MCP.Market

Footgun MCP server

online · 100% uptime
by getfootgun.com·com.getfootgun/footgun·v1.0.1
No reviews yet

Dated, verified API breakages for coding agents, plus a local scan for them in your existing code.

A89/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A89/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Footgun yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Footgun tools (4)

write = sends, deletes, buys or posts
  • confirm_trapFree

    Record that a trap is still true (or not), with optional hours lost and version seen. Needs an API key.

  • file_trapFree

    Draft a trap after a failure was fixed. Private by default with a Pro or Team key. Public filings are checked automatically against official sources and published only when an official source confirms them. A reviewer can still act on any filing. Citing the provider's official documentation or changelog in sources helps. No API key needed. Set visibility to public to submit to the public registry.

  • lookup_trapsFree

    Call before writing code against a third-party API, platform, or AI tool. Returns verified, dated failure modes with fixes.

  • search_trapsFree

    Call when a call to a third-party service fails. Paste the error text. Returns the closest verified traps with fixes.

Public scan report

scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 817ms20/20
  • Tool poisoning4 tool descriptions checked15/15
  • Auth qualityAPI key sent as a header8/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; website matches verified namespace9/10
Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Footgun compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
89/100
higher than 87% of 915 Security servers
Tools
4
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Security server answers 100%
Response time
162 ms
faster than 67% of 547 Security servers

What its tools let an agent do: 4 read

Install Footgun in Claude Code, Cursor or VS Code

claude mcp add --transport http footgun https://getfootgun.com/api/mcp
Add to Cursor

What the publisher says

From the Footgun repository's README, as published. We do not edit it. Read it on GitHub

Footgun

Your AI agent knows how the API works. Footgun tells it how it breaks.

Footgun is a dated, verified registry of the traps that docs leave out: silent deprecations, quiet limits, settings that save but do nothing. Your coding agent checks it before it writes the code. Browse every trap at getfootgun.com.

Does it help?

On 17 coding tasks that touch recent API changes, run 5 times each, Claude Code got the code right on the first try 82% of the time with Footgun and 52% without, at 18% lower cost per working result. On older APIs the model already knows, it made no difference. The method and full results are at getfootgun.com/benchmark.

What we found in 200 AI-built apps

89 of 200 still use GitHub Actions built for Node 20, which GitHub now runs on Node 24. 93 have at least one problem that breaks now or will break, counting only rules a person checked against real code. The method and results are at getfootgun.com/scan.

Install in Claude Code

/plugin marketplace add getfootgun/footgun
/plugin install footgun@footgun

Lookups and filing work without an account. Filed traps are checked against official sources before anyone else sees them. To confirm traps, create an API key at getfootgun.com/account and enter it when the plugin asks.

The plugin also adds /footgun:scan, which checks your project on your machine for known traps in the exact package versions you use. Your code never leaves your machine; only the rule download and an anonymous count of findings are sent. Turn the plugin setting sharelearnings off to stop the count and the filing of fixes your agent learns. The setting autocontext adds a short note of those traps at the start of each session. It is on by default; set it to false to turn it off.

Command line

cli/ holds the same scanner as a command, published on npm as @getfootgun/footgun: npx @getfootgun/footgun scan [path] (Node 20 or later). Add --json for machine-readable output or --fail-on breaks to fail a CI job.

Any other MCP client

claude mcp add --transport http footgun https://getfootgun.com/api/mcp

For Cursor, Codex and other clients, point them at https://getfootgun.com/api/mcp (streamable HTTP). Add the header Authorization: Bearer to file and confirm traps.

The data

data/traps//.json holds every public verified trap: symptoms, cause, fix, the date it was last verified, and its trust score. data/providers.json lists the tools covered. The data is exported from getfootgun.com and updated as traps are added, confirmed or retired.

Licence

Trap data in data/ is licensed CC BY 4.0. Credit "Footgun, getfootgun.com". The plugin files are MIT licensed (see LICENSE).

Nothing above is checked by us. What we check is on the safety report.

Footgun: common questions

Is Footgun MCP server safe?
Yes, by our scan: it is graded A (89/100). Read the Footgun safety report
How do I install Footgun?
It runs remotely at getfootgun.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Footgun need an API key?
Yes. The registry entry asks for Authorization.
Is Footgun maintained?
The last commit was 10 days ago (2026-10-25). The latest release is v1.0.1.
Is Footgun up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Footgun?
Servers from other publishers that do the same job: PyMemoryEditor MCP server, Autopilot Jobhunt MCP server and Solana Security Standard MCP server.
How does Footgun compare with other Security MCP servers?
safety score 89/100 (higher than 87% of 915 Security servers); tools 4 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Footgun

Same job from other publishers: the closest match first, then the best rated.

  • PyMemoryEditor
    Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.
    A
  • Autopilot Jobhunt
    Agentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.
    A
  • Solana Security Standard
    Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
    A
  • OpenQR
    Generate, edit and track dynamic (editable) QR codes with scan analytics. Hosted MCP and REST API.
    B
  • Dep Scope
    Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.
    A