Trust Engine/MCP Server

paperboytm/spool

Your local AI session library. Browse, pin, and ⌘K-search every Claude Code, Codex, Gemini & OpenCode session — and let the built-in scanner catch leaked secrets. Local-first, nothing leaves your machine.

566 starsTypeScriptNOASSERTIONai-agentsclaude-codecodexdeveloper-tools
SCANNED63/100

Scanned 2026-07-11 · gemini v1

Dimension breakdown

Security

55/100

3 findings

Quality

95/100

1 finding

License

50/100

2 findings

Completeness

40/100

7 findings

Findings (13)

CRITICAL: 2HIGH: 4MEDIUM: 1LOW: 3INFO: 3
  • CRITICALcompletenessNo server.json manifest found
  • CRITICALcompletenessNo stable npm publication for the MCP server component
  • HIGHsecurityInsecure Installation Method (Supply Chain Risk)
  • HIGHlicenseSPDX 'NOASSERTION' contradicts explicit MIT License
  • HIGHcompletenessMissing mcpName field in package.json

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Trust badge — flat styleTrust badge — for-the-badge style

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/paperboytm/spool.svg)](https://archimedes.market/r/paperboytm/spool)

HTML

<a href="https://archimedes.market/r/paperboytm/spool"><img src="https://archimedes.market/api/badge/paperboytm/spool.svg" alt="Archimedes Trust Verified"/></a>

Similar MCP Server repos

Browse all

This report is generated automatically from public code and may be wrong. Maintainer? Request a re-scan or removal.