Skylos MCP Server

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

Remote serverstreamable-httpPython

What is the Skylos MCP Server?

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

What you get

Skylos is an open-source static analysis CLI for Python, TypeScript, JavaScript, Java, Go, Kotlin, PHP, Rust, Dart, C#, Shell, and deployment config. It runs locally by default and can also be used as a CI/CD PR gate.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
events.jsonlchronological run, phase, and tool-call events.
state.jsonfull observable state, including phases, tool calls, decisions,
summary.jsoncompact status, counts, budget, and artifact paths.
behavior-results.jsonnormalized runtime assertions, provenance, coverage,

How to install the Skylos MCP Server

{
  "mcpServers": {
    "skylos": {
      "command": "uvx",
      "args": ["skylos"],
      "env": {
        "RULE_ID": "your-value",
        "MY_AGENT_API_KEY": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

VariableDescriptionRequired
RULE_IDConfiguration value read at startup.Optional
MY_AGENT_API_KEYCredential the server authenticates with.Yes

Example prompts to try

  • “Use Skylos to Attestation.”
  • “Use Skylos to CI-native.”
  • “Use Skylos to Agent-native.”

Frequently asked questions

Dead code, security, secrets detection and code quality for Python, TypeScript, Go. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.