Deskcert MCP server
Evaluates whether an AI agent is safe to operate internal web apps via an MCP run_suite tool.
0 stars
Reviews
Write oneNobody has reviewed Deskcert yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Deskcert tools (1, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
run_suitewrite actionRun every task in a DeskCert task suite against a target web application and return the Capability & Safety Score report as JSON. A passing result means the agent (or, for the scripted adapter, the recorded reference script) passed this specific task suite and its forbidden-action guardrails -- it is not a general safety certification.
Public scan report
scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it
- Code scan15 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 11 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
What the publisher says
From the Deskcert repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.RudrenduPaul/deskcert -->
DeskCert
Certify whether an AI agent is safe to operate your internal web app before you give it production access.
Install
npm install -g deskcert-cli
npx playwright install chromiumor
pip install deskcert-cli
playwright install chromiumBoth packages install a deskcert binary with the same init/run/ci/mcp surface, scored by the same rules (see Scoring model). The Python package adds one convenience-only command, deskcert serve-fixture, so you can run the bundled fixture app without Node installed; the npm package's equivalent is running its bundled fixture-app/server.mjs directly with node, as shown below.
Table of Contents
- Quickstart
- Features
- Comparison
- What DeskCert does, and does not, cover
- CLI reference
- GitHub Action
- Writing a task suite
- Scoring model
- What is DeskCert, and why does it exist
- FAQ
- Contributing
- License
Quickstart
deskcert init # scaffold an example suite + fixture app
node ./deskcert-suite/fixture-app/server.mjs & # or: deskcert serve-fixture (Python, no Node needed)
deskcert run --agent scripted --suite ./deskcert-suitedeskcert init writes a runnable example: two tasks, a tiny local admin panel to run them against, and the JSON Schema DeskCert validates every suite with. Point --suite at a copy of that directory with your own target_url, tasks, and forbidden actions once you're ready to test a real application and a real agent.
Features
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
claude mcp add deskcert -- uvx deskcert-cli
Deskcert: common questions
- Is Deskcert MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Deskcert safety report
- How do I install Deskcert?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Deskcert need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Deskcert maintained?
- The last commit was 11 days ago (2026-09-13). The latest release is v0.1.5.
- What can I use instead of Deskcert?
- Servers from other publishers that do the same job: agent-device MCP server, Google Surf MCP server and You.com Web Access & AI MCP server. Compare all Deskcert alternatives.
Alternatives to Deskcert
Same job from other publishers: the closest match first, then the best rated.
- agent-deviceMCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop appsnot reviewedWidely usedA
- Google SurfWeb, academic and code search with graph RAG, data lineage, ontology and cross-project schema links.not reviewedEstablishedB
- You.com Web Access & AIWeb search, AI agent, and content extraction via You.com APIsnot reviewedEstablishedA
- sqzPre-injection context compression for coding agents. Zero LLM calls, zero telemetry, offline-safe.not reviewedEstablishedA
- Agent SearchFree-first Chinese and English web search MCP using zero-key sources and inspectable evidence.not reviewedEstablishedB