Security / yof
yof
io.yof/yof · v0.3.2
Checks AI-written code for leaked keys and made-up packages, on your machine. Never uploads code.
Description supplied by the publisher in the MCP Registry. We have not tested this server.
Ranks #246 of 249 Security servers on Socketlist by score and a last code push 1d ago.
Install
npx -y @yof/cli mcpAssembled from the package metadata in the official MCP Registry (including any subcommand or flag the publisher lists). Some publishers do not list the subcommand that starts MCP mode, so confirm the command in the README, along with any required configuration and credentials, before connecting it to real data.
Offers a hosted remote endpoint: https://mcp.yof.io/mcp (streamable-http). No local install needed.
Signals
| GitHub stars | 0 |
| npm weekly downloads | 0 |
| Last push | 1d ago |
| Licence | Apache-2.0 |
| Open issues | 0 |
| SECURITY.md | Yes |
| Language | TypeScript |
| Latest version published | 2026-11-10 |
Signals captured from GitHub, npm and the official MCP Registry on November 11, 2026. See the scoring method.
Similar servers
vibe-shield — security scanner for AI-generated code
Score 77Scans AI-written code for leaked secrets, unguarded routes and missing RLS.
MCPVetter
Score 75Audit your MCP servers for poisoned tools and leaked secrets, and check AI-generated code for flaws.
Penthera
Score 93Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.
Five MCP servers worth your time, every week
The Plug Weekly is a free email picked from these scores. About a 3-minute read. Unsubscribe any time.