# passmcp

Runs diagnostics on other MCP endpoints and checks their attestations directly inside your editor. Operates read-only and requires an allowlist.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: sebastienrousseau
- License: GPL-3.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/sebastienrousseau/passmcp-server
- Updated: 2026-10-19
- HTML: https://affpapa.org/en/nevibecode/mcp/passmcp

## What it does

This server brings Model Context Protocol diagnostic utilities directly to the coding agent. It exposes commands such as `passmcp_check` to score another endpoint and `passmcp_verify_attestation` to validate its assertions. The process communicates over stdio. It never handles credentials and blocks any destination missing from the configured allowlist.

Running `passmcp_check` fails if the standalone `passmcp` executable is missing from `PATH` or not supplied via `--passmcp`. The official Docker image packages both binaries together. If you test containers across Docker networks, configure `PASSMCP_SERVER_ALLOW` accordingly.

## Requirements
- Needs: Docker
- Environment variables: `PASSMCP_SERVER_ALLOW` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env PASSMCP_SERVER_ALLOW=<PASSMCP_SERVER_ALLOW> --transport stdio passmcp -- docker run -i --rm -e PASSMCP_SERVER_ALLOW ghcr.io/sebastienrousseau/passmcp-server:0.0.8
```
Replace <…> with your own values

### Codex

**Platform CLI**
```bash
codex mcp add passmcp --env PASSMCP_SERVER_ALLOW=<PASSMCP_SERVER_ALLOW> -- docker run -i --rm -e PASSMCP_SERVER_ALLOW ghcr.io/sebastienrousseau/passmcp-server:0.0.8
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "passmcp": {
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "-e",
                "PASSMCP_SERVER_ALLOW",
                "ghcr.io/sebastienrousseau/passmcp-server:0.0.8"
            ],
            "env": {
                "PASSMCP_SERVER_ALLOW": "<PASSMCP_SERVER_ALLOW>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "passmcp": {
            "type": "stdio",
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "-e",
                "PASSMCP_SERVER_ALLOW",
                "ghcr.io/sebastienrousseau/passmcp-server:0.0.8"
            ],
            "env": {
                "PASSMCP_SERVER_ALLOW": "<PASSMCP_SERVER_ALLOW>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e PASSMCP_SERVER_ALLOW=<PASSMCP_SERVER_ALLOW> passmcp docker run -i --rm -e PASSMCP_SERVER_ALLOW ghcr.io/sebastienrousseau/passmcp-server:0.0.8
```
Replace <…> with your own values

## When to use it
- audit an MCP endpoint from inside the development agent
- validate signed attestations of external tools
- restrict diagnostic network targets using an allowlist

## Example prompts
- Run a diagnostic check on the target MCP endpoint using passmcp_check.
- Verify the attestation record with passmcp_verify_attestation.

## Similar
- [diagnose-fix-loop](https://affpapa.org/en/nevibecode/skills/diagnose-fix-loop.md) — skill · 420 installs
- [permission-check](https://affpapa.org/en/nevibecode/skills/permission-check.md) — skill · ★ 1672
- [hook-diagnostics](https://affpapa.org/en/nevibecode/skills/hook-diagnostics.md) — skill · ★ 1124
- [probe-sdk](https://affpapa.org/en/nevibecode/skills/anthropics-probe-sdk.md) — skill · 2100 installs
- [safe-ssh-mcp](https://affpapa.org/en/nevibecode/mcp/safe-ssh-mcp.md) — MCP server · ★ 8
- [deepadb](https://affpapa.org/en/nevibecode/mcp/deepadb.md) — MCP server · ★ 20

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md