ProofScope
Assesses public GitHub repositories for activity, documentation, security posture, maintenance signals, and release cadence, providing a deterministic score and adoption recommendation with evidence links.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ProofScopeassess facebook/react"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ProofScope
ProofScope is an evidence-first integration decision service for agents and development teams. It turns public GitHub signals into a transparent delivery brief with source links for every signal, a deterministic adoption recommendation, and explicit verification gates.
What it does
assesses activity, documentation, security posture, maintenance signals and release cadence;
returns a deterministic 100-point score with plain-language rationale;
returns a deterministic
proceed,review, orblockdecision with evidence-linked next steps;compares two to four repositories against the same transparent decision model;
includes an MCP endpoint with
assess_repository,compare_repositories, andassess_integration_risktools;exposes a browser experience for human reviewers at the service root.
Related MCP server: RepoRescue MCP
API
GET /api/analyze?repo=owner/repository returns an assessment for a public repository.
GET /api/compare?repo=owner/repository&repo=owner/repository compares two to four public repositories.
POST /mcp implements JSON-RPC MCP calls. Start with initialize, then tools/list, then tools/call.
Design principles
The service never invents repository facts. Scores are derived from public GitHub API responses and every result includes direct evidence links so an agent or reviewer can validate the assessment.
Local development
npm install
npm run dev
npm run testThen open http://localhost:8787 and assess a public GitHub repository.
This server cannot be deployed
Maintenance
Related MCP Connectors
Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
GitHub project health, package dependency risk, trending repos, license & package comparison.
Related MCP Servers
- AlicenseAqualityBmaintenanceSupply chain risk scoring for npm, PyPI, and GitHub repos8477MIT
- FlicenseAqualityAmaintenanceClones and inspects public GitHub repositories to extract evidence like manifests, dependencies, and version hints, and can run allow-listed repos in isolated Docker containers for reproducible verification.4-
- FlicenseNot gradedqualityBmaintenanceAn AI-native governance control plane for GitHub portfolios that enables inventory sync, provenance analysis, classification, and policy enforcement across multiple repositories with strong security boundaries.-
- AlicenseNot gradedqualityDmaintenanceProvides AI coding agents with structured intelligence about any GitHub repository including overview, PRs, contributors, hot files, CI status, and dependencies via a hosted MCP endpoint.18MIT