1. Conduid
  2. Science
  3. Grim
MCP server · Science

Grim

Security audit for AI agents. Finds code, dependency, exposure, secrets, and active-compromise gaps across any stack, with drift detection and SBOM.

37Low

Scored 26 days ago · breakdown

About Grim

Grim is an MCP server published by AbduljabbarBXR in the Science category: security audit for AI agents. Finds code, dependency, exposure, secrets, and active-compromise gaps across any stack, with drift detection and SBOM.

The repository has 1 stars and 0 forks, with the last commit 15 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add grim -- npx -y grim-mcp
npx
npx -y grim-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Grim

Powered by Claude · Grounded in docs

I know everything about Grim. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.6.4GRIM v0.6.4 · 2 Oct 2026What this release fixes A full audit of 0.6.3 against a deliberately vulnerable target. Every defect was reproduced before fixing, and each has a regression test. Detection gaps closed** SQL injection was undetectable in every language. No…
v0.6.2GRIM v0.6.2 · 19 Sep 2026Documentation refresh: detailed README and brand marks for editors, agents, and model providers.
v0.6.1GRIM v0.6.1 · 19 Sep 2026Detect Astro without astro.config, through the package.json dependency or the src/pages and src/layouts convention.
v0.6.0GRIM v0.6.0 · 19 Sep 2026SAST and taint coverage across C, C++, Objective C, Swift, Scala, Groovy, Elixir, Erlang, Lua, Perl, R, Julia, Nim, PowerShell, Shell, Terraform, Dockerfile, Clojure, and Haskell. Astro API routes labelled astro.
v0.5.4GRIM v0.5.4 · 19 Sep 2026Only invoked Laravel mapping methods register their route file.
Questions

About Grim

How do I install Grim?

Run claude mcp add grim -- npx -y grim-mcp, then add the server to your MCP client's configuration.

Is Grim safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Grim still maintained?

Yes — the latest release is v0.6.4 (2 Oct 2026), and the last commit was 15 days ago. The repository has 1 stars and 2 open issues.