
Checks AI-written code for leaked keys and made-up packages, on your machine. Never uploads code.
Public tool metadata for what this MCP can expose to an agent.
yof_checkScan the project folder (or a folder inside it)Scan the project folder (or a folder inside it)
No parameter schema in public metadata yet.
yof_check_diffScan only the lines that changed (a diff you pass, or the working tree against the last commit, plus new files)Scan only the lines that changed (a diff you pass, or the working tree against the last commit, plus new files)
No parameter schema in public metadata yet.
yof_explainWhat a rule means, why it matters, the safe fixWhat a rule means, why it matters, the safe fix
No parameter schema in public metadata yet.
yof_fix_promptExact fix steps for one findingExact fix steps for one finding
No parameter schema in public metadata yet.
yof_verifyRe-scan one file and say fixed or notRe-scan one file and say fixed or not
No parameter schema in public metadata yet.
yof_findingsOpen findings from your yof.io accountOpen findings from your yof.io account
No parameter schema in public metadata yet.
yof_patch_statusPatch's open pull requests and their CI statePatch's open pull requests and their CI state
No parameter schema in public metadata yet.
yof_lessonsNotes from merged Patch fixesNotes from merged Patch fixes
No parameter schema in public metadata yet.
Sponsors
YOF_API_KEYsecretOptional. The key the yof dashboard makes for this connection (Connect your AI builder). Without it, only the local tools run.
yof
Security checks for apps you build with AI
Catch leaked keys, risky or made-up packages and access holes between accounts before you ship. Free and open source.
@yof/cli