Graneth MCP Server

by graneth Your server? Claim it

answering

Graneth is answering right now. Last checked 2 min ago. It exposes 4 tools.

Pre-flight check for AI coding agents: hallucinated packages + secrets, 6 ecosystems, no account.

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 77 · avg 13 · +45% w/w

a month agotoday

Uptime history 91 days of history · worst day 92%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

131 ms

Response time

average over 24h

authentication required

Access

streamable-http

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 21 August 2026. No other catalogue keeps this.

21 Aug a tool description was rewritten get_findings

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp-server --transport http https://graneth.com/api/mcp

Settings → Connectors → Add custom connector, then paste this address

https://graneth.com/api/mcp

~/.codex/config.toml

[mcp_servers.mcp-server]
url = "https://graneth.com/api/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-server": {
      "url": "https://graneth.com/api/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp-server": {
      "type": "http",
      "url": "https://graneth.com/api/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

auto

auto_remediate

Generate an automated security fix for a specific finding. Creates a GitHub PR with the patched code. Verifies the fix with Level 1 SAST before opening the PR. Requires authentication, 3 credits, and ANTHROPIC_API_KEY.

findings

get_findings

Retrieve the security findings recorded by your most recent scan of this repository, optionally filtered by exact file path or severity. Returns an error if you have never scanned it — that is not the same answer as no findings. Checks that could not run are reported as a count, never listed among the findings.

pre

pre_flight_check

Security pre-flight check for local file changes BEFORE committing. Run this whenever you are about to suggest `git commit`, `git push`, or open a pull request — especially when changes touch auth, secrets, SQL queries, package.json / requirements.txt, or environment variables. Returns CLEAR or BLOCKED with specific findings and remediation steps.

scan

scan_repository

Trigger a Level 1 + Level 2 security scan on a GitHub pull request. Returns SAST findings, taint flows, entropy-detected secrets, and (for PRO users) LLM-triaged results. Requires Graneth authentication.

Endpoints

URL	Transport	State	Latency	Checked
https://graneth.com/api/mcp	streamable-http	needs auth	118 ms	2 min ago

Alternatives to Graneth

same job, measured the same way

Think MCP

by agentutil

Intent security pre-flight checks for autonomous AI agents.

45 installs/wk local only

Opzyai Security Check

by opzyai

Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.

89 installs/wk local only

Pop Pay

by 100xpercent

Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.

66 installs/wk local only

q-ring

by i4ctime

OS keychain secrets for AI coding agents, over MCP.

278 installs/wk local only

VibeDoctor

by vibedoctor

Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes

1 tools answering

Switchboard

by wkoverfield

One firewall and password manager for all your AI coding agents' MCP servers and secrets.

77 installs/wk local only

pkgxray

by adamsjack711-ux

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

63 installs/wk local only

Slidingbox Hydrate/Dehydrate

by slidingbox

Encrypted one-time secret handoff, x402 pre-flight, and web page change checks and watches.

25 installs/wk local only

Graneth — questions

Answers built from our own checks of this server.

What can Graneth do?

It exposes 4 tools, read directly from the server on our last check. Among them: auto_remediate, get_findings, pre_flight_check, scan_repository. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Graneth working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 131 ms. The bar chart above shows every period we have measured.

Is Graneth still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect Graneth?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own credentials: it refuses anonymous clients.

Does Graneth need an API key?

Yes. Every time we knock, Graneth answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Graneth?

It answers our handshake in 131 ms on average, which is faster than 86% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.