Repo Run Check
Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them
What it does
Repo Run Check is an MCP server, a connector that lets an AI assistant use it as a tool. It can be used hosted (nothing to install) or installed locally.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as review pull requests or scan code for vulnerabilities.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 8m ago (live check)Hosted endpoint
https://repo-run-check.nextill-pos.workers.dev/mcpstreamable-http
In Claude Code: claude mcp add --transport http repo-run-check https://repo-run-check.nextill-pos.workers.dev/mcp
Install package
- NPM
devx-repo-checkv1.0.0 · runs locally (stdio)
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"repo-run-check": {
"url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 8m agoONLINE Repo Run Check answered an MCP connection on 30 Oct 2026 and introduced itself as devx-repo-run-check 1.0.0 (MCP protocol 2025-06-18).
3 tools offered to AI assistants
check_repo· Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malwcheck_command· Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hfull_report_info· How to buy the full repo check via x402. Does not pay.
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Tasks it helps with
Share of each task's required capabilities it covers| Review pull requests Security Scanning | 50% |
| Scan code for vulnerabilities Security Scanning | 50% |
Similar tools
Listed for the same task: review pull requests- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- DraugrREMOTELOCALSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk
- Circl Vulnerability LookupREMOTELOCALCIRCL Vulnerability-Lookup — aggregated vulnerability records
- WhoisXML API MCP ServerREMOTELOCAL35 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API
Ready-made AI agents
- $20/mo · Prices & score →
- $18/mo · free plan · Prices & score →
- $24/mo · free plan · Prices & score →
- Tessl45$100/mo · free plan · Prices & score →
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Install package | devx-repo-check | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Hosted endpoint | https://repo-run-check.nextill-pos.workers.dev/mcp | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Package registries | npm | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Local install (package) | yes | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Website | https://repo-run-check.nextill-pos.workers.dev | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Repository | https://github.com/devx-agent/repo-run-check | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| Version | 1.0.0 | DECLARED | SRC-001 Official MCP Registry | 14m ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 14m ago |
Change history
- NEW30 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Repo Run Check still online?
Free alerts · no accountDo you run Repo Run Check? Know when it stops answering
For publishers · optionalIts hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.
Monitoring never changes a score or a rank.
Questions about Repo Run Check
How do I connect Repo Run Check?
Use the hosted endpoint https://repo-run-check.nextill-pos.workers.dev/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does Repo Run Check offer?
When Electra Index connected on 30 Oct 2026, it listed 3 tools: check_repo, check_command, full_report_info. The full list is in "Live check" above.
Is Repo Run Check online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 8m ago.
What can I use Repo Run Check for?
Based on its description, it is most relevant to: review pull requests, scan code for vulnerabilities.