Packageactivev1.0.2

io.github.Toraastrta/sphior-code-mcp

Deterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.

Auth

API key

Data

Handles secrets

License

MIT

Unknown facts are omitted here and listed as pending in the profile.

Trust verdict

No blockers found

No blockers found across the assessed dimensions.

assessed on 3 of 4 dimensions · 1 not applicable

MaintenanceActively maintained — last activity 0 days ago.deps.dev (Open Source Insights) · as of Jul 14, 2026
Pass
ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 14, 2026
Pass
Supply chainNo known vulnerabilities in scanned package dependencies (OSV).OSV (Google Open Source Vulnerabilities) · as of Jul 14, 2026
Pass

Profile

What this server is — descriptive, not a rating. The verdict above judges it; this describes it.

Classification

CapabilityPending — classifier not yet run

IndustryPending — classifier not yet run

Exposure

Side effectsPending — tools not yet classified

Auth modelAPI keymcp_registry

Data surfaceHandles secretsmcp_registry

Geography

Hosting

Tool surface

Not yet probed — this server's live tool surface hasn't been captured yet, so its tools and measurements aren't available.

Adoption

No adoption signal captured yet for this package.

Connect

npm package · v1.0.2 · stdio

npx -y sphior-code-mcp

SPHIOR_API_KEYrequiredsecret
Your SPHIOR CODE API key (sk_live_...). Create one at https://sphior.com/account/code.
SPHIOR_API_BASE
Override the API base URL for self-hosted / regional deployments. Default: https://sphior.com/api/v1

Sources

Every verdict and label is attributable to its source and recomputed from our own landed copy, never read live on this page.