Mmcp.market

Dev MCP server

by sketchxflow.com·com.sketchxflow/dev-mcp·v0.3.0
No reviews yet

SketchXFlow delivery team: pull client requirements, post updates, log time, move milestones.

C58/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
New

54 downloads/wk

Reviews

Write one

Nobody has reviewed Dev yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Dev tools (9, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • sketchxflow_dev_log_time

    Log hours worked on a project (coarse — a day's hours), optionally against a module key or milestone. Staff API keys only.

  • sketchxflow_dev_login

    Sign this machine in as a SketchXFlow team member — no API key to paste. Returns a link and a short code: the developer opens the link in a browser where they are signed in to the staff console, checks the code matches and approves. Call it again (or any other tool) after approving. Already signed in? It says who as.

  • sketchxflow_dev_logout

    Forget this machine's key. To end it server-side as well, revoke the key named “Developer MCP · <machine>” in Account → API keys.

  • sketchxflow_dev_messagewrite action

    Send a message in the project room. internal=true keeps it to the team. Staff API keys only.

  • sketchxflow_dev_milestone

    Mark a milestone as started, or submit it for the client's review (which starts their review window). Staff API keys only.

  • sketchxflow_dev_pull

    The frozen requirements as text, the priced modules, the milestones with dates and the latest client messages — everything needed to start building. Staff API keys only.

  • sketchxflow_dev_updatewrite action

    Post a progress update the client sees in their project room (markdown), optionally against a milestone. Staff API keys only.

  • sketchxflow_dev_version

    Report which version of the SketchXFlow developer MCP is running, whether a newer one is published, and whether the configured SKETCHXFLOW_API_KEY (shown only by its sk_live_ab12cd… prefix) belongs to an active SketchXFlow team member. Free. Call it first when another tool refuses.

  • sketchxflow_dev_work

    Live development-services projects assigned to you, with state, progress and what needs attention. Set mine=false for every live project. Staff API keys only.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancerepository not readable: unknown3/15
  • Maintainer identityverified namespace with website, no repo4/10
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

Runs npx -y @sketchxflow/dev-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add dev-mcp -- npx -y @sketchxflow/dev-mcp
Add to Cursor

Dev: common questions

Is Dev MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the Dev safety report
How do I install Dev?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Dev need an API key?
Yes. The registry entry asks for SKETCHXFLOW_API_KEY.
Is Dev maintained?
The latest release is v0.3.0.

More from sketchxflow.com →