MCP.Market

DevTime MCP server

by Shakargy·io.github.Shakargy/devtime·v0.7.0·11 stars

Local-first, read-only MCP server for evidence-backed repository memory.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

11 stars72 downloads/wk

Reviews

Write one

Nobody has reviewed DevTime yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

DevTime tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • explain_concept

    Explain one concept from evidence: claims, evidence file paths, uncertainty, and Understanding Score.

  • get_context_pack

    Get a governed context pack for a concept before changing related code.

  • list_concepts

    List concepts detected in the scanned repository with confidence labels.

  • verify_claim

    Verify a repository claim against scanned evidence (read-only compute).

Public scan report

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan60 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 9 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How DevTime compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 93% of 48,243 servers
Tools
4
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
11
more than 88% of 28,706 servers
Downloads a week
72
more than 54% of 12,306 servers with a package

What its tools let an agent do: 4 read

Release history: 2 versions in the registry since 2026-09-12, latest 2026-09-24, typically one every 12 days.

Install DevTime in Claude Code, Cursor or VS Code

claude mcp add devtime -- uvx devtime-ei
Add to Cursor

What the publisher says

From the DevTime repository's README, as published. We do not edit it. Read it on GitHub

DevTime

DevTime verifies what your repository can actually prove.

A file named stripe/webhook.ts looks like proof that a repo handles Stripe webhooks. It might be a handler that only returns 404. DevTime checks statements about a repository against its implementation, tests, configuration, and recorded decisions, then reports what is supported, what is contradicted, what is missing, and what went stale.

No cloud. No telemetry. No code execution. No AI required.

Prefer video? Watch the 2-minute demo: DevTime scans a repo locally, explains concepts from evidence, surfaces uncertainty, catches a risky diff, and shows how a corroborated decision improves understanding.

Try DevTime in 60 seconds

pipx install devtime-ei
dtc demo init
cd devtime-demo-saas
dtc init
dtc scan
dtc verify

On the demo repo that ends with billing webhook signature verification SUPPORTED, JWT authentication SUPPORTED, and route test association WEAK, naming the routes with no test importing them. Point it at your own repository and the answers change:

cd your-repo
dtc init && dtc scan && dtc verify

The PyPI distribution is devtime-ei. The Python package remains devtime, and the CLI command remains dtc. dtc demo init copies a small static example repo into ./devtime-demo-saas so you can try DevTime without cloning this repository.

From source

git clone https://github.com/Shakargy/devtime.git
cd devtime
python -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"
cd examples/demo-saas
dtc init
dtc scan
dtc concepts
dtc explain "Billing Webhooks"

On Windows PowerShell:

git clone https://github.com/Shakargy/devtime.git
cd devtime
python -m venv .venv
.venv\Scripts\Activate.ps1
pip install -e ".[dev]"
cd examples/demo-saas
dtc init
dtc scan
dtc concepts
dtc explain "Billing Webhooks"

You should see Billing Webhooks explained from evidence, including supported claims, file references, uncertainty, Understanding Score, and Understanding Debt.

To test risk review, make a local change first, then run:

dtc risk --diff

A full, copy-pasteable walkthrough (including the risk-diff and corroborated-decision steps) is in DEMOSCRIPT.md**.

Verify claims (experimental)

A claim is a statement about the repository. Verification answers it with a status and receipts, never with confidence the evidence cannot back.

Status: CONTRADICTED

Contradictions:
  - The billing webhook endpoint cannot verify signatures
    because it is a disabled stub.
      claimed:  pages/api/stripe/webhook.ts is named and routed
                as a billing webhook endpoint.
      observed: The handler's only behavior is a 404/501 response.
  • SUPPORTED - required behavior evidence exists in the current scan
  • WEAK - the surface exists, but the proving evidence is missing
  • CONTRADICTED - credible evidence conflicts with the claim, both sides shown
  • UNKNOWN - the surface exists but coverage cannot responsibly decide
  • NOTAPPLICABLE** - the repository has no surface this claim is about

Four built-in claims ship: route test association, admin authorization, billing webhook signatures, and JWT authentication. dtc verify leads with what it can actually verify in your repository, and when nothing applies it says what would make a claim verifiable instead of dead-ending.

Truth and freshness are separate: when a file behind a verified claim changes, the claim goes STALE and names the file. dtc risk --diff reports which verified claims a diff destabilizes.

See VERIFICATION.md for the full model and its limits.

Why this exists

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

DevTime: common questions

Is DevTime MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the DevTime safety report
How do I install DevTime?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does DevTime need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is DevTime maintained?
The last commit was 42 days ago (2026-09-24). The latest release is v0.7.0.
What can I use instead of DevTime?
Servers from other publishers that do the same job: Memorix MCP server and Nautilus Compass Memory MCP server.
How does DevTime compare with other MCP servers?
safety score 92/100 (higher than 93% of 48,243 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to DevTime

Same job from other publishers: the closest match first, then the best rated.

  • Memorix
    Local-first project memory with legacy MCP and 2026 discovery compatibility.
    B
  • Nautilus Compass Memory
    Local-first long-term memory for AI agents, with byte-recomputable signed verification receipts.
    B