yof
Checks AI-written code for leaked keys and made-up packages, on your machine. Never uploads code.
- tools
- 8
- auth
- Secret needed
- transport
- STDIO, HTTP
- env var
- 1
- last updated
- Nov 10, 2026
Tools
8 toolsPublic tool metadata for what this MCP can expose to an agent.
yof_checkScan the project folder (or a folder inside it)
Scan the project folder (or a folder inside it)
No parameter schema in public metadata yet.
yof_check_diffScan only the lines that changed (a diff you pass, or the working tree against the last commit, plus new files)
Scan only the lines that changed (a diff you pass, or the working tree against the last commit, plus new files)
No parameter schema in public metadata yet.
yof_explainWhat a rule means, why it matters, the safe fix
What a rule means, why it matters, the safe fix
No parameter schema in public metadata yet.
yof_fix_promptExact fix steps for one finding
Exact fix steps for one finding
No parameter schema in public metadata yet.
yof_verifyRe-scan one file and say fixed or not
Re-scan one file and say fixed or not
No parameter schema in public metadata yet.
yof_findingsOpen findings from your yof.io account
Open findings from your yof.io account
No parameter schema in public metadata yet.
yof_patch_statusPatch's open pull requests and their CI state
Patch's open pull requests and their CI state
No parameter schema in public metadata yet.
yof_lessonsNotes from merged Patch fixes
Notes from merged Patch fixes
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
YOF_API_KEYsecretOptional. The key the yof dashboard makes for this connection (Connect your AI builder). Without it, only the local tools run.
Readme
Security checks for apps you build with AI
Catch leaked keys, risky or made-up packages and access holes between accounts before you ship. Free and open source.
Details
- Repository
- github.com/yof-dev/yof
- Website
- yof.io/docs/ai-builders
- Package
@yof/cli- Transport
- STDIO, HTTP
- Auth
- Required
- Registry
- MCP registry, active