VIRASAI

Commercial work informed by
VaHive Systems Lab

Open source

Useful controls should be inspectable.

The tools published here are free and complete. You can inspect the mechanism, reproduce the evidence, and decide whether it belongs in your environment.

Published on npm

Sentinel

Deterministic, non-executing evidence and change monitoring for public npm MCP servers.

Sentinel inspects an exact public npm artifact without running it, produces a schema-validated evidence report, and compares reports across releases. Its included self-hosted Watch monitor can poll packages you choose and raise a reviewable change notice.

npx magus-mcpsentinel analyze npm mcp-searxng@2.1.0 --evidence-dir ./evidencePrints a schema-valid report and keeps the registry metadata and the exact artifact it read. Nothing from the package under analysis is installed, and nothing in it runs.

View Sentinel on GitHub
A change Sentinel recorded

What it actually produces.

Not an illustration. This is the notice raised for mcp-searxng at 2026-08-25 18:17 UTC, reproduced from the same record the email and the watch page are built from.

mcp-searxng 1.15.0 → 2.1.0

[email protected] has 12 reviewable changes from 1.15.0. 2 other releases were published between these two versions.

  • Worth readingArtifact digest changed: 9dfd4f25f0d0… → 1fff859fd814….
  • Worth readingAdded runtime dependency @modelcontextprotocol/[email protected].
  • Worth readingAdded runtime dependency @modelcontextprotocol/[email protected].
  • Worth readingRemoved runtime dependency @modelcontextprotocol/[email protected].
  • Worth readingAdded runtime dependency @modelcontextprotocol/[email protected].
  • Worth readingChanged runtime dependency unpdf: 1.7.0 → 1.8.1.
  • Worth readingAdded runtime dependency [email protected].
  • ContextTool surface was not compared: the two reports came from different analyzer builds and at least one inventory is a lower bound.
  • Read firstPackage entrypoint "main" changed.
  • ContextPackage "engines" changed.
  • ContextFile inventory changed: 2 added, 0 removed.+ package/dist/searxng-response.d.ts+ package/dist/searxng-response.js
  • Context26 files changed contents without changing the inventory.~ package/README.md~ package/dist/browser-solver.d.ts~ package/dist/env-int.d.ts~ package/dist/env-int.js~ package/dist/http-security.js~ package/dist/http-server.d.tsand 20 more, in full on the watch page

Every line above is derived from two schema-validated reports of two exact published artifacts. Sentinel does not say whether this release is safe — it says what changed, so the decision is made by someone who knows what the package is for. The labels rank reading order, not danger; they are explained in full on the Watch page.

Public repository

Magus OpenSecMCP

A local Rust MCP security gateway that sits between an MCP client and downstream tool servers.

Policy controls, hash pinning, provenance states, audit controls, rule scanning, and bounded downstream behaviour make the operator’s control points explicit.

Inspect the repository
How we publish

Repository documentation is the operational source of truth.

Read each repository’s README, licence, security guidance, and limitations before relying on it. The website provides context; the code and repository notices define the tool.