NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

TAR Engine

io.github.qingxuantang/tar-engine ยท v0.4.0

Audit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.

Website Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add tar-engine -e TAR_ENGINE_URL=<TAR_ENGINE_URL> -e TAR_ENGINE_BYOK_OPENAI_KEY=<TAR_ENGINE_BYOK_OPENAI_KEY> -- uvx tar-engine==0.4.0
claude_desktop_config.json
{
  "mcpServers": {
    "tar-engine": {
      "command": "uvx",
      "args": [
        "tar-engine==0.4.0"
      ],
      "env": {
        "TAR_ENGINE_URL": "<TAR_ENGINE_URL>",
        "TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "tar-engine": {
      "command": "uvx",
      "args": [
        "tar-engine==0.4.0"
      ],
      "env": {
        "TAR_ENGINE_URL": "<TAR_ENGINE_URL>",
        "TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "tar-engine": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "tar-engine==0.4.0"
      ],
      "env": {
        "TAR_ENGINE_URL": "<TAR_ENGINE_URL>",
        "TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
TAR_ENGINE_URL
Optional		Override the audit backend. Default is the hosted playground at https://tarai.dev. Set to http://localhost:8765 (or your own tar-engine deployment) to self-host and keep SKILL.md content on your machine.
TAR_ENGINE_BYOK_OPENAI_KEY
Optional, secret		Your OpenAI-compatible API key. Unlocks the semantic and adversarial layers, and model step labels in map_skill_risks. Static and supply-chain layers run without it.

Details

Package[email protected] (PYPI, stdio)
First published11 Nov 2026
Last updated11 Nov 2026
Registry nameio.github.qingxuantang/tar-engine

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.