Bigger
things are
on the way.
The checker is the opening move. Here's the shape of the product we're slowly, deliberately building — a dashboard for teams, drift detection, a shareable hygiene badge, and a few surprises we're keeping quiet about.
Now · Live today
Client-side validator & scoring
v0.1.0Next · Private beta
Web dashboard & team configs
target: Q3 2026Later · On the whiteboard
CLI, code-host integration, drift alerts
target: late 2026Someday · Aspirational
Registry, signed configs, SOC2 flow
tbdThe dashboard, in outline.
A quiet command center for every MCP config across your org — scores, drift, risky servers, rotation reminders. The screenshot below is a design mockup; the product is being built.
Hygiene score, 30 days
Risky servers
Recent drift
Features, in order of
honest likelihood.
Team dashboard
Aggregate every MCP config across your org. See scores trend. Catch regressions before they ship. Shared visibility, not surveillance.
Drift detection
Know the moment someone swaps an env placeholder for a literal key. Alert via email, chat, or a webhook of your choosing.
Code-host integration
Scan every PR that touches a config file. Comment with a diff-level score and block merges on hardcoded secrets.
CLI companion
npx mcpcleaner check ~/.config/mcp.json — same rules, scriptable, pre-commit-hook-shaped.
Shareable badge
A README badge proving your config passes. Because if your repo is clean, you might as well say so.
Custom policies
Write org-specific rules. "No server may use http://", "All env keys must start with TEAM_", "Disallow sudo anywhere." We enforce; you define.
Signed configs
Verify the config your client loads is the one your team approved. Cryptographic peace of mind for high-trust environments.
Private server registry
Curate the MCP servers your org is allowed to run. Reviewed, tagged, versioned, auditable.