@mcp-box/mcpscore 0.8.0

package/README.md

@@ -0,0 +1,30 @@
+# mcpscore
+
+**Lighthouse for MCP** — audit any [Model Context Protocol](https://modelcontextprotocol.io)
+server and get a scored, actionable report in seconds.
+
+```bash
+npx @mcp-box/mcpscore https://your-server.example/mcp
+```
+
+This npm package is a thin wrapper around the Python
+[mcpscore](https://pypi.org/project/mcpscore/) CLI, pinned to the matching
+version — `npx @mcp-box/mcpscore` and `uvx mcpscore` behave identically. It requires
+[uv](https://docs.astral.sh/uv/) or [pipx](https://pipx.pypa.io/) on your PATH
+(no packages are installed into your environment).
+
+## What you get
+
+- A severity-weighted quality score across protocol compliance, server
+  metadata, capabilities, tools, security, and transport — deterministic,
+  no API keys, CI-ready (`--json`).
+- A separate readiness score for the upcoming MCP spec revision
+  (2026-07-28, stateless lifecycle).
+- Actionable messages: every failed check says what to fix, and every rule
+  is anchored to the spec.
+
+## Documentation
+
+- [docs.mcpscore.dev](https://docs.mcpscore.dev) — quick start, scoring
+  methodology, full rules reference
+- [GitHub](https://github.com/mcp-box/mcpscore) — source, issues, contributing

package/bin/mcpscore.js

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+// mcpscore npm wrapper: runs the Python mcpscore CLI at the exact version
+// this package pins (package.json -> mcpscore.pythonVersion), so
+// `npx mcpscore <target>` and `uvx mcpscore <target>` behave identically.
+//
+// Resolution order: uvx (uv) -> pipx. No implicit installs into the user's
+// environment; if neither runner exists, print clear instructions and exit 1.
+"use strict";
+
+const { spawnSync } = require("node:child_process");
+
+const pkg = require("../package.json");
+const spec = `mcpscore==${pkg.mcpscore.pythonVersion}`;
+const args = process.argv.slice(2);
+
+/**
+ * Run the CLI through one Python runner; returns only if the runner is absent.
+ * @param {string} cmd - runner executable name
+ * @param {string[]} prefix - runner arguments placed before the mcpscore args
+ */
+function tryRun(cmd, prefix) {
+  const result = spawnSync(cmd, [...prefix, ...args], { stdio: "inherit" });
+  if (result.error) {
+    if (result.error.code === "ENOENT") return; // runner not installed — try the next one
+    console.error(`mcpscore: failed to run ${cmd}: ${result.error.message}`);
+    process.exit(1);
+  }
+  // Propagate the CLI's exit code (mcpscore's codes are a documented contract:
+  // 0 ok, 1 usage error, 2 connection failure).
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+tryRun("uvx", [spec]);
+tryRun("pipx", ["run", spec]);
+
+console.error(
+  [
+    `mcpscore is a Python CLI (this npm package is a thin wrapper for ${spec}).`,
+    "It needs one of these Python runners on your PATH:",
+    "",
+    "  uv    https://docs.astral.sh/uv/  (then this command just works)",
+    "  pipx  https://pipx.pypa.io/",
+    "",
+    "Or install it directly:  pip install mcpscore",
+    "Docs: https://docs.mcpscore.dev",
+  ].join("\n"),
+);
+process.exit(1);

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@mcp-box/mcpscore",
+  "version": "0.8.0",
+  "description": "Lighthouse for MCP — audit any MCP server and get a scored, actionable report in seconds. Node wrapper for the Python mcpscore CLI.",
+  "bin": {
+    "mcpscore": "bin/mcpscore.js"
+  },
+  "files": [
+    "bin/"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "MIT",
+  "author": "Alex Akimov",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mcp-box/mcpscore.git",
+    "directory": "npm"
+  },
+  "homepage": "https://mcpscore.dev",
+  "bugs": "https://github.com/mcp-box/mcpscore/issues",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "mcp-server",
+    "audit",
+    "quality",
+    "lint",
+    "cli",
+    "score",
+    "compliance",
+    "developer-tools"
+  ],
+  "mcpscore": {
+    "pythonVersion": "0.8.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}