Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add mcp/himkt/pathfinder/monorepo-pathfindergit clone --depth 1 https://github.com/himkt/pathfinderWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/mcp/himkt/pathfinder/monorepo-pathfinder)<a href="https://agentmods.dev/mcp/himkt/pathfinder/monorepo-pathfinder"><img src="https://agentmods.dev/badge/mcp/himkt/pathfinder/monorepo-pathfinder.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
pathfinder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"pathfinder": {
"command": "pathfinder",
"args": [
"-w",
".",
"-e",
"py",
"-e",
"pyi",
"-s",
"uvx",
"ty",
"server"
],
"env": {
"LOG_LEVEL": "debug"
}
}
}What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 20 lines scan A 66d8e8390dbc
pathfinder is an MCP server published in the GitHub repository himkt/pathfinder (5 stars, last pushed 3d ago), licensed MIT. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other mcp servers, from other repositories
pyscn
MCP (Model Context Protocol) server for pyscn Python code analyzer. Runs locally from the pyscn-mcp Python package. Needs 1 environment variable to run.
agent-lsp
Stateful LSP runtime for AI agents — 50+ tools across 30+ languages via MCP. Runs locally from the @blackwell-systems/agent-lsp npm package.
prospector
Prospector is a tool to analyse Python code by aggregating the result of other tools. Runs locally from the prospector Python package.
mcp-pyright
MCP server that exposes Pyright language server functionality. Runs locally from the mcp-pyright Python package.
ohm-mcp
AST-based Python refactoring MCP server with safe automated refactorings and rollback. Runs locally from the ohm-mcp npm package.
python-code-guardian-mcp
Python code quality guardian - automated linting, complexity analysis, and code health monitoring via MCP. Runs locally from the python-code-guardian-mcp Python package.