# DartMonitor

> Check Dart/Flutter dependencies on pub.dev for updates and manage monitored projects.

- name: dev.dartmonitor/dart-monitor
- version: 0.1.0
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 79/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/dev.dartmonitor%2Fdart-monitor
- tools: https://api.protogrid.dev/v1/servers/dev.dartmonitor%2Fdart-monitor/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "dart-monitor": {
      "type": "http",
      "url": "https://dartmonitor.dev/api/mcp",
      "headers": {
        "Authorization": "Bearer ${DART_MONITOR_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${DART_MONITOR_TOKEN}`.

## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-28d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 79/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_packages (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); check_package (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); check_pubspec (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass `tools.token_cost`: about 714 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 3, about 714 tokens to load them all
- tool set hash: 95397f236efe3a5ae375d10a0e18ac16
- badge: [![protogrid quality](https://protogrid.dev/badge/dev.dartmonitor/dart-monitor.svg)](https://protogrid.dev/servers/dev.dartmonitor/dart-monitor)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://dartmonitor.dev/api/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (3)

- `check_package`: Looks up a Dart/Flutter package on pub.dev and reports its latest published version. If currentVersion is given, also reports whether an update is available. Changelog HTML for versions newer than currentVersion is left out unless changelog is set to true - if one exists and was left out, the result says so (changelogAvailable: true), so call again with changelog: true to get it. No account needed.
- `check_packages`: Checks up to 100 pub.dev packages at once, e.g. every dependency in a project. Useful after reading a pubspec.yaml's dependencies/dev_dependencies by hand; prefer check_pubspec when you have the raw pubspec.yaml text. Changelog HTML is left out of each result unless changelog is set to true - if any of them have one, the response says how many (changelogsAvailable) and reminds you to call again with changelog: true. No account needed.
- `check_pubspec`: Parses a pubspec.yaml file's contents and checks all dependencies and dev_dependencies against pub.dev, reporting which ones have updates available. Changelog HTML is left out of each dependency unless changelog is set to true - if any of them have one, the response says how many (changelogsAvailable) and reminds you to call again with changelog: true. This does not save anything - pass the raw file contents, not a file path. No account needed.