MCP Observatory
8m ago Tracked 59,479 Last 8m ago 24h 2,575
github TypeScript re-analysis due

faelscarpato/mrcp-engine

github

Deterministic AST code-intelligence engine for AI agents — MCP server + REST API for architecture analysis, security audits, and doc generation.

maintainer
faelscarpato
licence
NOASSERTION
first seen
2026-08-23
last seen
2026-09-17
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools
transport stdio · http counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • analyze_repository
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit be1f940 · analyzer v33 · 4d ago

skills & prompt files 6

danger signals2

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 221

filesystem 31

  • fs faelscarpato-mrcp-engine-be1f940/api/routes.ts :3 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/mrcp-vscode-2.5.0.vsix!/extension/out/commands/export-report.js :39 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/mrcp-vscode-2.5.0.vsix!/extension/out/engine/local-analyzer.js :38 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/mrcp-vscode-2.6.0.vsix!/extension/out/commands/export-report.js :39 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/mrcp-vscode-2.6.0.vsix!/extension/out/engine/analyzer-helpers.js :41 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/mrcp-vscode-2.6.0.vsix!/extension/out/engine/api-scanner.js :37 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/mrcp-vscode-2.6.0.vsix!/extension/out/engine/local-analyzer.js :37 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/mrcp-vscode-2.6.0.vsix!/extension/out/engine/metrics.js :39 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/out/commands/export-report.js :62 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/out/engine/analyzer-helpers.js :64 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/out/engine/api-scanner.js :60 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/out/engine/local-analyzer.js :60 const fs = __importStar(require("fs"));
show 19 more
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/out/engine/metrics.js :62 const fs = __importStar(require("fs"));
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/src/commands/export-report.ts :3 import * as fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/src/engine/analyzer-helpers.ts :1 import * as fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/src/engine/api-scanner.ts :1 import * as fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/src/engine/local-analyzer.ts :1 import * as fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/apps/vscode/src/engine/metrics.ts :1 import * as fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/bin/interactive-ui.js :2 import { writeFileSync, existsSync, mkdirSync } from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/bin/mcp-handlers.mjs :1 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/bin/mrcp.js :13 import { writeFileSync, readFileSync, existsSync, mkdirSync } from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/cli/bin/mrcp.js :13 import { writeFileSync, readFileSync, existsSync } from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/cli/mcp-handlers.mjs :1 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/cli/run-standalone.ts :3 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/pipeline.ts :1 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/refactor-applier.ts :1 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/repo-fetcher.ts :1 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/sources/local-dir.ts :13 import * as fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/core/lib/cache.ts :1 import fs from "fs";
  • fs faelscarpato-mrcp-engine-be1f940/packages/core/lib/report-manager.ts :1 import fs from "fs";
  • fs (weak) faelscarpato-mrcp-engine-be1f940/scripts/build-grammar.mjs :16 import fs from "fs";

shell / exec 1

  • shell (weak) faelscarpato-mrcp-engine-be1f940/scripts/build-grammar.mjs :15 import { execSync } from "child_process";

network 18

  • net faelscarpato-mrcp-engine-be1f940/bin/interactive-ui.js :285 const res = await fetch(url);
  • net faelscarpato-mrcp-engine-be1f940/bin/mcp-handlers.mjs :227 const response = await fetch(`${MRCP_API_BASE}${endpoint}`);
  • net faelscarpato-mrcp-engine-be1f940/bin/mrcp.js :342 const response = await fetch(apiUrl);
  • net faelscarpato-mrcp-engine-be1f940/dev-server.ts :9 import { createServer, IncomingMessage, ServerResponse } from "node:http";
  • net faelscarpato-mrcp-engine-be1f940/mcp-bridge/mcp-server.mjs :46 const response = await fetch(apiUrl);
  • net faelscarpato-mrcp-engine-be1f940/packages/cli/bin/mrcp.js :38 const response = await fetch(apiUrl);
  • net faelscarpato-mrcp-engine-be1f940/packages/cli/mcp-handlers.mjs :232 const response = await fetch(`${MRCP_API_BASE}${endpoint}`);
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/api-sdk-builder.ts :104 ` const res = await fetch(url, options);`,
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/dependency-resolver.ts :70 const res = await fetch(registryUrl, {
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/parsers/tree-sitter-loader.ts :167 const response = await fetch(wasmPath);
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/repo-fetcher.ts :13 return fetch(url, { ...options, signal: controller.signal }).finally(() =>
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/sources/github-api.ts :26 return fetch(url, { ...options, signal: controller.signal }).finally(() =>
show 6 more
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/sources/website.ts :49 const response = await fetch(ctx.repoUrl);
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/telemetry.ts :19 const response = await fetch(
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/web/page-cloner.ts :98 const res = await fetch(targetUrl, {
  • net faelscarpato-mrcp-engine-be1f940/packages/core/lib/web/scraper-tools.ts :98 const res = await fetch(
  • net faelscarpato-mrcp-engine-be1f940/src/executors/llmExecutor.ts :25 const response = await fetch(url, {
  • net faelscarpato-mrcp-engine-be1f940/src/services/analytics.ts :19 fetch(

secrets 17

  • secrets faelscarpato-mrcp-engine-be1f940/api/github/webhook.ts :6 secret: process.env.GITHUB_WEBHOOK_SECRET || "",
  • secrets faelscarpato-mrcp-engine-be1f940/api/mcp-executor.ts :19 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/api/routes.ts :67 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/api/v2/cognitive/process.ts :24 if (authHeader !== "Bearer " + process.env.MRCP_API_KEY) {
  • secrets faelscarpato-mrcp-engine-be1f940/packages/cli/run-standalone.ts :13 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/architecture-drift.ts :44 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/code-health.ts :54 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/context-pack.ts :104 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/dead-code-pruner.ts :32 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/full-suite.ts :94 githubToken = process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/impact-analysis.ts :39 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/repo-fetcher.ts :108 if (githubToken || process.env.GITHUB_TOKEN) {
show 5 more
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/security-audit.ts :144 githubToken: process.env.GITHUB_TOKEN,
  • secrets (weak) faelscarpato-mrcp-engine-be1f940/packages/core/lib/analysis/test-gap-analysis.ts :41 githubToken: process.env.GITHUB_TOKEN,
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/github/github-app-runner.ts :12 privateKey: process.env.GITHUB_PRIVATE_KEY?.replace(/\\n/g, "\n"),
  • secrets faelscarpato-mrcp-engine-be1f940/packages/core/lib/telemetry.ts :6 const apiSecret = process.env.GA_API_SECRET;
  • secrets faelscarpato-mrcp-engine-be1f940/src/services/analytics.ts :7 const apiSecret = process.env.GA_API_SECRET;

tool registrations 1

  • analyze_repository faelscarpato-mrcp-engine-be1f940/mcp-bridge/mcp-server.mjs :20

declared dependencies 32

  • @modelcontextprotocol/sdk@^1.30.0
  • date-fns@^4.1.0
  • tree-sitter-c@^0.24.1
  • tree-sitter-cobol@^0.0.1
  • tree-sitter-cpp@^0.23.4
  • tree-sitter-go@^0.25.0
  • tree-sitter-java@^0.23.5
  • tree-sitter-javascript@^0.25.0
  • tree-sitter-php@^0.24.2
  • tree-sitter-python@^0.25.0
  • tree-sitter-ruby@^0.23.1
  • tree-sitter-rust@^0.24.0
show 20 more
  • tree-sitter-typescript@^0.23.2
  • web-tree-sitter@^0.26.11
  • zod@^3.24.2
  • @eslint/js@^9.32.0
  • @types/node@^22.16.5
  • @vercel/node@^5.9.5
  • eslint@^9.32.0
  • eslint-config-prettier@^10.1.1
  • eslint-plugin-prettier@^5.2.6
  • eslint-plugin-react-hooks@^7.1.1
  • eslint-plugin-react-refresh@^0.5.4
  • globals@^15.15.0
  • jsdom@^30.0.1
  • prettier@^3.7.3
  • puppeteer@^25.5.0
  • tsx@^4.23.12
  • typescript@^5.8.3
  • typescript-eslint@^8.56.1
  • vite@^8.0.16
  • vitest@^4.1.10