{"name":"io.github.elberacasa/umbra","slug":"elberacasa-umbra","title":"Umbra","description":"Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.","url":"https://mcp.market/server/elberacasa-umbra","rating":null,"grade":"B","score":80,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":17,"stars":0,"forks":0,"downloads_week":26,"last_push_at":"2026-08-05T14:54:39.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/elberacasa/umbra","website":null,"version":"1.2.0","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@elberacasa/umbra","version":"1.2.0","transport":{"type":"stdio"},"packageArguments":[{"description":"Run the umbra-mcp server (the package's default `umbra` bin is the scanner CLI)","value":"mcp","type":"positional"}]}],"tools":[{"name":"get_score","description":"Fast static Umbra Trust Score (0-100) for a repository — SAFE and CLEAN axes only, no network, no sandbox. Use scan_repo for the full report with findings.","write_action":false,"price_micros":0,"input_schema":null},{"name":"guard_content","description":"Check a proposed file write against the Umbra guard engine BEFORE writing. Returns the guard verdict as JSON: decision (allow/warn/block), findings with file:line evidence, and pathViolation when a protected path (e.g. .git/hooks) is targeted. On block, do not write — fix the content and re-check.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_repo","description":"Scan a repository and return the full Umbra Trust Score report as JSON (SAFE/CLEAN static findings; deep=true also verifies RUNS and HONEST in a Docker sandbox). Call before declaring a task done — a score below 50 means the work is not done.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":80,"grade":"B","scanned_at":"2026-09-24T05:07:21.435Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-24T05:07:21.368Z","components":{"code":{"score":20,"max":25,"notes":["87 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 50 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/guard/hook.js: …tead of string interpolation, and never eval() or new Function() input', 'safe/jw…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@elberacasa/umbra","version":"1.2.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":4,"publishedAt":"2026-08-04T13:55:15.120Z","repositoryUrl":"git+https://github.com/elberacasa/umbra.git","weeklyDownloads":26}],"repo":{"found":true,"owner":"elberacasa","repo":"umbra","archived":false,"pushedAt":"2026-08-05T14:54:39Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/32277553?v=4","ownerCreatedAt":"2017-09-25T19:18:27Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/32277553?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":26,"license":"MIT","lastPushAt":"2026-08-05T14:54:39.000Z","score":17}}}},"grade_history":[],"reviews":[]}