mcpbeat Sign in

Judges Panel MCP Server

local only

Judges Panel runs on your own machine — the client starts it, so there is no endpoint to ping. 629 installs a week from npm. Last commit 7 Apr 2026.

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.

Installs per day peak 292 · avg 74 · +85% w/w
a month agotoday
629
Installs / week
npm · @kevinrabun/judges
7
Stars
3 open issues
7 Apr 2026
Last commit
0 releases in 90 days
MIT
License
TypeScript

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Deletes files or strips permissions src/evaluators/portability.ts:81
    /(?:exec|spawn|system|popen|shell_exec)\s*\(\s*["'`](?:cmd |powershell |bash |sh |\/bin\/|\.exe|rm -rf|del \/|copy |xcopy|chmod|chown)/gi;
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Executes code built at runtime content/snippets/python/py-08-eval-injection.py:2
    return eval(expression)
    const log = execSync(`git log --oneline -${count} --format="%H|%s"`, { encoding: "utf-8", timeout: 10000 });
Asks for container control access src/commands/benchmark-expanded-2.ts:4181
      - /var/run/docker.sock:/var/run/docker.sock  # Docker socket access
Touches key and credential files src/evaluators/hallucination-detection.ts:1310
            "and configure your .npmrc to route scoped packages to your private registry.",

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Judges Panel and you get told the day something new turns up.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add judges -- npx -y @kevinrabun/judges
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "judges": {
      "args": [
        "-y",
        "@kevinrabun/judges"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.judges]
command = "npx"
args = ["-y", "@kevinrabun/judges"]
.cursor/mcp.json
{
  "mcpServers": {
    "judges": {
      "args": [
        "-y",
        "@kevinrabun/judges"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "judges": {
      "args": [
        "-y",
        "@kevinrabun/judges"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Judges Panel

same job, measured the same way
CodeY CMS
by fpointerdev

Discover, evaluate, install, and validate generated websites for the self-hosted CodeY CMS.

34 installs/wk local only
Python Code Validator
by statemind

Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.

3 tools answering
Sentrik
by maxgerhardson

Governance runtime for AI-generated code. Enforce compliance and security standards.

69 installs/wk local only
SonarQube MCP Server
by sonarsource

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

local only
CodeInspectus
by synvoya

Local-first MCP security scanner and CLI for AI-generated applications.

142 installs/wk local only
Code Guard MCP
by mlawsonking

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

44 installs/wk local only
Python Code Validator
by jkanselaar

Validates AI-generated Python: syntax, lint, security scan and deterministic repair.

3 tools answering
Skylos
by duriantaco

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

18 479 installs/wk local only

Judges Panel — questions

Answers built from our own checks of this server.

Why is there no uptime for Judges Panel?
Judges Panel runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @kevinrabun/judges was installed 629 times last week.
How do I connect Judges Panel?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @kevinrabun/judges straight from npm; nothing to host, nothing to sign up for.
How many people use Judges Panel?
The npm package @kevinrabun/judges was installed 629 times in the last week. Week over week that is +85%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Judges Panel open source?
Yes — it is published under the MIT licence, written in TypeScript, 7 stars on GitHub and 3 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.