Benchmark Hygiene MCP server
Detect pytest config-leakage that corrupts agent-benchmark grading. Deterministic, no-LLM.
0 stars19 downloads/wk
Reviews
Write oneNobody has reviewed Benchmark Hygiene yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Benchmark Hygiene tools (3)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_addoptsBoolean 'is pytest-corrupted?' + reasons for a workspace path.
inspect_workspaceCheck whether running pytest inside `path` will inherit addopts that corrupt agent-benchmark/function grading (rootdir + ini chain + verdict).
summarizeOne-line actionable summary of an inspect_workspace() result dict.
Public scan report
scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 63 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Benchmark Hygiene compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 80% of 4,460 AI and agents servers
- Tools
- 3
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 19
- more than 5% of 1,538 AI and agents servers with a package
What its tools let an agent do: 3 read
Install Benchmark Hygiene in Claude Code, Cursor or VS Code
claude mcp add mcp-benchmark-hygiene -- uvx mcp-benchmark-hygiene
What the publisher says
From the Benchmark Hygiene repository's README, as published. We do not edit it. Read it on GitHub
mcp-benchmark-hygiene
mcp-name: io.github.sudo-ai-git/mcp-benchmark-hygiene
Deterministic detection of pytest config-leakage that silently corrupts agent-benchmark / function grading.
No LLM. No network. One question, answered reliably:
*If I run python -m pytest inside this workspace, will it inherit a
host coverage/abort gate that mis-scores passing code as failed?*
The bug this catches
Automated agent-evaluation harnesses often run python -m pytest inside the target's workspace. If that workspace nests under a repo root carrying pytest addopts — e.g.:
[tool.pytest.ini_options]
addopts = "--cov=harness --cov-report=term-missing:skip-covered --cov-fail-under=80"...pytest resolves that host pyproject.toml as its rootdir, inherits the addopts, and fails on the host's own coverage gate (harness collected at 0% → below threshold → non-zero exit). The harness then records functionally PASSING code as FAILED.
This is exactly the bug documented in sudo-ai-git/vulcanbench-findings: VulcanBench's declarative grader mis-scored every functional task as 0.0 for this reason; with -o addopts= neutralizing the leak, the same workspaces passed 10/10.
The fix it hands you
When a workspace is flagged CORRUPTED, the tool returns the corrected command:
python -m pytest -o addopts= <tests>-o addopts= strips inherited coverage/abort gates. (Or run the grader from outside the repo root.)
Tools
Deterministic core (no deps)
The analysis walks the workspace directory up to filesystem root, reading pyproject.toml / pytest.ini / tox.ini / setup.cfg in pytest's first-found order, and extracts addopts. Flags:
- coverage gates — --cov, --cov-fail-under, --cov-report, --cov-config
- abort/strict gates — --maxfail, -x, --strict, --strict-markers, --pdb, --ff
Only gates that change exit codes / abort grading are flagged. A harmless addopts is reported CLEAN with the exact string.
Install & run (MCP stdio)
One command (recommended) — installs from the repo, no PyPI token needed:
uv tool install git+https://github.com/sudo-ai-git/mcp-benchmark-hygiene
mcp-benchmark-hygiene # run stdio server
mcp-benchmark-hygiene --http --port 8137 # or Streamable HTTPOr with pipx: pipx install git+https://github.com/sudo-ai-git/mcp-benchmark-hygiene
Direct from source (fallback):
{ "mcpServers": {
"benchmark-hygiene": { "command": "python3", "args": ["/abs/path/to/mcp_server.py"] }
}}Requires the official mcp python package (pip install mcp). The deterministic core (inspectworkspace / checkaddopts / summarize) imports and runs with zero dependencies — the mcp package is only needed for the stdio server.
Streamable HTTP (remote/Smithery-publishable)
python3 mcp_server.py --http --port 8137 # serves on http://<host>:8137/mcp/Run with --http to serve over Streamable HTTP (a remote MCP endpoint) instead of stdio. This is the transport smithery mcp publish expects for URL-based publishing — so once a Smithery service token exists, the server deploys as-is.
Example
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Benchmark Hygiene: common questions
- Is Benchmark Hygiene MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Benchmark Hygiene safety report
- How do I install Benchmark Hygiene?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Benchmark Hygiene need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Benchmark Hygiene maintained?
- The last commit was 68 days ago (2026-08-28). The latest release is v1.0.1.
- What can I use instead of Benchmark Hygiene?
- Servers from other publishers that do the same job: Agent Security Scanner MCP server.
- How does Benchmark Hygiene compare with other AI and agents MCP servers?
- safety score 88/100 (higher than 80% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Benchmark Hygiene
Same job from other publishers: the closest match first, then the best rated.
- Agent Security ScannerSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.not reviewedEstablishedC