Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "fixlane": {
      "type": "http",
      "url": "https://fixlane.poparecon.com/mcp"
    }
  }
}

claude mcp add --transport http fixlane https://fixlane.poparecon.com/mcp

[mcp_servers.fixlane]
url = "https://fixlane.poparecon.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "fixlane": {
      "type": "remote",
      "url": "https://fixlane.poparecon.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "fixlane": {
      "type": "http",
      "url": "https://fixlane.poparecon.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=fixlane&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vZml4bGFuZS5wb3BhcmVjb24uY29tL21jcCJ9"
}

{
  "servers": {
    "fixlane": {
      "type": "http",
      "url": "https://fixlane.poparecon.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "fixlane": {
      "httpUrl": "https://fixlane.poparecon.com/mcp"
    }
  }
}

extensions:
  "fixlane":
    enabled: true
    name: "fixlane"
    type: streamable_http
    uri: "https://fixlane.poparecon.com/mcp"
    timeout: 300

Quality 88 / 100new

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene88 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations5 of 5 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_software (idempotentHint); get_fix_prompt (idempotentHint); latest_incidents (idempotentHint); …
pass
tools.token_costabout 1,048 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
pass
tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 3 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

5 tools, about 1,048 tokens to load them all · tool set 9857b4d062a1 · checked 2026-11-14 07:03 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-3d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://fixlane.poparecon.com/mcp` streamable-http	none	yes	100%	293 ms	2026-07-28	2026-11-14

Tools (5)

`check_inventory`read-only	Compares installed programs and versions (at most 50 items, version optional) with verified fixed versions. Each item is affected (below a verified fixed version, with the incident id), not_affected (at or above it) or unknown (no version, an unparsable version, or no verified fixed version for that program and version line).
`check_software`read-only	Known security issues of one program, app or package (for example Chrome, Node.js, VS Code) or of a CVE id. Returns the matching products with incident id, title, severity, whether it is exploited in the wild, publication date, the verified fixed version and whether a fix procedure exists. The optional os narrows the fix availability to one system.
`get_digest`read-only	One fix prompt for everything to update now on a desktop system (macos, windows, linux). Returns only a digest that passed lint and review. Phones have no digest.
`get_fix_prompt`read-only	The reviewed fix procedure of one incident for one operating system. Takes an incident id returned by the other Fixlane tools. Desktop systems (macos, windows, linux) get an agent prompt: a read-only check first, then the fix. Phones (ios, android) get manual steps only.
`latest_incidents`read-only	The newest incidents Fixlane serves, newest first, optionally for one operating system and since a date (YYYY-MM-DD). At most 20, each with its incident id.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.lightsmite/fixlane",
  "title": "Fixlane",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://fixlane.poparecon.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "repository": {
    "url": "https://github.com/lightsmite/fixlane-plugin",
    "source": "github"
  },
  "websiteUrl": "https://fixlane.poparecon.com/",
  "description": "Known security incidents in developer software, with reviewed fix procedures."
}