Mmcp.market

Graneth MCP server

by graneth.com·com.graneth/mcp-server·v0.7.1
No reviews yet

Pre-flight check for AI coding agents: hallucinated packages + secrets, 6 ecosystems, no account.

A87/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A87/100

full report

Adoption
Growing

0 stars49 downloads/wk

Reviews

Write one

Nobody has reviewed Graneth yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Graneth tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • Live reliabilityremote reachable in 72ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityauth enforced (unknown)9/15
  • Maintenancelast push 15 days ago15/15
  • Maintainer identitynamespace and repository owner differ; website matches verified namespace5/10
Overall 87/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Graneth repository's README, as published. We do not edit it. Read it on GitHub

graneth-mcp

Source for @graneth/mcp-server — an account-free MCP server that checks AI-written changes before they are committed: packages that do not exist, dependency risk shapes, and hardcoded secrets.

npx @graneth/mcp-server

Tool documentation, install snippets for Claude Code / Cursor / Windsurf, and the exact verdicts it returns: packages/mcp-server/README.md.

What is in this repository

What is not

The hosted scanning service is a separate, closed codebase: pull-request scanning, the second-pass LLM triage, policy enforcement, signed receipts and billing are not here and are not open source. This repository is the free tool and the checks it runs — which is the part you install on your machine, and therefore the part worth being able to read.

How it is maintained

Generated from the internal monorepo, which is the source of truth. Edits made directly here are overwritten on the next sync, so please open an issue rather than a patch — the fix lands upstream and comes back with the next release.

Three of core-checks' test files are held back: they assert that the secret rules fire, so their fixtures are literal example credentials, and every scanner — GitHub's push protection and this project's own — reads them as the real thing. The rules themselves are here in full (packages/core-checks/src/secrets.ts), as are the package's other tests.

Licence

MIT. See LICENSE.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add --transport http mcp-server https://graneth.com/api/mcp
Add to Cursor

Graneth: common questions

Is Graneth MCP server safe?
Yes, by our scan: it is graded A (87/100). Read the Graneth safety report
How do I install Graneth?
It runs remotely at graneth.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Graneth need an API key?
Yes. The endpoint refuses requests without credentials; the publisher's docs say how to get them.
Is Graneth maintained?
The last commit was 16 days ago (2026-09-08). The latest release is v0.7.1.
Is Graneth up?
100% of our last 21 checks got an answer. We check remote servers about four times a day.
What can I use instead of Graneth?
Servers from other publishers that do the same job: Phoenix Zero — L2 Health Oracle MCP server, NetOps Field Notes MCP server and Agentmap MCP server. Compare all Graneth alternatives.

Alternatives to Graneth

Same job from other publishers: the closest match first, then the best rated.

All Graneth alternatives →
  • Phoenix Zero — L2 Health Oracle
    Pre-flight L2 health check using kernel-level eBPF telemetry. PASS/DEGRADED/FAIL verdict.
    A
  • NetOps Field Notes
    Config drift, CIS/PCI checks, 802.1X diagnosis, certs inside configs, topology, change pre-flight.
    A
  • Agentmap
    The TS/JS-accurate repo map for coding agents: ts-morph import/symbol/call graph + MCP query tools
    A
  • Agentic Ledger
    Local-first flight recorder for AI agents: sessions, costs, loop runs, and stuck-loop flags.
    A
  • Trips
    Hand someone a complete trip as a private, editable map link. No account, no API key, no card.
    A
Graneth vs Phoenix Zero — L2 Health OracleGraneth vs NetOps Field NotesGraneth vs Agentmap

More from graneth.com →