MCP.Market

Sophon MCP server

by lacausecrypto·io.github.lacausecrypto/sophon·v0.5.4·9 stars
No reviews yet

Honest token economics for MCP agents. 68% tokens saved, zero-ML Rust binary.

D48/100grade D
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
D48/100

full report

Adoption
New

9 stars

Reviews

Write one

Nobody has reviewed Sophon yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sophon tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high2 medium
  • Code scan3 source files scanned3/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 100 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (3)

  • mediumnpm install lifecycle script presentinstall.script
  • highShell command built from a string (injection risk)exec.shell-concat
    install.js: …rchiveName.endsWith('.tar.gz')) { execSync(`tar -xzf "${archivePath}" -C "${tmpDir}"`, { stdio: 'inherit' }); } …
  • mediumnpm install lifecycle script presentinstall.script
    package.json: …, "LICENSE" ], "scripts": { "postinstall": "node install.js", "test": "node -c…
Overall 48/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Sophon compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
48/100
higher than 9% of 48,255 servers
GitHub stars
9
more than 87% of 28,688 servers

Install Sophon in Claude Code, Cursor or VS Code

Runs npx -y mcp-sophon on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add sophon -- npx -y mcp-sophon
Add to Cursor

Sophon: common questions

Is Sophon MCP server safe?
Not recommended: it is graded D (48/100). Read the Sophon safety report
How do I install Sophon?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Sophon need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Sophon maintained?
The last commit was 138 days ago (2026-06-19). The latest release is v0.5.4.
How does Sophon compare with other MCP servers?
safety score 48/100 (higher than 9% of 48,255 servers); github stars 9 (more than 87% of 28,688 servers). Full comparison.

More from lacausecrypto →