cra-check
Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.
¿Debería usar esto?
Calidad y seguridad
Basado en el análisis automatizado de las definiciones de herramientas y el cumplimiento del protocolo.
Costo de contexto
Este es el número aproximado de tokens que se consumen cada vez que las herramientas del servidor se cargan en el contexto de un modelo. Los recuentos más altos reducen la atención disponible para otras tareas.
Instalar
Instalación con un clic
Agrega esto a tu archivo `claude_desktop_config.json`:
{
"mcpServers": {
"cra-check": {
"url": "https://api.tokenizen.nl/mcp"
}
}
}Puntos de conexión remotos
https://api.tokenizen.nl/mcpstreamable-httpQué puede hacer
Inventario de herramientas
Herramientas (1)
🟢check_github_repo(repo)
Reads up to about thirty public pages of a public GitHub repository and reports which of eight security signals are visible: a security policy that names a contact or a reporting link, a software bill of materials, proof of where releases come from, a lockfile, automatic updates of dependencies, security scans in CI, recent maintenance and a licence. For each signal that is not visible the answer says what would make it visible; a signal that could not be read completely is marked not measured, never as a gap. The eight signals are a selection related to topics in the EU Cyber Resilience Act. This is an indication from public data, not a compliance check, not a certificate and not legal advice; private repositories and hosts other than GitHub cannot be checked. Read only. Limited to a few checks per ten minutes per address.
Esquema de entrada
{
"type": "object",
"properties": {
"repo": {
"type": "string",
"minLength": 1,
"maxLength": 300,
"description": "A public GitHub repository as owner/name, or its https://github.com/owner/name address"
}
},
"required": [
"repo"
],
"$schema": "http://json-schema.org/draft-07/schema#"
}Comunidad
Evidencia