About Oathe Mcp
Oathe Mcp provides security-audit tools for developers assessing MCP servers, plugins, and AI agent skills. It supports audit submission, report retrieval, and searches of completed audits with trust scores and findings.
Key features
- 01Submit GitHub or ClawHub URLs for audits
- 02Track audit progress
- 03Retrieve reports and trust scores
- 04Get score-and-verdict summaries
- 05Search audits by verdict or score
Use cases
- 01Check a repository before installing an AI agent skill
- 02Review audit findings for an MCP server
- 03Find completed audits above a trust-score threshold
MCP support
Oathe Mcp is an MCP server that exposes audit submission, status, report, summary, and search tools to MCP clients.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
5Saved tool list · updated 3w ago
| Parameter | Type | Required | Description |
|---|---|---|---|
| skill_url | string | Yes | GitHub or ClawHub URL of the skill/repo to audit |
| notification_email | string | No | Optional email to notify when audit completes |
| force_rescan | boolean | No | Bypass deduplication and force a fresh audit |
Details
From the project READMEoathe-mcp
MCP server for Oathe AI security audits. Check trust scores before installing MCP servers, plugins, or AI agent skills.
Quick Start
npx oathe-mcp
No API key required. No configuration needed.
MCP Client Configuration
Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"oathe": {
"command": "npx",
"args": ["-y", "oathe-mcp"]
}
}
}
Claude Code
claude mcp add oathe -- npx -y oathe-mcp
Tools
submit_audit
Submit a GitHub or ClawHub URL for a security audit.
{ "skill_url": "https://github.com/owner/repo" }
Returns audit_id to track progress. Rate limited: one submission per 60 seconds per IP.
check_audit_status
Check the status of a submitted audit.
{ "audit_id": "uuid-from-submit" }
Poll every 5 seconds. Terminal statuses: complete, failed.
get_audit_report
Get the full security audit report for a repository.
{ "owner": "anthropics", "repo": "claude-code" }
Returns trust score, verdict, findings, category scores, and recommendation.
get_skill_summary
Get a lightweight summary (score + verdict) without full findings.
{ "owner": "anthropics", "repo": "claude-code" }
Returns score, verdict, recommendation, and finding counts.
search_audits
Search completed audits by verdict or minimum trust score.
{ "verdict": "SAFE", "min_score": 80, "sort": "trust_score", "order": "DESC" }
Returns up to 100 results.
Configuration
| Environment Variable | Default | Description |
|---|---|---|
OATHE_API_BASE | https://audit-engine.oathe.ai | Override the API base URL |
Setting an invalid OATHE_API_BASE will produce a clear error at startup.
License
MIT
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.