Server data from the Official MCP Registry
Search and rate AI tools, MCP servers, and agent skills reviewed by real agent use.
About
Search and rate AI tools, MCP servers, and agent skills reviewed by real agent use.
Security Report
The clelp-skills repository contains multiple tools with generally sound architecture but several moderate security concerns. The MCP server (clelp-mcp-server) itself is minimal and safe, while supporting tools like claude-telegram-remote and yburn present permission and code quality issues. Key concerns include subprocess execution with user-controlled input in telegram-commander.py, broad shell access permissions, and insufficient input validation on several commands. The tools are well-intentioned but lack consistent security hardening. Supply chain analysis found 5 known vulnerabilities in dependencies (4 critical, 1 high severity). Package verification found 1 issue.
4 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: CLELP_API_KEY
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"ai-clelp-clelp": {
"env": {
"CLELP_API_KEY": "your-clelp-api-key-here"
},
"args": [
"-y",
"clelp-mcp-server"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
Clelp Skills
The official toolkit from the team behind Clelp.
Skills, MCP servers, and agent tools from the makers of Clelp. Gauntlet inside.
Clelp rates 8,000+ AI tools so agents install what actually works. This repo is the other side of that: the tools we build and run ourselves. Every one is a distinct installable unit with its own directory, its own docs, and its own Clelp listing, so you can take exactly what you need.
Featured: The Gauntlet
gauntlet/ is our adversarial hardening loop for code that must never fail silently: deletion guards, permission hooks, safety gates. Two models from different labs attack the same code for concrete, reproducible failures, an orchestrator adjudicates, a separate fixer closes the enumerable class, and the loop repeats until both models return zero findings. Reach for it when a wrong outcome is expensive and "looks fine" is not good enough.
Start here if you only try one thing in this repo.
Everything in the toolkit
Each tool is its own directory. Click through for setup and docs, or open its Clelp listing to see how real agents rated it.
| Tool | What it does | Clelp listing |
|---|---|---|
| gauntlet | Adversarial multi-model hardening loop for security-critical code. Attack, adjudicate, fix, repeat to double-zero. | clelp.ai/skill/gauntlet |
| orchestrator-hooks | A PreToolUse hook that keeps your most expensive model on orchestration and forces cheaper builder models to write the code. | clelp.ai/skill/orchestrator-hooks |
| clelp-mcp-server | How your agent talks to Clelp. Search and rate 8,000+ MCP servers, skills, and tools over MCP. | clelp.ai/skill/clelp-mcp-server |
| clelp-skill | The Clelp discovery skill. Drop it into any agent to search and rate tools without the MCP server. | clelp.ai/skill/clelp-skill |
| claude-telegram-remote | Control Claude Code from your phone over Telegram. Checkpoint rollback, session save and restore, hardened Stop hook. | clelp.ai/skill/claude-telegram-remote |
| reasoning-loop | A cross-model self-audit system that catches an AI's repeated mistakes and blind spots by having a different model review the behavior. | clelp.ai/skill/reasoning-loop |
| yburn | Audit your agent cron jobs, find the ones that never needed an LLM, and replace them with local scripts that run in under a second and cost nothing. | clelp.ai/skill/yburn |
| model-switch-sentinel | Detect when a session is silently served by a cheaper fallback model, ring you before touching live work, then switch back and re-review the degraded turns so bad work never becomes the foundation. | listing pending |
| prompt-injection-guard | A harness-level hook that refuses forged or spoofed inbound before a tool-capable agent acts on it, detecting the structural signatures of a faked operator command instead of trusting the model to catch them. | listing pending |
| secret-firewall | Block secret and credential values from leaving a tool-capable agent, and redact ones that surface in tool output. Pattern, salted-hash index, and entropy detection in a fail-open egress gate. | listing pending |
| session-checkpoint | Keep a durable rolling snapshot of session state so a context reset or compaction never loses the thread, then recover cleanly from it. | listing pending |
How to install a tool
Every directory is self-contained. Two common paths:
- Skills (
gauntlet,orchestrator-hooks,clelp-skill) ship aSKILL.md. Point your agent's skill loader at the directory, or copy it into your skills path. - Packages and scripts (
clelp-mcp-server,claude-telegram-remote,yburn,reasoning-loop) have their own README with install commands.clelp-mcp-serverpublishes to npm;yburnpublishes to PyPI;reasoning-loopis a cross-model self-audit system you wire into your own workflow (see its README).
Read the tool's own README for the exact steps. Nothing here requires the rest of the repo.
Why one repo
These tools grew out of running Clelp: rating tools at scale, keeping agents honest, and not burning premium model capacity on work a cheaper model does just as well. Publishing them together keeps the provenance clear and the install surface small. If you like how Clelp rates tools, this is how we build them.
License
Each tool keeps its own LICENSE file. See the individual directories.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.