dev-experiment-027

freyesperales/dev-experiment-027

★ 0 stars Python Security Updated today

vitrine - offline static auditor for MCP Apps (SEP-1865) UI resource bundles: audits server-supplied HTML against its own tool declarations (CSP egress, bridge hygiene, DOM sinks, UI mimicry)

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "dev-experiment-027": {
      "command": "uvx",
      "args": [
        "dev-experiment-027"
      ]
    }
  }
}

Or install with pip: pip install dev-experiment-027

README Excerpt

**Offline static auditor for MCP Apps (SEP-1865) UI resource bundles.** MCP Apps let a server ship interactive HTML that the host renders *inside the assistant's own surface*. The spec answers "is that safe?" with a sandboxed iframe and a host-built Content-Security-Policy derived from metadata the server

Tools (1)

get_forecast

dev-experiment-027

Quick Install

README Excerpt

Tools (1)

Related Security Servers