before connection goes stale
`--stale-timeout`	`900`	Seconds before connection goes disconnected
`--max-spots`	`2000`	Maximum spots in bandmap buffer
`--spot-ttl`	`30`	Spot time-to-live in minutes

Testing

# Mock mode (no N1MM needed)
N1MM_MCP_MOCK=1 n1mm-mcp

# MCP Inspector
n1mm-mcp --transport streamable-http

Development

git clone https://github.com/qso-graph/n1mm-mcp.git
cd n1mm-mcp
pip install -e .
N1MM_MCP_MOCK=1 n1mm-mcp

License

GPL-3.0-or-later

N1Mm Mcp— agent skill

Is N1Mm Mcp safe to install?

n1mm-mcp

Install

Tools (Phase 1 — 8 Composite State Views)

Quick Start

Claude Desktop

Claude Code

Architecture

CLI Options

Testing

Development

License

Audit the pieces. Scan the whole. Decide.