Back to Browse

Contract Diff MCP Server

Developer ToolsLow Risk9.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Aggregate local contract snapshot changes without exposing schema contents. Tools include...

About

Aggregate local contract snapshot changes without exposing schema contents. Tools include...

Security Report

9.0
Low Risk9.0Low Risk

Valid MCP server (3 strong, 3 medium validity signals). 1 known CVE in dependencies (0 critical, 1 high severity) Package registry verified. Imported from the Official MCP Registry.

6 files analyzed · 2 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mrfentmen-contract-diff-mcp": {
      "args": [
        "-y",
        "contract-diff-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

contract-diff-mcp

Contract Diff compares two local JSON contract snapshots and reports a coarse structural fingerprint. It is useful for quickly answering whether a generated API or schema snapshot became larger, smaller, or structurally different without handing schema contents to an agent. It does not prove endpoint compatibility or identify semantic additions and removals.

Tool

  • compare_contract_snapshots: compare two local JSON snapshots using node counts, value type categories, and deltas only. The result is a structural signal, not a semantic contract diff.

Safety

  • Local paths only, bounded by CONTRACT_DIFF_ROOT and realpath checks.
  • Files are capped at two megabytes and traversal is capped.
  • Never returns schema names, paths, values, descriptions, examples, versions, file paths, or raw contents.
  • This is a coarse regression signal, not a complete OpenAPI or JSON Schema compatibility validator.

Run

npm install
npm run build
node dist/index.js

Reviews

No reviews yet

Be the first to review this server!