{"name":"io.github.arthurpanhku/dvalincode","slug":"arthurpanhku-dvalincode","title":null,"description":"Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.","url":"https://mcp.market/server/arthurpanhku-dvalincode","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":44,"stars":117,"forks":12,"downloads_week":56,"last_push_at":"2026-09-18T09:27:01.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/arthurpanhku/dvalincode","website":null,"version":"0.19.0","remotes":[],"packages":[{"registryType":"npm","identifier":"dvalincode","version":"0.19.0","transport":{"type":"stdio"},"runtimeArguments":[{"isRequired":true,"value":"mcp-serve","type":"positional"},{"description":"Workspace root the server is allowed to touch. Repeatable. Defaults to the working directory.","type":"named","name":"--workspace","isRepeated":true},{"description":"Permission ceiling for dvalin_run_task: plan, auto, or bypass. Defaults to auto.","type":"named","name":"--max-permission-mode"}]}],"tools":[{"name":"delete_file","description":"Delete a file inside the workspace. Used internally by undo for file removal.","write_action":true,"price_micros":0,"input_schema":null},{"name":"dvalin_begin_verification","description":"Scan a workspace and persist a compact local verification workflow. Call this only after dvalin_scan reports a finding","write_action":false,"price_micros":0,"input_schema":null},{"name":"dvalin_get_evidence","description":"Render the Markdown audit evidence for a DvalinCode run (defaults to the latest run).","write_action":false,"price_micros":0,"input_schema":null},{"name":"dvalin_get_finding","description":"Read one compact finding from a persisted security workflow by fingerprint.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dvalin_get_session","description":"Get a durable DvalinCode session summary and its latest audit anchor.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dvalin_list_scanners","description":"List built-in and optional scanner engines, availability, and reviewable install commands.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dvalin_run_task","description":"Run a complete governed coding task inside DvalinCode. Long calls are expected; callers should use a generous timeout.","write_action":true,"price_micros":0,"input_schema":null},{"name":"dvalin_scan","description":"Scan a workspace for injection, hardcoded secrets, XSS, dynamic code execution, and unsafe shell use.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dvalin_verify_findings","description":"Re-scan a persisted workflow and independently verify that the blocked targets are gone and no new severe findings were introduced.","write_action":false,"price_micros":0,"input_schema":null},{"name":"dvalin_verify_fix","description":"Re-derive a Verified Fix Record offline. Recomputes the record hash and re-checks that its verdict follows from its own evidence,","write_action":false,"price_micros":0,"input_schema":null},{"name":"edit_file","description":"Replace exact text in a file. Reports a diff of the change.","write_action":false,"price_micros":0,"input_schema":null},{"name":"git_diff","description":"Show the current git diff, optionally scoped to one workspace file. Use before reviewing or summarizing changes.","write_action":false,"price_micros":0,"input_schema":null},{"name":"git_status","description":"Show the current git branch, last 5 commits, and changed files. Use this to understand the git state before making changes.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_files","description":"List files in the current workspace using a glob pattern.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_remediation_cases","description":"List local remediation cases for the current workspace.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_skills","description":"List installed DvalinCode skills and the tools they recommend.","write_action":false,"price_micros":0,"input_schema":null},{"name":"memory_delete","description":"Delete a stale or incorrect local memory entry by id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"memory_import","description":"Import memory from Claude Code, Hermes, or a Markdown file/directory into DvalinCode local memory. Use dryRun first to preview candidates.","write_action":false,"price_micros":0,"input_schema":null},{"name":"memory_search","description":"Search local user/project memory for preferences, project facts, decisions, workflows, and lessons.","write_action":false,"price_micros":0,"input_schema":null},{"name":"memory_update","description":"Update an existing local memory entry by id. Use to correct stale or imprecise memories.","write_action":true,"price_micros":0,"input_schema":null},{"name":"memory_write","description":"Store a curated local memory entry. Use for durable preferences, project facts, decisions, workflows, or lessons worth carrying into future sessions.","write_action":true,"price_micros":0,"input_schema":null},{"name":"prepare_remediation_worktree","description":"Create an isolated git worktree for a remediation case and update the case status.","write_action":true,"price_micros":0,"input_schema":null},{"name":"project_scripts","description":"List known project scripts and checks from package.json, Makefile, and common Python project files.","write_action":false,"price_micros":0,"input_schema":null},{"name":"read_file","description":"Read a UTF-8 text file from inside the workspace.","write_action":false,"price_micros":0,"input_schema":null},{"name":"read_skill","description":"Read an installed DvalinCode skill, including its SKILL.md instructions.","write_action":false,"price_micros":0,"input_schema":null},{"name":"run_check","description":"Run a project check such as test, typecheck, build, or lint with structured output. Prefer this over shell for standard validation.","write_action":true,"price_micros":0,"input_schema":null},{"name":"run_security_scan","description":"Run DvalinCode local security scan on the current workspace and optionally persist findings as remediation cases.","write_action":true,"price_micros":0,"input_schema":null},{"name":"run_security_suite","description":"Run the Dvalin white-box security suite (built-in rules plus installed Semgrep, Trivy, and OSV-Scanner) and persist remediation cases.","write_action":true,"price_micros":0,"input_schema":null},{"name":"search_text","description":"Search text files in the workspace and return matching lines.","write_action":false,"price_micros":0,"input_schema":null},{"name":"shell","description":"Run a command in the workspace using the native host shell (cmd.exe on Windows, /bin/sh on Linux and macOS). Git pull/push/fetch/clone and GitHub CLI (gh) operations automatically request outbound network access.","write_action":true,"price_micros":0,"input_schema":null},{"name":"write_file","description":"Write content to a file inside the workspace. Reports a diff if the file already exists.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":85,"grade":"A","scanned_at":"2026-09-20T00:29:05.105Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T00:29:05.086Z","components":{"code":{"score":20,"max":25,"notes":["281 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 2 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/remediation/localScan.js: … that only documents a risk — `// never eval() user input` — is not * the risk. Only…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"dvalincode","version":"0.19.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":9,"publishedAt":"2026-09-07T06:01:15.691Z","repositoryUrl":"git+https://github.com/arthurpanhku/dvalincode.git","weeklyDownloads":56}],"repo":{"found":true,"owner":"arthurpanhku","repo":"dvalincode","archived":false,"pushedAt":"2026-09-18T09:27:01Z","stars":117,"forks":12,"openIssues":16,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/193720202?v=4","ownerCreatedAt":"2025-01-04T14:56:22Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/193720202?v=4&s=128","source":"github"},"presence":{"stars":117,"forks":12,"downloadsWeek":56,"license":"MIT","lastPushAt":"2026-09-18T09:27:01.000Z","score":44}}}},"grade_history":[],"reviews":[]}