MCP.Market

Sidecrew MCP server

by lvlrSajjad·io.github.lvlrSajjad/sidecrew·v0.2.0

Code changes and unit tests by local MLX models, behind a gate a machine can run.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

0 stars55 downloads/wk

Reviews

Write one

Nobody has reviewed Sidecrew yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sidecrew tools (10, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • sidecrew_escalate

    What the local workers could not do, assembled for you to write yourself. Reads

  • sidecrew_fixwrite action

    Run a whole change plan on this machine: workload #2a, behaviour-preserving changes — type errors,

  • sidecrew_fix_escalate

    What the local workers could not change, assembled for you to do yourself. Reads a fix run's

  • sidecrew_fix_plan_validate

    Check a change_plan.json before a run spends anything on it, and REFUSE the tasks no worker could

  • sidecrew_generate

    One WorkerTask -> one candidate test, generated by the MLX model running on this machine.

  • sidecrew_plan_validate

    Check a test_plan.json before a run spends anything on it: it parses, its module and exemplars are

  • sidecrew_review

    Which survivors are worth reading, and in what batches. Survival is a filter, not an endorsement —

  • sidecrew_run_batchwrite action

    Run a whole plan on this machine: for every function x shape, generate -> verify -> retry once

  • sidecrew_status

    Is a local worker up, which model and revision it is serving, free RAM, and which verifier tools

  • sidecrew_verify

    compile -> run -> mutate one candidate against the function its task_id names, and return a Verdict.

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

no findings
  • Code scan79 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 36 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Sidecrew compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 75% of 48,255 servers
Tools
10
the typical server has 7
Tools that change things
20%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
55
more than 46% of 12,191 servers with a package

What its tools let an agent do: 8 read · 2 change

Release history: 2 versions in the registry since 2026-09-21, latest 2026-09-24, typically one every 3 days.

Install Sidecrew in Claude Code, Cursor or VS Code

Runs npx -y sidecrew on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add sidecrew -- npx -y sidecrew
Add to Cursor

What the publisher says

From the Sidecrew repository's README, as published. We do not edit it. Read it on GitHub

sidecrew

You ask for a change to your source code, and you get it — made on your Mac, by models that cost you no Claude tokens, and only after a machine has checked it.

Claude Opus plans the work and reviews what came back. Small models running locally (MLX, no network) do the narrow parts. Between them sits a gate a machine can run — for a code change: the diff stayed where it was asked to, tsc is clean, and every test that passed before still passes. Claude never sees anything that did not survive it.

$ sidecrew fix change_plan.json
fix 2026-09-20T09-14-02Z-rename: 1 step, 12 tasks, 13.0 GB free ÷ 6.5 GB per slot = 2; 1 worker up
step 1/1 "rename the helper": capturing the baseline
rename-01: survived (src/util/asset.util.ts)
rename-02: survived (src/util/asset.util.ts, src/util/asset.util.spec.ts)
…
multi-06: failed at compile · escalating — renamed the symbol 7 times over, 5 compile errors
11/12 survived · 0 → 0 tsc errors · .sidecrew/runs/2026-09-20T09-14-02Z-rename/result.json

Illustrative shape, not a captured transcript — it is the real output format with the counts from the React measurement below, and no client's file names. 11 of 12 with a 95 % interval of [0.615, 0.998] is the number; the line above is what it looks like while it runs.

Unit tests are workload #1 — the same shape with a mutation-kill gate instead — and the numbers for both are below, each with its interval.

sidecrew needs 24 GB of installed RAM. Below that a 7B cannot sit beside a normal working set (measured), so sidecrew refuses to run and tells you why rather than quietly becoming a different tool (ADR-0073). sidecrew doctor answers this before you plan anything.

And the other half of the ledger, measured 19–20 Sep 2026: the workers are free, the coordination is not. Opus planning costs 8,400–22,100 tokens per task, depending almost entirely on how many tasks are in the plan — see What this costs to run below. A page that says "the work is free" without saying that is telling you half of it.

Before any number below: how tightly to read it

Every rate on this page is an interval, never a point, and the reason is measured. Replaying a frontier model's own diffs — which the gate finds no defect in — through the gate a second time, it disagreed with itself on 2 of 19 candidates: D = 0.105, 95 % interval [0.013, 0.331] (experiments/gate-error-rate/, against a rule frozen before the first replay). That rule's own verdict at D > 0.10 is UNACCEPTABLE, and its consequence is this paragraph: no survival rate here is published as a bare fraction, D travels beside each of them, and no two of our rates are compared without asking whether their difference survives it.

What that does and does not damage. D counts the gate refusing changes that were fine. Nothing in it is evidence of the gate admitting something bad. So:

The gate admits nothing that fails — stands.

The gate refuses only things that fail — **measured false, at roughly one evaluation in ten, and

unproven at any tighter bound.**

Two of the three known causes are now recorded on every verdict — memory pressure (ADR-0066) and a baseline captured on a different calendar day (ADR-0069). The third is undiagnosed, and both measured disagreements happened on a quiet machine, so it is neither of the first two. D was measured on workload #2a's gate; it says nothing about workload #1's mutation gate, which is a different oracle (§4.4 of the rule).

Workload #2a — behaviour-preserving changes, measured

Against a decision rule frozen before the tool had produced a single verdict (experiments/go-no-go-2a/results/REPORT.md). S is survival, A is a blind reviewer's approval of the diff. Every cell is k/n with its exact 95 % interval; D = 0.105 [0.013, 0.331] applies to every S.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Sidecrew: common questions

Is Sidecrew MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Sidecrew safety report
How do I install Sidecrew?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Sidecrew need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Sidecrew maintained?
The last commit was 40 days ago (2026-09-25). The latest release is v0.2.0.
How does Sidecrew compare with other MCP servers?
safety score 88/100 (higher than 75% of 48,255 servers); tools 10 (the typical server has 7); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.