MCP.Market

Dear User MCP server

by bleedmode·io.github.bleedmode/dearuser·v1.0.20
No reviews yet

Tells you how you and your Claude agent actually work together. Local-only, no API keys.

B80/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
Growing

0 stars78 downloads/wk

Reviews

Write one

Nobody has reviewed Dear User yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Dear User tools (11, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • collab

    Analyze your human-agent collaboration. Scans your agent contract (CLAUDE.md or AGENTS.md), memory files, hooks, skills, and more to produce a collaboration report with persona detection, scoring, friction analysis, and recommendations. Returns a pre-formatted markdown report. Use the format parameter to control detail level: - "text" (default): concise, plain-language report designed for non-tech

  • dismiss_recommendation

    Mark a Dear User recommendation as dismissed so it won't be suggested again. Call this when the user picks "drop"/"ikke for mig"/"skip" for a specific recommendation from the action menu. Use recommendation_id from the latest report's menu. For security/health findings, the dismissal propagates to the underlying finding in the ledger so future scans won't re-surface it (unless dismiss_expires_at e

  • feedbackwrite action

    Send a short note to the Dear User team \u2014 a bug, a request, a "this score feels wrong", or anything you want the founder to read. Zero friction: one tool call and you're done. Behavior: - POSTs your message to the Dear User feedback inbox (Supabase) over HTTPS. - Respects Dear User's local-first guarantee \u2014 this is the one place data leaves the machine. - Email is only attached when opt_

  • health

    Check the health of your AI stack. Returns a 0-100 system-sundhed score with category breakdown, plus findings ranked by severity. Complement to collab: where collab scores how well you and the agent communicate, health scores whether your skills, hooks, scheduled tasks, and MCP servers are still hanging together or have started drifting apart. Detects: - **Orphan scheduled jobs** \u2014 task prod

  • help

    Show Dear User's capabilities to the user. Call this whenever the user asks "what can Dear User do?", "hvad kan DearUser?", "show me the options", "help", or seems uncertain about which tool fits their need. Also call proactively the first time a user mentions Dear User if they haven't used it before. What this tool does NOT do: - Does NOT run any analysis \u2014 it only describes what Dear User c

  • history

    Retrieve past Dear User reports without re-running the scan. Reads from local SQLite (~/.dearuser/dearuser.db) \u2014 no network, no fresh scan. Use when the user wants to see their latest score, how scores have changed over time, or what got better/worse since the last run. A fresh scan takes ~30s; this returns instantly. Call `collab`/`health`/`security` instead if the user explicitly asks for a

  • implement_recommendation

    Apply a Dear User recommendation to the user's setup \u2014 automatically if safe, or by returning the exact command/instruction for the agent to run. After a collab/health/security report runs, the result text contains a "Three things to fix" menu with up to 3 recommendation_ids plus "Take all of them" and "Skip for now" options. Present those options to the user via AskUserQuestion (or as a numb

  • onboard

    Conversational setup. Walks the user through 5 steps (intro \u2192 goals \u2192 stack+pains \u2192 substrate \u2192 plan) and produces a tailored setup plan \u2014 tailored agent-contract template (CLAUDE.md or AGENTS.md), skill recommendations, hook recommendations, and next 3 steps. How to use (for the agent): 1. First call: no arguments. The tool returns an intro question + nextStep. 2. Present

  • security

    Security audit of your AI setup. Scans for: - **Leaked secrets** \u2014 API keys, tokens, credentials in CLAUDE.md / AGENTS.md, memory, skills, or settings - **Prompt-injection surfaces** \u2014 hooks/skills that pass user input to shell unsafely - **Rule conflicts** \u2014 your agent contract says one thing but a hook/skill does another (e.g., "never force-push" but a hook runs `git push --force`

  • share_report

    Generate a public shareable link for your Dear User Wrapped card. Uploads an anonymized copy to dearuser.ai and returns a URL you can paste anywhere (X, LinkedIn, Slack). Only Wrapped reports are shareable. Collab/health/security reports stay local. Privacy contract: - Absolute filesystem paths are collapsed to basenames. - Email addresses are stripped. - Anything matching our secret-scanner patte

  • wrapped

    Generate your Dear User \u2014 shareable stats about your human-agent collaboration in a fun, Spotify Wrapped-style format. What this tool does NOT do: - Does NOT share anything automatically \u2014 it generates text you can copy/paste if you choose - Does NOT access external accounts or profiles - Does NOT store or upload the generated stats anywhere IMPORTANT \u2014 Presenting results: The user

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 medium
  • Code scan5 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 52 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/index.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Dear User compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 4,460 AI and agents servers
Tools
11
the typical AI and agents server has 6
Tools that change things
9%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
78
more than 58% of 1,538 AI and agents servers with a package

What its tools let an agent do: 9 read · 1 change · 1 send or post

Install Dear User in Claude Code, Cursor or VS Code

Runs npx -y @poisedhq/dearuser-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add dearuser -- npx -y @poisedhq/dearuser-mcp
Add to Cursor

What the publisher says

From the Dear User repository's README, as published. We do not edit it. Read it on GitHub

Dear User

Your AI agent works for you — but how well do you work together?

Dear User is an open-source tool that audits your Claude Code setup and tells you exactly what to fix. It scores your collaboration, finds leaked secrets and config conflicts, and checks system health — all locally, nothing uploaded unless you explicitly share your Wrapped card.

claude mcp add --scope user dearuser -- npx -y @poisedhq/dearuser-mcp@latest

Then ask Claude: "Analyze my collaboration with Claude"

Landing: dearuser.ai · Feedback: use the feedback tool in Claude, or open an issue

What it does

Dear User is an MCP server (Model Context Protocol — the plugin system Claude Code and Claude Desktop use). Once installed, it shows up as a set of tools your agent can call. No GUI, no sign-up, no cloud account.

Three local reports, one shareable Wrapped card, one feedback channel:

Plus helpers: onboard (7-step guided setup), history (trend without re-scanning), help (menu), implementrecommendation, dismissrecommendation, share_report (Wrapped-only upload).

Launch highlights

  • Shareable Wrapped — run wrapped, then share_report to get a dearuser.ai/r/ URL for your stats card. Anonymized before upload (paths collapsed to basenames, emails stripped, secrets redacted). Collab/security/health reports stay local — findings can carry business context that isn't safe to auto-share.
  • 12-category secret scanner — OpenAI, Anthropic, GitHub, AWS, Stripe, Slack, Google, Supabase, Vercel, private keys, generic env secrets, bearer tokens. Scans CLAUDE.md / AGENTS.md, memory files, skills, hooks.
  • AGENTS.md native support — first-class input alongside CLAUDE.md. Works out of the box for Cursor, Codex, Aider, Cline, Zed and anyone following the Linux Foundation cross-tool standard. Both files in the same directory? We merge them.
  • Semantic conflict detection (new) — finds rules that contradict each other even when they don't share keywords. "Commit often" vs. "ask before commit" gets flagged.
  • Score calibrated against reality — two studies: 988 public Claude Code setups with substrate committed (median 32/100, max 63) and 2,895 standalone CLAUDE.md files (median 18, max 60). The substrate corpus is the apples-to-apples benchmark for live scores. See research/calibration/ for both studies.

Install

One command per client. Full guide: docs/install.md.

Claude Code (CLI)

claude mcp add --scope user dearuser -- npx -y @poisedhq/dearuser-mcp@latest

Restart Claude Code afterwards so the tools appear.

Claude Desktop — add to ~/Library/Application Support/Claude/claudedesktopconfig.json (macOS) or %APPDATA%\Claude\claudedesktopconfig.json (Windows):

{
  "mcpServers": {
    "dearuser": {
      "command": "npx",
      "args": ["@poisedhq/dearuser-mcp"]
    }
  }
}

Cursor, Windsurf, Cline, Zed — see docs/install.md.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Dear User: common questions

Is Dear User MCP server safe?
Mostly: it is graded B (80/100). Read the Dear User safety report
How do I install Dear User?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Dear User need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Dear User maintained?
The last commit was 89 days ago (2026-08-07). The latest release is v1.0.20.
What can I use instead of Dear User?
Servers from other publishers that do the same job: Ausca MCP server and Skillsmith MCP server.
How does Dear User compare with other AI and agents MCP servers?
safety score 80/100 (higher than 60% of 4,460 AI and agents servers); tools 11 (the typical AI and agents server has 6); tools that change things 9% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Dear User

Same job from other publishers: the closest match first, then the best rated.

  • Ausca
    Pay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.
    A
  • Skillsmith
    Share agent skills across your team, scan them for risk, and track what's actually used.
    B