GuestKit runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 20 Oct 2026.
Read-only evidence and boot-readiness tools for one VM disk image, offline.
We read the source, 5 d ago · rules 995398eba69f
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
result = subprocess.run(
let mut cmd = Command::new("mkfs.vfat");
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
("virtualbox-guest", &["/usr/bin/VBoxControl", "/opt/VBoxGuestAdditions"]),
const SENSITIVE_WORLD_WRITABLE: &[&str] = &["/etc", "/etc/cron.d", "/etc/sudoers.d"];
result = subprocess.run(
if has_cmd("docker") && Path::new("/var/run/docker.sock").exists() {
let ak = format!("{}/.ssh/authorized_keys", f[5]);
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
el.innerHTML=state.vms.map(vm=>{
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch GuestKit and you get told the day something new turns up.
Official-source US business, permit, and WHOIS evidence via read-only MCP tools.
Offline, read-only tools that verify AI claims against evidence and replay conformance vectors.
Assess AI-discovery readiness, plan visibility fixes, and summarize scan evidence. Read-only.
Read-only ProvenTools business ideas, evidence, build prompts, and validation reports.
Read-only evidence for the tools agents run: MCP server records, coverage and policy.
Read-only verifier for 25 ProofRelay MCP tools and non-confidential evidence bundles.
Read-only AI coding tools for change verification, release readiness, capacity, and guidance.
Read-only approved AI tools, public stacks, guides, and evidence-aware comparisons.
Answers built from our own checks of this server.