Skylos MCP Server

Open-source, local-first checks for dead code, security issues, secrets, quality regressions, and AI-code mistakes before merge.

People connecting developer tools tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 542 · #4 OF 139 MAINTAINED DEVELOPER TOOLS · VERIFIED 2026-08-25

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Skylos

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add duriantaco-skylos -- uvx skylos

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "duriantaco-skylos": {
      "command": "uvx",
      "args": [
        "skylos"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

pypi package skylos - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.duriantaco is GitHub-verified and matches the repo owner

03 · What Skylos can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v4.34.0 · 2026-08-23

4.34.0 (2026-08-23) · add TypeScript security proofs and trusted evidence · ai-defect: avoid oversized registry responses · complete batched unicode verification · fail closed on incomplete grep verification · scope…

v4.33.2 · 2026-08-09

4.33.2 (2026-08-09) · correct session trust boundary rule ID · validate lockfile checksums · ignore null guards in timing comparison rule

v4.33.1 · 2026-08-07

4.33.1 (2026-08-06) · fail closed when native analysis is incomplete · scan lockfiles for high-entropy secrets

04 · Who maintains Skylos

skylos is maintained by duriantaco. It's the only MCP server we track from this author; the repo dates to Apr 2025.

05 · Facts

category
developer tools - ranked #4 of 139 actively-maintained developer tools servers as of 2026-08-25.
release cadence
10+ releases in the last 90 days (latest 2026-08-23)
registry
io.github.duriantaco/skylos (active, first published 2026-03-11)
packages
pypi:skylos

06 · Skylos FAQ

What is Skylos?

Open-source, local-first checks for dead code, security issues, secrets, quality regressions, and AI-code mistakes before merge.

Is Skylos still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Skylos?

Run `uvx skylos`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Skylos run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Skylos

head to head · Skylos vs Storybook MCP Addon · Skylos vs Xcode Build MCP · Skylos vs Sentry MCP