Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add randomittin/heimdall/plugin install hmdWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/mcp/randomittin/heimdall/heimdall-ledger)<a href="https://agentmods.dev/mcp/randomittin/heimdall/heimdall-ledger"><img src="https://agentmods.dev/badge/mcp/randomittin/heimdall/heimdall-ledger.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
heimdall-ledger scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"heimdall-ledger": {
"command": "python3",
"args": [
"${CLAUDE_PLUGIN_ROOT:-.}/bin/heimdall-ledger-mcp"
],
"env": {}
}
}What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 9 lines scan A 33eea3bd47b8
heimdall-ledger is an MCP server published in the GitHub repository randomittin/heimdall (5 stars, last pushed yesterday), licensed MIT. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other mcp servers, from other repositories
memorix
Local-first project memory with legacy MCP and 2026 discovery compatibility. Runs locally from the memorix npm package.
mem-search
MCP server "mem-search" as configured in maxritter/pilot-shell. Launched with sh -c bun run ~/.pilot/scripts/mcp-server.cjs.
mcp-memory
MCP server for enabling memory for Claude through a knowledge graph. Runs locally from the mcp-memory-py Python package.
ontomics
Index your codebase's domain knowledge. 20x fewer tokens, 10x faster. Runs locally from the @ontomics/ontomics npm package.
bikky
Shared memory for AI coding sessions — MCP server + background daemon. Runs locally from the bikky npm package.
omni-coder-dashboard
OCD (Omni Coder Dashboard) — An AI memory engine with real semantic embeddings, 21 MCP tools, cross-tool routing, trace auditing, and proactive IDE interception. 100% local, zero API keys required. Runs locally from the omni-coder-dashboard npm package.