Next free-source huntWe check for new free data every weekday.
Cyber ThreatMCP serverFirst audited Nov 13, 2026

PkgSeek Linux Intelligence

Linux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 497 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 23 tools say they only read.
Endpointhttps://api.pkgseek.com/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 0.2.8

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 23 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (23)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • search_toolsSearch curated Linux command-line tools.Read-only
  • get_toolGet a sourced tool record, commands, flags and distribution mappings.Read-only
  • resolve_installResolve a tool and distribution to its package, real binary and install command.Read-only
  • identify_binaryReverse an executable name to curated tools and packages.Read-only
  • query_file_providesFind packages that contain a command or filesystem path.Read-only
  • diagnose_linux_errorTurn a package-not-found or command-not-found error into matching packages and install guidance.Read-only
  • lint_commandStatically inspect a shell command for unsupported flags and portability issues. The command is never executed.Read-only
  • explain_commandExplain and statically inspect a command using the Command Doctor knowledge base. The command is never executed.Read-only
  • suggest_fixReturn conservative, sourced guidance for command syntax or portability problems. The command is never executed.Read-only
  • compare_distrosCompare installation names and commands for a tool across Linux distributions.Read-only
  • search_packagesSearch package names across repositories and distributions.Read-only
  • get_packageGet package metadata and evidence. arch requires distro and release. Use view=availability to list indexed builds (requires release); absence is not vendor non-support.Read-only
  • compare_package_versionsCompare a package's versions and repositories across distributions.Read-only
  • search_vulnerabilitiesSearch cached CVE or CNNVD records, with optional distribution and severity filters.Read-only
  • get_vulnerabilityGet a cached CVE or CNNVD record and distribution-aware affected-package evidence.Read-only
  • check_release_lifecycleEvaluate whether a Linux distribution release is active, nearing EOL or unsupported under a CI policy.Read-only
  • get_distro_lifecycleList cached lifecycle facts for a Linux distribution.Read-only
  • compare_distro_releasesCompare package additions, removals and version changes between two releases.Read-only
  • plan_distro_migrationMap packages from one distribution release to another and report missing or ambiguous replacements.Read-only
  • get_package_historyTrace indexed package version history for regression investigation.Read-only
  • get_repository_healthRead repository freshness and counts. Use view=coordinates for the paginated release/native-architecture catalog and coverage.Read-only
  • get_contextGet a token-efficient context pack with trust and execution guardrails for an agent.Read-only
  • compare_package_matrixCompare up to 50 inventory items across 5 explicit native repository targets. Read-only; indexed-build CVEs only, no cross-distro ranking. Alternatives require source evidence and user confirmation b…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200497 ms
initializedHTTP 202148 ms
tools/listHTTP 200417 ms
unknown-methodHTTP 200152 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.