Flint AI platform MCP server: read-only AI-SPM issues, inventory, and remediation guidance for coding agents
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"flintai-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# flintai-mcp A local [MCP](https://modelcontextprotocol.io) server (stdio) that gives a coding agent read-only access to a Flint AI backend's **AI-SPM issues, inventory, and remediation guidance** so it can fix the flagged code. It is a thin, authenticated REST client over the Flint AI API — no scanner runs locally and no backend changes are required. Everything valuable (AI-reasoned findings, rule-based issues, public-asset vuln enrichment, remediation guidance) is already computed server-side and served over the existing API / static assets. The package is named for the platform (`flintai-mcp`) rather than AI-SPM specifically: v1 ships the AI-SPM tools, but it is intended to grow to cover other Flint AI product domains (guardrails, ROI, …) over time. > **This repository is generated.** `flintai-mcp` is developed in SandboxAQ's > internal monorepo and mirrored here (which also builds and publishes the wheel > to PyPI). Please file issues here; see [`CONTRIBUTING.md`](CONTRIBUTING.md) to > propose changes. > **Phase 1: read-only, remote-backed.** Fast verification of uncommitted fixes (a > local scan + a synchronous backend "dry-run" endpoint) is a planned Phase 2 and > is intentionally out of scope here. ## Install & run The idiomatic way is via the published wheel with `uvx` (no clone, no build step): ```bash uvx flintai-mcp ``` ## Configuration Set two environment variables: | Variable | Meaning | | ------------------ | -------------------------------------------------------- | | `FLINTAI_API_KEY` | Flint AI API key (`sk_...`). | | `FLINTAI_INSTANCE` | Flint instance base URL, e.g. `https://app.flintai.dev`. | The instance URL is validated against a fail-closed host allowlist before any credential is attached. The **tenant and workspace are auto-discovered** from the API key at startup — you do not configure any IDs. A key is pinned to exactly one tenant + activ…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.