Mmcp.market

Is Pincushion MCP server safe?

Probably. Read the findings first.

C65/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.8 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings
  • Code scan58 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Pincushion does

  • Mellos Mapping
    Live layered dependency map for bottom-up development, drawn by the agent in a terminal pane.
    A
  • Projectmem
    Coding agent memory — one local MCP server for every project. Warns before repeating failed fixes.
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B

Pincushion reviews, tools and install