Blast Scope runs on your own machine — the client starts it, so there is no endpoint to ping. 138 installs a week from pypi. Last commit 8 Aug 2026.
Contextual blast-radius scoring for shell commands an AI agent is about to run
What the code does
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
result = subprocess.run(
"id_rsa", "id_dsa", "id_ecdsa", "id_ed25519", "credentials", "credentials.json",
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add blast-scope -- uvx blast-scope{
"mcpServers": {
"blast-scope": {
"command": "uvx",
"args": [
"blast-scope"
]
}
}
}[mcp_servers.blast-scope]
command = "uvx"
args = ["blast-scope"]{
"mcpServers": {
"blast-scope": {
"command": "uvx",
"args": [
"blast-scope"
]
}
}
}{
"servers": {
"blast-scope": {
"type": "stdio",
"command": "uvx",
"args": [
"blast-scope"
]
}
}
}Alternatives to Blast Scope
same job, measured the same wayCheck GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them
Structural code intelligence for AI agents: real call graphs, blast radius, and change history.
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
Codebase understanding for AI coding agents — symbol graph, blast radius, semantic search.
Causal reasoning for reliability: root cause, blast radius, and service health for agents.
Undo a coding agent turn, including shell commands and untracked files.
AEO scoring, llms.txt audit, and agent-readiness checks for AI agents.
Contextual prompts and agent skills for 140+ AI platforms.
Blast Scope — questions
Answers built from our own checks of this server.