1. Conduid
  2. AI
  3. Mcpscore Action
MCP server · AI

Mcpscore Action

by · github.com/mcp-box/mcpscore-action

Audit an MCP server with mcpscore: score it, gate CI on a threshold, and comment the report on the PR.

Unclaimed github-actionmcpmcp-servermodel-context-protocolquality
InstallView source
34Low

Scored 14 days ago · breakdown

About Mcpscore Action

Mcpscore Action is an MCP server published by mcp-box in the AI category: audit an MCP server with mcpscore: score it, gate CI on a threshold, and comment the report on the PR.

The repository has 2 stars and 0 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/mcp-box/mcpscore-action

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mcpscore Action

Powered by Claude · Grounded in docs

I know everything about Mcpscore Action. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v1.2.0v1.2.0 · 10 Sep 2026Added `sarif-path` input: the failed rules as SARIF 2.1.0 for GitHub code scanning. Set it to a file and add a `github/codeql-action/upload-sarif` step, and every failed rule becomes an alert in the repository's Security tab, keyed on…
v1.1.1v1.1.1 · 7 Sep 2026Fixed The comment token no longer reaches the audited server. The audit subprocess inherited the step environment, including the `github-token` input, so a local target (server code from the pull request under review) could read a…
v1.1.0v1.1.0 · 5 Sep 2026Added Picks up a `mcpscore.toml` from the checkout. Rules turned off or re-ranked in the repository's configuration (or `[tool.mcpscore]` in `pyproject.toml`) shape the score the action gates on, and the PR comment names the file, what…
v1.0.1v1.0.1 - Runtime refresh · 25 Aug 2026Bumps the embedded astral-sh/setup-uv from 8.2.0 to 10.0.1 (transient manifest-timeout resilience, current uv checksums) and refreshes the version-input example. The audited mcpscore engine is unaffected: the action always runs the latest…
v1.0.0v1.0.0 - Audit MCP servers in CI · 12 Jul 2026First release of the mcpscore GitHub Action — Lighthouse for MCP in your CI. Audit an MCP server on every pull request, fail the build when quality drops below a threshold you set, and get the report as a…
Questions

About Mcpscore Action

How do I install Mcpscore Action?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mcpscore Action safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mcpscore Action still maintained?

Yes — the latest release is v1.2.0 (10 Sep 2026), and the last commit was a month ago. The repository has 2 stars.