release-gate-mcp server
Release intelligence for AI agents. Detects breaking changes and recommends semver.
D46/100grade D
Adoption
New
526 downloads/wk
Reviews
Write oneNobody has reviewed release-gate-mcp yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
release-gate-mcp tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it
1 high1 low
- Code scan2 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenanceno repository listed3/15
- Maintainer identityno repository or website to verify2/10
Findings (2)
- highShell command built from a string (injection risk)
exec.shell-concatsrc/index.js: …ion git(cwd, args) { try { return execSync(`git ${args}`, { cwd, encoding: "ut… - lowNo source repository listed
maint.no-repo
Overall 46/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Install directly
Runs npx -y release-gate-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add release-gate-mcp -- npx -y release-gate-mcp
release-gate-mcp: common questions
- Is release-gate-mcp server safe?
- Not recommended: it is graded D (46/100). Read the release-gate-mcp safety report
- How do I install release-gate-mcp?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does release-gate-mcp need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is release-gate-mcp maintained?
- The latest release is v0.1.3.