All servers · Security · Code & repositories · AI models & agents

dev.workers.marvin-odigo.mcp/krabbot-devtools

dev.workers.marvin-odigo.mcp/krabbot-devtools · v1.0.0

Measured by MCP Station

Description written by the publisher, not verified

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.

Connect

claude mcp add --transport http krabbot-devtools https://mcp.marvin-odigo.workers.dev/mcp

{
  "mcpServers": {
    "krabbot-devtools": {
      "url": "https://mcp.marvin-odigo.workers.dev/mcp"
    }
  }
}

Tools as reported by the server

• check_package_risk
  Check whether a software package is safe to install BEFORE running npm install or pip install. Essential when a package name came from an LLM suggestion: models hallucinate package names and attackers register those names to capture installs (slopsquatting), shipping credential-stealing postinstall
• check_stack_eol
  Check whether components of a software stack are end-of-life, past active support, or affected by CVEs on CISA's Known Exploited Vulnerabilities catalog (1,600+ entries of vulnerabilities confirmed exploited in the wild). Pass a comma-separated stack like 'node@16,python@3.8,postgresql@17'. Returns
• find_open_source_bounties
  Find open-source bounties that are actually likely to pay out. Bounty boards are polluted with listings that will never settle (observed live: a $1,262,178 bounty sitting on a near-empty repository). This scores each listing 0-100 on credibility using repository stars, project age, amount plausibili
• check_regulatory_changes
  Check whether any US federal regulation on a topic is about to bind or about to close for comment. The Federal Register publishes every business day and a single topic search can match over a thousand documents, almost none of which need action — so this scores each one 0-100 on DEADLINE PROXIMITY (

Website · JSON · Text for agents · Registry updated 2026-08-17