Seojeom Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Seojeom Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Canonical repo location: packages/seojeom-mcp
During the Godot-only decommission transition, apps/desktop/mcp-server may already be absent. New work should treat this package path as the source of truth. If a deprecated local lane still needs the old path to exist, recreate the minimal metadata-wrapper with pnpm apply:legacy-compat-wrapper.
Local-first MCP server for Claude and Codex.
seojeom-mcp binds to the project currently opened by the Seojeom desktop app or Godot launcher through a shared registry directory, then serves that project's local wiki and graph data over stdio.
claude mcp add -s local \
-e SEOJEOM_SHARED_REGISTRY_DIR=/mnt/c/Users/<you>/.seojeom/registry \
seojeom -- npm exec --yes --package=seojeom-mcp seojeom-mcp -- \
--router \
--host-kind auto \
--approval-mode promptAdd this to claude_desktop_config.json and restart Claude Desktop:
{
"mcpServers": {
"seojeom": {
"command": "npm",
"env": {
"SEOJEOM_SHARED_REGISTRY_DIR": "<shared-registry-dir>"
},
"args": [
"exec",
"--yes",
"--package=seojeom-mcp",
"seojeom-mcp",
"--",
"--router",
"--host-kind", "auto",
"--approval-mode", "prompt"
]
}
}
}npm exec --yes --package=seojeom-mcp seojeom-mcp -- --print-claude-onboardingThe exact tool surface is discovered at runtime through MCP tools/list.
stdionpm exec --yes --package=seojeom-mcp seojeom-mcp -->=20.20.0Running pnpm build in this package is a dual-output build:
dist/index.js and the rest of dist/** stay available as the local source/runtime HTTP sidecar surface used by Godot and other repo-local lanes.public-package/dist/standalone.js is the staged npm publish surfaceAfter a successful build, you can verify both lanes with:
pnpm smoke:build-layoutGodot-side source verification can also run the local HTTP sidecar smoke directly from the canonical package root:
pnpm smoke:sidecar-healthseojeom-mcp is not one uniform surface. Treat these as separate contracts:
stdioLICENSE, README.md, bin/seojeom-mcp, dist/standalone.js, package.jsonThis is the only contract guaranteed by the published npm package.
This source-tree runtime is intentionally larger than the public package.
These desktop-coupled capabilities are not part of the standalone npm guarantee.
io.github.seojeom/seojeom-mcpnpm publish --provenancehttps://github.com/seojeom/seojeom-mcphttps://github.com/seojeom/seojeom-mcp/issues~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.