MCP.Market

ossfind MCP server

by Aniket-kr1030·io.github.Aniket-kr1030/ossfind·v0.1.12
No reviews yet

Safety-ranked open-source component discovery for agents across six package ecosystems.

C55/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C55/100

full report

Adoption
New

54 downloads/wk

Reviews

Write one

Nobody has reviewed ossfind yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

ossfind tools (5)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_compatibility

    Compare a verified npm package manifest with package.json facts or a PyPI manifest with Python project facts. Cargo, RubyGems, GitHub, and Hugging Face components have no verified package API surface and return a structured unsupported response. Both supported ecosystems use verified SPDX license data; unknown facts remain explicit in the A3 report.

  • inspect_component

    Return a verified npm TypeScript or PyPI Python API surface and integration manifest. Cargo, RubyGems, GitHub, and Hugging Face components have no verified API surface and return a structured unsupported response. Accepts a package name or matching npm:<name>/pypi:<name> search ID; exported symbols are capped and disclosure is explicit.

  • plan_integration

    Return install commands, imports, and a signature-verified usage scaffold for an npm or PyPI component. Cargo, RubyGems, GitHub, and Hugging Face components have no verified API surface and return a structured unsupported response. Include matching project facts to attach an A3 compatibility report.

  • search_components

    Discover, enrich, score, and rank components. detail defaults to compact selection facts; use full for the complete prior result shape.

  • usage_stats

    Return in-memory aggregate usage metrics including supplier request counters, rate-limit headroom, cache hit rates, verdict distributions, and latency percentiles.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

no findings
  • Code scan170 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How ossfind compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
55/100
higher than 10% of 48,243 servers
Tools
5
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
54
more than 43% of 12,306 servers with a package

What its tools let an agent do: 5 read

Install ossfind in Claude Code, Cursor or VS Code

Runs npx -y ossfind on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add ossfind -- npx -y ossfind
Add to Cursor

ossfind: common questions

Is ossfind MCP server safe?
With care: it is graded C, so read the findings first (55/100). Read the ossfind safety report
How do I install ossfind?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does ossfind need an API key?
Yes. The registry entry asks for GITHUB_TOKEN, LIBRARY_IO_API_KEY.
Is ossfind maintained?
The latest release is v0.1.12.
How does ossfind compare with other MCP servers?
safety score 55/100 (higher than 10% of 48,243 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.