1. Conduid
  2. Files
  3. Scopecheck
MCP server · Files

Scopecheck

by · github.com/iamudayrathore/mcp-scopecheck

Static security auditing for Python MCP servers, trace reachable capabilities and incomplete analysis without executing target code.

Unclaimed appsecmcpmodel-context-protocolpythonsarifsecuritystatic-analysis
InstallView source
34Low

Scored 28 days ago · breakdown

About Scopecheck

Scopecheck is an MCP server published by iamudayrathore in the Files category: static security auditing for Python MCP servers, trace reachable capabilities and incomplete analysis without executing target code.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/iamudayrathore/mcp-scopecheck

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Scopecheck

Powered by Claude · Grounded in docs

I know everything about Scopecheck. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.2.3MCP ScopeCheck v0.2.3 · 20 Aug 2026MCP ScopeCheck v0.2.3 Correctness release for tool identity, control-flow bindings, and local-call classification. Upgrading is recommended before relying on a clean v0.2 audit. What changed Registered tools retain their exact function…
v0.2.0MCP ScopeCheck v0.2.0 · 19 Aug 2026MCP ScopeCheck v0.2.0 This trust-first reachability release analyzes more project-local Python behavior without silently implying that unsupported behavior was checked. It retains the non-executing AST boundary and adds no runtime…
v0.1.2MCP ScopeCheck v0.1.2 · 16 Aug 2026MCP ScopeCheck v0.1.2 This release hardens ScopeCheck's non-executing audit boundary and makes its deterministic findings more precise without adding runtime dependencies or network calls. Security boundary Target-controlled terminal…
v0.1.1MCP ScopeCheck v0.1.1 · 13 Aug 2026MCP ScopeCheck v0.1.1 This patch updates the repository owner identity and adds the reviewed PyPI Trusted Publishing workflow. Repository metadata now points to `https://github.com/iamudayrathore/mcp-scopecheck`. PyPI publication is…
v0.1.0MCP ScopeCheck v0.1.0 · 13 Aug 2026MCP ScopeCheck v0.1.0 MCP ScopeCheck is a pre-install static auditor that compares a Python MCP tool's declared contract with security-relevant behavior reachable from its source—without importing or running the server. Included Local…
Questions

About Scopecheck

How do I install Scopecheck?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Scopecheck safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Scopecheck still maintained?

Yes — the latest release is v0.2.3 (20 Aug 2026), and the last commit was a month ago. The repository has 0 stars.