Graneth MCP server
{
"mcpServers": {
"graneth": {
"command": "npx",
"args": [
"-y",
"@graneth/mcp-server@latest"
]
}
}
}{
"mcpServers": {
"graneth": {
"command": "npx",
"args": [
"-y",
"@graneth/mcp-server@latest"
]
}
}
}{
"mcpServers": {
"graneth": {
"command": "npx",
"args": [
"-y",
"@graneth/mcp-server@latest"
]
}
}
}{
"servers": {
"graneth": {
"command": "npx",
"args": [
"-y",
"@graneth/mcp-server@latest"
]
}
}
}{
"mcpServers": {
"graneth": {
"command": "npx",
"args": [
"-y",
"@graneth/mcp-server@latest"
]
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y @graneth/mcp-serverversion 0.7.1
What it does
Graneth is an MCP server that runs pre-commit checks on code changes written by AI, detecting non-existent packages, dependency risks, and hardcoded secrets across six package ecosystems. It requires no account and runs locally via stdio with no external dependencies.
- Scan code changes for packages that do not exist in npm, PyPI, Maven, Cargo, Gem, or NuGet registries before committing.
- Detect hardcoded secrets and credentials in AI-generated code using pattern matching and entropy analysis.
- Assess dependency risk by analyzing package manifests and flagging potentially problematic dependency patterns.
Tools this server exposes
| Tool | Does |
|---|---|
| check_packages | Verifies that packages referenced in code exist in supported package registries across six ecosystems. |
| check_secrets | Scans code for hardcoded secrets using pattern matching and entropy detection. |
| check_dependencies | Analyzes manifests and dependency trees to identify risk patterns and malformed references. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.