Back to Browse

Runtime Support MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Summarize runtime declarations across local manifests and CI files without returning versions,...

About

Summarize runtime declarations across local manifests and CI files without returning versions,...

Security Report

7.2
Moderate7.2Low Risk

This is a well-designed MCP server with solid security practices. It implements read-only filesystem scanning with proper path traversal protection, explicit data filtering to prevent sensitive information leakage, and appropriate input validation. The server has minimal dependencies and no authentication vulnerabilities. Minor code quality improvements around error handling and logging could be made, but no security issues were identified. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

6 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mrfentmen-runtime-support-mcp": {
      "args": [
        "-y",
        "runtime-support-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

runtime-support-mcp

Runtime Support summarizes how many runtime families appear across local manifests, Docker files, and CI configuration. It helps identify mixed toolchains before a release.

Quick start

npm install
npm test
npm start

Use inspect_runtime_support with a project inside RUNTIME_SUPPORT_ROOT.

Limits

The output contains counts and runtime family signals only. Versions, dependency names, paths, source text, and environment values are suppressed.

Reviews

No reviews yet

Be the first to review this server!