MCP server

Umbra

mcp:elberacasa/umbra

Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.

awesome-mcp-servers Glama MCP Registry

Verdict

Not analyzed

Indexed from the registries, but not analyzed yet. Lineage and listings below are current.

Execution chain 347

What it calls, runs, installs, reads and writes, with the line that does it.

Environment variables 2

PATH

src/commands/protect.ts:354 · read

UMBRA_BADGE_URL

src/publish.ts:97 · read

Commands run 4

docker

src/axes/honest/sandbox.ts:46 · process

docker

src/axes/runs/docker.ts:33 · process

docker rm -f {…}

src/axes/honest/sandbox.ts:63 · process

docker version --format {{.Server.Version}}

src/axes/honest/sandbox.ts:38 · process

Files read 53

.cursor/

src/axes/honest/claims.ts:12 · literal

.cursorrules

src/engine/walker.ts:48 · literal

.cursorrules

src/rules/safe/prompt-injection.ts:6 · literal

.env

src/engine/walker.ts:40 · literal

.env

src/fix/fixers/env-extract.ts:19 · literal

.env

src/guard/paths.ts:49 · literal

.env

src/rules/safe/default-credentials.ts:42 · literal

.env

src/rules/safe/hardcoded-secrets.ts:127 · literal

.env.example

src/fix/fixers/env-extract.ts:14 · literal

.env.example

src/guard/paths.ts:6 · literal

.env.example

src/rules/safe/hardcoded-secrets.ts:99 · literal

.env.sample

src/fix/fixers/env-extract.ts:14 · literal

.env.sample

src/guard/paths.ts:6 · literal

.env.sample

src/rules/safe/hardcoded-secrets.ts:99 · literal

.env.template

src/fix/fixers/env-extract.ts:14 · literal

.env.template

src/guard/paths.ts:6 · literal

.env.template

src/rules/safe/hardcoded-secrets.ts:99 · literal

.mcp.json

src/rules/safe/mcp-config.ts:15 · literal

.npmrc

src/engine/walker.ts:48 · literal

src/axes/honest/index.ts:40 · read

src/axes/honest/index.ts:96 · via:readPackageScripts

src/axes/honest/index.ts:109 · via:runDockerSandbox

src/axes/honest/sandbox.ts:129 · read

src/axes/runs/detect.ts:43 · read

src/axes/runs/index.ts:44 · read

src/axes/runs/index.ts:225 · via:copyToTempDir

src/baseline.ts:86 · read

src/cli.ts:79 · via:loadBaseline

src/cli.ts:144 · via:repoFromGitConfig

src/commands/init.ts:80 · read

src/commands/init.ts:118 · via:readFileIfExists

src/commands/init.ts:157 · via:readFileIfExists

src/commands/protect.ts:69 · read

src/commands/protect.ts:153 · via:readFileIfExists

src/commands/protect.ts:280 · via:readFileIfExists

src/commands/protect.ts:306 · via:readFileIfExists

src/engine/walker.ts:73 · read

src/engine/walker.ts:81 · via:visit

src/engine/walker.ts:95 · read

src/engine/walker.ts:105 · via:visit

src/fix/fixers/env-extract.ts:108 · read

src/fix/fixers/env-extract.ts:127 · read

src/fix/fixers/env-extract.ts:166 · read

src/fix/fixers/unused-deps.ts:22 · read

src/mcp/server.ts:170 · read

src/publish.ts:42 · read

src/publish.ts:58 · read

src/rules/safe/exposed-sensitive-files.ts:75 · read

src/rules/safe/exposed-sensitive-files.ts:106 · via:visit

src/rules/safe/exposed-sensitive-files.ts:147 · via:visit

agents.md

src/rules/safe/prompt-injection.ts:6 · literal

claude_desktop_config.json

src/rules/safe/mcp-config.ts:17 · literal

claude.md

src/rules/safe/prompt-injection.ts:6 · literal

Files written 30

src/axes/honest/sandbox.ts:129 · write

src/axes/honest/sandbox.ts:156 · write

src/axes/runs/index.ts:44 · write

src/axes/runs/index.ts:237 · write

src/axes/runs/index.ts:310 · write

src/baseline.ts:58 · write

src/cli.ts:188 · write

src/commands/init.ts:121 · write

src/commands/init.ts:122 · write

src/commands/init.ts:139 · write

src/commands/init.ts:140 · write

src/commands/init.ts:147 · write

src/commands/init.ts:148 · write

src/commands/init.ts:163 · write

src/commands/init.ts:164 · write

src/commands/protect.ts:210 · write

src/commands/protect.ts:211 · write

src/commands/protect.ts:256 · write

src/commands/protect.ts:300 · write

src/commands/protect.ts:301 · write

src/commands/protect.ts:334 · write

src/commands/protect.ts:336 · write

src/commands/protect.ts:386 · via:removeClaude

src/commands/protect.ts:388 · via:installClaude

src/commands/protect.ts:393 · via:removeKimi

src/commands/protect.ts:395 · via:installKimi

src/fix/fixers/env-extract.ts:117 · write

src/fix/fixers/env-extract.ts:134 · write

src/fix/fixers/env-extract.ts:190 · write

src/fix/fixers/unused-deps.ts:43 · write

GitHub repositories 8

elberacasa/umbra

package.json:42 · url

elberacasa/umbra

package.json:44 · url

elberacasa/umbra

package.json:45 · url

elberacasa/umbra

server.json:7 · url

elberacasa/umbra

src/cli.ts:197 · url

elberacasa/umbra

src/report.ts:34 · url

elberacasa/umbra

src/report.ts:265 · url

vitejs/vite

package-lock.json:2444 · url

Network calls 1

src/rules/safe/hallucinated-deps.ts:18 · call

Packages 1

npm:@elberacasa/umbra@1.2.0

server.json:15 · launch:server.json

URLs 248

http://127.0.0.1:$

src/axes/runs/index.ts:137

https://github.com/elberacasa

package.json:38

https://github.com/elberacasa/umbra

server.json:7

https://github.com/elberacasa/umbra

src/cli.ts:197

https://github.com/elberacasa/umbra

src/report.ts:34

https://github.com/elberacasa/umbra

src/report.ts:265

https://github.com/elberacasa/umbra.git

package.json:42

https://github.com/elberacasa/umbra/issues

package.json:44

https://github.com/elberacasa/umbra#readme

package.json:45

https://github.com/sponsors/ai

package-lock.json:1834

https://github.com/sponsors/ai

package-lock.json:1972

https://github.com/sponsors/colinhacks

package-lock.json:2619

https://github.com/sponsors/epoberezkin

package-lock.json:1003

https://github.com/sponsors/express-rate-limit

package-lock.json:1478

https://github.com/sponsors/fastify

package-lock.json:1497

https://github.com/sponsors/ljharb

package-lock.json:1115

https://github.com/sponsors/ljharb

package-lock.json:1566

https://github.com/sponsors/ljharb

package-lock.json:1590

https://github.com/sponsors/ljharb

package-lock.json:1615

https://github.com/sponsors/ljharb

package-lock.json:1627

https://github.com/sponsors/ljharb

package-lock.json:1872

https://github.com/sponsors/ljharb

package-lock.json:2011

https://github.com/sponsors/ljharb

package-lock.json:2207

https://github.com/sponsors/ljharb

package-lock.json:2223

https://github.com/sponsors/ljharb

package-lock.json:2241

https://github.com/sponsors/ljharb

package-lock.json:2260

https://github.com/sponsors/panva

package-lock.json:1729

https://github.com/sponsors/sindresorhus

package-lock.json:1792

https://github.com/vitejs/vite?sponsor=1

package-lock.json:2444

https://img.shields.io/badge/Umbra_Trust_Score-$

src/report.ts:33