SPARDA
AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
MCP server · by zakariagharzouli
About
SPARDA is an MCP server published by zakariagharzouli. Marketplaces we read that list it: 2 (Official MCP Registry, npm registry (MCP servers)). The last change we recorded was on 2026-10-22. As of our marketplace pass on 2026-10-23.
What it asks for
- Runs on your machine
- Settings: 2
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Package
npm sparda-mcp (sparda-mcp on npm)
- npm downloads/week: 111 (2026-10-22)
- npm downloads/month: 795 (2026-10-22)
- Latest version on npm: 0.73.0, published 2026-09-10
No known vulnerabilities in OSV for 0.71.4 (checked 2026-10-14)
No known vulnerabilities in OSV for 0.71.3 (checked 2026-10-14)
No known vulnerabilities in OSV for 0.73.0 (checked 2026-10-14)
npm facts come from the public npm registry (registry.npmjs.org, api.npmjs.org). Each figure is the registry's own and is never added to another. A registry that publishes no figure shows none: no number is not zero. Vulnerability records come from OSV.dev (CC BY 4.0) and concern the declared version only; a listing that declares no version gets no answer. We do not scan code.
Works with
- Claude Code
- Codex
- Cursor
- VS Code
- Copilot CLI
A one-click link opens the client, which asks you to confirm before it adds the server.
From the marketplaces that list it and the MCP transport it declares, as each client documents them. We do not test plugins.
Connect
Commands and configs built only from what its marketplaces declare. We do not run them for you and do not test plugins.
As a local MCP server: npm package
Built from what Official MCP Registry declares.
claude mcp add --transport stdio sparda-mcp -- npx -y sparda-mcp dev[mcp_servers.sparda-mcp]
command = "npx"
args = ["-y", "sparda-mcp", "dev"]{
"mcpServers": {
"sparda-mcp": {
"command": "npx",
"args": [
"-y",
"sparda-mcp",
"dev"
]
}
}
}Optional settings it also lists: SPARDA_FLYWHEEL, SPARDA_RECORD_SEQUENCES.
Where it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Official MCP Registry (Open the registry record) | Listed | 0.71.4 | Downloads/month (npm): 795 Downloads/week (npm): 111 Forks (GitHub): 1 Stars (GitHub): 8 |
Not marked | |
| Official MCP Registry (Open the registry record) | Listed | 0.71.3 | Downloads/month (npm): 795 Downloads/week (npm): 111 Forks (GitHub): 1 Stars (GitHub): 8 |
Not marked | |
| npm registry (MCP servers) (Open on npm) | Listed | 0.73.0 | Downloads/month (npm): 795 Downloads/week (npm): 111 Forks (GitHub): 1 Stars (GitHub): 8 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
What changed
Nothing has moved on this plugin since we started watching it.
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
Verify AI work against criteria and get signed receipts. From Spoolis, guarantees for AI work.
-
zenable app.zenable/zenable
Zenable cleans up sloppy AI code and prevents vulnerabilities with deterministic guardrails
-
Governance runtime for AI agents with signed provenance, compliance audits, and OSINT.
-
Tamper-evident records of AI agent decisions. Verify offline, or publish a proof link.
-
Real-time semantic security for AI coding agents and MCP tools
-
Machine-verifiable authorization checks for autonomous AI agents.
-
Audit infrastructure for AI coding agents with evidence-backed review and policy gates.
-
gateway ai.duvera/gateway
Governed AI actions with signed, verifiable receipts: free keyless reads, human-approved writes.
-
Zero-knowledge proofs with post-quantum attestations for AI agents, without exposing personal data
-
penholder ai.penholder/penholder
Preventive human-approval write-gate for AI agents: writes commit only after a human approves.
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
eu-ai-act-compliance-mcp io.github.CSOAI-ORG/eu-ai-act-compliance-mcp
Eu Ai Act Compliance MCP Server by MEOK AI Labs
-
Sovereignty infrastructure for AI agents. Gives your agent encrypted state (AES-256-GCM), self-custodied identity (Ed25519), selective disclosure (Pedersen commitments, Schnorr…
-
vynn-mcp io.github.beee003/vynn-mcp
Self-improving AI workflows with backtesting, prompt optimization, and scheduling
-
MCP security gateway that wraps any MCP server with per-tool policies, Ed25519-signed decision receipts, and human approval gates. Shadow mode (default) logs every tool call…
-
Real-time security filter for MCP tool communications. Works as a Claude Code hook to inspect all data sent to and received from MCP servers. Detects prompt injection, API key…
Has a listing on Claude Code: claude-plugins-official (5)
-
firebase-mcp io.github.firebase/firebase-mcp
Gives AI development tools Firebase-specific capabilities and expertise.
-
mdk-mcp-server io.github.SAP/mdk-mcp-server
Model Context Protocol (MCP) server for AI-assisted development of MDK applications.
-
mcp-server io.github.cap-js/mcp-server
Model Context Protocol (MCP) server for AI-assisted development of CAP applications.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Figma design platform integration. Access design files, extract component information, read design tokens, and translate designs into code. Bridge the gap between design and…
Has a listing on Claude: knowledge-work-plugins (5)
-
AI-first project auditor and re-engineer based on the 9 design principles and 7 design patterns from the TechWolf AI-First Bootcamp
-
Figma design platform integration. Access design files, extract component information, read design tokens, and translate designs into code. Bridge the gap between design and…
-
Sanity content platform integration with MCP server, agent skills, and slash commands. Query and author content, build and optimize GROQ queries, design schemas, and set up Visual…
-
DataRobot skills for AI/ML workflows — model training, deployment, predictions, feature engineering, monitoring, explainability, data preparation, App Framework CI/CD, and…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Skills for NVIDIAs ecosystem spans GPU acceleration, CUDA, AI agents, inference, robotics, Physical AI, Omniverse, and simulation. This plugin helps you understand the pieces…
-
Build with OpenAI APIs, Agents SDK, and ChatGPT Apps, and create and save OpenAI API keys from Codex.
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
-
An agentic skills framework & software development methodology that works: planning, TDD, debugging, and collaboration workflows.
Has a listing on Community GitHub marketplaces (5)
-
protect-mcp com.scopeblind/protect-mcp
Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.
-
Read-only context and complete checks against patterns learned from git history. Local; no LLM.
-
hushdrop io.github.maxtechera/hushdrop
Open-source artifact sharing for AI agents: private, branded, zero-knowledge links.
-
Self-healing CI tests and proof of work for AI agents
-
speclock io.github.sgroy10/speclock
AI Constraint Engine — enforces CLAUDE.md and .cursorrules as laws. 51 MCP tools.
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
Run a lightweight, role-separated AI development team with flexible tools, developer-selected models, proportionate planning, and optional QA.
-
Safe BLE diagnostics, evidence workflows, and guarded automation for AI agents.
-
Complete toolkit for building Model Context Protocol (MCP) servers in Go using the official github.com/modelcontextprotocol/go-sdk. Includes instructions for best practices, a…
-
Complete toolkit for building Model Context Protocol (MCP) servers in TypeScript/Node.js using the official SDK. Includes instructions for best practices, a prompt for generating…
-
Figma design platform integration. Access design files, extract component information, read design tokens, and translate designs into code. Bridge the gap between design and…
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Advanced Security plugin for GitHub Copilot.
-
Microsoft Dataverse plugin for coding agents, covering record CRUD, bulk data operations, advanced queries, schema and metadata, administration, security, environment management…
-
model-apps
Build and deploy Power Apps generative pages for model-driven apps with specialist agents for planning, entity creation, and parallel code generation. Requires PAC CLI >= 2.7.0…
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
Has a listing on Cursor: cursor/plugins (5)
-
Iterative self-referential AI loops using the Ralph Wiggum technique.
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Consult a stronger model before major decisions, when stuck, and before declaring done.
-
Let Grok Bot reach MCP servers on your private Tailscale network. On your own tailnet it joins as one tag:grokbot device; on your team's company tailnet, turned on by a team…
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Has a listing on Docker MCP Catalog (5)
-
Discover and connect to a curated marketplace of MCP servers for extending AI agent capabilities.
-
Bridges multiple AI models and CLIs, enabling orchestrated workflows across Claude Code, Gemini CLI, Codex CLI, and other AI development tools.
-
Server-enforced workflow discipline for AI agents: work items, dependency graphs, quality gates
-
buildkite-mcp-server io.github.buildkite/buildkite-mcp-server
MCP server exposing Buildkite API data (pipelines, builds, jobs, tests) to AI tooling and editors.
-
Read and score Opik traces, experiments, datasets and prompts from your AI assistant.
Has a listing on Official MCP Registry (5)
-
Verify AI work against criteria and get signed receipts. From Spoolis, guarantees for AI work.
-
zenable app.zenable/zenable
Zenable cleans up sloppy AI code and prevents vulnerabilities with deterministic guardrails
-
Governance runtime for AI agents with signed provenance, compliance audits, and OSINT.
-
Tamper-evident records of AI agent decisions. Verify offline, or publish a proof link.
-
Real-time semantic security for AI coding agents and MCP tools
Has a listing on npm registry (MCP servers) (5)
-
protect-mcp com.scopeblind/protect-mcp
Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.
-
guardvibe io.github.goklab/guardvibe
Deterministic security layer your AI can't be. 618 rules, 39 tools, CLI + doctor + host audit.
-
Pin MCP tool contracts by sha-256; catch silent drift, rug pulls and bait-and-switch in CI.
-
mcp com.dechonet/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
-
speclock io.github.sgroy10/speclock
AI Constraint Engine — enforces CLAUDE.md and .cursorrules as laws. 51 MCP tools.
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Want this mark on your plugin in our catalog?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record, and you can show this mark on the card, with live banners for your site and README. How verification works
You also get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and its remote endpoint goes on monitoring as a web service.
Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Package data comes from the public npm registry (registry.npmjs.org). Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.