MCP.Market

Mergewarden MCP server

by sjh9714·io.github.sjh9714/mergewarden·v0.9.0·14 stars
No reviews yet

Check whether a coding agent's changes stayed inside the scope it was given.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

14 stars33 downloads/wk

Reviews

Write one

Nobody has reviewed Mergewarden yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Mergewarden tools (1)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_change_scope

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 14 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Mergewarden compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 4,461 AI and agents servers
Tools
1
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
14
more than 86% of 2,713 AI and agents servers
Downloads a week
33
more than 20% of 1,554 AI and agents servers with a package

What its tools let an agent do: 1 read

Install Mergewarden in Claude Code, Cursor or VS Code

Runs npx -y mergewarden-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mergewarden -- npx -y mergewarden-mcp
Add to Cursor

What the publisher says

From the Mergewarden repository's README, as published. We do not edit it. Read it on GitHub

MergeWarden

See which pull requests need context before code review.

Paste a public GitHub repository. MergeWarden surfaces missing issue links, thin descriptions, skipped templates, and oversized changes. No login. No AI.

This is an experimental tool. Review-time savings and repeat maintainer use have not been demonstrated. Product expansion is on hold; see the roadmap and evidence limits.

Review a public repository

Open the public review queue

The getting started guide explains queue states, detailed PR results, and the Action install path.

Paste owner/repository or a full GitHub repository URL. The browser reads the latest thirty open pull request summaries, removes trusted repository roles, base repository branches, and known maintenance automation, then loads details for at most ten external pull requests.

Rows are ordered by deterministic facts a maintainer would otherwise check before reading code.

First contribution is shown as context and never used as a score. MergeWarden does not call a contribution spam, low quality, or AI generated. It never closes, labels, scores, or comments on a pull request.

The queue uses public metadata and the base branch pull request template. It does not fetch changed file contents, execute code, use a backend, or store the target.

For a larger authenticated queue, use the CLI.

GH_TOKEN=... npx --yes mergewarden@0.10.4 triage owner/repository

Run the detailed PR risk scan

The same page accepts a full pull request URL or owner/repository#number. Every queue row links to this detailed scan.

The detailed scan checks four security boundaries.

The configuration reference lists every deterministic rule and severity.

Run the same scan from a terminal without cloning the target repository.

npx --yes mergewarden@0.10.4 scan https://github.com/owner/repository/pull/123

Add the Action

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Mergewarden: common questions

Is Mergewarden MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Mergewarden safety report
How do I install Mergewarden?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Mergewarden need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Mergewarden maintained?
The last commit was 56 days ago (2026-09-10). The latest release is v0.9.0.
What can I use instead of Mergewarden?
Servers from other publishers that do the same job: Serena MCP: the IDE for your agent MCP server, Figma Context MCP server and Power BI Authoring MCP Server (Local).
How does Mergewarden compare with other AI and agents MCP servers?
safety score 92/100 (higher than 90% of 4,461 AI and agents servers); tools 1 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Mergewarden

Same job from other publishers: the closest match first, then the best rated.

  • Serena MCP: the IDE for your agent
    A powerful toolkit for coding, providing semantic retrieval and editing capabilities.
    C
  • Figma Context
    Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
    B
  • Power BI Authoring MCP Server (Local)
    The Power BI Authoring MCP server lets an AI agent create and change Power BI semantic models.
    A
  • SuperCompress
    Compress coding-agent context ~64%. Hosted Neural Keep MCP for Cursor/Claude/Codex.
    B
  • Orcareplay
    Read, replay and fork recorded coding-agent runs.
    A