Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.Nagarjuna2997/ios-agent-skill

NPM · IOS-AGENT-MCP · SCANNED SEP 20

Swift reviews, local Apple references, app scaffolding and iOS simulator workflows.

Available components

70 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 98 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 3 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability86
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 2984 tokens (~78/item across 38 items; 35 tools + 3 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage83
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 42% of tool parameters carry a description.Partial
  • Structured output schemas are declared (26% of tools); any adoption earns full credit.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "simulator_shutdown" implies "shutdown" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 36 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

How do I install the io.github.Nagarjuna2997/ios-agent-skill MCP server?

io.github.Nagarjuna2997/ios-agent-skill runs locally as an npm package, launched with npx -y ios-agent-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · ios-agent-mcp

# add to Claude Code
claude mcp add nagarjuna2997-ios-agent-skill -- npx -y ios-agent-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "nagarjuna2997-ios-agent-skill": {
      "command": "npx",
      "args": [
        "-y",
        "ios-agent-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "nagarjuna2997-ios-agent-skill": {
      "command": "npx",
      "args": [
        "-y",
        "ios-agent-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add nagarjuna2997-ios-agent-skill -- npx -y ios-agent-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nagarjuna2997-ios-agent-skill": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "ios-agent-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add nagarjuna2997-ios-agent-skill --command npx --arg -y --arg ios-agent-mcp
# ~/.hermes/config.yaml
mcp_servers:
  nagarjuna2997-ios-agent-skill:
    command: "npx"
    args: ["-y", "ios-agent-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "nagarjuna2997-ios-agent-skill": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "ios-agent-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add nagarjuna2997-ios-agent-skill -t stdio -c npx -a -y ios-agent-mcp
// mcp.json
{
  "mcpServers": {
    "nagarjuna2997-ios-agent-skill": {
      "command": "npx",
      "args": [
        "-y",
        "ios-agent-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 16 Sept 26 70

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/ios-agent-mcp@2.6.0

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 98 packages
Packages resolved 98
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 35 exposed · ~2,865 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
analyze_swift_project ~112

Produce an overview of a Swift project — file and line counts, deployment target, Swift tools version, frameworks in use, whether tests exist — together with a summary count of findings across every rule category (concurrency, architecture, SwiftUI, availability, App Store). Use this first when you are unfamiliar with a codebase, then run the focused tools on whichever category has findings.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).

No output schema declared.

No examples provided.

audit_app_store_readiness ~102

Check a Swift project for issues that cause App Store rejection or runtime termination: permission-gated frameworks used without an Info.plist purpose string, a missing PrivacyInfo.xcprivacy manifest, unlocalized user-facing strings, icon-only buttons with no accessibility label, and print() used for logging. Use before submitting to App Review.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).

No output schema declared.

No examples provided.

build_project ~80

Run xcodebuild build for a project or workspace. Use before installing and launching the app. Requires a scheme and either project or workspace.

NameTypeReqDescription
configurationstring
derivedDataPathstring
destinationstring
projectstring
schemestringyes
workspacestring

No output schema declared.

No examples provided.

check_availability_guards ~129

Verify that version-gated Apple APIs are guarded on the version where they were INTRODUCED rather than the newest SDK. Catches both missing guards and over-restrictive ones — for example Liquid Glass (iOS 26) guarded at iOS 27, which silently drops every iOS 26 device to the fallback. Also flags Foundation Models used without a runtime SystemLanguageModel.availability check. Use before shipping, or after bumping an SDK.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

create_app ~90

Create an editable Swift app starter, implementation brief and optional XcodeGen specification/icon layers. Writes a NEW project; does not implement the full app idea. Then use source retrieval, review and simulator tools to implement and verify it.

NameTypeReqDescription
briefstringyes
directorystringyesParent directory for the new project
namestringyes
xcodegenboolean

No output schema declared.

No examples provided.

get_apple_technology ~52

Get a compact technology overview and local source routes by default. Use view full only when the entire guide and API topic map are required.

NameTypeReqDescription
idstringyes
viewstring

No output schema declared.

No examples provided.

get_apple_updates ~45

Search dated Apple update and release-note landing pages with version-specific source links. Does not claim live results.

NameTypeReqDescription
limitinteger
querystring

No output schema declared.

No examples provided.

get_reference_outline ~29

Get heading offsets so only the relevant section needs to be read.

NameTypeReqDescription
pathstringyes

No output schema declared.

No examples provided.

install_app ~71

Install a built .app bundle into a simulator using xcrun simctl install. Use after build_project or after locating a derived-data app bundle.

NameTypeReqDescription
appPathstringyesPath to a built .app bundle.
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

launch_app ~70

Launch an installed app in the simulator by bundle identifier. Optional arguments are passed after the bundle id and are useful for UI-test/debug launch flags.

NameTypeReqDescription
argsarray
bundleIdstringyes
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

lint_skill ~157

Validate the metadata of an Agent Skill repository rather than Swift source: SKILL.md frontmatter (required keys, kebab-case name, semver version, description length limits), subagent definitions in .claude/agents/ (name matches filename, unknown tool names, and read-only agents that are nonetheless granted Edit or Write), whether generated mirror files such as CLAUDE.md and AGENTS.md have drifted from SKILL.md, and backtick-quoted doc paths that do not resolve. Use when authoring or reviewing a skill, before publishing a release, or when a subagent or skill is not being invoked as expected.

NameTypeReqDescription
pathstringyesAbsolute path to the skill repository root (the folder containing SKILL.md).

No output schema declared.

No examples provided.

open_deep_link ~66

Open a URL in the simulator using xcrun simctl openurl. Use to verify deep links, universal links, onboarding routes, and state restoration.

NameTypeReqDescription
udidstringyesSimulator UDID. Use simulator_list first when unsure.
urlstringyes

No output schema declared.

No examples provided.

plan_app_icon ~46

Return a separate-layer icon specification, Apple workflow and appearance checks. Does not fabricate a native .icon document.

NameTypeReqDescription
appNamestringyes
conceptstringyes

No output schema declared.

No examples provided.

plan_ios_app ~47

Return an implementation workflow and safe CLI argument array for a named app. No files are created and no build is claimed.

NameTypeReqDescription
briefstringyes
namestringyes

No output schema declared.

No examples provided.

read_local_reference ~67

Read exact bundled file content in bounded character ranges. Use nextOffset to continue without omission; no network or user filesystem access. Offset is a JavaScript UTF-16 string index.

NameTypeReqDescription
maxCharsinteger
offsetinteger
pathstringyes

No output schema declared.

No examples provided.

review_app_intents ~134

Review SiriKit/INIntent migration opportunities and, when explicitly requested, missing Apple Intelligence entity schemas or onscreen entity associations. Findings are heuristic advisories, not blanket deprecations or proof of invalid code. Use when integrating Siri, Shortcuts or Apple Intelligence.

NameTypeReqDescription
appleIntelligencebooleanReview entity schemas for a requested Apple Intelligence integration; not required for ordinary intents.
onscreenContentbooleanReview onscreen entity association only when Siri should reference visible content.
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

review_swift_architecture ~118

Check a Swift project for architecture and testability defects: dependencies defaulting to live implementations, the presentation layer naming concrete data-layer types (URLSession, APIClient, ModelContext), singletons resolved inside view models, the domain layer importing UI frameworks, nested NavigationStacks, and deprecated NavigationView. Use when reviewing MVVM or Clean Architecture code, or when a screen cannot be previewed without a network.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

review_swift_concurrency ~120

Check a Swift project for Swift 6 concurrency and isolation defects: @Observable types missing @MainActor, Task.detached, DispatchQueue.main.async in async code, @unchecked Sendable, nonisolated(unsafe), unstructured Tasks in onAppear, empty catch blocks, and types named Task that shadow _Concurrency.Task. Use when reviewing Swift code, migrating to Swift 6, or diagnosing a data race.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

review_swift_memory ~136

Check a Swift project for retain cycles and lifetime defects: repeating Timers and block-based NotificationCenter observers capturing self strongly, Combine sinks stored in a cancellables set owned by the same object, non-weak delegate properties, stored closure properties capturing self, `unowned self` in escaping closures, and long-running unstructured Tasks that keep an object alive after its screen is gone. Use when memory grows over time, when deinit is never called, or before shipping a screen with timers or subscriptions.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

review_swift_performance ~127

Check for runtime cost that shows up as dropped frames: DateFormatter and JSONDecoder allocated inside `body`, collections sorted or filtered on every render, ForEach over indices instead of stable identity, non-lazy stacks inside a ScrollView, AsyncImage with no frame, blocking file or network I/O on the render path, and GeometryReader wrapping an entire body. Use when scrolling stutters, launch is slow, or before shipping a list-heavy screen.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

review_swift_security ~141

Check a Swift project for security defects: hardcoded API keys, tokens, and passwords in source; credentials written to UserDefaults instead of the Keychain; App Transport Security disabled; cleartext http:// endpoints; TLS server trust accepted without evaluation; MD5 and SHA-1; Keychain items with over-permissive accessibility; non-cryptographic randomness used for nonces and salts; secrets written to logs; and string interpolation into evaluated JavaScript. Use before shipping, during a security review, or when handling credentials.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

review_swift_testing ~149

Check a Swift test suite for defects that make it unreliable or vacuous: tests that wait by sleeping, tests with no assertion at all, `await` inside an XCTAssert autoclosure (which does not compile), live URLSession calls in tests, `try!`, static mutable state that makes results order-dependent, long expectation timeouts covering for races, and XCTAssertTrue on an equality that hides both values on failure. Also reports when a project has no tests or very few. Use when tests are flaky, before trusting a green suite, or when adding coverage.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

review_swiftui ~105

Check SwiftUI code for view and state defects: fixed font sizes and heights that break Dynamic Type, AnyView, deprecated .cornerRadius, literal spacing values instead of design tokens, materials applied over solid backgrounds, transient presentation state stored on models, legacy ObservableObject and @EnvironmentObject, and try!. Use when reviewing or building SwiftUI screens.

NameTypeReqDescription
pathstringyesAbsolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj).
NameTypeReqDescription
countsobjectyes
files_checkedintegeryesSwift files actually scanned.
issuesarrayyesEvery finding, most severe first.
scoreintegeryes0-100 defect density. 100 = no findings. penalty = 10*blockers + 3*serious + 1*minor; capacity = files*10. Comparable across runs on ONE project, not between projects.
suggestionsarrayyesPrioritized next actions, deduplicated by rule — not a restatement of every issue's fix.
summarystringyesOne-line plain-language result.

No examples provided.

run_tests ~78

Run xcodebuild test for a project or workspace. Use to verify runtime/test behavior before visual review. Requires an explicit destination.

NameTypeReqDescription
configurationstring
derivedDataPathstring
destinationstringyes
projectstring
schemestringyes
workspacestring

No output schema declared.

No examples provided.

screenshot ~73

Capture a simulator screenshot to a PNG path using xcrun simctl io screenshot. Use as evidence for visual review and before/after comparison.

NameTypeReqDescription
includeImageboolean
outputPathstringyesOutput PNG path.
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

search_apple_technologies ~45

Find Apple frameworks, tools, services and legacy technologies in the bundled 405-entry source snapshot.

NameTypeReqDescription
limitinteger
querystringyes

No output schema declared.

No examples provided.

search_local_references ~63

Search complete repository guides, Swift source, templates and assets offline. Returns compact file matches without loading bodies. Source files and guide code blocks have different verification status.

NameTypeReqDescription
kindstring
limitinteger
querystringyes

No output schema declared.

No examples provided.

simulator_boot ~65

Boot a simulator by UDID using xcrun simctl boot. Use before install_app, launch_app, screenshot, or open_deep_link. This does not erase or reset simulator content.

NameTypeReqDescription
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

simulator_environment ~34

Report selected Xcode, installed runtimes and real device profiles, including Duo when installed. Does not download or update Xcode.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

simulator_list ~41

List available Simulator devices using xcrun simctl. Use before booting, installing, launching, or capturing screenshots when you do not know the simulator UDID.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

simulator_preview_start ~69

Start a token-protected loopback screenshot viewer for a booted device. Open the returned URL in the client sidebar/browser. Read-only visual preview; interact in the native Simulator. Not a public hosted simulator.

NameTypeReqDescription
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

simulator_preview_stop ~46

Stop this server’s preview for a device and remove its temporary screenshots; leaves the Simulator running.

NameTypeReqDescription
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

simulator_show ~47

Boot and wait for a selected available device, then open its native Simulator window for touch/keyboard interaction.

NameTypeReqDescription
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

simulator_shutdown ~59

Shut down a simulator by UDID using xcrun simctl shutdown. Use after runtime validation to clean up a booted simulator. This does not erase content.

NameTypeReqDescription
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

terminate_app ~52

Terminate a running simulator app by bundle identifier without uninstalling it or resetting its state.

NameTypeReqDescription
bundleIdstringyes
udidstringyesSimulator UDID. Use simulator_list first when unsure.

No output schema declared.

No examples provided.

Common questions

What is the io.github.Nagarjuna2997/ios-agent-skill MCP server?

io.github.Nagarjuna2997/ios-agent-skill is an MCP server listed in the public MCP registry as io.github.Nagarjuna2997/ios-agent-skill. Swift reviews, local Apple references, app scaffolding and iOS simulator workflows. This page covers its npm package (ios-agent-mcp).

Is the io.github.Nagarjuna2997/ios-agent-skill MCP server safe to use?

io.github.Nagarjuna2997/ios-agent-skill scores 70 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.Nagarjuna2997/ios-agent-skill MCP server expose?

io.github.Nagarjuna2997/ios-agent-skill exposes 35 tools: review_app_intents, review_swift_concurrency, review_swift_architecture, review_swiftui, check_availability_guards, and 30 more. Their descriptions and schemas cost roughly 2,865 tokens of context every time the server is loaded.

Is the io.github.Nagarjuna2997/ios-agent-skill MCP server still maintained?

io.github.Nagarjuna2997/ios-agent-skill is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.Nagarjuna2997/ios-agent-skill MCP server under?

io.github.Nagarjuna2997/ios-agent-skill declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.