# io.github.IamNishant51/atlas-pipeline (npm · atlas-pipeline-mcp)

7-stage AI pipeline MCP server: Intent→Context→Git→Decompose→Variants→Critique→Optimize

- Trust score: 62/100 (medium)
- Change this week: +38
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `atlas-pipeline-mcp`: 62/100 (this document), [markdown](https://verifymcp.io/servers/iamnishant51-atlas-pipeline/atlas-pipeline-mcp.md), [page](https://verifymcp.io/servers/iamnishant51-atlas-pipeline/atlas-pipeline-mcp)

## Channel facts

- Registry: `npm`
- Package: `atlas-pipeline-mcp`
- Version: `1.0.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 70/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects fastify 4.29.1, a direct dependency. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (195 of 196), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 178 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 552 tokens (~61/item across 9 items; 9 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 99/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 96% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add iamnishant51-atlas-pipeline -- npx -y atlas-pipeline-mcp
```

### Codex

```bash
codex mcp add iamnishant51-atlas-pipeline -- npx -y atlas-pipeline-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "iamnishant51-atlas-pipeline": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "atlas-pipeline-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add iamnishant51-atlas-pipeline --command npx --arg -y --arg atlas-pipeline-mcp
```

### Hermes

```yaml
mcp_servers:
  iamnishant51-atlas-pipeline:
    command: "npx"
    args: ["-y", "atlas-pipeline-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "iamnishant51-atlas-pipeline": {
      "command": "npx",
      "args": [
        "-y",
        "atlas-pipeline-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 62, +41)

- [security regression] CVE-2026-3635 affects this package: high
- [security regression] CVE-2026-6321 affects this package: high
- [security regression] CVE-2026-25224 affects this package: high
- [security regression] CVE-2026-6322 affects this package: high
- [security regression] CVE-2026-47219 affects this package: high
- [security regression] CVE-2026-25223 affects this package: high
- [security regression] Provenance: unverified → fail
- [security regression] Known CVEs: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Schema quality: unverified → good
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT

### 2026-07-31 (score 21, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 46, +22)

- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 96
- [functional] First check of Schema quality: pass
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 24)

First indexed and scored.

## MCP tools (9)

### `atlas_intent` (~55 tokens)

Analyze user intent from a natural language request. Extracts action type, target, context, and constraints.

Input parameters:

- `conversationHistory` (array): Optional conversation history for context
- `message` (string, required): The user message to analyze

### `atlas_context` (~65 tokens)

Gather context about a project or codebase. Analyzes files, dependencies, and project structure.

Input parameters:

- `filePaths` (array): Specific files to analyze
- `projectPath` (string, required): Path to the project root
- `query` (string): What context to focus on

### `atlas_git` (~72 tokens)

Analyze Git history and repository state. Returns recent commits, active branches, and file change history.

Input parameters:

- `filePath` (string): Specific file to get history for
- `maxCommits` (number): Maximum commits to analyze (default: 50)
- `repoPath` (string, required): Path to the Git repository

### `atlas_decompose` (~70 tokens)

Break down a complex task into smaller subtasks with dependencies. Creates a DAG of work items.

Input parameters:

- `context` (string): Additional context about the codebase
- `maxDepth` (number): Maximum decomposition depth (default: 3)
- `task` (string, required): The task description to decompose

### `atlas_variants` (~75 tokens)

Generate multiple solution variants for a coding task. Returns different approaches with pros/cons.

Input parameters:

- `context` (string): Code context and constraints
- `language` (string): Programming language
- `numVariants` (number): Number of variants to generate (default: 3)
- `task` (string, required): The coding task description

### `atlas_critique` (~69 tokens)

Review and critique code for quality, security, and best practices. Returns detailed feedback and scores.

Input parameters:

- `code` (string, required): The code to review
- `focus` (array): Areas to focus on: security, performance, readability, maintainability
- `language` (string): Programming language

### `atlas_optimize` (~68 tokens)

Optimize code based on critique feedback. Applies improvements while maintaining functionality.

Input parameters:

- `code` (string, required): The code to optimize
- `critique` (string): Critique feedback to address
- `language` (string): Programming language
- `preserveApi` (boolean): Whether to preserve the public API

### `atlas_pipeline` (~60 tokens)

Run the full Atlas pipeline: Intent → Context → Git → Decompose → Variants → Critique → Optimize

Input parameters:

- `message` (string, required): The user request
- `options` (object)
- `projectPath` (string, required): Path to the project

### `atlas_providers` (~18 tokens)

Check available LLM providers and their status.

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/iamnishant51-atlas-pipeline/atlas-pipeline-mcp#diagnostics

## Score history

- 2026-08-03: 62
- 2026-08-02: 62
- 2026-08-01: 21
- 2026-07-31: 21
- 2026-07-30: 46
- 2026-07-28: 46
- 2026-07-27: 24

## Links

- npm package: https://www.npmjs.com/package/atlas-pipeline-mcp
- Socket report: https://socket.dev/npm/package/atlas-pipeline-mcp
- Repository: https://github.com/IamNishant51/atlas-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/iamnishant51-atlas-pipeline/atlas-pipeline-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/iamnishant51-atlas-pipeline/atlas-pipeline-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/iamnishant51-atlas-pipeline/atlas-pipeline-mcp