Back to Browse

Envdiff MCP Server

Developer ToolsModerate6.4MCP RegistryLocal
Free

Server data from the Official MCP Registry

Diff local vs CI environments: Node, OS, lockfile, and env vars — keys named, values never echoed.

About

Diff local vs CI environments: Node, OS, lockfile, and env vars — keys named, values never echoed.

Security Report

6.4
Moderate6.4Moderate Risk

envdiff is a small, pure-local environment comparison tool with no network calls, no shell execution, no filesystem writes, and no credentials required. Its only notable behavior is reading the user-supplied JSON descriptor files in the CLI, and it deliberately never echoes env values into its report, which is confirmed by tests. No security findings of consequence were identified; the minor items below are informational only. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

system_info

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-envdiff": {
      "args": [
        "-y",
        "@reneturcios/envdiff"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

envdiff

"It works on my machine" — which part of the machine? envdiff compares two environment descriptors, typically a developer's local environment and a CI environment, and reports exactly where they differ:

  • Node version, OS, and lockfile presence, compared as fields (a missing field is reported as null)
  • env vars present on one side only, by key
  • env vars whose values differ — by key name only. Values are compared but never echoed into the report, so a descriptor may carry secrets without leaking them.

A descriptor is a small JSON object: {"node": "20.11.0", "os": "linux", "env": {"CI": "true"}, "lockfile_present": true} — every field optional.

Pure local computation: no network, no configuration.

CLI

npx @reneturcios/envdiff diff local.json ci.json
npx @reneturcios/envdiff --version

Output is the comparison report as JSON, with a summary.total_differences count. Exit codes: 0 on success (differences are a result, not an error), 1 on a runtime error (unreadable or invalid descriptor), 2 on a usage error.

MCP server

npx -y @reneturcios/envdiff mcp

MCP client config:

{
  "mcpServers": {
    "envdiff": {
      "command": "npx",
      "args": ["-y", "@reneturcios/envdiff", "mcp"]
    }
  }
}

Tools

  • diff_environments — Compare two environment descriptors.

    • local (object, required) — the local descriptor
    • ci (object, required) — the CI descriptor

    Each descriptor: node (string), os (string), env (string map), lockfile_present (boolean), all optional.

Docker

docker run -i ghcr.io/cloudcorprecords/envdiff
docker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/envdiff diff /w/local.json /w/ci.json

Development

npm install
npm run build   # tsc -> dist/
npm test        # tsx --test test/*.test.ts (pure local, no network)
npm run dev     # run the CLI from source

License

MIT — Copyright (c) 2026 Rene Turcios

Reviews

No reviews yet

Be the first to review this server!