Husk MCP server
Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
A91/100grade A
Adoption
Growing
6 stars72 downloads/wk
Reviews
Write oneNobody has reviewed Husk yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Husk tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
no findings
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 5 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Install directly
Runs npx -y husk-sec on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add husk -- npx -y husk-sec
Husk: common questions
- Is Husk MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Husk safety report
- How do I install Husk?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Husk need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Husk maintained?
- The last commit was 5 days ago (2026-09-14). The latest release is v0.1.2.
- What can I use instead of Husk?
- Servers from other publishers that do the same job: Agent-Native Chat MCP server, mcptoon MCP server and haiku.rag MCP server. Compare all Husk alternatives.
Alternatives to Husk
Same job from other publishers: the closest match first, then the best rated.
- Agent-Native ChatMinimal chat-first app with durable threads, actions, and the app-agent loopnot reviewedEstablishedA
- mcptoonZero-dependency MCP client: one synced config for every agent, 581-token listings, not 71,929.not reviewedEstablishedB
- haiku.ragLocal-first agentic RAG with citations - hybrid search, reranking, multimodal document retrievalnot reviewedEstablishedA
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedC
- Munim Computer UseAccessibility-first desktop control for any agent: background input, agent pointer, zoom, Chrome.not reviewedGrowingA