MCP Observatory
1m ago Tracked 59,480 Last 1m ago 24h 2,586
github TypeScript re-analysis due

max-listov/stitchkit

v0.90.3
github

Contract-first backend framework for Bun and Node — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client.

maintainer
max-listov
licence
MIT
first seen
2026-06-04
last seen
2026-09-16
releases · 30d
183
short id

max-listov/stitchkit is an MCP server distributed on github, maintained by max-listov, tracked here since June 2026. It has shipped 319 releases (currently 0.90.3) and exposes 1 tool. Tools include view_file. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

lifetime releases
319
releases · 30d
183
dependencies
2
dependents
0
what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 1 tool appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 1
  • view_file
release cadence · 90d 292 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
v0.90.5 2026-09-16 github
v0.90.4 2026-09-16 github
v0.90.3 2026-09-15 github
0.90.3 2026-09-15 npm
v0.90.2 2026-09-15 github
0.90.2 2026-09-15 npm
v0.90.1 2026-09-15 github
0.90.1 2026-09-15 npm
v0.90.0 2026-09-15 github
0.90.0 2026-09-15 npm

view all →