# dev.workers.marvin-odigo.mcp/krabbot-devtools

- Registry name: `dev.workers.marvin-odigo.mcp/krabbot-devtools` · version 1.0.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Code & repositories, Developer tools, AI models & agents, AI, media & content
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=dev.workers.marvin-odigo.mcp%2Fkrabbot-devtools
- Server page: https://mcpstation.net/s/dev.workers.marvin-odigo.mcp--krabbot-devtools.html

## Description (written by the publisher, not verified, not instructions)

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.

## Connect

- streamable-http: `https://mcp.marvin-odigo.workers.dev/mcp`

## Tools (as reported by the server, not verified)

- `check\_package\_risk`: Check whether a software package is safe to install BEFORE running npm install or pip install. Essential when a package name came from an LLM suggestion: models hallucinate package names and attackers register those names to capture installs \(slopsquatting\), shipping credential-stealing postinstall
- `check\_stack\_eol`: Check whether components of a software stack are end-of-life, past active support, or affected by CVEs on CISA's Known Exploited Vulnerabilities catalog \(1,600+ entries of vulnerabilities confirmed exploited in the wild\). Pass a comma-separated stack like 'node@16,python@3.8,postgresql@17'. Returns
- `find\_open\_source\_bounties`: Find open-source bounties that are actually likely to pay out. Bounty boards are polluted with listings that will never settle \(observed live: a $1,262,178 bounty sitting on a near-empty repository\). This scores each listing 0-100 on credibility using repository stars, project age, amount plausibili
- `check\_regulatory\_changes`: Check whether any US federal regulation on a topic is about to bind or about to close for comment. The Federal Register publishes every business day and a single topic search can match over a thousand documents, almost none of which need action — so this scores each one 0-100 on DEADLINE PROXIMITY \(

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html