Tangled Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Tangled Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for Tangled - a git collaboration platform built on AT Protocol.
note: this repository is mirrored to GitHub for deployment via FastMCP Cloud.
git clone https://tangled.org/zzstoatzz/tangled-mcp
cd tangled-mcp
just setup[!IMPORTANT] requiresuvandjust
create .env file:
TANGLED_HANDLE=your.handle
TANGLED_PASSWORD=your-app-password
# optional: only needed if using custom PDS (leave blank for auto-discovery)
TANGLED_PDS_URL=<details> <summary>MCP client installation instructions</summary>
# basic setup
claude mcp add tangled -- uvx tangled-mcp
# with credentials
claude mcp add tangled \
-e TANGLED_HANDLE=your.handle \
-e TANGLED_PASSWORD=your-app-password \
-- uvx tangled-mcpadd to your cursor settings (~/.cursor/mcp.json or .cursor/mcp.json):
{
"mcpServers": {
"tangled": {
"command": "uvx",
"args": ["tangled-mcp"],
"env": {
"TANGLED_HANDLE": "your.handle",
"TANGLED_PASSWORD": "your-app-password"
}
}
}
}codex mcp add tangled \
--env TANGLED_HANDLE=your.handle \
--env TANGLED_PASSWORD=your-app-password \
-- uvx tangled-mcpfor clients that support MCP server configuration, use:
uvx["tangled-mcp"]TANGLED_HANDLE, TANGLED_PASSWORD, and optionally TANGLED_PDS_URL</details>
uv run tangled-mcptangled://status - connection status (PDS auth + tangled accessibility)all tools accept repositories in owner/repo format (e.g., zzstoatzz/tangled-mcp). handles (with or without @ prefix) and DIDs are both supported for the owner.
list_repo_branches(repo, limit, cursor) - list branches for a repositorycreate_repo_issue(repo, title, body, labels) - create an issue with optional labelsupdate_repo_issue(repo, issue_id, title, body, labels) - update an issue's title, body, and/or labelsdelete_repo_issue(repo, issue_id) - delete an issuelist_repo_issues(repo, limit) - list issues for a repositorylist_repo_labels(repo) - list available labels for a repositorylist_repo_pulls(repo, limit) - list PRs targeting a repository (only shows PRs you created)just test # run tests
just check # run pre-commit checksmcp-name: io.github.zzstoatzz/tangled-mcp
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.