Mmcp.market

Is Kagami MCP server safe?

Probably. Read the findings first.

C67/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1996ms20/20
  • Tool poisoning4 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 67/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Kagami does

  • Dvalincode
    Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
    A
  • three.ws Provenance
    Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.
    More from nirholas →
    B
  • sqz
    Pre-injection context compression for coding agents. Zero LLM calls, zero telemetry, offline-safe.
    A

Kagami reviews, tools and install