@ref-tools/ref-tools-mcp
AMCP server package ref-tools-mcp
Install
agr install @ref-tools/ref-tools-mcp --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "ref-tools-mcp", "version": "3.0.3", "description": "ModelContextProtocol server for Ref", "mcpName": "io.github.ref-tools/ref-tools-mcp", "type": "module", "module": "index.ts", "scripts": { "make-executable": "node -e "fs.chmodSync('dist/index.cjs', '755');" --require fs", "build": "esbuild index.ts --outfile=dist/index.cjs --bundle --platform=node --format=cjs --banner:js='#!/usr/bin/env node' && npm run make-executable", "watch": "esbuild index.ts --outfile=dist/index.cjs --bundle --platform=node --format=cjs --banner:js='#!/usr/bin/env node' --watch", "inspect": "npx @modelcontextprotocol/inspector node dist/index.cjs", "start:http": "TRANSPORT=http node dist/index.cjs", "dev": "concurrently "npm run watch" "npm run inspect"", "check": "tsc --noEmit", "pre-commit": "npm run check", "prepublishOnly": "npm run build" }, "bin": { "ref-tools-mcp": "./dist/index.cjs" }, "files": [ "dist" ], "dependencies": { "@modelcontextprotocol/inspector": "^0.16.1", "@modelcontextprotocol/sdk": "^1.0.3", "axios": "^1.8.4" }, "devDependencies": { "@types/node": "^22.10.1", "concurrently": "^8.2.2", "esbuild": "^0.24.0", "prettier": "^3.4.2", "tsx": "^4.19.4", "typescript": "^5.3.3" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-de77ca5391852026-08-03