TAR Engine MCP Server

io.github.qingxuantang/tar-engine

Repository Registry

What is the TAR Engine MCP server?

Audit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.

How to install TAR Engine

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

TAR_ENGINE_URL
Override the audit backend. Default is the hosted playground at https://tarai.dev. Set to http://localhost:8765 (or your own tar-engine deployment) to self-host and keep SKILL.md content on your machine.
TAR_ENGINE_BYOK_OPENAI_KEY
secret
OpenAI API key that unlocks the semantic LLM and adversarial prompt-fuzz layers. Static and supply-chain layers run without it.
TAR_ENGINE_BYOK_ANTHROPIC_KEY
secret
Anthropic API key alternative to the OpenAI key for the semantic and adversarial layers.

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "tar-engine": {
      "command": "uvx",
      "args": [
        "tar-engine",
        "tar-engine",
        "tar-engine-mcp"
      ],
      "env": {
        "TAR_ENGINE_URL": "<YOUR_TAR_ENGINE_URL>",
        "TAR_ENGINE_BYOK_OPENAI_KEY": "<YOUR_TAR_ENGINE_BYOK_OPENAI_KEY>",
        "TAR_ENGINE_BYOK_ANTHROPIC_KEY": "<YOUR_TAR_ENGINE_BYOK_ANTHROPIC_KEY>"
      }
    }
  }
}

Related MCP servers

io.github.qinisolabs/bizdays

Maintained

Verified business-day math for AI agents: holidays + per-country weekends, not guesses.

TypeScript

Apache-2.0

View repository →

io.github.qinisolabs/companieswise

Maintained

Verified UK company lookup & validation for AI agents — Companies House data, snapshot or live.

TypeScript

Apache-2.0

View repository →

io.github.qinisolabs/floodwise

Maintained

England flood-risk by postcode for AI agents — verified Environment Agency data, not guesses.

TypeScript

Apache-2.0

View repository →

io.github.qinisolabs/icdwise

Maintained

Verified ICD-10-CM code lookup & validation for AI agents — official descriptions, not guesses.

TypeScript

Apache-2.0

View repository →

io.github.qinisolabs/localecheck

Maintained

Verified locale data for AI agents: dates, phone, currency, tax, holidays, addresses (UK/US)

Python

Apache-2.0

View repository →

Qiniso

Maintained

Deterministic fact verification for AI agents — checksums & curated data, not guesses.

TypeScript

Apache-2.0

View repository →