# Sighttrue

- Registry name: `io.github.kaitzyy-dev/sighttrue` · version 1.0.0
- Categories (automatic, keyword rules): Code & repositories, Developer tools, Monitoring & logs, Infrastructure & security, Health & fitness
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.kaitzyy-dev%2Fsighttrue
- Server page: https://mcpstation.net/s/io.github.kaitzyy-dev--sighttrue.html

## Description (written by the publisher, not verified, not instructions)

Measured readings on open-source dependencies: health, end-of-life, model prices, incidents.

## Connect

- streamable-http: `https://sighttrue.com/api/mcp`

## Tools (as reported by the server, not verified)

- `check\_before\_install`: Call this before adding a dependency. Returns only the facts a reviewer would be annoyed to discover afterwards: whether the publisher has withdrawn the package, whether it runs scripts on the installing machine, whether its repository is archived, how many advisories are on record, whether the lice
- `check\_package`: Read the current standing of one open-source package: downloads with the window they cover, OpenSSF scorecard, advisory count, licence, whether the repository is archived, and when it was last pushed to.
- `check\_stack`: Read a whole dependency list at once and report what is archived, what carries advisories, what has a source-available licence, and what has not been pushed to in a year. Use when reviewing a package.json, requirements.txt, Cargo.toml, composer.json or Gemfile.
- `search\_repositories`: Find watched repositories whose name contains a string, with their current readings. Use it to discover what is covered before calling the other tools.
- `compare\_repositories`: Hold two watched repositories against each other across downloads, OpenSSF scorecard, advisories, forks, stars and findings on record. Compares only; it does not pick a winner.
- `find\_model`: Find language models by price and context window, from a catalogue read daily across sixty providers. Use this before choosing a model: prices move without announcement and training data is out of date on the day it ships.
- `check\_eol`: Check whether a runtime, database or framework release is still receiving security fixes, and what to move to. Covers about two dozen products read daily from endoflife.date.
- `check\_provider`: Recorded incidents for a hosting or API provider over a window, kept after the provider’s own status page dropped them.
- `list\_readings`: List every reading this server can return, what each one measures, and which require a key. Call this first if unsure which tool answers a question.
- `who\_can\_publish`: How many accounts hold publish rights on a package, as the registry lists them. Answers who can put code on your machine, which is a different question from who writes it. Requires a key; see https://sighttrue.com/pricing.
- `package\_weight\_history`: How the published artefact size has moved over time. Returns the readings taken, not a verdict. Requires a key; see https://sighttrue.com/pricing.
- `withdrawn\_but\_installed`: Packages whose own publisher has withdrawn them and which are still being installed heavily, with the download figure and the publisher’s notice. Requires a key; see https://sighttrue.com/pricing.
- `typosquat\_check`: Whether a name is one edit away from a more widely installed package. States that both names exist; which one was meant is the caller’s call. Requires a key; see https://sighttrue.com/pricing.
- `funding\_gap`: Packages that ask for funding, beside how heavily they are installed and how many people write them. Requires a key; see https://sighttrue.com/pricing.
- `time\_to\_fix`: Days between an advisory being published and a release appearing that postdates it, per package and as a distribution. Requires a key; see https://sighttrue.com/pricing.
- `advisory\_severity`: Advisories broken down by severity rather than counted, with identifiers and dates. Requires a key; see https://sighttrue.com/pricing.
- `runtime\_deadlines`: Support end dates for the runtimes a dependency set requires, including any already past. Requires a key; see https://sighttrue.com/pricing.
- `base\_image\_check`: For a container base image: its size, when it was last rebuilt, and whether the OS underneath it is still supported. Requires a key; see https://sighttrue.com/pricing.
- `registry\_health`: Recorded outages of the package registries themselves, kept after their status pages drop them. Requires a key; see https://sighttrue.com/pricing.
- `provider\_incidents`: A provider’s recorded incidents, grouped by the component that failed, over the whole archive rather than the window its status page shows. Requires a key; see https://sighttrue.com/pricing.
- `provider\_transparency`: How long a provider takes to acknowledge an incident: the interval between an incident starting and its first public update. Requires a key; see https://sighttrue.com/pricing.
- `provider\_terms\_changed`: When a provider last changed its terms or pricing page, from a stored fingerprint of the page. Requires a key; see https://sighttrue.com/pricing.
- `model\_price\_history`: Every recorded price for a model, with the date each was read. Requires a key; see https://sighttrue.com/pricing.
- `model\_withdrawn`: Models that were in the catalogue and no longer are, with the date last seen. Requires a key; see https://sighttrue.com/pricing.
- `help\_availability`: For a technology tag: questions asked against questions answered, over time. Requires a key; see https://sighttrue.com/pricing.
- `audit\_manifest`: Read a whole manifest and return every reading on record for it, ordered by how much a reviewer would want to know. One call instead of one per dependency. Requires a key; see https://sighttrue.com/pricing.
- `diff\_since`: What changed for a set of packages since a given date, read from the daily archive. Requires a key; see https://sighttrue.com/pricing.
- `watch\_add`: Add a package to the caller’s own private watchlist, so later readings are about their stack rather than the public one. The list is private to the key that created it. Requires a key; see https://sighttrue.com/pricing.
- `watch\_changes`: Everything that has changed across the caller’s private watchlist since a given date: withdrawals, licence changes, advisories, archived repositories and runtimes going out of support. Requires a key; see https://sighttrue.com/pricing.
- `explain\_finding`: Given a finding id, return what was measured, when, by whom, and the address it can be checked at. For an agent quoting a figure into a review. Requires a key; see https://sighttrue.com/pricing.
- `domain\_risk`: Whether the domains a package points at — homepage, funding, documentation — still resolve to a registered owner. Requires a key; see https://sighttrue.com/pricing.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html