humblef0ol/mcp-sentry
Static-analysis security linter for TypeScript MCP servers — OWASP MCP Top 10.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to the MCP server directory to scan. | no | . |
| min-grade | Fail the workflow if grade is below this threshold (A/B/C/D/F). | no | C |
| report | Push grade to the public badge API after scanning. | no | false |
| output-format | Output format for the primary scan invocation (json/sarif/markdown/text). | no | json |
| github-token | GITHUB_TOKEN used for PR comments and SARIF upload. | yes | — |
| upload-sarif | Upload SARIF results to the GitHub Security tab. | no | false |
| comment-pr | Post / update a PR comment with the grade summary. | no | true |
Outputs
| name | description |
|---|---|
| grade | Computed grade letter (A/B/C/D/F). |
| critical | Number of critical findings. |
| high | Number of high findings. |
| medium | Number of medium findings. |
| low | Number of low findings. |