Back to Browse

Tracekit MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

MCP gateway you deploy: a Tracekit signer decides and signs each call; agents send each run's token.

About

MCP gateway you deploy: a Tracekit signer decides and signs each call; agents send each run's token.

Remote endpoints: streamable-http: https://{tracekit_gateway}/mcp

Security Report

4.2
Use Caution4.2High Risk

The bundle contains a developer-tools package (agent-flow) and an unrelated audit/signing project (Tracekit) plus their manifests, and the visible code shows no exfiltration, backdoors, obfuscation, or hardcoded secrets. The main concerns are supply-chain and hook-installation risk: the update flow fetches the latest npm release and rewrites agent hook configuration, and the CLI spawns git and gh subprocesses whose argument handling is only partially visible because the code is truncated. Permissions broadly match a repository-aware developer tool. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity).

10 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!