@rigour-labs/mcp

MCPcon attestation
v7.0.2io.github.rigour-labsMITActualizado hace 1 dnpmGitHub

Lets coding agents review their change, find an existing helper, and recall the team's lessons.

Funciona en
ClaudeCursorCopilotGemini

Inferido de los transportes que declara este listado (stdio). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.

Build con attestation
Una attestation de procedencia verificada vincula este artefacto al repositorio listado. Nadie ha reclamado todavía el listado: esto demuestra dónde se construyó el código, no quién lo respalda.
3kDescargas/sem.
27Estrellas en GitHub
1Forks
hace 1 dÚltima actualización
Paquete
Autorio.github.rigour-labs
LicenciaMIT
Versión7.0.2
Fuentenpm+mcp-registry
Estado de confianza
B
65/100Bueno
✓Listado en el índice de Forge+10/10
✓Identidad verificada · build con attestation+20/20
—Firma de publicación Ed25519+0/5
→ Se incluye automáticamente cuando el publicador ejecuta `forge publish`
—Verificación de dominio+0/5
→ Publicador: aloja /.well-known/forge.json en la página del paquete con { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—Coincidencia de maintainer en npm+0/5
→ Publicador: añade el login de GitHub verificado a los maintainers del paquete de npm (npm owner add <login>)
✓Análisis CVE · limpio+30/30
—Análisis estático · limpio+0/20
→ Se han detectado scripts de instalación sospechosos o código ofuscado
Pégalo en Claude Code, Cursor o cualquier asistente de IA para corregir todas las carencias
EstadoIdentidad verificada
PublicadorSin verificar
FirmaSin firmar
Dominio—
Procedencia✓ Verificado con Sigstore · c36589f
Dependencias60 resueltas · 1 con advisories
Superficie de herramientas40 herramientas · ninguna privilegiada
Análisis de seguridad⚠ Avisos (1)v7.0.2 · hoy¿Qué tan bien funciona este análisis?
CHANGEdep-vulns-increasedVulnerable dependencies went from 0 to 1 since v5.5.4
PROMPTtool:rigour_reviewer_verdictImperative addressed to the AI model
EvaluacionesNinguna
Indexado11 ago 2026

La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.

Herramientas

40 herramientas · ninguna privilegiada
Extraído estáticamente del paquete publicadov7.0.2 · 11h ago

Leído del código que npm publica realmente, en el momento del análisis. El paquete nunca se ejecutó. Las herramientas registradas dinámicamente en tiempo de ejecución, o escondidas en código empaquetado o minificado, pueden pasarse por alto — así que esto es un mínimo de la superficie de herramientas, no un censo completo.

rigour_checkRun quality gate checks on the project. MUST be called before declaring any coding task complete. By default it judges your change as the stop hook and push gate will: FAIL means something in it must be fixed. **Always show the user the headline summary from this tool's output** — it tells them wha…

Run quality gate checks on the project. MUST be called before declaring any coding task complete. By default it judges your change as the stop hook and push gate will: FAIL means something in it must be fixed. **Always show the user the headline summary from this tool's output** — it tells them wha…

No se publicó ningún esquema de entrada para esta herramienta.

rigour_explainExplain WHY quality gates failed in human-readable language. Use this to understand the reasoning behind each violation before fixing. For machine-readable fix instructions, use rigour_get_fix_packet instead.

Explain WHY quality gates failed in human-readable language. Use this to understand the reasoning behind each violation before fixing. For machine-readable fix instructions, use rigour_get_fix_packet instead.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_statusQuick PASS/FAIL check with JSON-friendly output for polling current project state.

Quick PASS/FAIL check with JSON-friendly output for polling current project state.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_get_fix_packetAfter rigour_check FAILs: your change's must-fix items (they block you), then optional notes, paged, each with file:line and the fix. Stay in your change unless a must-fix item names a file. Page with next_offset; re-run rigour_check.

After rigour_check FAILs: your change's must-fix items (they block you), then optional notes, paged, each with file:line and the fix. Stay in your change unless a must-fix item names a file. Page with next_offset; re-run rigour_check.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_list_gatesLists all configured quality gates and their thresholds for the current project.

Lists all configured quality gates and their thresholds for the current project.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_get_configReturns the current Rigour configuration (rigour.yml) for agent reasoning.

Returns the current Rigour configuration (rigour.yml) for agent reasoning.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_mcp_get_settingsGet Rigour MCP runtime settings for this repository (.rigour/mcp-settings.json).

Get Rigour MCP runtime settings for this repository (.rigour/mcp-settings.json).

No se publicó ningún esquema de entrada para esta herramienta.

rigour_mcp_set_settingsSet Rigour MCP runtime settings for this repository. Currently supports deep_default_mode: off | quick | full.

Set Rigour MCP runtime settings for this repository. Currently supports deep_default_mode: off | quick | full.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_rememberStore an instruction or convention to remember across sessions. Provide 'key' (short snake_case) and 'value' (the full text). scope: 'repo' (default, this repository), 'user' (all your repositories), or 'team' (this repository, and shared as a team candidate that teammates' agents receive once a pe…

Store an instruction or convention to remember across sessions. Provide 'key' (short snake_case) and 'value' (the full text). scope: 'repo' (default, this repository), 'user' (all your repositories), or 'team' (this repository, and shared as a team candidate that teammates' agents receive once a pe…

No se publicó ningún esquema de entrada para esta herramienta.

rigour_briefBefore writing: with goal, the team's rules, lessons and settled points for the task (max 10, cited); with only files, its word on each file you will edit. A [must] you break blocks at review.

Before writing: with goal, the team's rules, lessons and settled points for the task (max 10, cited); with only files, its word on each file you will edit. A [must] you break blocks at review.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_recallLoad stored conventions. At the START of a task, call it with 'query' describing the task to get the few memories that match by meaning, plus promoted team knowledge when team mode is on. With 'key' it returns that memory; with neither, every repository and user memory.

Load stored conventions. At the START of a task, call it with 'query' describing the task to get the few memories that match by meaning, plus promoted team knowledge when team mode is on. With 'key' it returns that memory; with neither, every repository and user memory.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_forgetRemove a stored memory by key.

Remove a stored memory by key.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_check_patternCALL THIS BEFORE creating any new function, component, hook, or class. Checks if it already exists in the codebase (prevents duplication), checks for known security vulnerabilities, and BLOCKS writes to protected paths (.github/, CI/CD configs, rigour.yml). Always pass the target file path.

CALL THIS BEFORE creating any new function, component, hook, or class. Checks if it already exists in the codebase (prevents duplication), checks for known security vulnerabilities, and BLOCKS writes to protected paths (.github/, CI/CD configs, rigour.yml). Always pass the target file path.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_security_auditRuns a live security audit (CVE check) on the project dependencies.

Runs a live security audit (CVE check) on the project dependencies.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_runExecute a command under Rigour supervision. This tool can be INTERCEPTED and ARBITRATED by the Governance Studio.

Execute a command under Rigour supervision. This tool can be INTERCEPTED and ARBITRATED by the Governance Studio.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_run_supervisedRun a command under FULL Supervisor Mode. Iteratively executes the command, checks quality gates, and returns fix packets until PASS or max retries reached. Use this for self-healing agent loops.

Run a command under FULL Supervisor Mode. Iteratively executes the command, checks quality gates, and returns fix packets until PASS or max retries reached. Use this for self-healing agent loops.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_agent_registerRegister an agent in a multi-agent session. Use this at the START of agent execution to claim task scope and enable cross-agent conflict detection. Required for Agent Team Governance.

Register an agent in a multi-agent session. Use this at the START of agent execution to claim task scope and enable cross-agent conflict detection. Required for Agent Team Governance.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_checkpointRecord a quality checkpoint during long-running agent execution. Use periodically (every 15-30 min) to enable drift detection, quality monitoring, and compact subagent handoffs. Triggers incremental pattern index refresh when filesChanged is provided. Essential for GPT-5.3 coworking mode — call BEF…

Record a quality checkpoint during long-running agent execution. Use periodically (every 15-30 min) to enable drift detection, quality monitoring, and compact subagent handoffs. Triggers incremental pattern index refresh when filesChanged is provided. Essential for GPT-5.3 coworking mode — call BEF…

No se publicó ningún esquema de entrada para esta herramienta.

rigour_handoffHandoff task to another agent in a multi-agent workflow. Use when delegating a subtask or completing your scope. Enables verified handoff governance.

Handoff task to another agent in a multi-agent workflow. Use when delegating a subtask or completing your scope. Enables verified handoff governance.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_agent_deregisterDeregister an agent from the multi-agent session. Use when an agent completes its work or needs to release its scope for another agent.

Deregister an agent from the multi-agent session. Use when an agent completes its work or needs to release its scope for another agent.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_handoff_acceptAccept a pending handoff from another agent. Use to formally acknowledge receipt of a task and verify you are the intended recipient.

Accept a pending handoff from another agent. Use to formally acknowledge receipt of a task and verify you are the intended recipient.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_hooks_checkRun the fast hook checker on specific files. Same checks that run inside IDE hooks (Claude, Cursor, Cline, Windsurf). Catches: hardcoded secrets, hallucinated imports, command injection, file size. Completes in <100ms. NEW: Pass 'text' param for DLP mode — scans user input for credentials (AWS keys…

Run the fast hook checker on specific files. Same checks that run inside IDE hooks (Claude, Cursor, Cline, Windsurf). Catches: hardcoded secrets, hallucinated imports, command injection, file size. Completes in <100ms. NEW: Pass 'text' param for DLP mode — scans user input for credentials (AWS keys…

No se publicó ningún esquema de entrada para esta herramienta.

rigour_hooks_initGenerate hook configs for AI coding tools (Claude, Cursor, Cline, Windsurf). Installs real-time quality checks and non-blocking DLP credential warnings by default. Pass dlp=false to disable DLP hooks only.

Generate hook configs for AI coding tools (Claude, Cursor, Cline, Windsurf). Installs real-time quality checks and non-blocking DLP credential warnings by default. Pass dlp=false to disable DLP hooks only.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_check_deepRun quality gates WITH deep LLM-powered analysis. Three-step pipeline: AST extracts facts → LLM interprets → AST verifies. Local-first by default (Qwen2.5-Coder-0.5B lite sidecar), or bring your own API key for any cloud provider.

Run quality gates WITH deep LLM-powered analysis. Three-step pipeline: AST extracts facts → LLM interprets → AST verifies. Local-first by default (Qwen2.5-Coder-0.5B lite sidecar), or bring your own API key for any cloud provider.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_deep_statsGet deep analysis statistics from SQLite storage. Returns recent scan scores, top issues, and score trends for a repository.

Get deep analysis statistics from SQLite storage. Returns recent scan scores, top issues, and score trends for a repository.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_reviewReview the change you just made before calling it done: runs Rigour's gates and keeps only findings on changed lines, each with file, line and a suggested fix. With no diff it reads your uncommitted work from git (new files included); pass base to review the whole branch (e.g. 'main'). Same verdict…

Review the change you just made before calling it done: runs Rigour's gates and keeps only findings on changed lines, each with file, line and a suggested fix. With no diff it reads your uncommitted work from git (new files included); pass base to review the whole branch (e.g. 'main'). Same verdict…

No se publicó ningún esquema de entrada para esta herramienta.

rigour_reviewer_verdictWhat the model reviewer last decided for this branch: the confirmed items to fix (with id, file:line, consequence and evidence), the disputed ones that are not work, which mode ran, and whether the verdict is for the current commit. Read-only: never runs a model, never dismisses.

What the model reviewer last decided for this branch: the confirmed items to fix (with id, file:line, consequence and evidence), the disputed ones that are not work, which mode ran, and whether the verdict is for the current commit. Read-only: never runs a model, never dismisses.

NOTAImperative addressed to the AI modelmmit. Read-only: never runs a model, never dismisses.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_review_ackRecord that you reviewed a function from rigour_review's review_task: verdict "fixed" (you fixed a defect) or "no_issue", with a note saying what you checked. Covers the function's current code only; editing it later puts it back in the task.

Record that you reviewed a function from rigour_review's review_task: verdict "fixed" (you fixed a defect) or "no_issue", with a note saying what you checked. Covers the function's current code only; editing it later puts it back in the task.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_context_statsReturns context retrieval efficiency, candidate tokens vs returned tokens, potential avoided tokens, cache hit rate, and repeated reads prevented.

Returns context retrieval efficiency, candidate tokens vs returned tokens, potential avoided tokens, cache hit rate, and repeated reads prevented.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_task_costRigour's estimate of the context and cost its scoped reads avoided for a task, beside any model usage recorded for it.

Rigour's estimate of the context and cost its scoped reads avoided for a task, beside any model usage recorded for it.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_cache_statsReturns detailed performance stats across all 4 cache layers (exact hits, semantic hits, partial hits, misses, hit rate, tokens served from cache).

Returns detailed performance stats across all 4 cache layers (exact hits, semantic hits, partial hits, misses, hit rate, tokens served from cache).

No se publicó ningún esquema de entrada para esta herramienta.

rigour_context_explainAudits why specific files/services were included or excluded, cache hit/miss status, invalidation reasons, and prior agent requests.

Audits why specific files/services were included or excluded, cache hit/miss status, invalidation reasons, and prior agent requests.

No se publicó ningún esquema de entrada para esta herramienta.

rigour_indexSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

rigour_context_scopeSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

rigour-setupInitialize Rigour quality gates for a project. Runs gate checks, installs IDE hooks, and reports the initial quality score breakdown.

Initialize Rigour quality gates for a project. Runs gate checks, installs IDE hooks, and reports the initial quality score breakdown.

No se publicó ningún esquema de entrada para esta herramienta.

cwdAbsolute path to the project root.

Absolute path to the project root.

No se publicó ningún esquema de entrada para esta herramienta.

rigour-fix-loopSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

rigour-security-reviewSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

rigour-pre-commitSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

rigour-ai-health-reportSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

34 de 40 herramientas publicaron una descripción.

Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.

Acerca de

Lets coding agents review their change, find an existing helper, and recall the team's lessons.

Palabras clave
mcp
Alternativas
Comparando superficies de herramientas…

Árbol de dependencias

Lo que un análisis de Forge resolvió a partir de los metadatos de npm el 2026-10-12: resolución observada, no una declaración del publicador.

60 paquetes resueltos · 5 directos · 1 con avisos de seguridad La resolución se detiene en la profundidad 4 y en 60 paquetes.

El rastreo se detuvo en el límite de 60 paquetes. El resto del árbol nunca se resolvió.

Hay 36 paquetes resueltos más que no se dibujan aquí (límite de visualización: 24). Toda dependencia con avisos de seguridad se dibuja aunque se supere el límite. Inventario completo (SBOM CycloneDX)

Declaradas pero no resueltas

45 dependencias declaradas nunca llegaron al árbol. Faltan en la resolución de Forge, no en el paquete.

+33 más sin listar. Los recuentos por motivo de arriba las incluyen todas.

No se siguen: optionalDependencies, peerDependencies. Este árbol cubre solo dependencias en tiempo de ejecución, así que lo que estas arrastren nunca se resolvió.