{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_pq43xdenyaf6","handle":"scrub-mcp-2","url":"https://wellknown.network/agents/scrub-mcp-2","links":{"self":"https://wellknown.network/agents/scrub-mcp-2/record.json","html":"https://wellknown.network/agents/scrub-mcp-2","markdown":"https://wellknown.network/agents/scrub-mcp-2/record.md","api":"https://wellknown.network/api/v1/agents/scrub-mcp-2","status":"https://wellknown.network/api/v1/agents/scrub-mcp-2/status","claim":"https://wellknown.network/agents/scrub-mcp-2/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/scrub-mcp-2/claim.json","badge":"https://wellknown.network/agents/scrub-mcp-2/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/scrub-mcp-2/history","tools":"https://wellknown.network/api/v1/agents/scrub-mcp-2/tools"},"ard":{"identifier":"urn:air::server:scrub-mcp-2","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"scrub-mcp","summary":"DSPy-powered code hygiene pipeline over MCP","description":"# S.C.R.U.B.\n\n**Source Code Review, Uplift, and Baselining**\n\nA 22-tool MCP server and CI-ready CLI that cuts cloud LLM token usage on code quality tasks. Deterministic tools handle what they can. A local LLM (via DSPy) handles the rest. Cloud models plan and review. Nothing else.\n\n```\nCloud LLM (plan) ──> S.C.R.U.B. MCP Server ──> Cloud LLM (review)\n                          │\n              ┌───────────┼───────────┐\n              ▼           ▼           ▼\n        Deterministic   DSPy +     Security +\n        (Ruff, AST,    Local LLM   Supply Chain\n         pyright)     (Qwen Coder)  (Bandit, OSV)\n\n              ┌───────────┴───────────┐\n              ▼                       ▼\n         CLI (scrub)            GitHub Actions\n     check│fix│diff│audit      .pre-commit-hooks\n         SARIF 2.1.0 output\n```\n\n## Why: From Code Generation to Code Governance\n\nThe AI industry is obsessed with Day 1: writing code faster. But for any team responsible for enterprise infrastructure, the real cost of software isn't writing it—it's Day 2: maintaining, securing, and auditing that code for the next five years.\n\nAI makes it dangerously easy to generate massive amounts of technical debt, complex spaghetti logic, and unvetted supply chain risks. It writes code, but it doesn't own systems.\n\nS.C.R.U.B. is the adult in the room. It is not a coding tool; it is a **best practices tool**. It acts as a deterministic governance engine that sits between the AI and your codebase, strictly enforcing sanity, security thresholds, and architectural standards. It allows teams to safely adopt autonomous coding agents because the output is systematically proven to be compliant, legible, and secure *before* it ever hits a pull request.\n\nThe fact that S.C.R.U.B. forces CycloneDX SBOMs, Bandit security scans, and strict cyclomatic complexity limits isn't just a side feature—it's the product. The conversation shifts from \"How fast can the AI code?\" to \"How safe is the code the AI just wrote?\"\n\nThis determ…","publisher":null,"homepage":null,"repository":null,"version":"0.5.0","license":"MIT","protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:scrub-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"dev.ci-cd","name":"CI/CD & Deploy","confidence":1,"provenance":"derived"},{"slug":"code.generation","name":"Code Generation","confidence":0.917,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":0.848,"provenance":"derived"},{"slug":"code.review","name":"Code Review","confidence":0.836,"provenance":"derived"}],"categories":["code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"scrub-mcp","registry":"pypi","observedAt":"2026-10-22T19:28:12.477Z","publishedAt":"2026-03-30T14:48:01.425793Z","latestVersion":"0.5.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"scrub-mcp","url":"https://pypi.org/project/scrub-mcp/","firstSeenAt":"2026-09-10T12:21:05.961Z","fetchedAt":"2026-10-22T19:27:10.485Z","normalizedAt":"2026-10-22T19:27:10.485Z"}]},"firstSeenAt":"2026-09-10T12:21:05.961Z","updatedAt":"2026-10-22T19:28:12.477Z"}