MCP.Market

Benchmark Hygiene MCP server

by sudo-ai-git·io.github.sudo-ai-git/mcp-benchmark-hygiene·v1.0.1

Detect pytest config-leakage that corrupts agent-benchmark grading. Deterministic, no-LLM.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

0 stars19 downloads/wk

Reviews

Write one

Nobody has reviewed Benchmark Hygiene yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Benchmark Hygiene tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_addopts

    Boolean 'is pytest-corrupted?' + reasons for a workspace path.

  • inspect_workspace

    Check whether running pytest inside `path` will inherit addopts that corrupt agent-benchmark/function grading (rootdir + ini chain + verdict).

  • summarize

    One-line actionable summary of an inspect_workspace() result dict.

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 63 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Benchmark Hygiene compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 80% of 4,460 AI and agents servers
Tools
3
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
19
more than 5% of 1,538 AI and agents servers with a package

What its tools let an agent do: 3 read

Install Benchmark Hygiene in Claude Code, Cursor or VS Code

claude mcp add mcp-benchmark-hygiene -- uvx mcp-benchmark-hygiene
Add to Cursor

What the publisher says

From the Benchmark Hygiene repository's README, as published. We do not edit it. Read it on GitHub

mcp-benchmark-hygiene

mcp-name: io.github.sudo-ai-git/mcp-benchmark-hygiene

Deterministic detection of pytest config-leakage that silently corrupts agent-benchmark / function grading.

No LLM. No network. One question, answered reliably:

*If I run python -m pytest inside this workspace, will it inherit a

host coverage/abort gate that mis-scores passing code as failed?*

The bug this catches

Automated agent-evaluation harnesses often run python -m pytest inside the target's workspace. If that workspace nests under a repo root carrying pytest addopts — e.g.:

[tool.pytest.ini_options]
addopts = "--cov=harness --cov-report=term-missing:skip-covered --cov-fail-under=80"

...pytest resolves that host pyproject.toml as its rootdir, inherits the addopts, and fails on the host's own coverage gate (harness collected at 0% → below threshold → non-zero exit). The harness then records functionally PASSING code as FAILED.

This is exactly the bug documented in sudo-ai-git/vulcanbench-findings: VulcanBench's declarative grader mis-scored every functional task as 0.0 for this reason; with -o addopts= neutralizing the leak, the same workspaces passed 10/10.

The fix it hands you

When a workspace is flagged CORRUPTED, the tool returns the corrected command:

python -m pytest -o addopts= <tests>

-o addopts= strips inherited coverage/abort gates. (Or run the grader from outside the repo root.)

Tools

Deterministic core (no deps)

The analysis walks the workspace directory up to filesystem root, reading pyproject.toml / pytest.ini / tox.ini / setup.cfg in pytest's first-found order, and extracts addopts. Flags:

  • coverage gates — --cov, --cov-fail-under, --cov-report, --cov-config
  • abort/strict gates — --maxfail, -x, --strict, --strict-markers, --pdb, --ff

Only gates that change exit codes / abort grading are flagged. A harmless addopts is reported CLEAN with the exact string.

Install & run (MCP stdio)

One command (recommended) — installs from the repo, no PyPI token needed:

uv tool install git+https://github.com/sudo-ai-git/mcp-benchmark-hygiene
mcp-benchmark-hygiene                        # run stdio server
mcp-benchmark-hygiene --http --port 8137     # or Streamable HTTP

Or with pipx: pipx install git+https://github.com/sudo-ai-git/mcp-benchmark-hygiene

Direct from source (fallback):

{ "mcpServers": {
    "benchmark-hygiene": { "command": "python3", "args": ["/abs/path/to/mcp_server.py"] }
}}

Requires the official mcp python package (pip install mcp). The deterministic core (inspectworkspace / checkaddopts / summarize) imports and runs with zero dependencies — the mcp package is only needed for the stdio server.

Streamable HTTP (remote/Smithery-publishable)

python3 mcp_server.py --http --port 8137   # serves on http://<host>:8137/mcp/

Run with --http to serve over Streamable HTTP (a remote MCP endpoint) instead of stdio. This is the transport smithery mcp publish expects for URL-based publishing — so once a Smithery service token exists, the server deploys as-is.

Example

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Benchmark Hygiene: common questions

Is Benchmark Hygiene MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Benchmark Hygiene safety report
How do I install Benchmark Hygiene?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Benchmark Hygiene need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Benchmark Hygiene maintained?
The last commit was 68 days ago (2026-08-28). The latest release is v1.0.1.
What can I use instead of Benchmark Hygiene?
Servers from other publishers that do the same job: Agent Security Scanner MCP server.
How does Benchmark Hygiene compare with other AI and agents MCP servers?
safety score 88/100 (higher than 80% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Benchmark Hygiene

Same job from other publishers: the closest match first, then the best rated.

  • Agent Security Scanner
    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
    C

More from sudo-ai-git →