protogrid
Sign inAdd to your agent

Search / io.github.CharitonMedia/tremelay

Tremelay

L0· runs locally

Local MCP broker: agents call credentials through a daemon without seeing secrets.

v1.0.3 · active · repository · descriptor JSON · versions

Runs on your machine: something must execute the package.Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.
Quality–new
Trust90of 100
Packages6
Tools seen0

Connect

8 clients · secrets stay placeholders
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}
{
  "bundle": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
  "registry_type": "mcpb",
  "note": "Install through the client's bundle installer; no command line form."
}

Quality – / 100new

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
  • n/a
    tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

Tool list unknown · checked 2026-10-19 10:52 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 90 / 100

provenance80
livenessn/a
freshness100
hygiene95

+repository +namespace-matches-repo ~liveness-unmeasured +updated-3d-ago -unpinned-packages(6)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

packageregistryversionruntimesecrets
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpbmcpbunpinned–
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_arm64.mcpbmcpbunpinned–
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_darwin_amd64.mcpbmcpbunpinned–
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_darwin_arm64.mcpbmcpbunpinned–
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_windows_amd64.mcpbmcpbunpinned–
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_windows_arm64.mcpbmcpbunpinned–

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Similar MCP servers

  • onepassword-agent-mcpL0
    io.github.gambadio/onepassword-agent-mcp

    Save and use 1Password secrets locally without exposing plaintext to AI agents.

  • mnki-mcpL0
    io.github.MNKIAgentOS/mnki-mcp

    MCP proxy that checks every tools/call against Agent Trust policy, with evidence, before it runs.

  • agent-envelope-mcpL0
    io.github.BlackBoxEngineering/agent-envelope-mcp

    Neutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.

  • mcp-ssh-managerL0
    io.github.bvisible/mcp-ssh-manager

    SSH server management for agents, with per-server read-only and allowlist security modes

  • Secret ScanL0
    io.github.agentic-income-bot/mcp-secret-scan

    Check text for leaked credentials before an agent writes or commits it. Runs locally.

  • agent-mcp-hubL0
    io.github.blackaxgit/agent-mcp-hub

    One MCP server bridging the Codex, Cursor, OpenCode, Claude, and Antigravity CLI agents

Official server.json
{
  "name": "io.github.CharitonMedia/tremelay",
  "title": "Tremelay",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "1.0.3",
  "packages": [
    {
      "transport": {
        "type": "stdio"
      },
      "fileSha256": "6f4bce84558af80d66f2a415a2f687d90faeb5ea7ba7132a5eb68171480fc85a",
      "identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_amd64.mcpb",
      "registryType": "mcpb"
    },
    {
      "transport": {
        "type": "stdio"
      },
      "fileSha256": "1580c58024a40eddb0724fbc1ed59699e27cea2b04571eb26cb2a1d2d518ada8",
      "identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_linux_arm64.mcpb",
      "registryType": "mcpb"
    },
    {
      "transport": {
        "type": "stdio"
      },
      "fileSha256": "f44aad2a0725585169e42942415b1a6f2e96b3f5b42b8da47cb8427001c6b604",
      "identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_darwin_amd64.mcpb",
      "registryType": "mcpb"
    },
    {
      "transport": {
        "type": "stdio"
      },
      "fileSha256": "f5b983bdf090e7b5e7c727d8f0cd378e40aa9594d4d81327be7dbcd0d2aee0d3",
      "identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_darwin_arm64.mcpb",
      "registryType": "mcpb"
    },
    {
      "transport": {
        "type": "stdio"
      },
      "fileSha256": "bf1df653cf5e85c7efc8687bc2ca332fa98026a69efbf3f7fc7def5329c60d5f",
      "identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_windows_amd64.mcpb",
      "registryType": "mcpb"
    },
    {
      "transport": {
        "type": "stdio"
      },
      "fileSha256": "e6e61365776b0ec9cca4b7da99b69d5d38706fcabdb1f0c97941a081a8ebfa5b",
      "identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_windows_arm64.mcpb",
      "registryType": "mcpb"
    }
  ],
  "repository": {
    "url": "https://github.com/CharitonMedia/Tremelay",
    "source": "github"
  },
  "description": "Local MCP broker: agents call credentials through a daemon without seeing secrets."
}