AI Blocks › Keep your code secure
MCP config version checker
Give it your MCP config files. Get a list of server packages that can change under you, before you approve them.
MCP config version checker is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · CC BY 4.0 licence · Made by sickn33 · Level: advanced · Thinking: low
Made by sickn33. See the original on GitHub; we copied it as it is, with its licence.
What it does
A list of the tool servers in your MCP config that could change under you, found before you approve them. It reads your config files without running anything, so nothing can start by accident. It searches the repo for MCP config files and reads them as plain text. If a drift checker tool is already installed it uses it; otherwise it applies hand rules. These flag servers fetched by a floating tag, an unpinned package name, or a download that runs straight from the web. For each one it suggests a fix without inventing a version number, since a pinned version should be one someone has reviewed.
You give it
- The repo or MCP config files
- Your approval rules (optional)
- CI service (optional)
You get
- A list of risky entries
- A reason for each flag
- Safer pinning advice
- A short report
- A CI check (optional)
Use it when
- A repo you cloned has an MCP config and you are unsure about approving it.
- You want to know which servers update themselves.
- Your team needs a rule to block unpinned servers.
- You are reviewing a pull request that adds a new MCP server.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can read your project files.