# bumblebeereceipt-mcp

This paid remote MCP checks developer endpoints and returns structured scan results. Connect it when an agent needs endpoint findings, release receipts, or scan history.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: clauxel
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/clauxel/bumblebee-endpoint-receipt-mcp
- Updated: 2026-05-25
- HTML: https://affpapa.org/en/nevibecode/mcp/bumblebeereceipt-mcp

## What it does

The server exposes tools to inspect endpoint exposure, interpret package hits, create release receipts, and retrieve earlier scans. Responses use structured JSON, and the resulting records can support audit workflows.

It runs as a hosted remote MCP and uses token-based access. Production requests need a bearer token issued by the service, and the MCP client must support Streamable HTTP remote servers. The service is paid, so a connection alone does not authorize production calls.

Its tools are `scan_endpoint_exposure`, `explain_package_hit`, `issue_release_receipt`, and `read_scan_history`. Configure the endpoint in an MCP client and send requests with the token. The repository serves as documentation and does not include the hosted service’s private production code.

## Requirements
- Remote server: `https://bumblebeereceipt.clauxel.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http bumblebeereceipt-mcp https://bumblebeereceipt.clauxel.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add bumblebeereceipt-mcp --url https://bumblebeereceipt.clauxel.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "bumblebeereceipt-mcp": {
            "url": "https://bumblebeereceipt.clauxel.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "bumblebeereceipt-mcp": {
            "type": "http",
            "url": "https://bumblebeereceipt.clauxel.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http bumblebeereceipt-mcp https://bumblebeereceipt.clauxel.com/mcp
```

## When to use it
- check whether a developer endpoint is exposed
- interpret a package match from a scan
- create a release receipt
- retrieve previous scan records

## Example prompts
- Check this endpoint for exposure and explain any package hits.
- Create a release receipt after scanning this endpoint.
- Show the scan history for this project.

## Similar
- [api-security-audit](https://affpapa.org/en/nevibecode/agents/api-security-audit.md) — subagent · 3202 installs
- [convex-security-audit](https://affpapa.org/en/nevibecode/skills/convex-security-audit.md) — skill · 1500 installs
- [convex-optimize](https://affpapa.org/en/nevibecode/skills/convex-optimize.md) — skill · 36300 installs
- [owasp-security-check](https://affpapa.org/en/nevibecode/skills/owasp-security-check.md) — skill · 1700 installs
- [production-code-audit](https://affpapa.org/en/nevibecode/skills/sickn33-production-code-audit.md) — skill · 1200 installs
- [api-audit](https://affpapa.org/en/nevibecode/skills/api-audit.md) — skill · 482 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md