An MCP server and web tool that scores npm packages, PyPI packages, Rust crates, Go modules, and GitHub repos on **behavioral commitment** — signals
An MCP server and web tool that scores npm packages, PyPI packages, Rust crates, Go modules, and GitHub repos on behavioral commitment — signals that are harder
The server publishes 12 tools. What each one is for:
audit_dependencies — Batch risk audit for up to 20 npm/PyPI/Cargo/Go packagesaudit_github_repo — Fetch a repo's package.json/requirements.txt and audit every depaudit_dependency_tree — Map an npm package's full dependency tree (incl. transitive CRITICAL deps)lookup_npm_package — Single npm package behavioral profilelookup_pypi_package — Single PyPI package behavioral profilelookup_cargo_crate — Single Rust crate behavioral profile (crates.io)lookup_go_module — Single Go module behavioral profile (proxy.golang.org + GitHub)lookup_github_repo — GitHub repo commitment score (longevity, commit frequency, contributor depth)lookup_business — Norwegian business register — operating years, employees, financialslookup_business_by_org — Same, by org numberquery_commitment — Browser extension behavioral data (unique verified visitors, repeat rate)get_api_key — Create a free API key in-chat — no browser needed, key returned instantlyCompare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| audit_dependencies | Batch risk audit for up to 20 npm/PyPI/Cargo/Go packages |
| audit_github_repo | Fetch a repo's package.json/requirements.txt and audit every dep |
| audit_dependency_tree | Map an npm package's full dependency tree (incl. transitive CRITICAL deps) |
| lookup_npm_package | Single npm package behavioral profile |
| lookup_pypi_package | Single PyPI package behavioral profile |
| lookup_cargo_crate | Single Rust crate behavioral profile (crates.io) |
| lookup_go_module | Single Go module behavioral profile (proxy.golang.org + GitHub) |
| lookup_github_repo | GitHub repo commitment score (longevity, commit frequency, contributor depth) |
| lookup_business | Norwegian business register — operating years, employees, financials |
| lookup_business_by_org | Same, by org number |
| query_commitment | Browser extension behavioral data (unique verified visitors, repeat rate) |
| get_api_key | Create a free API key in-chat — no browser needed, key returned instantly |
{
"mcpServers": {
"commit": {
"type": "streamable-http",
"url": "https://poc-backend.amdal-dev.workers.dev/mcp"
}
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| COMMIT_API_KEY | Credential the server authenticates with. | Yes |
| COMMIT_TEST_API_KEY | Credential the server authenticates with. | Yes |
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Use Microsoft’s Playwright MCP server to navigate pages, inspect accessibility snapshots, fill forms and capture browser screenshots.
Connect GitHub MCP to repositories, issues and pull requests with GitHub’s hosted service or a locally run server.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Search Linear issues and projects, inspect work context and manage updates through Linear’s hosted MCP server with OAuth.