cmdxray MCP server

by aurelio-nakamura·io.github.aurelio-nakamura/cmdxray·v0.26.1

Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.

A89/100grade A

What users say

No reviews yet

Safety scan

A89/100

Adoption

Growing

4 stars1.7k downloads/wk

Reviews

Nobody has reviewed cmdxray yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_command_safety
Safety-check a shell command BEFORE executing it. Returns a risk verdict (danger / caution / none) and plain-English warnings for destructive patterns: rm -rf /, curl | sudo bash, dd/mkfs/shred/wipefs to a disk device, chmod -R 777 /, git push --force, truncating /etc/passwd, fork bombs, kill -9 -1, find / -delete, and more. Ideal as a guard an AI agent calls before running shell commands.
explain_command
Explain any shell command offline: a plain-English, token-by-token breakdown of the program, its flags and operands — including pipes, redirects, subshells and common inline languages (sed/awk/jq) — plus a risk assessment. Use it to understand what a command line does before running or recommending it.
lint_script
Safety-scan a WHOLE shell script (multi-line text) BEFORE writing or running it. Runs the same offline danger engine as check_command_safety over every logical line (comments/shebangs stripped, backslash-continuations joined) and returns each destructive or risky command with its line number: rm -rf /, curl | sudo bash, dd/mkfs/shred to a device, chmod -R 777 /, git push --force, CI …}-injection s

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan25 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y cmdxray on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add cmdxray -- npx -y cmdxray

Is cmdxray MCP server safe?: Yes, by our scan: it is graded A (89/100). Read the cmdxray safety report
How do I install cmdxray?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does cmdxray need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is cmdxray maintained?: The last commit was in the last day (2026-09-19). The latest release is v0.26.1.