Countersign MCP Server

This is a standard-library-heavy surface audit tool plus a TACET/countersign reference implementation and README with no evident malicious behavior, exfiltration, or hardcoded secrets in the visible code. The audit script performs outbound HTTP requests to Crovia's own domains and writes local report files, which matches its stated purpose; the code visible is truncated so the full remainder was not reviewed. Minor quality notes: the tool's broad exception handling and unverified BLS signature in the drand check (documented in the README) are the main caveats. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity).

5 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.