mcpbeat Sign in

NativeKeel MCP Server

by alicanakyol Your server? Claim it
local only

NativeKeel runs on your own machine — the client starts it, so there is no endpoint to ping. 3 175 installs a week from npm. Last commit 31 Oct 2026.

React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings

Installs per day peak 1 741 · avg 225
a month agotoday
3 175
Installs / week
npm · nativekeel
6
Stars
0 open issues
31 Oct 2026
Last commit
131 releases in 90 days
MIT
License
JavaScript

What the code does

We read the source, 11 h ago · rules 995398eba69f

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a file or shell call scan_project.path → src/mcp.js:262, scan_project.path → src/mcp.js:265, improve_app.map → src/mcp.js:262 и ещё 5
  const r = analyzeSourceMap(bounded.readFileSync(path.join(root, file), 'utf8'));
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    const candidate = path.join(dir, 'node_modules', name);
…are not in the app; they only weigh down the repository. Check for a use outside the app (store listing, website), then delete them.`,fix:{kind:"cleanup",step:`Delete images nothing references (${u.slice(0,3).join(", ")}${u.length>3?", \u2026":""}).`},evidence:u.slice(0,20).map(m…
Reads files and sends them to the network site/check/checker.js:2
…c:(e,t)=>{let n=rt.default.resolve(e);if(!Xe.has(n))throw pn(e);let s=Xe.get(n);return t?s:new TextEncoder().encode(s)},readdirSync:(e,t)=>{let n=rt.default.resolve(e);if(!Mi(n))throw pn(e);let s=n.endsWith("/")?n:`${n}/`,i=new Map;for(let a of Xe.keys())if(a.startsWith(s)){let c…

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add nativekeel -- npx -y nativekeel
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "nativekeel": {
      "command": "npx",
      "args": [
        "-y",
        "nativekeel"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.nativekeel]
command = "npx"
args = ["-y", "nativekeel"]
.cursor/mcp.json
{
  "mcpServers": {
    "nativekeel": {
      "command": "npx",
      "args": [
        "-y",
        "nativekeel"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "nativekeel": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "nativekeel"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: NATIVEKEEL_MCP_ROOTS (Extra folders the server may scan (path-delimited). By default only the folder the client starts it in).

Alternatives to NativeKeel

same job, measured the same way
HTTP Check MCP
by mrfentmen

Check a URL live: status, timing, redirect chains and security headers; private hosts blocked

537 installs/wk local only
Claw GRC
by clawgrc

AI-native GRC: compliance scores, security findings, tickets and agent trust tiers.

answering
P
PCBLT — Live Checks
by pcblt

Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices.

12 tools answering
Nel Veil
by nelproinc

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

89 installs/wk local only
E
Eclipse Health Check MCP
by cyan-eclipse-technologies-llc

Scan an MCP server or agent configuration for security posture — evidence-bound findings

local only
Unchore Defend
by smilemino

Grade a site's security headers with fixes and a badge; read logs or code for the defender.

local only
Domain Health
by modernmustardseed

Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.

5 tools answering
72hours security check
by maebsy

Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.

15 tools answering

NativeKeel — questions

Answers built from our own checks of this server.

Why is there no uptime for NativeKeel?
NativeKeel runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package nativekeel was installed 3 175 times last week.
How do I connect NativeKeel?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls nativekeel straight from npm; nothing to host, nothing to sign up for.
How many people use NativeKeel?
The npm package nativekeel was installed 3 175 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is NativeKeel open source?
Yes — it is published under the MIT licence, written in JavaScript and 6 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.