Yotta Verify Mcp
Pre-install security scanner for AI agent skills (local stdio MCP). Offline static scan; no upload.
- Transport
- Not stated
- Package
- —
- Registry id
- io.github.YottaMeta/yotta-verify-mcp
No install snippet on purpose. A working MCP config is a command, its arguments and an environment block — the last two are where API keys live, so this catalogue never stores them and cannot publish them. Follow the link above for the authors' own instructions.
YottaMeta's pre-install security scanner for Agent skills, exposed as a stdio MCP server. Before you install any skill, plugin or MCP server, it runs a deterministic static scan — prompt injection, malicious patterns, SKILL.md integrity and permissions — and returns a verdict, an audited badge, a CI gate and a report as MCP tools.
Activates when configuring the 元信 MCP server in an MCP client, wiring a trust-scan into an agent / workflow, or calling the MCP tools.
Zero dependencies (Python 3.8+ standard library); Windows + Linux + macOS; fully local and offline — no network calls, no execution of the scanned code.
What it is
The skill / plugin market has a trust problem: a 2025 survey of 22,511 skills found 140,963 issues, and 36% contain prompt injection. 元信 MCP gives you a deterministic answer before you install — the same scan as the yotta-verify CLI, exposed as four MCP tools so any MCP client (Claude, VS Code, Codex, Cursor, …) can call it.
It is a pre-install verifier, not a sandbox and not a runtime monitor: it only reads files and prints a report. It never executes the scanned code, never connects to the network for the scan, and never fixes anything.
Why use it
| Advantage | Description |
|---|---|
| Trust before install | A deterministic verdict for any skill / MCP server, instead of "trust me" |
| Zero dependency | Python 3.8+ standard library; no daemon / database / network |
| Fully local offline | Scans directories and npm tarballs on disk; nothing is executed or uploaded |
| Drop into any MCP client | Standard stdio MCP server — configure the server, and the four tools appear |
| Family synergy | Same rules table as yotta-verify (single source); verdicts merge with yotta-vetter / yotta-security-audit |
| Free & open | MIT; the whole scanner is free |
MCP tools
| Tool | What it does |
|---|---|
scan_skill |
Pre-install scan: target (dir / .tgz / npm package) → verdict + severity counts + findings |
generate_badge |
Audited badge: local SVG + shields.io URL; folds in validate / vetter / audit / version / tests |
gate_check |
CI gate: fail when the worst severity exceeds max_severity (default medium) |
get_report |
Verification report: Markdown or JSON, same format as the CLI |
MCP client configuration
MCP configuration is optional. An AI agent may show you the target config file, the exact mcpServers JSON, and the effect, then wait for your explicit consent before writing anything. If you decline, use the bundled CLI scanner directly; the scan result is unchanged.
Tool reference
scan_skill
Scan a skill directory or package before install.
| Param | Type | Required | Meaning |
|---|---|---|---|
target |
string | yes | Skill directory path, .tgz / .tar.gz path, or npm package name (auto npm pack to a temp dir, then scan) |
From the project's README.