Skip to main content
Glama
README.md
# @topaisaas/mcp-suite

> **Unified Model Context Protocol (MCP) Server for the TopAI Sovereign Appliance Suite.**  
> Exposes 9 high-performance, deterministic developer tools natively to Claude Desktop, Cursor, and Windsurf via standard JSON-RPC 2.0 stdio.

[![npm version](https://img.shields.io/npm/v/@topaisaas/mcp-suite.svg)](https://www.npmjs.com/package/@topaisaas/mcp-suite)
[![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE)
[![MCP Compatible](https://img.shields.io/badge/MCP-Compatible-purple.svg)](https://modelcontextprotocol.io)

---

## ⚡ 1-Click Integration in Claude Desktop or Cursor

Add this to your `claude_desktop_config.json` or `.cursor/mcp.json`:

```json
{
  "mcpServers": {
    "topai-suite": {
      "command": "npx",
      "args": ["-y", "@topaisaas/mcp-suite"]
    }
  }
}
```

---

## 🛠️ The 9 Built-in Developer Tools

| MCP Tool Name | Description |
| :--- | :--- |
| `agentpr_guard_audit` | Audits git diffs for AI hallucinations, typosquatting & architectural leaks. |
| `tokenprune_wasm_trim` | Prunes source code AST to save 50%-70% of prompt tokens in LLMs. |
| `dockerlean_wasm_audit` | Audits Dockerfile for 12 layer bloat anti-patterns and security risks. |
| `sqltwin_stream_anonymize` | Anonymizes SQL dumps preserving 100% of foreign keys and unique constraints. |
| `terracost_blast_evaluate` | Air-gapped blast radius & monthly FinOps cost delta for Terraform plans. |
| `flaky_quarantine_analyze` | Markov chain flaky test detection and automated Playwright/Jest isolation. |
| `pack3d_wasm_pack` | 3D extreme point container packing and volumetric weight calculation. |
| `cidr_shield_lookup` | Microsecond threat & cloud datacenter IP range detection. |
| `edgarpulse_parse_filing` | Deterministic SEC Form 4 and Form 8-K insider cluster buying alpha engine. |

---

## 🛡️ License & Quota Tollbooth

TopAI Sovereign MCP Suite comes with an out-of-the-box **Free Sandbox of 25 tool runs**, enabling immediate zero-friction evaluation directly inside Claude Desktop, Cursor, or Windsurf.

### Activating Unlimited Pro / Lifetime Access
To unlock unlimited runs for production pipelines, developer environments, or CI/CD:
1. Obtain an instant Ed25519 offline license key via [Polar.sh Checkout](https://buy.polar.sh/polar_cl_OUy6Q7GoY78aXhbdaFyoJ646wtXgD7mszAadt4FgJHz)
2. Inject the key into your environment or client config:

```json
{
  "mcpServers": {
    "topai-suite": {
      "command": "npx",
      "args": ["-y", "@topaisaas/mcp-suite"],
      "env": {
        "TOPAI_LICENSE_KEY": "TOPAI-PRO-XXXXXXXXXXXXXXXX"
      }
    }
  }
}
```

### Emergency 24-Hour Production Grace Bypass
If a production pipeline exceeds its quota unexpectedly during an active incident:
```bash
export TOPAI_EMERGENCY_GRACE=1
```
This grants a 24-hour non-blocking bypass so builds never fail during release freezes.

---

## 📄 License

Apache-2.0. Copyright (c) 2026 TopAI Sovereign Studio.

TDQS

A4.4/5.0

Scored across 9 tools

Disambiguation5/5

Each tool targets a clearly distinct domain: AST pruning, PR/diff security, Dockerfile linting, IP classification, Terraform blast radius, 3D packing, flaky test analysis, SQL anonymization, and SEC filing parsing. Descriptions explicitly state when to use, when not to use, and alternatives, making misselection unlikely despite branded names.

Naming Consistency4/5

All names use snake_case and end with a clear action verb (trim, audit, lookup, evaluate, pack, analyze, anonymize, parse). The pattern is consistent, but opaque product/mechanism prefixes like tokenprune, agentpr, and edgarpulse reduce predictability from the domain alone.

Tool Count5/5

Nine tools is a well-scoped count for a utility suite, with no apparent filler or redundant operations. Each tool appears to earn its place as a distinct local analyzer.

Completeness4/5

Each tool provides a self-contained operation for its stated purpose, and the suite covers a broad set of engineering and data tasks. Minor gaps exist around composing outputs or applying remediation, but the read-only analyzer model does not require full CRUD lifecycle coverage.

Maintenance

ActivityMaintained
ResponsivenessNo recent community issues