Squatch Harbor Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Squatch Harbor Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Search your own past Claude sessions, locally. Indexes ~/.claude/projects/*.jsonl into a local SQLite FTS5 file and searches it — "when did I set up auth?", "how did we solve X?". No cloud, nothing leaves your machine. Stdlib only (no numpy). An MCP server, so it works in Claude Desktop (Chat) and Claude Code.
uvx fetches + runs)uvx --from git+https://github.com/squatch-c-c/squatch-harbor-mcp squatch-harbor-mcpRequires uv (curl -LsSf https://astral.sh/uv/install.sh | sh).
~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"harbor": { "command": "uvx", "args": ["--from", "git+https://github.com/squatch-c-c/squatch-harbor-mcp", "squatch-harbor-mcp"] }
}
}Restart Claude, then: "ingest my harbor, then search it for when I set up the egress guard."
| Tool | What it does |
|---|---|
harbor_ingest(sessions_dir?, rebuild?) | Index your sessions (incremental; run first). |
harbor_search(query, k=8) | Top matches — session, date, role, snippet. |
harbor_stats() | Index size + date range. |
Local-only. Index lives at ~/.harbor/harbor-mcp.db. Part of the Squatch system.
FSL-1.1-ALv2 (Functional Source License) — source-available; converts to Apache-2.0 two years after each release. Use freely except a Competing Use. © 2026 Tom Rankin.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.