Jev agent tools
NPM · JEV-AGENT-TOOLS
Evidence-oriented code questions, diff review and test selection via a Jev endpoint.
Available components
Last scanned (4 hours ago)
Scores higher than 92% of npm servers
Category Testing and QA
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security99
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 13 of 35 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to NomenAK/jev-tools). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 28 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability50
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 7715 tokens (~1285/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Nov 26 0
- Stability: 0.97 → pass security
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.
- 25 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.
- 23 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/jev-agent-tools@0.4.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | NomenAK/jev-tools |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/NomenAK/jev-tools/.github/workflows/publish.yml@refs/tags/v0.4.0 |
| Rekor log index | 3131639799 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:73ad19c49899d9391db9c5738a014a8d733726dacaa45bb26b9e0f7b5bddc2e9eebeea8a5e84e5c7c1b4504fa56edbdfb09319d3250e68245b252a30b |
Background: How many MCP packages publish verified provenance →
Dependencies 35 packages
| Packages resolved | 35 |
|---|---|
| No linked repository | 13 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
jev_ask Jev ask ~1,976
Ask typed questions about one situation (note, files, command output); the same questions over many files → jev_ask_files. Use for: one judgment that combines things (is this test failure a bug, a wrong test or the environment; does this test cover the function changed in that file; is the user's request clear enough to plan). Not for: the same questions over many files, one answer each → jev_ask_files. Output or code you need to read or quote → bash or read. Exact matches → your text search tool. How Jev sees the situation: at a glance, like a developer skimming what you assembled. It does not count, compute or chain inferences, and it does not notice what the state lacks: a missing piece looks like "no". What you put in the state outweighs what you tell it, so pass the evidence, not your argument, and do not explain roles ("this is a test"). Give both sides of a comparison: the failing test and the code it calls, the file before and after. Give at least one of state, paths, command; code builds one situation and performs bounded judgments and controls, and you get only the answers back. state: your note, short: the request, your plan or hypothesis, what you know that the files do not show. Not for pasting file contents or output. Appears as `state`. paths: up to 20 files for code to read. Appear as `files["<path>"]`. base: a git ref. Each path is also given as it was at that ref, as `files_before["<path>"]` (null if it did not exist), so you can ask what changed. When the question is about what you changed, pass base (HEAD if uncommitted) so Jev sees the file before and after. Counts against the state budget. command: run with bash -c in the repo root, CI=1, same permissions and approval as bash. Appears as `output` with `command`, `exit_code`, `timed_out`, `stdout`, `stderr`. Repetitive lines are collapsed; if still too long, Jev keeps the passages that show a failure and the output is marked `truncated`. asks: array of intents, each {"intent", "about"?, …}. `…
| Name | Type | Req | Description |
|---|---|---|---|
| asks | – | yes | – |
| base | string | – | – |
| command | string | – | – |
| max_calls | integer | – | – |
| paths | array | – | – |
| root | string | – | – |
| state | string | – | – |
| timeout_s | number | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
jev_ask_files Jev ask files ~1,294
Triage many files by asking typed questions without reading them; exact strings → your text search tool, the code itself → read. Use for: triaging or classifying files by what they do or contain before deciding which to read (which layer is it, does it validate tokens, how risky is a change here), when you would otherwise open them one by one. It can focus inspection when independent file judgments can change the next action. Not for: the code itself, to edit or quote it → read. Exact strings, regexes, symbols, counts, line numbers → your text search tool. Files by name → your file-name search tool. No paths yet → jev_find_files. Where inside one big file → jev_locate_in_file. One judgment that crosses several files or a command's output → jev_ask. How Jev sees a file: at a glance, like a developer skimming it for a second. It does not count, compute or compare files, and it never sees other files: a "no" means the file does not show it, not that it is false. Every file is judged alone; batching and controls determine request count, so an answer about a file that depends on another file (a value read from elsewhere) can be wrong and confident; pass such questions to jev_ask with both files. Wrong or truncated text is caught by code and lowers the answers. paths: files, directories (walked recursively) or globs, repo-relative. Build output, binaries, lockfiles and files over 80 KB are skipped and listed. At most 255 files. asks: array of intents; every ask is made of every admitted file. You declare what you want to know; the code writes the Jev questions, adds "other", fixes option order and reads the answers. The file's text is `content`. verify {"intent":"verify","claims":{"c1":"`content` validates authentication tokens","c2":"`content` writes to the database"}} → per claim per file: holds | contradicted | not addressed | cannot tell, 3 questions per claim per file in the first round — the choice, its order-reversed twin, and an exact-statement check — pl…
| Name | Type | Req | Description |
|---|---|---|---|
| asks | – | yes | – |
| max_calls | integer | – | – |
| paths | array | yes | – |
| root | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
jev_check_diff Jev check diff ~912
jev_check_diff: Review a stable diff for semantic risks, stale documentation or specification drift when that review can inform an open decision. Read the diff natively when you need its contents. Choose risk, docs or spec for the question at hand; neither risk followed by docs nor a Jev review before done is required. Findings are leads within the inspected scope, not proof of global safety or completeness. Use for: a semantic review of a stable diff when risks, existing documentation or specification obligations remain an open decision. Not for: reading the diff -> bash git diff. Choosing tests to run -> jev_select_tests. Work in progress: verdicts on a half-written diff are noise. How Jev sees it: the diff cut into changed units (a function, a slice of a big one, a declaration, a config file), each shown before and after, with tests kept aside as evidence, never as units. The questions are fixed and reviewed; you write none, and Jev runs nothing. For replaced member accesses, risk also checks the statically resolved local callers (found by literal name, aliases included) in separate calls. This is source text, not an execution: coordinated edits count, unknown providers, cut pieces, and metaprogramming stay unchecked, and a clean shown caller does not clear the unseen ones. Dynamic access that names no literal is not covered. check: risk names units with correctness, security, compatibility or reliability risk and grades severity. docs checks up to 40 tracked Markdown sections mentioning changed code or source importing it, naming an existing sentence that may no longer match the change. It is not an exhaustive detector of missing documentation (independent measurement: 2/45 docs obligations found on 180 partial got/zod commits). spec checks each ### REQ-… requirement and names changed behavior absent from the specification. base: a git ref to compare against (as for a pull request); default is HEAD plus untracked files. spec_path: required for spec; a reposit…
| Name | Type | Req | Description |
|---|---|---|---|
| base | string | – | – |
| check | – | yes | – |
| dimensions | object | – | – |
| max_calls | integer | – | – |
| only | array | – | – |
| root | string | – | – |
| spec_path | string | – | – |
| witnesses | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
jev_find_files Jev find files ~782
Find the files for a goal you describe in plain words, ranked; known names → your file-name search tool, known strings → your text search tool. Use for: starting a task in unfamiliar code ("where is proration computed", "what handles webhook retries") when you do not know file names or exact identifiers. Not for: known strings, regexes or symbols → your text search tool. Files by name → your file-name search tool. Questions about files you already have → jev_ask_files. How Jev sees it: names first, then a short passage of the best candidates — never whole files. Write the goal as one behavior sentence of at least 5 words (shorter goals are capped at unsure); prefer a full sentence of behavior over a few keywords. Put identifiers you already know in keywords, where they steer the pre-filter and the passage Jev reads. Jev cannot count or grep. goal: what you are trying to do or find, as one sentence of at least 5 words. Describe behavior, not a guessed identifier: in our tests a full sentence found the right file in 49 of 51 cases, two or three keywords alone in 16 of 21. keywords: identifiers or terms you already know that should appear in the code; [] if none. They steer the pre-filter and the passage Jev reads. scope: directories to search instead of the whole repo. An empty scope produces no judgment; a judged "none" means no supplied candidate fit, not proof about unseen files. exclude: globs to skip. Excluding tests keeps the entry point but drops the tests and docs from the list. effort: quick searches fewer candidates for a first look, default, thorough searches more (wider net, slower). max_calls: cap on Jev calls; beyond it the search stops at the best-ranked files so far and says so. Result: the primary entry decision names the file to open with its actual probability and fresh/cache provenance; auxiliary rankings, controls and native read actions remain distinct. Unsure means two files are plausible, the answer depends on candidate order or the goal is…
| Name | Type | Req | Description |
|---|---|---|---|
| effort | – | – | – |
| exclude | array | – | – |
| goal | string | yes | – |
| keywords | array | – | – |
| max_calls | integer | – | – |
| root | string | – | – |
| scope | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
jev_locate_in_file Jev locate in file ~595
Find which line range of ONE big file (over 19 KB) serves a goal, instead of reading it whole; known string or symbol -> your text search tool. Use for: a file too big to read whole (over 19 KB) when you know what you need from it ("where are retries scheduled", "the part that parses flags") and finding a range can focus the next inspection. Not for: an exact string or symbol → your text search tool. Files under 19 KB → read them directly. Several files → jev_ask_files or jev_find_files. How Jev sees it: the file cut into declarations or sections, all glanced at once. Neighboring sections can share an answer (a getter and its setter), splitting the mass into unsure even when both are right: that still points at the right neighborhood. It reads what is written, not what a function does at run time. path: one repo-relative file. goal: what you need from the file, as a sentence. Result: the range as path:start-end with its label and probability, the runners-up, and a `read:` list naming the range to open. A leading probability at or above 0.7 is a verdict: read that range. Otherwise the line is unsure (`two sections share the mass`): read both ranges — usually neighbors, not the next section of the file. A `none` (`no section fits`) means the goal is probably not in this file: search elsewhere. Missing required answers or controls remain unjudged, without an invented probability. Typed diagnostics name parsing/window limits and native actions; primary and control provenance remain distinct. Marks are defined once in the reading guide. The decision to call is discretionary: Use Jev for a bounded semantic judgment when its answer could change an open decision or focus the next inspection, and the relevant evidence is available. Use decisive reading, search or authorized execution directly when it settles the question. Exact lookup, counting and runtime causality belong to native tools. A Jev call is not a prerequisite for a conclusion, a review or task completion; n…
| Name | Type | Req | Description |
|---|---|---|---|
| goal | string | yes | – |
| path | string | yes | – |
| root | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
jev_select_tests Jev select tests ~524
Select existing tests affected by a diff and return runner commands; this tool never runs or collects tests. Use when selecting existing affected tests can usefully change the execution plan; use native read/grep/bash for exact names and execution. base defaults to HEAD; paths are candidate test files or globs, not diff paths. Static discovery reads tracked files, literal project configuration and imports, without evaluating third-party config. Touched tests are selected for free; import closure includes unchanged intermediates and applicable pytest conftest fixtures. Remaining scenarios receive a changed-unit pointer; selected when 1-p(none) >= 0.5. Missing answers are selected; unavailable Jev falls back to all. Residual exported-unit checks report changed, run by no discovered test only within the discovered inventory, never global coverage or an obligation to add a scenario. Unsupported, unknown, calculated or unresolved runners keep that conclusion unsure and name the next manual action. Runtime and type tests are separate. Commands remain separate by cwd, config, project and framework; project options are preserved. At least 80% selected, uncertain names or unknown counts run the entire file. max_calls bounds Jev calls; unjudged tests remain selected. witnesses controls residual coverage checks (auto by default); pointers have no witnesses. This does not detect that a new test scenario is required. Use Jev for a bounded semantic judgment when its answer could change an open decision or focus the next inspection, and the relevant evidence is available. Use decisive reading, search or authorized execution directly when it settles the question. Exact lookup, counting and runtime causality belong to native tools. A Jev call is not a prerequisite for a conclusion, a review or task completion; no explanation is needed for choosing native tools. After an unavailable, refused or out-of-scope result, continue natively within the existing permissions; do not widen sh…
| Name | Type | Req | Description |
|---|---|---|---|
| base | string | – | – |
| max_calls | integer | – | – |
| paths | array | – | – |
| root | string | – | – |
| witnesses | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
How do I install the Jev agent tools MCP server?
Jev agent tools runs locally as an npm package, launched with npx -y jev-agent-tools. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · jev-agent-tools
claude mcp add nomenak-jev-agent-tools -- npx -y jev-agent-tools
What is the Jev agent tools MCP server?
Jev agent tools is an MCP server listed in the public MCP registry as io.github.NomenAK/jev-agent-tools. Evidence-oriented code questions, diff review and test selection via a Jev endpoint. This page covers its npm package (jev-agent-tools).
Is the Jev agent tools MCP server safe to use?
Jev agent tools scores 88 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Jev agent tools MCP server expose?
Jev agent tools exposes 6 tools: jev_ask, jev_ask_files, jev_find_files, jev_locate_in_file, jev_check_diff, jev_select_tests. Their descriptions and schemas cost roughly 6,083 tokens of context every time the server is loaded.
Is the Jev agent tools MCP server still maintained?
Jev agent tools is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Jev agent tools MCP server under?
Jev agent tools declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.