About Verum
Verum is an MCP server published by IBMark in the Security category: deterministic, whole-program, multi-language code analysis.
Recent commit activity is the strongest signal that reported issues will get attention.
Install
From source
git clone https://github.com/IBMark/verumThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about Verum
Powered by Claude · Grounded in docs
I know everything about Verum. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v0.1.7v0.1.7 · 29 Aug 2026Added Python/TypeScript/JavaScript security parity.** The app-security detectors that used to be PHP-first now cover the languages most new services ship in: `HardcodedSecret` also fires on provider-shaped token literals (`sk_live_`,…
v0.1.6v0.1.6 · 29 Aug 2026Added `verum check` - the machine verdict.** One command shaped for a tool loop: analyse and print a single JSON verdict (`pass`, severity counts, findings each carrying a one-sentence `why` and a concrete `fix_hint`) with stable exit…
v0.1.4Verum v0.1.4 · 19 Aug 2026Deterministic, whole-program code analyzer. `cargo install verum`, `cargo binstall verum`, `docker run ghcr.io/ibmark/verum`, or grab a binary below. 0.1.4 - false-positive hardening Validated by running the analyzer across ~90 real-world…
v0.1.3Verum v0.1.3 · 19 Aug 2026Deterministic, whole-program code analyzer. `cargo install verum`, `cargo binstall verum`, `docker run ghcr.io/ibmark/verum`, or grab a binary below. New in 0.1.3 SARIF output** - `verum report . --format sarif` emits SARIF 2.1.0, so…
v0.1.2Verum v0.1.2 · 19 Aug 2026Verum is a deterministic, whole-program code analyzer. The same source tree always produces byte-identical ids, findings, and score, so it works as a CI gate you can diff. Install cargo install verum Or download a prebuilt binary for your…