@withastro/docs-mcp
CMCP server package docs-mcp
Install
agr install @withastro/docs-mcp --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "docs-mcp", "version": "1.0.0", "description": "", "main": "index.js", "scripts": { "test": "echo "Error: no test specified" && exit 1" }, "keywords": [], "author": "", "license": "MIT", "packageManager": "pnpm@9.15.6+sha512.139cab068fdf0b751268179ac5f909b5be72afb4a75c513d1905d151befc8977b593d3cf8671ed83d4d6637c5c94b98ffbce108125de4a5a27a31233601a99de", "dependencies": { "@modelcontextprotocol/sdk": "^1.15.1", "@netlify/edge-functions": "^2.15.6", "fetch-to-node": "^2.1.0", "zod": "^3.25.76" } }
Trustgrade C
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- warnPrompt injection1 hit(s): obfuscation
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- line 12 — Obscured code — eval, atob, or an encoded blob
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-d144db0f0d3e2026-08-03