1. Conduid
  2. Blockchain
  3. cmdxray
MCP server · Blockchain

cmdxray

by · github.com/aurelio-nakamura/cmdxray

Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.

Unclaimed blockchain
InstallView source
37Low

Scored a month ago · breakdown

About cmdxray

cmdxray is an MCP server published by aurelio-nakamura in the Blockchain category: offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add cmdxray -- npx -y cmdxray
npx
npx -y cmdxray

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about cmdxray

Powered by Claude · Grounded in docs

I know everything about cmdxray. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.27.0v0.27.0 — cmdxray check + guard: confirm before you run a dangerous command · 19 Sep 2026`cmdxray guard` — stop yourself before `rm -rf /` Add one line to your `~/.bashrc`: eval "$(cmdxray guard bash)" Now, right before a command the offline danger engine flags as destructive actually runs (`rm -rf /`, `curl | sudo bash`,…
v0.26.1cmdxray v0.26.1 — fix npx MCP invocation · 19 Sep 2026Fix: the documented MCP config `npx -y cmdxray-mcp` fails with a 404 because `cmdxray-mcp` is a *bin* of the `cmdxray` package, not a package of its own. v0.26.1 adds an `mcp` subcommand to the main bin so the robust, copy-pasteable…
v0.26.0cmdxray v0.26.0 — lint_script MCP tool · 19 Sep 2026Adds a third MCP tool, `lint_script`, so an AI agent can safety-scan a whole shell script it just generated (multi-line text) in one call and get every destructive or risky command back with its line number — powered by the same offline,…
v0.25.0v0.25.0 — cmdxray lint (CI / pre-commit dangerous-command gate) · 19 Sep 2026cmdxray lint — scan files for dangerous shell commands New `cmdxray lint <files...>` subcommand turns cmdxray's offline danger engine into a CI / pre-commit gate. It scans shell scripts, Dockerfiles, CI YAML `run:` steps, Makefiles and…
v0.24.1v0.24.1 · 19 Sep 2026Add `mcpName` to package.json to link the npm package to the official MCP Registry namespace `io.github.aurelio-nakamura/cmdxray`, and publish the cmdxray MCP server (explain_command + check_command_safety) to…
Questions

About cmdxray

How do I install cmdxray?

Run claude mcp add cmdxray -- npx -y cmdxray, then add the server to your MCP client's configuration.

Is cmdxray safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is cmdxray still maintained?

Yes — the latest release is v0.27.0 (19 Sep 2026), and the last commit was a month ago. The repository has 0 stars.