‹ The Index

Martin Loop

npm

Governed MCP server for AI coding agents with budgets, verifier gates, and inspectable runs.

Works with: Claude Code, Cursor, Claude Desktop, Codex CLI, Gemini CLI, Cline, Windsurf, VS Code (installable)
installable: each client documents how to load an MCP server of this type — that is the client's promise, not a claim verified against this capability

Category: Dev Tools & CI — see all ranked ›

Install (Claude Code):

claude mcp add martin-loop -- npx -y @martinloop/mcp

Security audit

scanned 2026-07-30

Every finding is shown in full — which advisory, the version that fixes it, and the exact command run at install time. Nothing in this audit is behind a licence.

No known advisoriesclearchecked against OSV for 0.3.9
No access inferred from declared dependenciesnothing it depends on reaches files, shell or network. This reads declarations only — built-in APIs are invisible to it, so absence of a declaration is not absence of access
Signed build provenancepublished from public CI with an attestation

npm ↗  ·  source ↗  ·  pkg:@martinloop/mcp

Already running this? npx tashan-cli doctor checks your whole config against the Index — how it works ›

Measured 2026-08-03  ·  scorer s5  ·  how  ·  something wrong here?