MCP.Market

Bit Lantern MCP server

by ZaguanLabs·io.github.ZaguanLabs/atlas-scout·v1.0.0-preview.30

Local, read-only structural code navigation and bounded dependency analysis for source repositories.

A85/100grade A
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Bit Lantern yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Bit Lantern tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Bit Lantern compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 70% of 48,255 servers

Release history: 2 versions in the registry since 2026-08-17, latest 2026-10-26, typically one every 70 days.

Install Bit Lantern in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the Bit Lantern repository's README, as published. We do not edit it. Read it on GitHub

Atlas Scout MCP Registry packaging

This repository contains the inspectable packaging metadata and locked build recipe used to publish Atlas Scout to the official MCP Registry.

Atlas Scout is a local, read-only MCP server for structural code navigation. It builds a disposable SQLite index inside each workspace and provides bounded definitions, exact source ranges, references, static call relationships, architecture summaries, and edit-impact evidence to connected coding agents.

Install

Use an MCP Registry client that supports MCPB packages and choose the release asset matching your operating system and CPU architecture. Each bundle starts:

atlas-scout mcp

The current Preview 29 target matrix is:

Preview binaries for macOS and Windows are not yet platform-signed. Review the installation and platform-safety documentation and do not weaken operating-system or organization security controls.

Reproduce the MCPB artifacts

The build is locked to Atlas Scout 1.0.0-preview.29, the exact signed public release-manifest digest, all four source-archive digests and byte lengths, and @anthropic-ai/mcpb 2.1.2.

Requirements: Bash, curl, jq, Node.js/npm, sha256sum, tar, and unzip.

./scripts/build-mcpb.sh
(cd dist/packages && sha256sum --check SHA256SUMS)

The script downloads only immutable Preview 29 release objects from download.atlasscout.dev, verifies them before extraction, and packages one native target per .mcpb file. Generated artifacts remain under dist/ and are not committed to Git.

For directories that accept only one downloadable MCPB artifact per listing, build the universal package:

./scripts/build-smithery-mcpb.sh

That package contains three of the same verified native executables and a small Node.js launcher that selects the matching operating system and CPU at startup. It supports macOS/ARM64, Linux/x86-64, and Windows/x86-64 and requires Node.js 18 or newer. Smithery currently limits MCPB uploads to 25 MB, so Linux/ARM64 users should install its target-specific package from the official MCP Registry or GitHub release. Atlas Scout itself remains a native executable; the launcher is used only for cross-platform MCPB distribution.

The official MCPB CLI records the packaging time in each ZIP. Rebuilding verifies and packages the same native inputs, but does not promise a byte-identical .mcpb digest. The immutable release-asset digests used by MCP clients are recorded in server.json and RELEASE_EVIDENCE.md.

The source archives additionally provide OpenPGP signatures, Sigstore bundles, SPDX SBOMs, and aggregate checksums through the signed public release manifest.

Licensing boundary

The packaging metadata, build scripts, and repository documentation are licensed under Apache License 2.0. Atlas Scout itself is separate proprietary software. The executables and product materials inside MCPB release assets remain governed by the Atlas Scout Proprietary License and EULA included in every bundle.

Installing or using an MCPB asset constitutes use of the proprietary runtime, not a grant under this repository's Apache license.

Privacy and support

Atlas Scout indexes locally. It does not transmit repository paths, symbols, queries, tool calls, editor state, Git remotes, index metrics, or source code to the Atlas Scout licensing service. Navigation results are sent to the coding agent the user connects.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-11-03restoreB → Ascore 85

Bit Lantern: common questions

Is Bit Lantern MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the Bit Lantern safety report
Does Bit Lantern need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Bit Lantern maintained?
The last commit was 9 days ago (2026-10-26). The latest release is v1.0.0-preview.30.