Invarato/jarroba-mcp

github
github analyzed 880520d

128 deterministic tools for your AI: logs, tests, SQL, diagrams, SPARQL. Local, no network.

maintainer
Invarato
licence
—
first seen
2026-10-03
last seen
2026-10-03
releases · 30d
0
github stars
0 reported
short id

Invarato/jarroba-mcp is an MCP server distributed on github, maintained by Invarato, tracked here since October 2026. It has shipped 0 releases and exposes 134 tools. Tools include abtest_analyze, abtest_sample_size, abtest_sequential, access_check, access_diff, access_who_can, and 128 more. Its composite risk grade is D — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 134 tools appear to reach filesystem, shell / exec, network and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-10-11: 6 tools added.

full security breakdown →

tools

20 of 134
  • abtest_analyze
  • abtest_sample_size
  • abtest_sequential
  • access_check
  • access_diff
  • access_who_can
  • actions_audit
  • agent_config_audit
  • api_breaking_changes
  • api_code_generate
  • api_collection_convert
  • api_collection_secrets
  • api_cors_preflight
  • archsim_simulate
  • archsim_validate
  • band_formation
  • binary_calc
  • bond_energy
  • calc_derive
  • calc_eval
All 134 tools →

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.