Open source

Useful controls should be inspectable.

The tools published here are free and complete. You can inspect the mechanism, reproduce the evidence, and decide whether it belongs in your environment.

Published on npm

Sentinel

Deterministic, non-executing evidence and change monitoring for public npm MCP servers.

Sentinel inspects an exact public npm artifact without running it, produces a schema-validated evidence report, and compares reports across releases. Its included self-hosted Watch monitor can poll packages you choose and raise a reviewable change notice.

npx magus-mcpsentinel analyze npm @upstash/context7-mcp@4.2.0 --evidence-dir ./evidencePrints a schema-valid report and keeps the registry metadata and the exact artifact it read. Nothing from the package under analysis is installed, and nothing in it runs.

View Sentinel on GitHub
A change Sentinel recorded

What it actually produces.

Not an illustration. This is the notice raised for @upstash/context7-mcp at 2026-10-07 18:17 UTC, reproduced from the same record the email and the watch page are built from.

@upstash/context7-mcp 4.1.1 → 4.2.0

@upstash/[email protected] has 13 reviewable changes from 4.1.1. 3 other releases were published between these two versions.

  • Worth readingArtifact digest changed: cbd5f81ca37b… → e8993e3d4161….
  • Worth readingChanged runtime dependency @modelcontextprotocol/node: 2.0.0 → 2.1.0.
  • Worth readingChanged runtime dependency @modelcontextprotocol/server: 2.0.0 → 2.2.0.
  • Worth readingChanged runtime dependency @opentelemetry/exporter-prometheus: ^0.221.0 → ^0.222.0.
  • Worth readingChanged runtime dependency @opentelemetry/instrumentation-runtime-node: ^0.34.0 → ^0.35.0.
  • Worth readingChanged runtime dependency @opentelemetry/resources: ^2.10.0 → ^2.11.0.
  • Worth readingChanged runtime dependency @opentelemetry/sdk-metrics: ^2.10.0 → ^2.11.0.
  • Worth readingChanged runtime dependency jose: ^6.2.3 → ^6.2.12.
  • Worth readingChanged runtime dependency undici: ^7.0.0 → ^7.30.0.
  • Read firstAdded static API indicator: process-spawn-api.
  • ContextThe new report's tool inventory is a lower bound: some sources could not be statically resolved.
  • ContextFile inventory changed: 4 added, 1 removed.+ package/dist/lib/auth-lifecycle-telemetry.js+ package/dist/lib/mcp-http-auth.js+ package/dist/lib/mcp-route.js+ package/dist/lib/oauth-token-validation.js− package/dist/lib/subscriptions.js
  • Context9 files changed contents without changing the inventory.~ package/README.md~ package/dist/index.js~ package/dist/lib/api.js~ package/dist/lib/constants.js~ package/dist/lib/mcp-subscription-telemetry.js~ package/dist/lib/mcp-telemetry.jsand 3 more, in full on the watch page

Every line above is derived from two schema-validated reports of two exact published artifacts. Sentinel does not say whether this release is safe. It says what changed, so the decision is made by someone who knows what the package is for. The labels rank reading order, not danger; they are explained in full on the Watch page.

Public repository

Magus OpenSecMCP

A local Rust MCP security gateway that sits between an MCP client and downstream tool servers.

Policy controls, hash pinning, provenance states, audit controls, rule scanning, and bounded downstream behaviour make the operator’s control points explicit.

Inspect the repository
How we publish

Repository documentation is the operational source of truth.

Read each repository’s README, licence, security guidance, and limitations before relying on it. The website provides context; the code and repository notices define the tool.