Contribos MCP server

by adityatiwari101104·io.github.adityatiwari101104/contribos·v0.2.3·1 stars

No reviews yet

Help open-source contributors earn maintainer trust: repo rules, briefs, and pre-submit checks.

A85/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A85/100

full report

Adoption

Growing

1 stars145 downloads/wk

Reviews

Write one

Nobody has reviewed Contribos yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Contribos tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

1 medium

Code scan22 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

mediumsubprocess with shell=Trueexec.shell-true

contribos-0.2.3/contribos/proof.py: …e swap r = subprocess.run(cmd, shell=True, cwd=cwd, capture_output=True, text=Tru…

Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Contribos compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 85/100; higher than 70% of 48,255 servers
GitHub stars: 1; more than 65% of 28,688 servers
Downloads a week: 145; more than 70% of 12,191 servers with a package

Release history: 2 versions in the registry since 2026-10-06, latest 2026-10-13, typically one every 6 days.

Install Contribos in Claude Code, Cursor or VS Code

claude mcp add contribos -- uvx contribos

Add to Cursor

What the publisher says

From the Contribos repository's README, as published. We do not edit it. Read it on GitHub

ContribOS

Get trusted. Get merged. Come back. ContribOS helps new open-source contributors earn trust. It finds where you're welcome, shows how this repo wants the change done, checks that you truly understand your change, coaches you through review, and turns merged PRs into a record the next maintainer can verify.

In 2026, writing code is not the hard part of contributing. AI made PRs cheap, maintainers answered with PR caps, vouch lists and AI policies, and newcomer merge rates fell. ContribOS makes your PR worth a maintainer's time.

ContribOS never opens PRs, posts comments or claims issues for you, and it never writes your explanation. It points, and you decide.

See it work

Before you open a PR, ask the repo what it expects. This is real output from contribos policy pallets/flask, trimmed (snapshot from 6 Oct 2026; run it yourself for current results):

# Contribution policy: pallets/flask

## AI policy
No written AI policy found. Disclosing AI use is still the courteous default.

## Tests
Changes are expected to come with tests.
- `.github/pull_request_template.md:20`: - Add tests that demonstrate the correct behavior of the change. Tests

## Changelog
Changes usually need a changelog or news entry.
- `.github/pull_request_template.md:23`: - Add an entry in CHANGES.rst summarizing the change and linking to the issue.

## Tests in practice
50% of recent code PRs also changed tests.
- `git history`: 19 of 38 recent code-changing PRs

## Outside PRs
2 of the last 49 closed PRs from non-members landed.

Every claim points at a file and line (or git history), so you can check it yourself. ContribOS points, you decide.

pip install contribos
contribos policy pallets/flask

The journey

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Contribos: common questions

Is Contribos MCP server safe?: Yes, by our scan: it is graded A (85/100). Read the Contribos safety report
How do I install Contribos?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Contribos need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Contribos maintained?: The last commit was 22 days ago (2026-10-13). The latest release is v0.2.3.
How does Contribos compare with other MCP servers?: safety score 85/100 (higher than 70% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers); downloads a week 145 (more than 70% of 12,191 servers with a package). Full comparison.