Mcp Web — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Web (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"><img src="https://raw.githubusercontent.com/togo-framework/.github/main/profile/assets/togo-mark.svg" width="96" alt="togo"></p> <h1 align="center">@togo-framework/mcp-web</h1> <p align="center">The public <a href="https://modelcontextprotocol.io">MCP</a> server for togo — docs, the plugin marketplace, and plugin submission, for any agent.</p>
Live at https://mcp.to-go.dev/mcp (Streamable HTTP). Add it to an MCP client:
{ "mcpServers": { "togo": { "type": "http", "url": "https://mcp.to-go.dev/mcp" } } }| Tool | Purpose |
|---|---|
framework_overview | What togo is, the stack, quick start |
list_plugins | The plugin marketplace (optional category filter) |
get_plugin | A plugin’s details + README |
search_docs | Search repos/docs by keyword |
get_doc | A repo’s full README as Markdown |
submit_plugin | Prefilled GitHub issue to add a plugin |
npm install
npm run build:catalog # snapshot togo-framework repos → data/catalog.json (needs gh)
npm start # serves :8080 (POST /mcp)Served by a container on the togo box behind Nginx Proxy Manager; auto-deploys on push (.github/workflows/deploy.yml).
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.