Development Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Development Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server for extracting TypeScript imports and method bodies. This tool runs as an HTTP server with authentication and provides tools to extract specific methods/functions along with their relevant imports and class properties from TypeScript files.
This is an HTTP-based MCP server that:
.mcp-tokens.jsonnpm install
npm run buildnpm startThe server will start on port 4001. You can customize the port:
PORT=3000 npm startnpm startcurl -X POST http://localhost:4001/register \
-H "Content-Type: application/json" \
-d '{"clientId": "my-client"}'Save the returned token.
curl -X POST http://localhost:4001/mcp \
-H "Authorization: Bearer YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "list_typescript_methods",
"arguments": {"filePath": "test-examples/sample.ts"}
}
}'curl -X POST http://localhost:4001/mcp \
-H "Authorization: Bearer YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 2,
"method": "tools/call",
"params": {
"name": "extract_typescript_method",
"arguments": {
"filePath": "test-examples/sample.ts",
"methodName": "fetchUser"
}
}
}'| Endpoint | Method | Auth | Description |
|---|---|---|---|
/register | POST | No | Register client and obtain Bearer token |
/mcp | POST | Bearer | Call MCP tools |
/mcp | GET | Bearer | SSE streaming endpoint |
list_typescript_methodsLists all method and function names in a TypeScript file.
Parameters:
filePath (string, required): Path to the TypeScript fileExample:
curl -X POST http://localhost:4001/mcp \
-H "Authorization: Bearer TOKEN" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "list_typescript_methods",
"arguments": {"filePath": "src/app.ts"}
}
}'extract_typescript_methodExtracts a method/function with its relevant imports and class properties.
Parameters:
filePath (string, required): Path to the TypeScript filemethodName (string, required): Name of the method/function to extractExample:
curl -X POST http://localhost:4001/mcp \
-H "Authorization: Bearer TOKEN" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "extract_typescript_method",
"arguments": {
"filePath": "src/app.ts",
"methodName": "handleRequest"
}
}
}'Output Format:
Method Name: handleRequest
File Path: src/app.ts
Line Number: 45
Imports:
import { helper } from './utils';
Properties/Constants:
private config: Config;
static MAX_RETRIES = 3;
Method Body:
async handleRequest(req: Request): Promise<Response> {
// method body
}read_fileReads and returns the entire contents of a file.
Parameters:
filePath (string, required): Path to the fileExample:
curl -X POST http://localhost:4001/mcp \
-H "Authorization: Bearer TOKEN" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "read_file",
"arguments": {"filePath": "src/app.ts"}
}
}'Output Format:
[Full file contents]# Watch mode for development
npm run watch
# Build for production
npm run build
# Run tests
npm testts-morph to parse TypeScript files into an AST./, ../, src/) that are usedcontext-tree/
├── src/
│ ├── index.ts # MCP HTTP server
│ └── extractor.ts # TypeScript extraction logic
├── test-examples/
│ ├── sample.ts # Example TypeScript file
│ └── test-extractor.ts # Test script
├── build/ # Compiled JavaScript
├── package.json
├── tsconfig.json
└── .mcp-tokens.json # Stored authentication tokens@modelcontextprotocol/sdk: MCP protocol implementationts-morph: TypeScript AST manipulationexpress: Web serverzod: Schema validationQUICKSTART.md - Get up and running in minutesUSAGE.md - Detailed usage guide with examplesPROJECT_SUMMARY.md - Architecture and technical detailsMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.