MCP server

nittim Official

com.nittim/nittim

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Production-safety audits for AI-generated code, with a fix for every finding.

Website Source

At a glance

Type

MCP server

Publisher

nittim.com (verified by the MCP Registry)

Status

Working at last check

Tools

15

Token cost

About 6,813 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http nittim https://nittim.com/api/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.nittim]
url = "https://nittim.com/api/mcp"

Gemini CLI

{"mcpServers":{"nittim":{"httpUrl":"https://nittim.com/api/mcp"}}}

Cursor

{"mcpServers":{"nittim":{"url":"https://nittim.com/api/mcp"}}}

VS Code

{"servers":{"nittim":{"type":"http","url":"https://nittim.com/api/mcp"}}}

Antigravity

agy mcp add nittim https://nittim.com/api/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"nittim","server_url":"https://nittim.com/api/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"nittim","server_url":"https://nittim.com/api/mcp"}

Tools

• audit_repo ~790 tokens
  Paid nittim AI audit of a GitHub repository: one structured pass over the highest-signal source; the only tool here that returns scores and a verdict. Answers with the audit's id, not the report. `fullScan: true` buys the wider Full Audit tier. NEEDS A KEY: mint one at https://nittim.com/keys. COSTS
• audit_source ~824 tokens
  Paid nittim AI audit of source files you post, for a project with no GitHub remote. Send SOURCE files, not build output — no node_modules or dist. On nittim's own key this answers with the audit's id; the report lands Usually within 15 minutes*. * Most reports land within 15 minutes. Worst case, 24
• describe_protocol ~172 tokens
  How this server works, in full: how a paid call quotes and charges, the two audit tiers, the Nittim Loop and its reward rules and caps, and dispute guidance. Free, no key, no charge, no side effects — it reads static text and calls no model. `section` picks one page; omitted, it returns all of them.
• dispute_finding ~549 tokens
  NEEDS A KEY: mint one at https://nittim.com/keys. Records that a finding from a prior audit is wrong (stance:'dispute') or genuinely real (stance:'confirm'), backed by evidence from the repo. Free. A SIGNAL for owner triage — it never changes the audit's scores, verdict or stored report on its own.
• estimate_audit ~487 tokens
  Price an audit before buying one: give a GitHub repository URL, or a manifest of paths and byte sizes — no file content, nothing uploaded — and get the tier (Audit or Full Audit), the pass count and the exact price. No account or key is needed: it never charges, runs no audit, calls no model and sto
• get_audit ~230 tokens
  Retrieve a nittim audit by its UUID, at any stage: the finished markdown digest (verdict, scores, top findings) plus its report link, or — no error, nothing charged — that it is still running, or why it failed and what happened to the charge. Free. An audit of a public repository reads without a key
• get_loop ~154 tokens
  Returns the current text of nittim's free, tool-agnostic self-review checklist — the same content served at https://nittim.com/selfcheck.md. Reviews a codebase against the public shape of nittim's 13-category Priority Framework, plus a 14th on what the code gives away, and states the procedure for r
• judge_output ~655 tokens
  Run a cross-vendor judge model over any text you post: code, a document, another model's output, anything. Returns findings + rationale ONLY — never a score, never a pass/fail verdict. Costs 5.03 credits. The judge always comes from a different vendor family than whatever produced the content, and t
• list_modules ~121 tokens
  List every audit module nittim can run: the two deterministic scanners (secret scan + OSV dependency CVE check) and the LLM-reasoned checks. Returns each module's key, tier, and a plain-English description of what it checks. Each module's key identifies it for running individually.
• mint_key ~176 tokens
  For a client that cannot sign in over OAuth: a short, one-time link to https://nittim.com/keys/claim/<token>. Opening it, signed in, mints a real nittim API key and shows it once — the key itself is NEVER returned by this tool or by any other MCP result. The link expires in a few minutes and works e
• preview_upload ~330 tokens
  NEEDS A KEY: mint one at https://nittim.com/keys. Send the paths and sizes of the files you would post — no content leaves your machine to ask this — and get back the list, the byte count, and a link for the account owner to approve it. Free. The approval covers that file list and no other, and a pa
• report_loop ~1045 tokens
  NEEDS A KEY: mint one at https://nittim.com/keys. Records anonymised counts from a Nittim Loop the developer has finished and agreed to send: pass numbers, a findings-by-category tally, a fixed count, and whether each pass was clean. Counts only — never a title, file path or snippet. Nothing is char
• run_module ~554 tokens
  Run ONE nittim audit module against a GitHub repository, never producing scores or a verdict. The two deterministic modules (secret-scan, dependency-cve) return scanner evidence directly, free, with nothing to confirm. Deep-tier modules make one focused model call, cost 5.03 credits each and follow
• scan_source ~400 tokens
  Free nittim look: committed secrets and known CVEs over posted source files. No account, no key, no nittim credits. Hard evidence only: never scores, never a production verdict. Send SOURCE files, not build output (no node_modules, no dist, no binaries).
• verify_fix ~326 tokens
  NEEDS A KEY: mint one at https://nittim.com/keys. Re-checks ONE finding from a finished audit against the repository's current code, or a commit named in the call, and answers fixed, still present, or undetermined — with the reason. It reads only the file that finding cites. Free, capped per day, an

Browse

• GitHub tools
• Converting to Markdown
• GitHub and code hosting
• Security scanning
• Calling other AI models

Related MCP servers

• GHOSBC Safety Gate
  Agent governance with A2A/Shopify/MCP trust audits, action screening, and decision UI.
• Moltline Code Review
  Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
• Diogenes Agent Guardrails & Sandbox MCP
  Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls.
• searchcode
  Code intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.
• ROKI Connect
  Verified ROKI Connect payments contract for coding agents: operations, schemas, validator.
• Arclan MCP Registry
  MCP registry: 138k servers crawled, handshake-validated, reliability-scored. 744 production-safe.
• Carrierscore
  FMCSA motor-carrier risk scores, monitoring, and carrier-selection evidence reports for AI agents.
• Reqistry
  Discover, compare, and monitor 1,400+ APIs directly from your AI coding agent.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/com.nittim/nittim.svg)](https://aptlynx.net/servers/com.nittim/nittim)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents