GoldenAnalysis runs on your own machine — the client starts it, so there is no endpoint to ping. 160 installs a week from pypi. Last commit 2 Nov 2026.
Read-only cross-cutting analysis, metrics, and reporting across the Golden Suite.
What the code does
We read the source, 6 min ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
std::fs::File::create(path).map_err(|e| format!("create {path}: {e}"))?,
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
result = subprocess.run(cmd, check=False)
"AGFzbQEAAAAB8gEiYAAAYAABf2ABfwBgAX8Bf2ABfwF+YAJ/fwBgAn9/AX9gAn9/BH9/f39gAn9/AX5gAn9/AW9gA39/fwBgA39/fwF/YAR/f39/AGAEf39/fwF/YAR/f39/BH9/f39gBX9/f39/AGAFf39/f38Bf2AFf39/f38Ef39/f2AGf39/f39/AGAGf39/f39/AX9gB39/f39/f38AYAR/f39+AGAFf39/fn8AYAR/f398AGADf39+AGAEf39+fgBgA39/fAR/f39/Y…
The worked example: a per-metric **2% gate on `match.recall_safe_bound`** catches a 0.97 → 0.89 recall drop that a global 10% gate would miss, exactly the kind of quiet quality regression a nightly pipeline should alert on.
result = subprocess.run(cmd, check=False)
sub.write_parquet(os.path.join(out, f"part-{k:02d}.parquet"))
m = __import__(mod, fromlist=[name])
… "ngram_min": 2, "ngram_max": 4, "lowercase": true, "boundary": "\u0002", "seed": 0}, "n_features": 128, "weights_b64": "bL+APH9Gh7y98qM939VWPKEhib39Ijk9eekmPuZz8j3+J7S9VfkhvuqOn71uRak7Ts2UvuwK4LwDeh++4HW7vY9Ui70Y8iG9PcFSPRRxBT6XnoO8RuguPjNKqr0h+TM90knnPYWJQDz4Vb69MvbrvQpbar3VeuE…
| `retrieve_similar` | Semantic retrieval (#1089): return the records in a CSV most similar to a free-text query, ranked by cosine similarity. Embeds the chosen column and the query with the zero-config in-house embedder (no cloud/torch by default) and runs ANN search. The read s…
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add goldenanalysis -- uvx goldenanalysis{
"mcpServers": {
"goldenanalysis": {
"command": "uvx",
"args": [
"goldenanalysis"
]
}
}
}[mcp_servers.goldenanalysis]
command = "uvx"
args = ["goldenanalysis"]{
"mcpServers": {
"goldenanalysis": {
"command": "uvx",
"args": [
"goldenanalysis"
]
}
}
}{
"servers": {
"goldenanalysis": {
"type": "stdio",
"command": "uvx",
"args": [
"goldenanalysis"
]
}
}
}Alternatives to GoldenAnalysis
same job, measured the same wayRead-only Trellus call reporting: call activity, rep results, sessions and call details.
Read-only IBKR MCP: account, positions, brief, regime, stress, reporting, Edge, and risk.
Marketing reporting across Google Ads, Meta Ads, GA4, Search Console and Merchant Center.
An MCP server for analyzing startup financial health and generating metrics reports locally.
Google Analytics 4: reports, traffic sources, landing pages, events, realtime (read-only).
Read-only Git explainer: what state a repo is in, what an error means, and the exact fix.
Your golf coach in your AI: handicap, rounds, reports and swing analysis from your own account.
Native Weavatrix MCP: 43 read-only repository tools across 24 code and configuration surfaces.
GoldenAnalysis — questions
Answers built from our own checks of this server.