candor is an MCP server published by tombaldwin in the Developer Tools category: per-function effect analysis for agents: blast radius, what reaches the network, gate verdicts.
The repository has 1 stars and 0 forks, with the last commit 5 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
Claude Code
claude mcp add candor -- npx -y candor-ts
npx
npx -y candor-ts
This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about candor
Powered by Claude · Grounded in docs
I know everything about candor. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v0.39.2candor-ts v0.39.2 · 22 Sep 2026[0.39.2] — 2026-09-22 ⚠ SOUNDNESS R531b — AN ARROW A CALL RESOLVES TO, THAT NO BINDING SITE EVER NAMED, WAS SILENT. A cardinal sin (silent under-report), pre-existing: byte-identical on published v0.38.3, v0.39.0, v0.39.1 and at…
v0.39.1candor-ts v0.39.1 · 20 Sep 2026[0.39.1] — 2026-09-21 ⚠ SOUNDNESS R519 — MINTING A STRUCTURAL MEMBER MOVED ITS BODY OUT OF THE ENCLOSING UNIT, AND THE ENCLOSING FUNCTION THEN READ PURE. A cardinal sin (silent under-report), shipped in v0.39.0 and bisected to…
v0.39.0candor-ts v0.39.0 · 20 Sep 2026⚠ KNOWN ISSUE IN THIS RELEASE — SOUNDNESS R519, fixed in 0.39.1 This release contains a silent under-report. A function that builds a structural implementor of an interface declared by a dependency can disappear from `functions[]`…
v0.38.3candor-ts v0.38.3 · 16 Sep 2026[0.38.3] — 2026-09-16 No engine change since 0.38.2 (R439, the condition-map silent under-report, shipped in that release). Released to keep the family line aligned at 0.38.3.
v0.38.2candor-ts v0.38.2 · 15 Sep 2026[0.38.2] — 2026-09-15 A `package.json` subpath-`imports` CONDITION MAP no longer resolves one arm silently (SOUNDNESS R439 — a cardinal-sin fix). `"imports": {"#impl": {"node": "./a.js", "browser": "./b.js"}}` resolves to exactly one…
Run claude mcp add candor -- npx -y candor-ts, then add the server to your MCP client's configuration.
Is candor safe to use with an AI agent?
Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.
Is candor still maintained?
Yes — the latest release is v0.39.2 (22 Sep 2026), and the last commit was 5 days ago. The repository has 1 stars.