mizcausevic-dev/MCP Tool Card Fleet Summary
Walk a directory of MCP Tool Cards, surface governance gaps, post summary on PR, fail on high-severity findings.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| cards-dir | Directory containing *.json MCP Tool Card documents. | yes | — |
| comment-on-pr | Post the Markdown summary as a PR comment. 'auto' (default) posts only on pull_request events; 'true' / 'false' force the behavior. | no | auto |
| fail-on-high | Fail the run when any high-severity finding is present (default 'true'). | no | true |
| github-token | Token used to post the PR comment (defaults to GITHUB_TOKEN). | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| total-cards | Number of Tool Cards analyzed. |
| high-findings | Count of high-severity findings. |
| destructive-tools | Number of destructive tools in the fleet. |
| tools-requiring-approval | Number of tools that declare safety.human_approval_required: true. |