MCP Blast-Radius Auditor
A static analysis tool that audits the blast radius of MCP servers before agent installation. It extracts potential file, network, subprocess, and environment access points. When a manifest is provided, it also detects divergences between declared and observed capabilities, supporting CI gating.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Scan MCP server capabilities statically
- Detect manifest divergences
- Gate CI merges on blast radius
- Generate audit badges
Source and maintenance
- Last repository push
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
mcp-blast-radius 0.2.8
{
"version": "0.2.8",
"transport": "stdio",
"identifier": "mcp-blast-radius",
"runtimeHint": "uvx",
"registryType": "pypi",
"registryBaseUrl": "https://pypi.org"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · repository · passed · metadata changed · updated
- · backfill · recorded · Pre-expansion baseline; unobserved rich metadata remains unknown
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"mcp-blast-radius-auditor": {
"command": "uvx",
"args": [
"mcp-blast-radius==0.2.8"
]
}
}
}Cline
{
"mcpServers": {
"mcp-blast-radius-auditor": {
"command": "uvx",
"args": [
"mcp-blast-radius==0.2.8"
]
}
}
}VS Code
{
"servers": {
"mcp-blast-radius-auditor": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-blast-radius==0.2.8"
]
}
}
}Claude Desktop
{
"mcpServers": {
"mcp-blast-radius-auditor": {
"command": "uvx",
"args": [
"mcp-blast-radius==0.2.8"
]
}
}
}Let your agent find its tools
Find servers like MCP Blast-Radius Auditor from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.