{"name":"io.github.dahshanlabs/klypix-mcp","slug":"dahshanlabs-klypix-mcp","title":"KLYPIX Project Brain","description":"Active state management for multi-agent coding: a shared, versioned project brain over MCP.","url":"https://mcp.market/server/dahshanlabs-klypix-mcp","rating":null,"grade":"B","score":71,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":41,"stars":8,"forks":5,"downloads_week":648,"last_push_at":"2026-09-19T01:32:34.000Z","license":"Apache-2.0"},"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/dahshanlabs/klypix-mcp","website":"https://klypix.com","version":"1.86.2","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"klypix-mcp","version":"1.86.2","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"description":"Folder holding your .klypix canvases. Omit it and the server serves the project root you pass to brain_sync.","format":"filepath","placeholder":"/absolute/path/to/canvases","type":"named","name":"--vault"}],"environmentVariables":[{"description":"Alternative to --vault: absolute path to the folder holding your .klypix canvases. The --vault argument takes precedence.","format":"filepath","name":"KLYPIX_VAULT"}]}],"tools":[],"scan":{"score":71,"grade":"B","scanned_at":"2026-09-19T04:43:45.657Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T04:43:45.582Z","components":{"code":{"score":13,"max":25,"notes":["62 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"src/brain-git-hook.mjs: … just-merged cards. const git = (a) => execSync(`git ${a}`, { cwd: CWD, encoding: 'utf8', stdio…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"klypix-mcp","version":"1.86.2","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":5,"publishedAt":"2026-09-19T01:40:01.669Z","repositoryUrl":"git+https://github.com/dahshanlabs/klypix-mcp.git","weeklyDownloads":648}],"repo":{"found":true,"owner":"dahshanlabs","repo":"klypix-mcp","archived":false,"pushedAt":"2026-09-19T01:32:34Z","stars":8,"forks":5,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/270256088?v=4","ownerCreatedAt":"2026-03-23T04:29:16Z","license":"Apache-2.0"},"icon":{"url":"https://klypix.com/icon.svg","source":"site"},"presence":{"stars":8,"forks":5,"downloadsWeek":648,"license":"Apache-2.0","lastPushAt":"2026-09-19T01:32:34.000Z","score":41}}}},"grade_history":[],"reviews":[]}