# Mcp Server MCP server

Agent View of the PolicyLayer registry record for Mcp Server: identity, probed posture, risk grade, and all 4 tools classified. HTML page: https://policylayer.com/tools/com-graneth-mcp-server

## Facts

- Server id: `@graneth/mcp-server`
- Install: `npx -y @graneth/mcp-server`
- Homepage: https://github.com/zubovartemiy/graneth-mcp
- Registry record: grade D, identity unverified
- Lifecycle: active
- Auth posture: open
- Rate-limited: yes
- Tools: 4 (4 with introspected schema)
- Tool categories present: Read
- Tags: com graneth mcp server
- Record last modified: 2026-08-19T11:05:36.343Z

## Tools (4)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `scan_repository` | Execute | High | https://policylayer.com/tools/com-graneth-mcp-server/scan-repository.md |
| `get_findings` | Read | Low | https://policylayer.com/tools/com-graneth-mcp-server/get-findings.md |
| `pre_flight_check` | Read | Low | https://policylayer.com/tools/com-graneth-mcp-server/pre-flight-check.md |
| `auto_remediate` | Write | Medium | https://policylayer.com/tools/com-graneth-mcp-server/auto-remediate.md |

## Tool descriptions

- `scan_repository` — Trigger a Level 1 + Level 2 security scan on a GitHub pull request. Returns SAST findings, taint flows, entropy-detected secrets, and (for PRO users) LLM-triaged results. Requires Graneth authentication.
- `get_findings` — Retrieve security findings filtered by file or severity. Run scan_repository first to populate results.
- `pre_flight_check` — Security pre-flight check for local file changes BEFORE committing. Run this whenever you are about to suggest git commit, git push, or open a pull request — especially when changes touch auth, secrets, SQL queries, package.json / requir…
- `auto_remediate` — Generate an automated security fix for a specific finding. Creates a GitHub PR with the patched code. Verifies the fix with Level 1 SAST before opening the PR. Requires authentication, 3 credits, and ANTHROPIC_API_KEY.

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-graneth-mcp-server · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/com-graneth-mcp-server