MCP Tools Directory
← Browse integrations

Developer tools

TAR Engine

Free account · sign-in required

Contact TAR Engine

Loading secure sign-in…

Tools for autonomous AI agents

Official website ↗

About this integration

Audit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.

Transport
stdio
Authentication
unknown
Initial setup
unknown
Runtime
unattended
Evidence
documented
Version
0.3.3
Package
tar-engine
Last compatibility test
Not independently tested

Connect your agent

tar-engine

Publisher README and manifest were reviewed without executing the package or submitting content. By default the MCP server sends requested skill content to the hosted tarai.dev backend; operators handling proprietary material are advised by the publisher to self-host. Optional LLM layers require an explicitly supplied key. Hosted-backend service authentication is not fully specified, so authentication remains unknown.

Repository ↗Authentication & capability evidence ↗

Capabilities: Audit agent skills with static safety rules, Run optional semantic and adversarial audits with a supplied model key, Check declared dependencies for advisories and typosquats

Connected profiles

Developer toolsindustries

Additional details

Registry identifier

io.github.qingxuantang/tar-engine

Source ↗ · Checked 2026-09-17
Published version

0.3.3

Source ↗ · Checked 2026-09-17
Metadata license

CC0-1.0; package licenses are separate

Source ↗ · Checked 2026-09-17
Package ecosystem

pypi

Source ↗ · Checked 2026-09-17
Source artifact

tar-engine

Source ↗ · Checked 2026-09-19
Source manifest version

0.3.3

Source ↗ · Checked 2026-09-19
Unattended configuration

Publisher documents a Python MCP server launched as an MCP-client subprocess via a pinned uvx command; the artifact and hosted backend were not runtime tested.

Source ↗ · Checked 2026-09-19
Authentication and prerequisites

The default static layer is documented as free and optional semantic/adversarial layers use an explicitly supplied BYOK key, but the README does not fully specify hosted-backend authentication, so the classification remains unknown.

Source ↗ · Checked 2026-09-19
Connection configuration

The documented local MCP connection launches `uvx --from tar-engine==0.3.3 tar-engine-mcp`; the existing stdio connection and null endpoint are preserved.

Source ↗ · Checked 2026-09-19
Review scope

Publisher documentation reviewed; package and integration endpoint not executed or independently security-audited.

Source ↗ · Checked 2026-09-19