Scan AI agent skills, MCP server packages and MCP configs before you install them. Static analysis.
Connect Remote server
claude mcp add --transport http skilltriage https://skilltriage.moorai.dev/mcp
{
"mcpServers": {
"skilltriage": {
"url": "https://skilltriage.moorai.dev/mcp"
}
}
}
{
"servers": {
"skilltriage": {
"type": "http",
"url": "https://skilltriage.moorai.dev/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://skilltriage.moorai.dev/mcp
Tools 4 found in our last check
scan_packageDownload one published package and run static analysis on its code with MoorAI's open-source engine. npm and PyPI packages also get ten MCP pre-install checks on their registry metadata, a reputation score and a known-compromised release check. Static analysis only: the package…
scan_mcp_configCheck a pasted MCP client config (.mcp.json, claude_desktop_config.json, mcp.json, Codex config.toml). Reports each npm or PyPI launch by its position and how its version is pinned (exact, @latest, a tag or range, none), flags releases on the known-compromised list, and runs sta…
scan_skillScan one agent skill or instruction file (SKILL.md, AGENTS.md, a tool.json, any text file) with MoorAI's open-source engine. Static analysis only; nothing is run. The text is written to a temporary directory, scanned and deleted; only its hash, the verdict and content-free findi…
lookup_verdictLook up the verdict the public catalogue has published for an MCP server package on npm or PyPI. Returns found:false when the catalogue has no published verdict for that name; that is not a clean result. Nothing is downloaded or scanned. This request names the package to the ser…
Details
| Endpoint | https://skilltriage.moorai.dev/mcp (Streamable HTTP) |
| First published | 31 Oct 2026 |
| Last updated | 31 Oct 2026 |
| Registry name | dev.moorai/skilltriage |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
