# Cargo MCP server

Agent View of the PolicyLayer registry record for Cargo: identity, probed posture, risk grade, and all 202 tools classified. HTML page: https://policylayer.com/tools/io-github-dave-london-cargo

## Facts

- Server id: `Dave-London/Pare`
- Homepage: https://github.com/Dave-London/pare
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 202
- Tool categories present: Destructive, Execute, Read, Write
- Tags: io github dave london cargo, admin, automation
- Record last modified: 2026-06-12T18:24:27.614Z

## Tools (202)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `branch` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/branch.md |
| `clean` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/clean.md |
| `pr-close` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/pr-close.md |
| `remove` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/remove.md |
| `reset` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/reset.md |
| `secret-delete` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/secret-delete.md |
| `tag` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/tag.md |
| `variable-delete` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/variable-delete.md |
| `workspace` | Destructive | Critical | https://policylayer.com/tools/io-github-dave-london-cargo/workspace.md |
| `add` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/add.md |
| `add-package` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/add-package.md |
| `ansible-galaxy` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/ansible-galaxy.md |
| `ansible-playbook` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/ansible-playbook.md |
| `api` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/api.md |
| `apply` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/apply.md |
| `bazel` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/bazel.md |
| `biome-check` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/biome-check.md |
| `bisect` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/bisect.md |
| `black` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/black.md |
| `build` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/build.md |
| `bundle-exec` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/bundle-exec.md |
| `bundle-install` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/bundle-install.md |
| `check` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/check.md |
| `cherry-pick` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/cherry-pick.md |
| `clippy` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/clippy.md |
| `cmake` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/cmake.md |
| `compose-build` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/compose-build.md |
| `compose-down` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/compose-down.md |
| `compose-up` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/compose-up.md |
| `conda` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/conda.md |
| `coverage` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/coverage.md |
| `develop` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/develop.md |
| `doc` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/doc.md |
| `esbuild` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/esbuild.md |
| `exec` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/exec.md |
| `fmt` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/fmt.md |
| `gem-install` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/gem-install.md |
| `generate` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/generate.md |
| `get` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/get.md |
| `gitleaks` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/gitleaks.md |
| `golangci-lint` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/golangci-lint.md |
| `gradle-build` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/gradle-build.md |
| `gradle-test` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/gradle-test.md |
| `hadolint` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/hadolint.md |
| `helm` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/helm.md |
| `info` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/info.md |
| `init` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/init.md |
| `install` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/install.md |
| `jq` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/jq.md |
| `lerna` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/lerna.md |
| `lint` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/lint.md |
| `maven-build` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/maven-build.md |
| `maven-test` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/maven-test.md |
| `maven-verify` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/maven-verify.md |
| `merge` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/merge.md |
| `mod-tidy` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/mod-tidy.md |
| `mongosh-eval` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/mongosh-eval.md |
| `mypy` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/mypy.md |
| `mysql-query` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/mysql-query.md |
| `nvm` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/nvm.md |
| `nx` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/nx.md |
| `oxlint` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/oxlint.md |
| `package-clean` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/package-clean.md |
| `package-resolve` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/package-resolve.md |
| `pip-install` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/pip-install.md |
| `playwright` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/playwright.md |
| `poetry` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/poetry.md |
| `post` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/post.md |
| `psql-query` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/psql-query.md |
| `publish` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/publish.md |
| `pull` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/pull.md |
| `pyenv` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/pyenv.md |
| `pytest` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/pytest.md |
| `rebase` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/rebase.md |
| `redis-command` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/redis-command.md |
| `redis-ping` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/redis-ping.md |
| `reload` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/reload.md |
| `repo-clone` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/repo-clone.md |
| `request` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/request.md |
| `restore` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/restore.md |
| `rollup` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/rollup.md |
| `rsync` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/rsync.md |
| `ruff-check` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/ruff-check.md |
| `ruff-format` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/ruff-format.md |
| `run` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/run.md |
| `run-rerun` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/run-rerun.md |
| `semgrep` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/semgrep.md |
| `shell` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/shell.md |
| `shellcheck` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/shellcheck.md |
| `ssh-run` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/ssh-run.md |
| `ssh-test` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/ssh-test.md |
| `stash` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/stash.md |
| `stylelint` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/stylelint.md |
| `submodule` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/submodule.md |
| `task` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/task.md |
| `test` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/test.md |
| `trivy` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/trivy.md |
| `tsc` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/tsc.md |
| `turbo` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/turbo.md |
| `uv-install` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/uv-install.md |
| `uv-run` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/uv-run.md |
| `vagrant` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/vagrant.md |
| `vet` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/vet.md |
| `vite-build` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/vite-build.md |
| `webpack` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/webpack.md |
| `worktree` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/worktree.md |
| `yq` | Execute | High | https://policylayer.com/tools/io-github-dave-london-cargo/yq.md |
| `ansible-inventory` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/ansible-inventory.md |
| `audit` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/audit.md |
| `blame` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/blame.md |
| `bundle-check` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/bundle-check.md |
| `compose-logs` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/compose-logs.md |
| `compose-ps` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/compose-ps.md |
| `count` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/count.md |
| `describe` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/describe.md |
| `diff` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/diff.md |
| `discover-tools` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/discover-tools.md |
| `discussion-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/discussion-list.md |
| `env` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/env.md |
| `find` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/find.md |
| `flake-check` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/flake-check.md |
| `flake-show` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/flake-show.md |
| `format-check` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/format-check.md |
| `gem-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/gem-list.md |
| `gem-outdated` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/gem-outdated.md |
| `gradle-dependencies` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/gradle-dependencies.md |
| `gradle-tasks` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/gradle-tasks.md |
| `head` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/head.md |
| `images` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/images.md |
| `inspect` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/inspect.md |
| `issue-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/issue-list.md |
| `issue-view` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/issue-view.md |
| `label-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/label-list.md |
| `list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/list.md |
| `list-package` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/list-package.md |
| `log` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/log.md |
| `log-graph` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/log-graph.md |
| `logs` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/logs.md |
| `maven-dependencies` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/maven-dependencies.md |
| `mongosh-stats` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/mongosh-stats.md |
| `mysql-list-databases` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/mysql-list-databases.md |
| `network-ls` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/network-ls.md |
| `outdated` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/outdated.md |
| `output` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/output.md |
| `package-show-dependencies` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/package-show-dependencies.md |
| `pip-audit` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pip-audit.md |
| `pip-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pip-list.md |
| `pip-show` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pip-show.md |
| `plan` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/plan.md |
| `pm-ls` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pm-ls.md |
| `pr-checks` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pr-checks.md |
| `pr-diff` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pr-diff.md |
| `pr-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pr-list.md |
| `pr-view` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/pr-view.md |
| `ps` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/ps.md |
| `psql-list-databases` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/psql-list-databases.md |
| `redis-info` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/redis-info.md |
| `reflog` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/reflog.md |
| `release-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/release-list.md |
| `repo-view` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/repo-view.md |
| `run-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/run-list.md |
| `run-view` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/run-view.md |
| `search` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/search.md |
| `secret-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/secret-list.md |
| `show` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/show.md |
| `ssh-keyscan` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/ssh-keyscan.md |
| `stash-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/stash-list.md |
| `state-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/state-list.md |
| `stats` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/stats.md |
| `status` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/status.md |
| `tree` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/tree.md |
| `validate` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/validate.md |
| `variable-list` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/variable-list.md |
| `volume-ls` | Read | Low | https://policylayer.com/tools/io-github-dave-london-cargo/volume-ls.md |
| `archive` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/archive.md |
| `biome-format` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/biome-format.md |
| `checkout` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/checkout.md |
| `commit` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/commit.md |
| `config` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/config.md |
| `flake-update` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/flake-update.md |
| `gist-create` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/gist-create.md |
| `issue-close` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/issue-close.md |
| `issue-comment` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/issue-comment.md |
| `issue-create` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/issue-create.md |
| `issue-update` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/issue-update.md |
| `label-create` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/label-create.md |
| `package-init` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/package-init.md |
| `package-update` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/package-update.md |
| `pr-comment` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/pr-comment.md |
| `pr-create` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/pr-create.md |
| `pr-merge` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/pr-merge.md |
| `pr-ready` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/pr-ready.md |
| `pr-reopen` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/pr-reopen.md |
| `pr-review` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/pr-review.md |
| `pr-update` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/pr-update.md |
| `prettier-format` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/prettier-format.md |
| `push` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/push.md |
| `release-create` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/release-create.md |
| `remote` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/remote.md |
| `secret-set` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/secret-set.md |
| `update` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/update.md |
| `variable-set` | Write | Medium | https://policylayer.com/tools/io-github-dave-london-cargo/variable-set.md |

## Tool descriptions

- `branch` — Lists, creates, renames, or deletes branches. Returns structured branch data. Pass
- `clean` — Runs dotnet clean to remove build outputs and returns structured results.
- `pr-close` — Closes a pull request with an optional comment and optional branch deletion. Returns structured data with PR number, state, URL, and deleted-branch flag.
- `remove` — Runs
- `reset` — Resets the current HEAD to a specified state. Supports soft, mixed, hard, merge, and keep modes. The
- `secret-delete` — Deletes a repository, organization, or environment GitHub Actions secret.
- `tag` — Manages git tags. Supports list (default), create, and delete actions. List returns structured tag data with name, date, and message. Create supports lightweight and annotated tags.
- `variable-delete` — Deletes a repository, organization, or environment GitHub Actions variable.
- `workspace` — Manages Terraform workspaces: list, select, create, or delete workspaces.
- `add` — Runs
- `add-package` — Runs dotnet add package to add a NuGet package and returns structured results. WARNING: may execute untrusted code.
- `ansible-galaxy` — Installs or lists Ansible collections and roles from Galaxy or a requirements file.
- `ansible-playbook` — Runs an Ansible playbook and returns structured play recap with per-host results.
- `api` — Makes arbitrary GitHub API calls via
- `apply` — Applies a Kubernetes manifest file.
- `bazel` — Bazel build system operations: build, test, query, info, run, clean, fetch.
- `biome-check` — Runs Biome check (lint + format) and returns structured diagnostics (file, line, rule, severity, message).
- `bisect` — Binary search for the commit that introduced a bug. Returns structured data with action taken, current commit, remaining steps estimate, and result.
- `black` — Runs Black code formatter and returns structured results (files changed, unchanged, would reformat).
- `build` — Runs a build command and returns structured success/failure with errors and warnings.
- `bundle-exec` — Executes a command in the context of the Gemfile bundle using
- `bundle-install` — Installs Gemfile dependencies using
- `check` — Runs cargo check (type check without full build) and returns structured diagnostics. Faster than build for error checking.
- `cherry-pick` — Applies specific commits to the current branch. Returns structured data with applied commits, any conflicts, and new commit hash.
- `clippy` — Runs cargo clippy and returns structured lint diagnostics.
- `cmake` — CMake build system operations: configure, build, test, list-presets, install, clean.
- `compose-build` — Builds Docker Compose service images and returns structured per-service build status.
- `compose-down` — Stops Docker Compose services and returns structured status.
- `compose-up` — Starts Docker Compose services and returns structured status.
- `conda` — Runs conda commands (list, info, env-list, create, remove, update) and returns structured JSON output.
- `coverage` — Runs tests with coverage and returns structured coverage summary per file.
- `develop` — Enters or queries a Nix dev shell. When a command is provided, runs it inside the dev shell and returns the result.
- `doc` — Generates Rust documentation and returns structured output with warning count.
- `esbuild` — Runs the esbuild bundler and returns structured errors, warnings, and output files.
- `exec` — Executes arbitrary commands inside a running Docker container and returns structured output. WARNING: may execute untrusted code.
- `fmt` — Checks or fixes Rust formatting and returns structured output.
- `gem-install` — Installs a Ruby gem using
- `generate` — Runs go generate directives in Go source files. WARNING: may execute untrusted code.
- `get` — Downloads and installs Go packages and their dependencies.
- `gitleaks` — Runs Gitleaks to detect hardcoded secrets in git repositories. Returns structured finding data with redacted secrets.
- `golangci-lint` — Runs golangci-lint and returns structured lint diagnostics (file, line, linter, severity, message).
- `gradle-build` — Runs
- `gradle-test` — Runs
- `hadolint` — Runs Hadolint (Dockerfile linter) and returns structured diagnostics (file, line, rule, severity, message).
- `helm` — Manages Helm releases (install, upgrade, list, status, history, template). Returns structured JSON output.
- `info` — Runs
- `init` — Initializes a Terraform working directory. Downloads providers, configures backend, and prepares for plan/apply.
- `install` — Runs
- `jq` — Processes and transforms JSON using jq expressions. Accepts JSON from a file path or inline string. Returns the transformed result.
- `lerna` — Runs Lerna monorepo commands (list, run, changed, version) and returns structured package information.
- `lint` — Runs
- `maven-build` — Runs
- `maven-test` — Runs
- `maven-verify` — Runs
- `merge` — Merges a branch into the current branch. Supports abort, continue, and quit actions. Returns structured data with merge status, fast-forward detection, conflicts, and commit hash.
- `mod-tidy` — Runs go mod tidy to add missing and remove unused module dependencies.
- `mongosh-eval` — Evaluates a MongoDB expression via mongosh and returns the output.
- `mypy` — Runs mypy and returns structured type-check diagnostics (file, line, severity, message, code).
- `mysql-query` — Executes a MySQL query and returns structured tabular output.
- `nvm` — Manages Node.js versions via nvm.
- `nx` — Runs Nx workspace commands and returns structured per-project task results with cache status.
- `oxlint` — Runs Oxlint and returns structured diagnostics (file, line, column, rule, severity, message).
- `package-clean` — Cleans Swift package build artifacts and returns structured result.
- `package-resolve` — Resolves Swift package dependencies and returns structured resolution results.
- `pip-install` — Runs pip install and returns a structured summary of installed packages. WARNING: may execute untrusted code.
- `playwright` — Runs Playwright tests with JSON reporter and returns structured results with pass/fail status, duration, and error messages.
- `poetry` — Runs Poetry commands and returns structured output.
- `post` — Makes an HTTP POST request via curl and returns structured response data. Convenience wrapper for the request tool with required body.
- `psql-query` — Executes a PostgreSQL query via psql and returns structured tabular output.
- `publish` — Runs dotnet publish for deployment and returns structured output with output path and diagnostics.
- `pull` — Pulls a Docker image from a registry and returns structured result with digest info.
- `pyenv` — Manages Python versions via pyenv.
- `pytest` — Runs pytest and returns structured test results (passed, failed, errors, skipped, failures).
- `rebase` — Rebases the current branch onto a target branch. Supports abort, continue, skip, and quit for conflict resolution. Returns structured data with success status, branch info, conflicts, and rebased commit count.
- `redis-command` — Executes a Redis command via redis-cli and returns the response.
- `redis-ping` — Tests Redis connectivity by sending a PING command.
- `reload` — Rebuilds the MCP server (or a specified project) and sends a
- `repo-clone` — Clones a GitHub repository. Returns structured data with success status, repo name, target directory, and message.
- `request` — Makes an HTTP request via curl and returns structured response data (status, headers, body, timing).
- `restore` — Runs dotnet restore to restore NuGet dependencies and returns structured results.
- `rollup` — Runs Rollup bundler and returns structured bundle output with errors and warnings.
- `rsync` — Syncs files between local and remote locations using rsync. WARNING: Defaults to dry-run mode for safety — set dryRun=false to actually transfer files. Returns structured transfer statistics.
- `ruff-check` — Runs ruff check and returns structured lint diagnostics (file, line, code, message).
- `ruff-format` — Runs ruff format and returns structured results (files changed, file list).
- `run` — Runs a script or file with
- `run-rerun` — Re-runs a workflow run by ID. Optionally re-runs only failed jobs or a specific job. Returns structured result with run ID, status, and URL.
- `semgrep` — Runs Semgrep static analysis with structured rules and findings. Returns structured finding data with severity summary.
- `shell` — Makes packages available in the environment and optionally runs a command. Returns stdout, stderr, exit code, and duration.
- `shellcheck` — Runs ShellCheck (shell script linter) and returns structured diagnostics (file, line, column, rule, severity, message).
- `ssh-run` — Executes a command on a remote host via SSH. WARNING: This runs commands on a remote machine. Ensure the host and command are correct before executing. Returns structured output with stdout, stderr, exit code, and duration.
- `ssh-test` — Tests SSH connectivity to a remote host using
- `stash` — Pushes, pops, applies, drops, shows, or clears stash entries. Returns structured result with action, success, message, and stash reference.
- `stylelint` — Runs Stylelint and returns structured diagnostics (file, line, column, rule, severity, message).
- `submodule` — Manages git submodules. Supports list (default), add, update, sync, and deinit actions. List returns structured submodule data with path, SHA, branch, and status.
- `task` — Runs a named task from deno.json via
- `test` — Runs
- `trivy` — Runs Trivy vulnerability/misconfiguration scanner on container images, filesystems, or IaC configs. Returns structured vulnerability data with severity summary.
- `tsc` — Runs the TypeScript compiler and returns structured diagnostics (file, line, column, code, message).
- `turbo` — Runs Turborepo tasks and returns structured per-package results with cache hit/miss info.
- `uv-install` — Runs uv pip install and returns a structured summary of installed packages. WARNING: may execute untrusted code.
- `uv-run` — Runs a command in a uv-managed environment and returns structured output.
- `vagrant` — Manages Vagrant VMs: status, global-status, up, halt, destroy.
- `vet` — Runs go vet and returns structured static analysis diagnostics with analyzer names. Uses -json flag for native JSON output with automatic text fallback.
- `vite-build` — Runs Vite production build and returns structured output files with sizes.
- `webpack` — Runs webpack build with JSON stats output and returns structured assets, errors, and warnings.
- `worktree` — Lists, adds, removes, locks, unlocks, or prunes git worktrees for managing multiple working trees. Returns structured data with worktree paths, branches, and HEAD commits.
- `yq` — Processes and transforms YAML, JSON, XML, TOML, and properties files using yq expressions. Accepts input from a file path or inline string. Returns the transformed result.
- `ansible-inventory` — Queries Ansible inventory for hosts, groups, and variables. Returns structured JSON for --list or tree text for --graph.
- `audit` — Runs cargo audit and returns structured vulnerability data.
- `blame` — Shows commit annotations for a file, grouped by commit. Returns structured blame data with deduplicated commit metadata (hash, author, email, date) and their attributed lines.
- `bundle-check` — Verifies that the Gemfile
- `compose-logs` — Retrieves Docker Compose service logs as structured entries.
- `compose-ps` — Lists Docker Compose services with structured state and status information.
- `count` — Counts pattern matches per file using ripgrep. Returns per-file match counts and totals.
- `describe` — Describes a Kubernetes resource with detailed information.
- `diff` — Returns file-level diff statistics as structured data. Use full=true for patch content.
- `discover-tools` — List and load additional ${serverName} tools that aren
- `discussion-list` — Lists GitHub Discussions for a repository via GraphQL. Returns structured list with discussion number, title, author, category, answered status, and comment count.
- `env` — Returns Go environment variables as structured JSON. Optionally request specific variables.
- `find` — Finds files and directories using fd with structured output. Returns file paths, names, and extensions.
- `flake-check` — Checks a Nix flake for errors and returns structured check results, warnings, and errors.
- `flake-show` — Shows the outputs of a Nix flake as a structured tree. Uses --json for machine-parseable output by default.
- `format-check` — Checks if files are formatted and returns a structured list of files needing formatting.
- `gem-list` — Lists installed Ruby gems with version information. Returns structured JSON with gem names and versions.
- `gem-outdated` — Lists outdated Ruby gems showing current and latest available versions.
- `gradle-dependencies` — Shows the Gradle dependency tree with structured output per configuration.
- `gradle-tasks` — Lists available Gradle tasks with descriptions and groups. Uses
- `head` — Makes an HTTP HEAD request via curl and returns structured response headers (no body). Use to check resource existence, content type, or cache headers.
- `images` — Lists Docker images with structured repository, tag, size, and creation info.
- `inspect` — Shows detailed container or image information with structured state, image, and platform data.
- `issue-list` — Lists issues with optional filters. Returns structured list with issue number, state, title, labels, assignees, author, creation date, and milestone.
- `issue-view` — Views an issue by number or URL. Returns structured data with state, labels, assignees, author, milestone, close reason, and body.
- `label-list` — Lists repository labels. Returns structured data with label name, description, color, and default status.
- `list` — Lists Go packages or modules and returns structured information. When
- `list-package` — Runs dotnet list package and returns structured NuGet package listings per project and framework.
- `log` — Returns commit history as structured data.
- `log-graph` — Returns visual branch topology as structured data. Wraps
- `logs` — Retrieves container logs as structured line arrays.
- `maven-dependencies` — Shows the Maven dependency tree with structured output per artifact.
- `mongosh-stats` — Gets MongoDB database statistics (collections, objects, data size, storage, indexes) via mongosh.
- `mysql-list-databases` — Lists all MySQL databases with structured output.
- `network-ls` — Lists Docker networks with structured driver and scope information.
- `outdated` — Runs
- `output` — Shows Terraform output values from the current state. Returns structured name/value/type/sensitive data.
- `package-show-dependencies` — Shows the dependency tree of a Swift package and returns structured dependency data.
- `pip-audit` — Runs pip-audit and returns a structured vulnerability report.
- `pip-list` — Runs pip list and returns a structured list of installed packages.
- `pip-show` — Runs pip show and returns structured package metadata (name, version, summary, dependencies).
- `plan` — Shows the Terraform execution plan with resource change counts. Read-only — does not modify infrastructure.
- `pm-ls` — Runs
- `pr-checks` — Lists check/status results for a pull request. Returns structured data with check names, states, URLs, and summary counts (passed, failed, pending). When watch=true, polls internally until all checks complete (or timeout).
- `pr-diff` — Returns file-level diff statistics for a pull request. Use full=true for patch/hunk content, or nameOnly=true for just the changed file paths.
- `pr-list` — Lists pull requests with optional filters. Returns structured list with PR number, state, title, author, branch, labels, draft status, and merge readiness.
- `pr-view` — Views a pull request by number, URL, or branch. Returns structured data with state, checks, review decision, diff stats, author, labels, draft status, assignees, milestone, and timestamps.
- `ps` — Lists Docker containers with structured status, ports, and state information.
- `psql-list-databases` — Lists all PostgreSQL databases via psql with owner, encoding, and size info.
- `redis-info` — Gets Redis server info with structured sections (server, clients, memory, etc.).
- `reflog` — Returns reference log entries as structured data, useful for recovery operations. Also supports checking if a reflog exists.
- `release-list` — Lists GitHub releases for a repository. Returns structured list with tag, name, draft/prerelease/latest status, publish date, and creation date.
- `repo-view` — Views repository details. Returns structured data with name, owner, description, stars, forks, languages, topics, license, and dates.
- `run-list` — Lists workflow runs with optional filters. Returns structured list with run ID, status, conclusion, and workflow details.
- `run-view` — Views a workflow run by ID. Returns structured data with status, conclusion, jobs (with steps), and workflow details.
- `search` — Searches the npm registry for packages matching a query.
- `secret-list` — Lists repository, organization, or environment secret names and metadata. Secret values are not exposed by GitHub.
- `show` — Shows commit details and diff statistics for a given ref. When
- `ssh-keyscan` — Retrieves public host keys from a remote SSH server using
- `stash-list` — Lists all stash entries with index, message, date, branch, and optional file change summary. Returns structured stash data.
- `state-list` — Lists all resources tracked in the Terraform state. Returns resource addresses.
- `stats` — Returns a snapshot of container resource usage (CPU, memory, network/block I/O, PIDs) as structured data.
- `status` — Returns the working tree status as structured data (branch, staged, modified, untracked, conflicts).
- `tree` — Displays the dependency tree for a Rust project.
- `validate` — Validates Terraform configuration files for syntax and consistency errors. Returns structured diagnostics.
- `variable-list` — Lists repository, organization, or environment GitHub Actions variables with values and metadata.
- `volume-ls` — Lists Docker volumes with structured driver, mountpoint, and scope information.
- `archive` — Creates an archive of files from a git repository. Supports tar, tar.gz, and zip formats. Returns structured data with success status, format, output file, and treeish.
- `biome-format` — Formats files with Biome (format --write) and returns a structured list of changed files.
- `checkout` — Switches branches or restores files. Returns structured data with ref, previous ref, whether a new branch was created, and detached HEAD status. Pass
- `commit` — Creates a commit with the given message. Returns structured data with hash, message, and change statistics. Pass
- `config` — Manages git configuration values. Supports get, set, list, and unset actions. Operates at local, global, system, or worktree scope.
- `flake-update` — Updates flake lock file inputs and returns structured information about what was updated.
- `gist-create` — Creates a new GitHub gist from one or more files. Returns structured data with gist ID, URL, visibility, file names, description, and file count.
- `issue-close` — Closes an issue with an optional comment and reason. Returns structured data with issue number, state, URL, reason, and comment URL.
- `issue-comment` — Adds, edits, or deletes a comment on an issue. Returns structured data with the comment URL, operation type, comment ID, issue number, and body echo.
- `issue-create` — Creates a new issue. Returns structured data with issue number, URL, and labels applied.
- `issue-update` — Updates issue metadata (title, body, labels, assignees, milestone, projects).
- `label-create` — Creates a new repository label. Returns structured data with label name, description, color, and URL.
- `package-init` — Initializes a new Swift package and returns structured result with created files.
- `package-update` — Updates Swift package dependencies and returns structured update results.
- `pr-comment` — Adds, edits, or deletes a comment on a pull request. Returns structured data with the comment URL, operation type, comment ID, and body echo.
- `pr-create` — Creates a new pull request. Returns structured data with PR number and URL.
- `pr-merge` — Merges a pull request by number, URL, or branch. Returns structured data with merge status, method, URL, and branch deletion status.
- `pr-ready` — Marks a pull request as ready for review (or converts it back to draft when undo=true). Returns structured data with PR number, state, URL, and resulting draft status.
- `pr-reopen` — Reopens a previously closed pull request, optionally with a comment. Returns structured data with PR number, state, and URL.
- `pr-review` — Submits a review on a pull request (approve, request-changes, or comment). Returns structured data with the review event, URL, and body echo.
- `pr-update` — Updates pull request metadata (title, body, labels, assignees, reviewers, milestone, base branch, projects). Returns structured data with PR number and URL.
- `prettier-format` — Formats files with Prettier (--write) and returns a structured list of changed files.
- `push` — Pushes commits to a remote repository. Returns structured data with success status, remote, branch, summary, and whether the remote branch was newly created.
- `release-create` — Creates a new GitHub release with optional asset uploads. Returns structured data with tag, URL, draft, prerelease status, and assets uploaded count.
- `remote` — Manages remote repositories. Supports list (default), add, remove, rename, set-url, prune, and show actions. Returns structured remote data.
- `secret-set` — Sets a repository, organization, or environment GitHub Actions secret. Secret values are sent via stdin and never returned.
- `update` — Updates dependencies in the lock file. Optionally updates a single package.
- `variable-set` — Sets a repository, organization, or environment GitHub Actions variable. Variables are not secret and may be visible in logs.

## Related servers

- UnClick (1658 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- Yaver (811 tools) — https://policylayer.com/tools/io-github-kivanccakmak-yaver.md
- Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md
- Crow (587 tools) — https://policylayer.com/tools/kh0pper-crow.md
- Fortimanager (584 tools) — https://policylayer.com/tools/jmpijll-fortimanager-mcp.md
- TinyFn (572 tools) — https://policylayer.com/tools/io-tinyfn-tinyfn.md
- Mcp (571 tools) — https://policylayer.com/tools/io-github-2s-io-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-dave-london-cargo · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/io-github-dave-london-cargo
