Over-Reach Detector
Plugs into Cursor, Claude Code, or any MCP client over stdio and exposes a single tool, check_scope_tool, that compares declared task scope (fnmatch globs and category tags like tests, docs, config) against the files an AI agent actually modified. Returns in_scope, over_reach, or empty, listing any files or categories that exceeded the declared boundary. This is an audit layer, not enforcement. It reports the mismatch but doesn't block writes or roll back changes. You'd wire this into a workflow where you want an AI agent to declare its intended scope upfront, then verify afterwards whether it stayed within bounds before merging or deploying.
- tool
- 1
- transport
- STDIO
- last updated
- May 22, 2026
Tools
1 toolsPublic tool metadata for what this MCP can expose to an agent.
check_scope_toolCompares a declared task scope with the actual files changed by an AI coding agent and reports any mismatch.
Compares a declared task scope with the actual files changed by an AI coding agent and reports any mismatch.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Over-Reach Detector (MCP server)
Detect and report when AI coding agents change files outside their declared task scope. Designed to plug into Cursor, Claude Code, and other MCP-compatible AI coding agents via the standard stdio transport.
Compares two things:
- Declared scope — the files (as fnmatch globs) and categories (tests, docs, infra, config, code) the task is allowed to touch.
- Actual diff — the files the AI actually modified.
If the actual diff exceeds the declared scope, the tool returns status=over_reach and lists the offending files and categories.
What this tool does and does not do
over-reach-detector is an audit/disclosure tool, not a sandbox and not a blocker.
It compares a declared task scope with the actual files/categories changed by an AI coding agent. If the actual changes exceed the declared scope, it reports that mismatch.
It does not prevent file writes by itself. It does not decide whether to revert, approve, or block a change. The caller remains responsible for enforcement, rollback, or human review.
Install
Details
- Repository
- github.com/choreoatlas/over_reach_detector
- Category
- Productivity & Office
- Package
over-reach-detector- Transport
- STDIO
- Registry
- MCP registry, active
Related Productivity & Office MCP servers
View all
GleanMark USPTO Trademark Searchcom.gleanmark/trademark-searchUSPTO trademark data: 14M+ marks, owners, Office Actions, TTAB cases. Public tools need no account.0stars
IPOGrid IPO Calendar & Filing Researchcom.ipogrid/ipogridIPO calendar, SEC filings, deal terms, and IPO news research via the IPOGrid MCP server.0stars
MalwareTracker Document Malware & AI Safety Scannertylabs/malwaretracker-mcpScan PDFs, Office docs, and RAG files for malware exploits, macros, CVEs, and AI prompt injection.0stars
pdfverapdfvera/pdfvera-mcpPDF invoices to XRechnung/ZUGFeRD; Brazilian bank statement PDFs to OFX, CSV and Excel.0stars
Pingfyrpingfyr/mcpSchedule reminders for AI agents via email, webhook, Slack, Discord, Telegram, or Google Calendar.0stars
QSimHealthchiaha-ai/qsimhealth-siteHealthcare staffing simulator — ED, walk-in clinic, and appointment office DES tools.0stars