@mcpware/cross-code-organizer
AMCP server package @mcpware/cross-code-organizer
Install
agr install @mcpware/cross-code-organizer --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@mcpware/cross-code-organizer", "version": "0.19.3", "description": "Cross-Code Organizer (CCO, formerly Claude Code Organizer) — manage AI coding tool configs across Claude Code, Codex CLI, and more. Memories, skills, MCP servers, commands, agents, rules, and hooks across global and project scopes", "type": "module", "files": [ "bin/", "src/", "LICENSE", "README.md" ], "bin": { "cross-code-organizer": "./bin/cli.mjs" }, "scripts": { "start": "node bin/cli.mjs", "mcp": "node src/mcp-server.mjs", "test": "npx playwright test --config tests/e2e/playwright.config.mjs", "test:headed": "npx playwright test --config tests/e2e/playwright.config.mjs --headed", "test:unit": "node --test tests/unit/*.mjs" }, "keywords": [ "claude-code", "mcp-server", "claude-memory", "claude-skills", "anthropic", "scope-management", "drag-and-drop", "developer-tools", "dashboard", "config-manager", "ai-tools", "open-source", "claude-code-plugin", "organizer", "cli", "cross-code-organizer", "claude-code-organizer", "codex-cli", "openai-codex", "multi-harness", "cross-harness", "ai-coding-harness", "harness-config", "mcp-security", "claude-config", "codex-config", "cursor-config", "windsurf-config", "aider-config", "ai-config-dashboard", "harness-organizer" ], "publishConfig": { "provenance": true }, "mcpName": "io.github.mcpware/cross-code-organizer", "author": "ithiria894", "license": "MIT", "repository": { "type": "git", "url": "https://github.com/mcpware/cross-code-organizer" }, "engines": { "node": ">=20" }, "dependencies": { "@iarna/toml": "^2.2.5", "@modelcontextprotocol/sdk": "^1.27.1" }, "devDependencies": { "@playwright/test": "^1.58.2" }, "optionalDependencies": { "ai-tokenizer": "^1.0.6" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-7c931586078a2026-08-03