Trust Engine/MCP Server

kerbelp/metatron

Metatron is a self-hosted system that captures a codebase's real implementation decisions — preferred patterns, rejected approaches, edge cases, internal conventions — as structured priors, and serves them to coding agents over MCP (Model Context Protocol). The goal: an agent writes code like a senior engineer who already knows the codebase

16 starsPythonMITagentic-aiagentic-workflowai-agentai-tools
REVIEWED85/100

Scanned 2026-06-19 · deepseek v1

Dimension breakdown

Security

72/100

7 findings

Quality

88/100

No findings

License

95/100

No findings

Completeness

92/100

No findings

Findings (7)

MEDIUM: 3LOW: 2INFO: 2
  • MEDIUMsecurityBare exception clause in migrate_legacy_db call
  • MEDIUMsecurityPotential path traversal in export command
  • MEDIUMsecurityUnvalidated file path in import command
  • LOWsecurityPotential information disclosure via error messages
  • LOWsecurityUse of eval or exec not detected but LLM prompts may be injectable

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Trust badge — flat styleTrust badge — for-the-badge style

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/kerbelp/metatron.svg)](https://archimedes.market/r/kerbelp/metatron)

HTML

<a href="https://archimedes.market/r/kerbelp/metatron"><img src="https://archimedes.market/api/badge/kerbelp/metatron.svg" alt="Archimedes Trust Verified"/></a>